$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft File: D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft (raw, json) Hash identifier: XkeELl8zuWzVdj6tHRBiuYBMR91+AfCsvjLqlW3mZ5c= Subject key identifier: B0:A9:78:31:54:44:CA:45:F4:DE:AE:08:09:CB:0D:14:1A:EA:92:F3 Authority key identifier: D3:7E:9E:B2:F9:8E:29:CD:F1:38:65:33:26:66:AE:FB:23:18:4F:EB Certificate issuer: /CN=D37E9EB2F98E29CDF13865332666AEFB23184FEB Certificate serial: 5C67CB5EEFA140F3D9865B38AB47A5BBAC9A4391 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft Manifest number: BC Signing time: Sun 20 Sep 2026 21:33:42 +0000 Manifest this update: Sun 20 Sep 2026 21:28:42 +0000 Manifest next update: Mon 21 Sep 2026 23:23:42 +0000 Files and hashes: 1: D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl (hash: LgCHenrqZC+qf1G2JRN7zjHQmRkfm+A/snGUWhTeGVQ=) 2: 3136302e31392e3134342e302f32342d3234203d3e20313532373838.roa (hash: /Ank/NdhTyFolT1yr2gOxvp0mx0tj8KaBVOQP4gcAxk=) 3: 3136302e31392e3134352e302f32342d3234203d3e203435333035.roa (hash: byftjSeCvMFNmeFpkuYeG9YZa2VCV2p6nFeWhRr4XHM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:67:cb:5e:ef:a1:40:f3:d9:86:5b:38:ab:47:a5:bb:ac:9a:43:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D37E9EB2F98E29CDF13865332666AEFB23184FEB Validity Not Before: Sep 20 21:28:42 2026 GMT Not After : Sep 21 23:23:42 2026 GMT Subject: CN=B0A978315444CA45F4DEAE0809CB0D141AEA92F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9a:ab:a1:e2:d7:45:d3:0f:4b:84:d8:82:c3: 20:08:8f:ee:ca:9c:70:86:37:47:a2:4b:76:5a:11: e5:88:7c:c9:44:95:14:d9:2f:2a:c8:33:74:e4:de: 5e:d1:40:e3:62:d0:93:59:3a:78:7c:8e:32:b3:49: 3a:69:3a:bc:62:8d:c0:1e:09:53:c6:31:78:a6:35: 01:a5:2c:66:95:19:e7:ac:16:9b:83:09:9b:aa:26: 96:fd:be:a3:2f:79:d1:ce:95:52:c9:21:84:c0:79: 6b:f8:c7:27:10:fc:fb:b0:15:be:13:9c:27:3b:aa: 62:c4:e0:38:63:73:03:15:93:32:6e:14:af:39:1c: c6:ec:aa:d5:45:62:4e:7f:44:47:5c:70:a4:a2:ec: 9d:fb:f1:ff:c9:bb:ce:21:c3:38:f2:5b:28:da:58: a5:e8:5b:1f:5a:5b:be:ac:c1:e3:88:09:13:f2:d7: 2d:a1:29:25:98:db:73:49:68:3e:88:90:e9:71:40: 90:9c:c3:d0:b3:ee:eb:9f:a2:4b:a9:47:95:1f:ef: c1:d0:98:99:c9:3d:c2:46:d7:24:9f:4c:b1:6e:24: aa:3a:c6:84:24:f4:f4:58:46:f8:4e:79:ee:90:e0: 94:f8:71:7d:2e:91:88:4f:8b:fb:64:fe:4b:58:af: b5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A9:78:31:54:44:CA:45:F4:DE:AE:08:09:CB:0D:14:1A:EA:92:F3 X509v3 Authority Key Identifier: keyid:D3:7E:9E:B2:F9:8E:29:CD:F1:38:65:33:26:66:AE:FB:23:18:4F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:fa:3f:cc:c4:82:3e:33:09:b2:c8:41:1c:22:86:bd:2c:4b: 47:f6:26:1d:00:13:1b:e8:34:9b:79:06:93:0d:22:5e:31:58: fa:b6:ca:f1:1f:d8:80:eb:4b:d9:ac:c4:7d:a5:d6:cf:41:47: dc:86:50:10:3c:0b:9c:4a:19:c1:5a:33:e2:62:8c:bf:16:46: 8b:ce:bf:7d:2e:f5:67:69:c6:bc:2b:16:6c:3d:4f:17:2f:38: 87:c5:79:c4:13:e7:ee:81:0c:0b:47:08:f3:4c:8f:fe:0e:31: d5:74:91:3c:4c:0b:c7:75:e0:14:c6:07:26:b4:88:00:2d:36: 0c:e8:7d:62:d7:9e:a7:5e:3d:a2:55:1f:74:0a:50:b0:8f:e7: 40:67:c6:02:21:81:f7:13:4a:62:ae:ad:4f:19:d4:43:a3:de: d5:1f:d1:9a:bd:ea:a1:2a:88:34:2a:49:59:03:97:43:de:05: 1c:26:1f:7a:69:43:cc:82:bf:4b:d4:35:c1:79:d4:3f:ef:d1: 17:aa:52:14:f8:12:d9:15:61:87:f8:ae:46:70:31:ed:f6:4b: 82:db:d5:f5:c1:7d:fa:4d:2d:18:ca:f0:cd:6d:35:d4:61:38: 25:e5:a5:66:c7:10:6b:02:2a:78:2c:42:3d:52:7a:d7:5b:e4: a9:57:ff:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXGfLXu+hQPPZhls4q0elu6yaQ5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM3RTlFQjJGOThFMjlDREYxMzg2NTMzMjY2NkFFRkIy MzE4NEZFQjAeFw0yNjA5MjAyMTI4NDJaFw0yNjA5MjEyMzIzNDJaMDMxMTAvBgNV BAMTKEIwQTk3ODMxNTQ0NENBNDVGNERFQUUwODA5Q0IwRDE0MUFFQTkyRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGmquh4tdF0w9LhNiCwyAIj+7K nHCGN0eiS3ZaEeWIfMlElRTZLyrIM3Tk3l7RQONi0JNZOnh8jjKzSTppOrxijcAe CVPGMXimNQGlLGaVGeesFpuDCZuqJpb9vqMvedHOlVLJIYTAeWv4xycQ/PuwFb4T nCc7qmLE4DhjcwMVkzJuFK85HMbsqtVFYk5/REdccKSi7J378f/Ju84hwzjyWyja WKXoWx9aW76sweOICRPy1y2hKSWY23NJaD6IkOlxQJCcw9Cz7uufokupR5Uf78HQ mJnJPcJG1ySfTLFuJKo6xoQk9PRYRvhOee6Q4JT4cX0ukYhPi/tk/ktYr7W9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsKl4MVREykX03q4ICcsNFBrqkvMwHwYDVR0j BBgwFoAU036esvmOKc3xOGUzJmau+yMYT+swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTJlNWZmODEtYjA4Mi00MzM0LWFkMjktNTVkYzhkMWU1M2I5LzAvRDM3RTlFQjJG OThFMjlDREYxMzg2NTMzMjY2NkFFRkIyMzE4NEZFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EMzdFOUVCMkY5OEUyOUNERjEzODY1MzMyNjY2QUVGQjIzMTg0 RkVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk MjktNTVkYzhkMWU1M2I5LzAvRDM3RTlFQjJGOThFMjlDREYxMzg2NTMzMjY2NkFF RkIyMzE4NEZFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGb6P8zEgj4zCbLIQRwihr0sS0f2Jh0AExvo NJt5BpMNIl4xWPq2yvEf2IDrS9msxH2l1s9BR9yGUBA8C5xKGcFaM+JijL8WRovO v30u9WdpxrwrFmw9TxcvOIfFecQT5+6BDAtHCPNMj/4OMdV0kTxMC8d14BTGBya0 iAAtNgzofWLXnqdePaJVH3QKULCP50BnxgIhgfcTSmKurU8Z1EOj3tUf0Zq96qEq iDQqSVkDl0PeBRwmH3ppQ8yCv0vUNcF51D/v0ReqUhT4EtkVYYf4rkZwMe32S4Lb 1fXBffpNLRjK8M1tNdRhOCXlpWbHEGsCKngsQj1Setdb5KlX/5g= -----END CERTIFICATE-----Generated at Mon Sep 21 03:23:53 2026 by rpki-client