$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.mft File: D54419983140D3CB73E625681538225CB12E5424.mft (raw, json) Hash identifier: hsutXQ838khGhIVwdgrXI3pVXtX7vlhiK5Qi0dQBhSs= Subject key identifier: DF:DA:DE:2C:4F:08:3E:47:CB:B2:89:47:D6:8C:EA:6B:76:63:49:BB Authority key identifier: D5:44:19:98:31:40:D3:CB:73:E6:25:68:15:38:22:5C:B1:2E:54:24 Certificate issuer: /CN=D54419983140D3CB73E625681538225CB12E5424 Certificate serial: 732B9CAC23FA3B96523A68F538BA99688FFFA998 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D54419983140D3CB73E625681538225CB12E5424.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.mft Manifest number: C8 Signing time: Mon 28 Sep 2026 07:49:51 +0000 Manifest this update: Mon 28 Sep 2026 07:44:51 +0000 Manifest next update: Tue 29 Sep 2026 08:31:51 +0000 Files and hashes: 1: 3135372e32302e3130302e302f32342d3234203d3e20313532343235.roa (hash: SzOCWedu7Qhh9QrHie1gNK2ZtR2GDQm9yZncMipwLrI=) 2: D54419983140D3CB73E625681538225CB12E5424.crl (hash: 5UEFIsNHDcm+KSCBhKox8qvUX9fjsIVEJ1SC9GZPYWw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.crl rsync://rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D54419983140D3CB73E625681538225CB12E5424.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 08:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:2b:9c:ac:23:fa:3b:96:52:3a:68:f5:38:ba:99:68:8f:ff:a9:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54419983140D3CB73E625681538225CB12E5424 Validity Not Before: Sep 28 07:44:51 2026 GMT Not After : Sep 29 08:31:51 2026 GMT Subject: CN=DFDADE2C4F083E47CBB28947D68CEA6B766349BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:31:ac:bb:15:47:60:07:27:32:18:5d:b3:91: df:0c:f9:43:47:14:df:77:98:38:c7:94:69:a2:e4: 70:cd:c5:61:3a:11:dd:65:1a:e7:02:44:3e:c3:8c: c4:71:e5:f8:d9:16:03:8a:bc:94:00:7c:2f:e6:1a: 35:10:59:bb:85:a2:b0:7f:d0:89:80:89:f9:cd:26: 29:60:5a:a3:4e:2e:89:52:75:a6:2d:e8:75:33:52: 6d:49:2c:cd:20:e6:15:d9:f8:e2:d1:d0:3b:cf:62: bf:0b:02:3c:a1:0b:6c:09:12:1e:34:d0:c4:7e:9a: dc:28:71:81:d4:79:cb:4e:75:9a:6d:9c:5b:74:ec: a6:b0:f9:f0:8f:ce:72:97:49:5a:31:4c:f0:88:37: 48:9b:d0:a4:20:f7:f3:c2:cd:08:e3:c1:9e:55:bc: 38:82:82:eb:f3:7c:86:75:b1:41:72:12:80:dd:8f: 95:23:7c:df:2a:3d:83:77:4f:56:1b:de:ff:83:dc: 07:c6:97:d6:07:b4:65:f3:17:c0:b4:0c:b9:74:54: 4b:93:94:14:93:2e:cd:fc:56:e3:d7:7d:e7:51:0f: 72:2d:fe:78:92:03:53:98:18:f9:cb:34:a4:5a:6e: 9b:d5:de:f9:19:d1:d7:bb:a4:9e:fa:11:98:20:55: e9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DA:DE:2C:4F:08:3E:47:CB:B2:89:47:D6:8C:EA:6B:76:63:49:BB X509v3 Authority Key Identifier: keyid:D5:44:19:98:31:40:D3:CB:73:E6:25:68:15:38:22:5C:B1:2E:54:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D54419983140D3CB73E625681538225CB12E5424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c5:58:08:6d:d5:6b:a7:df:2d:cf:b4:9e:66:f9:12:20:c7: c2:06:9a:4e:c1:3d:6d:b2:51:19:ed:f7:ac:f2:b9:3a:fb:b4: 32:34:37:04:e2:c3:18:8c:01:43:2c:28:a8:05:83:d5:58:0e: 26:74:3f:86:7a:34:21:1b:24:62:ca:25:ae:0a:36:82:4b:4d: ce:e7:4f:0a:b5:1a:a6:7f:87:57:a1:c4:56:dc:6f:54:89:f3: d3:73:31:f8:6f:e1:66:e1:83:fa:34:00:20:f0:c6:d2:eb:eb: 97:bf:88:49:4e:de:e0:d6:e8:3b:b4:7f:19:d8:c2:d0:3d:97: db:12:ca:07:82:5d:3b:90:62:3d:b0:8b:d6:be:24:fe:96:64: e6:d8:08:6b:67:c5:55:80:9c:81:c1:6a:cc:2d:a0:e2:18:dc: 30:52:45:80:b4:81:39:45:83:91:b7:93:44:05:27:c8:23:da: 34:05:64:9f:4f:62:11:be:4c:76:20:9c:c9:a8:7a:69:f9:91: 4a:6a:26:cb:72:f2:96:96:96:b3:36:1c:27:8c:91:d2:f8:9e: e7:2e:8f:e7:f2:90:b8:54:04:98:69:3f:91:fd:26:1b:fc:43: 3d:6f:9f:b5:18:61:0c:31:21:85:c3:4c:4f:1b:ff:ab:bf:43: 61:ed:0b:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcyucrCP6O5ZSOmj1OLqZaI//qZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0NDE5OTgzMTQwRDNDQjczRTYyNTY4MTUzODIyNUNC MTJFNTQyNDAeFw0yNjA5MjgwNzQ0NTFaFw0yNjA5MjkwODMxNTFaMDMxMTAvBgNV BAMTKERGREFERTJDNEYwODNFNDdDQkIyODk0N0Q2OENFQTZCNzY2MzQ5QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/May7FUdgBycyGF2zkd8M+UNH FN93mDjHlGmi5HDNxWE6Ed1lGucCRD7DjMRx5fjZFgOKvJQAfC/mGjUQWbuForB/ 0ImAifnNJilgWqNOLolSdaYt6HUzUm1JLM0g5hXZ+OLR0DvPYr8LAjyhC2wJEh40 0MR+mtwocYHUectOdZptnFt07Kaw+fCPznKXSVoxTPCIN0ib0KQg9/PCzQjjwZ5V vDiCguvzfIZ1sUFyEoDdj5UjfN8qPYN3T1Yb3v+D3AfGl9YHtGXzF8C0DLl0VEuT lBSTLs38VuPXfedRD3It/niSA1OYGPnLNKRabpvV3vkZ0de7pJ76EZggVel7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU39reLE8IPkfLsolH1ozqa3ZjSbswHwYDVR0j BBgwFoAU1UQZmDFA08tz5iVoFTgiXLEuVCQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWI4OGQyY2EtMjI5Yi00YWFjLTliNWMtNDJjMTUxMDViYjgyLzAvRDU0NDE5OTgz MTQwRDNDQjczRTYyNTY4MTUzODIyNUNCMTJFNTQyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENTQ0MTk5ODMxNDBEM0NCNzNFNjI1NjgxNTM4MjI1Q0IxMkU1 NDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWI4OGQyY2EtMjI5Yi00YWFjLTli NWMtNDJjMTUxMDViYjgyLzAvRDU0NDE5OTgzMTQwRDNDQjczRTYyNTY4MTUzODIy NUNCMTJFNTQyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvFWAht1Wun3y3PtJ5m+RIgx8IGmk7BPW2y URnt96zyuTr7tDI0NwTiwxiMAUMsKKgFg9VYDiZ0P4Z6NCEbJGLKJa4KNoJLTc7n Twq1GqZ/h1ehxFbcb1SJ89NzMfhv4Wbhg/o0ACDwxtLr65e/iElO3uDW6Du0fxnY wtA9l9sSygeCXTuQYj2wi9a+JP6WZObYCGtnxVWAnIHBaswtoOIY3DBSRYC0gTlF g5G3k0QFJ8gj2jQFZJ9PYhG+THYgnMmoemn5kUpqJsty8paWlrM2HCeMkdL4nucu j+fykLhUBJhpP5H9Jhv8Qz1vn7UYYQwxIYXDTE8b/6u/Q2HtC8g= -----END CERTIFICATE-----Generated at Mon Sep 28 20:51:48 2026 by rpki-client