$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft File: D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft (raw, json) Hash identifier: yWIAs4d3pq5gfQhWQoaAyGAKlR79nxZotA8d1gvx5Uw= Subject key identifier: E9:D3:CC:8D:51:65:40:D8:73:4C:80:5D:E8:9A:2B:08:EE:BC:1B:EC Authority key identifier: D4:B5:3A:6A:5B:EF:99:B5:CD:68:B1:46:74:4A:87:E1:63:2C:24:F8 Certificate issuer: /CN=D4B53A6A5BEF99B5CD68B146744A87E1632C24F8 Certificate serial: 5421029E44382611367306D84C1ADAE21BCE5254 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 00:06:18 +0000 Manifest this update: Wed 23 Sep 2026 00:01:18 +0000 Manifest next update: Thu 24 Sep 2026 00:11:18 +0000 Files and hashes: 1: D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.crl (hash: a2acCzk4ON6nOj+XGuXWOtcRvwiuUi88hQXm6unewuA=) 2: 3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa (hash: Tl47NYhV7p3ilyhNqNo+NuftHesBi3flI0jGsgT+BAM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.crl rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 00:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:21:02:9e:44:38:26:11:36:73:06:d8:4c:1a:da:e2:1b:ce:52:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4B53A6A5BEF99B5CD68B146744A87E1632C24F8 Validity Not Before: Sep 23 00:01:18 2026 GMT Not After : Sep 24 00:11:18 2026 GMT Subject: CN=E9D3CC8D516540D8734C805DE89A2B08EEBC1BEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6c:d9:2e:2c:ec:30:b0:31:c4:e3:8b:ec:65: 77:d5:cf:4d:6b:b3:03:c2:21:a7:c9:3a:e9:6d:f5: 50:65:24:c6:84:a0:1d:f1:9b:cb:51:c0:13:77:d4: e4:90:6e:e0:8d:0d:ad:45:97:3b:3b:e3:dc:e7:a1: 23:2a:55:3e:d3:f3:cd:b3:81:d5:0c:e7:8b:26:87: 47:d1:08:ee:89:66:48:d3:75:5d:93:4a:c2:f1:4b: 7b:3e:9e:74:3f:9e:37:72:21:c4:87:72:35:a7:a4: 47:49:72:a8:02:a3:d4:d6:2b:d0:cc:40:1f:f7:c4: 85:c9:dc:4c:35:80:84:9a:77:00:18:33:07:55:43: ab:eb:68:e0:68:7f:71:2b:11:0b:a2:4f:a8:cf:96: ff:2b:bf:ef:10:7a:f9:18:70:e0:51:37:3a:b4:c9: 99:0d:b0:3a:a7:83:74:8a:67:a3:39:18:5d:0f:a3: 93:21:4e:6b:7f:9f:8a:91:00:b1:6b:01:6e:81:d4: c0:81:2f:31:71:0d:87:f1:20:18:5a:8c:54:12:b8: f1:61:a5:ef:22:ce:78:9f:69:32:d5:57:7a:e0:77: 15:eb:63:1c:22:1a:10:5a:28:71:a7:94:16:2d:5d: 0d:10:4e:70:1a:4d:d5:f3:d6:f1:17:e8:8f:82:92: da:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D3:CC:8D:51:65:40:D8:73:4C:80:5D:E8:9A:2B:08:EE:BC:1B:EC X509v3 Authority Key Identifier: keyid:D4:B5:3A:6A:5B:EF:99:B5:CD:68:B1:46:74:4A:87:E1:63:2C:24:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:56:91:93:ce:c1:f7:24:e1:a0:15:9a:4e:c6:bd:3b:2c:2b: d0:b5:ba:ae:9a:01:bf:c3:b8:5f:6f:6b:ab:a7:e3:cd:33:52: 25:e5:a7:84:f2:3b:2b:e2:89:b9:45:0e:b9:46:bf:8b:28:ae: 61:dc:f2:ff:05:d1:d7:3a:0b:10:13:34:8b:c3:3e:4a:7f:44: 71:8a:44:8d:74:ff:42:5f:1d:a1:f8:21:70:19:a9:2b:78:d0: 76:fc:86:88:6a:da:59:d8:2c:5a:95:6c:bf:1e:f3:ad:f0:f4: 3f:4c:cb:8a:b6:e5:b9:73:6a:29:41:94:7f:59:bd:9d:b8:ed: 1f:bb:9f:f4:f0:ea:e3:92:95:04:9b:ec:de:eb:98:ea:2e:9a: 7d:5b:51:d5:3e:c0:bc:57:7b:7f:5d:31:ce:b4:21:37:4c:65: 40:e0:c8:de:9b:b1:cb:32:1a:f4:13:6e:90:ed:36:d7:4c:67: 67:5b:8c:17:6d:6a:55:f9:c4:fa:51:6c:6a:08:0e:97:ce:28: 79:3b:6e:cb:97:8e:cb:6b:23:40:20:5e:c1:ed:0b:50:d0:17: 8f:3e:e9:2a:93:e0:3b:a5:d7:f2:7a:41:ff:de:0b:9c:8d:e5: ec:a1:74:31:e9:9b:58:c6:12:7f:f8:03:9e:1a:ae:08:80:90: 41:47:6e:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVCECnkQ4JhE2cwbYTBra4hvOUlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRCNTNBNkE1QkVGOTlCNUNENjhCMTQ2NzQ0QTg3RTE2 MzJDMjRGODAeFw0yNjA5MjMwMDAxMThaFw0yNjA5MjQwMDExMThaMDMxMTAvBgNV BAMTKEU5RDNDQzhENTE2NTQwRDg3MzRDODA1REU4OUEyQjA4RUVCQzFCRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAbNkuLOwwsDHE44vsZXfVz01r swPCIafJOult9VBlJMaEoB3xm8tRwBN31OSQbuCNDa1Flzs749znoSMqVT7T882z gdUM54smh0fRCO6JZkjTdV2TSsLxS3s+nnQ/njdyIcSHcjWnpEdJcqgCo9TWK9DM QB/3xIXJ3Ew1gISadwAYMwdVQ6vraOBof3ErEQuiT6jPlv8rv+8QevkYcOBRNzq0 yZkNsDqng3SKZ6M5GF0Po5MhTmt/n4qRALFrAW6B1MCBLzFxDYfxIBhajFQSuPFh pe8iznifaTLVV3rgdxXrYxwiGhBaKHGnlBYtXQ0QTnAaTdXz1vEX6I+CktpNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6dPMjVFlQNhzTIBd6JorCO68G+wwHwYDVR0j BBgwFoAU1LU6alvvmbXNaLFGdEqH4WMsJPgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUxOTExYjktMWQyZi00YmI0LTlkNzUtOWFhM2MzNTEwMGU4LzAvRDRCNTNBNkE1 QkVGOTlCNUNENjhCMTQ2NzQ0QTg3RTE2MzJDMjRGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENEI1M0E2QTVCRUY5OUI1Q0Q2OEIxNDY3NDRBODdFMTYzMkMy NEY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUxOTExYjktMWQyZi00YmI0LTlk NzUtOWFhM2MzNTEwMGU4LzAvRDRCNTNBNkE1QkVGOTlCNUNENjhCMTQ2NzQ0QTg3 RTE2MzJDMjRGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVWkZPOwfck4aAVmk7GvTssK9C1uq6aAb/D uF9va6un480zUiXlp4TyOyviiblFDrlGv4sormHc8v8F0dc6CxATNIvDPkp/RHGK RI10/0JfHaH4IXAZqSt40Hb8hohq2lnYLFqVbL8e863w9D9My4q25blzailBlH9Z vZ247R+7n/Tw6uOSlQSb7N7rmOoumn1bUdU+wLxXe39dMc60ITdMZUDgyN6bscsy GvQTbpDtNtdMZ2dbjBdtalX5xPpRbGoIDpfOKHk7bsuXjstrI0AgXsHtC1DQF48+ 6SqT4Dul1/J6Qf/eC5yN5eyhdDHpm1jGEn/4A54argiAkEFHbko= -----END CERTIFICATE-----Generated at Wed Sep 23 07:30:20 2026 by rpki-client