$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft File: DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft (raw, json) Hash identifier: eXWZB6HZ8sLBYFxh7IZmFclI5uJktZdRb/rO1hC2Sxs= Subject key identifier: 7F:05:E2:AE:A4:B1:8C:3A:27:09:F8:6B:E5:8F:1A:14:57:15:C6:76 Authority key identifier: DF:62:39:B1:00:BB:5F:8B:75:72:DB:ED:CD:AA:F0:85:E9:6B:8B:C6 Certificate issuer: /CN=DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6 Certificate serial: 664CF60C5169005B563AC925B287E3235443132E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft Manifest number: BE Signing time: Mon 21 Sep 2026 08:57:36 +0000 Manifest this update: Mon 21 Sep 2026 08:52:36 +0000 Manifest next update: Tue 22 Sep 2026 09:29:36 +0000 Files and hashes: 1: 3130332e332e34362e302f32342d3234203d3e203536323337.roa (hash: RognJZgFxoaYfZ3q8iAEXmaMxQXncM9YyfOgmfWAQ3o=) 2: DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.crl (hash: BhQlKUQ2l6ory+xXR2zvThWmycI+hdqE9Lt6qiAKHMw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.crl rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:4c:f6:0c:51:69:00:5b:56:3a:c9:25:b2:87:e3:23:54:43:13:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6 Validity Not Before: Sep 21 08:52:36 2026 GMT Not After : Sep 22 09:29:36 2026 GMT Subject: CN=7F05E2AEA4B18C3A2709F86BE58F1A145715C676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:69:e5:ee:01:26:30:94:e8:81:29:14:0d:44: dd:e8:57:98:9b:c7:2c:df:0c:05:8c:be:d6:df:b0: e2:cf:3f:af:5e:ed:7f:89:ff:fa:ac:b2:71:39:c7: 16:4b:ac:f8:94:e0:67:93:3b:b2:96:a7:63:f0:1e: 13:b0:16:5d:b2:62:67:30:de:bc:8f:11:d0:e7:8f: f5:7f:f7:09:06:aa:a3:f4:30:b2:23:f6:17:e5:42: 34:94:9d:7e:02:4f:16:ac:35:e4:aa:dc:84:60:28: 6a:c8:a7:95:c5:28:8f:c1:b9:9f:1c:9a:80:20:27: 7c:aa:95:a2:48:33:c9:95:34:16:aa:fa:64:59:78: b9:09:87:a2:d1:19:c3:7c:e7:04:2d:dc:c4:19:1d: 3c:4e:f6:13:46:01:1f:95:be:3e:35:5c:09:9f:a9: 79:e0:8b:d0:6c:ff:a1:9a:89:6c:5f:af:5a:f1:41: de:ae:c7:d7:c7:cf:46:ce:87:17:73:ab:0e:c1:53: 39:11:53:ad:39:36:04:43:be:d8:b6:f7:7f:01:0c: c5:47:2d:fd:2a:08:44:fa:b5:1a:2f:d9:56:47:59: 35:15:88:d4:0e:b5:f1:34:bf:25:dd:2d:6b:89:ca: d7:ab:ae:01:c4:6d:ea:d5:d6:df:85:c4:d9:a9:c9: 42:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:05:E2:AE:A4:B1:8C:3A:27:09:F8:6B:E5:8F:1A:14:57:15:C6:76 X509v3 Authority Key Identifier: keyid:DF:62:39:B1:00:BB:5F:8B:75:72:DB:ED:CD:AA:F0:85:E9:6B:8B:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:4a:57:15:f6:aa:49:66:2f:cf:59:ec:34:fc:c4:d7:35:15: b8:0a:13:b1:33:ee:ba:6c:2f:5c:f7:39:01:24:38:aa:2d:fb: 14:ac:cc:f9:3f:40:b5:12:e9:fd:68:9d:4d:e7:cd:46:51:98: 90:18:d8:b8:8f:51:c8:4e:67:84:96:23:2d:cf:2f:ff:12:c4: f8:b9:85:b1:52:fa:ce:2c:a8:83:d8:6b:74:37:4d:a2:cc:e0: 4f:6c:a1:52:dc:40:53:a1:c1:8e:ab:37:ec:f6:ac:f4:73:84: 42:55:35:ef:ee:b8:5e:0c:da:4f:f9:4c:11:41:45:be:e5:66: c5:ae:dc:a5:ee:a6:a0:a0:a0:8e:56:7b:94:d1:34:7d:c4:84: 96:97:9d:de:f7:f9:67:8b:4d:56:a7:88:13:16:24:ab:03:89: e4:52:c8:4d:58:0a:ba:42:d9:81:0d:07:de:2a:80:09:ff:2d: 67:f6:f8:1e:31:1c:3a:33:d3:51:07:08:a1:26:cf:db:81:a5: e7:6d:f8:57:3c:c4:66:c6:b7:22:77:80:b3:c1:9c:45:d2:65: e4:e9:7a:ec:5a:c3:ea:dd:e8:29:78:61:e2:2e:df:b1:cc:7b: 3e:03:58:bb:c5:4c:74:3d:06:e1:d5:ed:f7:78:1c:63:93:69: a0:89:22:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZkz2DFFpAFtWOsklsofjI1RDEy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2MjM5QjEwMEJCNUY4Qjc1NzJEQkVEQ0RBQUYwODVF OTZCOEJDNjAeFw0yNjA5MjEwODUyMzZaFw0yNjA5MjIwOTI5MzZaMDMxMTAvBgNV BAMTKDdGMDVFMkFFQTRCMThDM0EyNzA5Rjg2QkU1OEYxQTE0NTcxNUM2NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzaeXuASYwlOiBKRQNRN3oV5ib xyzfDAWMvtbfsOLPP69e7X+J//qssnE5xxZLrPiU4GeTO7KWp2PwHhOwFl2yYmcw 3ryPEdDnj/V/9wkGqqP0MLIj9hflQjSUnX4CTxasNeSq3IRgKGrIp5XFKI/BuZ8c moAgJ3yqlaJIM8mVNBaq+mRZeLkJh6LRGcN85wQt3MQZHTxO9hNGAR+Vvj41XAmf qXngi9Bs/6GaiWxfr1rxQd6ux9fHz0bOhxdzqw7BUzkRU605NgRDvti2938BDMVH Lf0qCET6tRov2VZHWTUViNQOtfE0vyXdLWuJyterrgHEberV1t+FxNmpyUKxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfwXirqSxjDonCfhr5Y8aFFcVxnYwHwYDVR0j BBgwFoAU32I5sQC7X4t1ctvtzarwhelri8YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWZiZTEwZDEtZmU2NC00MzNmLWI1ZTgtMDllOGM3MDRlYzkxLzAvREY2MjM5QjEw MEJCNUY4Qjc1NzJEQkVEQ0RBQUYwODVFOTZCOEJDNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjYyMzlCMTAwQkI1RjhCNzU3MkRCRURDREFBRjA4NUU5NkI4 QkM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWZiZTEwZDEtZmU2NC00MzNmLWI1 ZTgtMDllOGM3MDRlYzkxLzAvREY2MjM5QjEwMEJCNUY4Qjc1NzJEQkVEQ0RBQUYw ODVFOTZCOEJDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIJKVxX2qklmL89Z7DT8xNc1FbgKE7Ez7rps L1z3OQEkOKot+xSszPk/QLUS6f1onU3nzUZRmJAY2LiPUchOZ4SWIy3PL/8SxPi5 hbFS+s4sqIPYa3Q3TaLM4E9soVLcQFOhwY6rN+z2rPRzhEJVNe/uuF4M2k/5TBFB Rb7lZsWu3KXupqCgoI5We5TRNH3EhJaXnd73+WeLTVaniBMWJKsDieRSyE1YCrpC 2YENB94qgAn/LWf2+B4xHDoz01EHCKEmz9uBpedt+Fc8xGbGtyJ3gLPBnEXSZeTp euxaw+rd6Cl4YeIu37HMez4DWLvFTHQ9BuHV7fd4HGOTaaCJIqU= -----END CERTIFICATE-----Generated at Mon Sep 21 13:47:53 2026 by rpki-client