$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.mft File: D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.mft (raw, json) Hash identifier: gpQys9RWvng93w+kNwJHBzWjwkbDZLJuQsqXnPL4r/c= Subject key identifier: 58:AA:5E:84:CC:CC:B6:97:70:7A:B6:FF:09:77:E5:89:E1:8D:1C:7F Authority key identifier: D6:BB:B0:4A:96:DE:95:BA:1D:B1:CF:B1:59:DA:9A:E0:30:BB:39:8E Certificate issuer: /CN=D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E Certificate serial: 14B9399AF6A93AFBFCE86860C3EAFBB2B563E569 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.mft Manifest number: BE Signing time: Sun 20 Sep 2026 13:49:03 +0000 Manifest this update: Sun 20 Sep 2026 13:44:03 +0000 Manifest next update: Mon 21 Sep 2026 14:40:03 +0000 Files and hashes: 1: D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.crl (hash: 0H3jDyfOmKdrIt1cciB2eCMuJrq2hdyH6NNasxVElaI=) 2: 3130332e3131372e35382e302f32332d3234203d3e20313530393534.roa (hash: 50gojjHGXgJ+6nXVYxXceIc5Q4+LdUoXKFR2P9HxySs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.crl rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:40:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:b9:39:9a:f6:a9:3a:fb:fc:e8:68:60:c3:ea:fb:b2:b5:63:e5:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E Validity Not Before: Sep 20 13:44:03 2026 GMT Not After : Sep 21 14:40:03 2026 GMT Subject: CN=58AA5E84CCCCB697707AB6FF0977E589E18D1C7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b5:07:db:ba:fd:d8:70:48:a9:36:41:ef:95: 0f:0c:bb:96:72:2e:65:c7:89:9d:f4:87:3f:d0:be: af:fc:ba:20:0c:a8:34:f9:18:0a:4c:9f:4b:ec:09: 94:00:6a:dc:3d:f4:10:c8:69:85:69:b6:17:94:46: d6:be:a0:49:fc:7a:95:ea:97:50:15:7d:f5:f0:91: 18:4a:d7:b1:f8:7a:2c:3b:3f:60:3b:e0:31:4a:34: bf:12:20:7c:0e:f0:42:e8:dc:64:ab:4d:c0:f2:eb: b6:5e:a4:85:f5:8e:8d:a3:1c:80:ed:d3:9d:66:0e: 70:cc:2c:17:4d:2c:77:71:95:a3:bc:52:3b:95:5e: fc:80:76:a8:00:ba:3c:80:d6:08:9a:78:83:05:74: 0d:ae:a7:8b:c5:00:76:e1:cf:ec:13:9b:1f:29:12: 2d:ff:ed:a7:49:d3:6a:8c:52:8d:02:16:58:2e:c3: 5e:52:26:55:4c:a6:d4:c2:19:ed:5d:b7:c5:1e:ce: f5:cb:e0:da:ef:60:ee:bc:06:d3:c5:18:f2:14:8a: b6:81:da:d5:60:c1:3c:c2:fc:c6:2f:80:1a:ab:da: 4e:a1:f6:76:0a:2f:e7:48:ac:ff:ac:cf:83:3f:b8: f1:ae:02:23:a1:4f:68:8a:7c:14:85:3b:cb:83:cd: 25:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:AA:5E:84:CC:CC:B6:97:70:7A:B6:FF:09:77:E5:89:E1:8D:1C:7F X509v3 Authority Key Identifier: keyid:D6:BB:B0:4A:96:DE:95:BA:1D:B1:CF:B1:59:DA:9A:E0:30:BB:39:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:69:fa:65:e7:e8:78:0c:a7:0f:4a:77:0b:87:88:57:5c:fa: d3:b6:92:16:98:f5:9d:73:5c:b4:15:1d:a1:c1:e6:e5:e8:bc: 94:2d:e1:0e:4d:ec:fb:b7:48:fe:a7:90:5f:8d:cd:b2:d0:23: e2:66:58:78:eb:f2:bb:8a:8b:6d:9e:ab:17:7a:c4:16:22:36: a4:1d:5e:bf:1a:af:31:53:bd:dd:56:c1:8c:b3:67:25:8f:bc: fc:c9:88:87:c4:e4:38:5e:ed:b5:a1:59:c2:f5:49:53:d4:d4: 9c:85:58:4f:bd:3e:0f:f0:74:86:e4:39:4d:a7:04:f7:cf:76: 05:fc:cd:4c:97:70:23:e7:a2:d9:85:63:1c:9b:64:cd:70:c8: fa:70:02:8a:1c:25:cd:bd:2d:79:96:83:98:ca:1f:6e:df:d2: da:e7:37:cf:17:e9:ee:d6:71:93:9a:fb:8e:26:0d:7b:b6:fb: ab:0e:16:1c:9c:5b:76:7c:a9:02:4b:66:a0:c4:06:e1:41:4c: cc:d4:67:06:7f:79:47:93:18:ad:a2:e2:8c:9a:d2:7e:ff:58: da:36:3d:e5:93:a2:1f:97:f3:86:7b:b0:78:4a:d4:54:77:94: d1:b6:54:df:9a:85:c0:75:96:10:78:b7:db:07:31:99:fa:82: 4a:23:5c:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFLk5mvapOvv86Ghgw+r7srVj5WkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZCQkIwNEE5NkRFOTVCQTFEQjFDRkIxNTlEQTlBRTAz MEJCMzk4RTAeFw0yNjA5MjAxMzQ0MDNaFw0yNjA5MjExNDQwMDNaMDMxMTAvBgNV BAMTKDU4QUE1RTg0Q0NDQ0I2OTc3MDdBQjZGRjA5NzdFNTg5RTE4RDFDN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNtQfbuv3YcEipNkHvlQ8Mu5Zy LmXHiZ30hz/Qvq/8uiAMqDT5GApMn0vsCZQAatw99BDIaYVptheURta+oEn8epXq l1AVffXwkRhK17H4eiw7P2A74DFKNL8SIHwO8ELo3GSrTcDy67ZepIX1jo2jHIDt 051mDnDMLBdNLHdxlaO8UjuVXvyAdqgAujyA1giaeIMFdA2up4vFAHbhz+wTmx8p Ei3/7adJ02qMUo0CFlguw15SJlVMptTCGe1dt8UezvXL4NrvYO68BtPFGPIUiraB 2tVgwTzC/MYvgBqr2k6h9nYKL+dIrP+sz4M/uPGuAiOhT2iKfBSFO8uDzSUbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWKpehMzMtpdwerb/CXflieGNHH8wHwYDVR0j BBgwFoAU1ruwSpbelbodsc+xWdqa4DC7OY4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTI2MmQzNDEtOTRiNS00NzRlLThiY2QtZDE3OTg4ZjA5OWIzLzAvRDZCQkIwNEE5 NkRFOTVCQTFEQjFDRkIxNTlEQTlBRTAzMEJCMzk4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENkJCQjA0QTk2REU5NUJBMURCMUNGQjE1OURBOUFFMDMwQkIz OThFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTI2MmQzNDEtOTRiNS00NzRlLThi Y2QtZDE3OTg4ZjA5OWIzLzAvRDZCQkIwNEE5NkRFOTVCQTFEQjFDRkIxNTlEQTlB RTAzMEJCMzk4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJp+mXn6HgMpw9KdwuHiFdc+tO2khaY9Z1z XLQVHaHB5uXovJQt4Q5N7Pu3SP6nkF+NzbLQI+JmWHjr8ruKi22eqxd6xBYiNqQd Xr8arzFTvd1WwYyzZyWPvPzJiIfE5Dhe7bWhWcL1SVPU1JyFWE+9Pg/wdIbkOU2n BPfPdgX8zUyXcCPnotmFYxybZM1wyPpwAoocJc29LXmWg5jKH27f0trnN88X6e7W cZOa+44mDXu2+6sOFhycW3Z8qQJLZqDEBuFBTMzUZwZ/eUeTGK2i4oya0n7/WNo2 PeWToh+X84Z7sHhK1FR3lNG2VN+ahcB1lhB4t9sHMZn6gkojXC0= -----END CERTIFICATE-----Generated at Sun Sep 20 21:14:13 2026 by rpki-client