$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft File: D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft (raw, json) Hash identifier: T62B4fCXtJ2Ie70+puI4tqBGL8TLdyX0CVW4eCAvDAY= Subject key identifier: 9C:D9:84:A4:87:40:F1:25:B6:AC:2E:97:07:89:E8:4B:09:80:63:45 Authority key identifier: D8:A9:63:CE:57:E9:9B:1A:BE:16:2A:84:52:D9:E4:D3:68:BB:01:2A Certificate issuer: /CN=D8A963CE57E99B1ABE162A8452D9E4D368BB012A Certificate serial: 7BC3F0F3FD02B2A000AE3412B688757F35A2E54C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 04:52:26 +0000 Manifest this update: Tue 22 Sep 2026 04:47:26 +0000 Manifest next update: Wed 23 Sep 2026 07:12:26 +0000 Files and hashes: 1: 3130332e3136392e3233382e302f32332d3233203d3e20313338383831.roa (hash: 6VIXf9PufTTIF0jlFfBvIGu6EFZnq37iO9mrrQ1/lbk=) 2: D8A963CE57E99B1ABE162A8452D9E4D368BB012A.crl (hash: 3AjSCOq5Dzyb+LhB/f6NdXYNaRWHXuv+/UJaQ49v5e8=) 3: 3130332e3136392e3233392e302f32342d3234203d3e20313338383831.roa (hash: B7a7PzCNzeD/tq1cXAKoZlfFY/BQzoD5xWVoqKq0SF0=) 4: 3130332e3136392e3233382e302f32342d3234203d3e20313338383831.roa (hash: Jx05B7mkwgYoEihHJr1Mblw6Kt55kFXhZ9MUCvCt+Go=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.crl rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 07:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c3:f0:f3:fd:02:b2:a0:00:ae:34:12:b6:88:75:7f:35:a2:e5:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8A963CE57E99B1ABE162A8452D9E4D368BB012A Validity Not Before: Sep 22 04:47:26 2026 GMT Not After : Sep 23 07:12:26 2026 GMT Subject: CN=9CD984A48740F125B6AC2E970789E84B09806345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:82:d9:e9:42:42:62:01:48:e0:17:1d:49:41: e1:3b:ef:8e:45:99:84:96:72:bd:42:e5:70:37:d9: 0e:de:ae:18:de:89:8f:92:26:e1:88:2a:5d:78:90: a5:d9:0a:13:48:3d:82:f1:c0:fb:6d:73:1f:e9:4c: ae:91:5f:c9:a2:11:09:db:c2:da:1f:07:4a:7e:30: 89:5f:6e:a1:42:9a:b4:f1:8c:ad:49:0f:fb:34:c4: b6:63:b0:c2:ad:a9:10:d0:20:b4:7c:59:2d:ee:dc: 21:59:02:6f:76:57:30:04:d3:7c:28:e5:5c:4a:7d: 14:fb:39:7c:38:4f:5d:7a:8e:b2:88:87:f9:e7:0f: 0a:99:35:d1:19:08:58:92:14:8b:55:56:5e:26:8f: 58:e1:06:a1:f2:2c:e0:9d:63:9d:e0:5d:2c:70:44: f6:65:e4:d8:dd:e7:0f:70:f3:77:c4:6f:63:ae:69: f4:3e:20:ae:a5:46:12:85:03:1b:48:c7:de:0e:32: c5:14:3f:e0:40:b8:0e:aa:b4:a6:53:46:ef:f4:dc: a1:8b:86:0f:8f:ef:b3:6c:ba:c2:24:96:8c:ab:fa: 89:cb:c3:45:9a:8f:6c:15:a5:0e:9b:f3:ad:42:3f: 20:8f:e4:09:87:6b:6b:79:15:ff:e1:86:3d:89:b0: 2f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D9:84:A4:87:40:F1:25:B6:AC:2E:97:07:89:E8:4B:09:80:63:45 X509v3 Authority Key Identifier: keyid:D8:A9:63:CE:57:E9:9B:1A:BE:16:2A:84:52:D9:E4:D3:68:BB:01:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:b6:74:8e:ab:79:ee:8e:95:24:f2:3e:4d:5d:92:ad:e4:26: bd:13:60:38:54:b1:74:17:00:0c:7f:f1:af:39:98:57:6b:4f: d0:40:3f:63:93:d3:7f:35:17:99:59:91:9c:c3:ca:46:1d:7a: 78:c8:dc:ec:09:6a:64:1f:70:27:2c:b8:aa:f6:33:6b:27:42: a0:4c:e3:24:a9:5b:80:da:c9:09:af:96:b5:f1:b9:67:31:f7: 7c:96:2b:19:58:92:1f:5a:8c:8d:85:40:a8:eb:1d:ac:10:c4: 2a:1c:6a:56:93:bd:c7:a3:f4:6d:5a:6f:91:10:19:40:c7:0b: 0c:60:a5:e6:3f:8a:65:92:16:26:92:a8:4f:38:96:f5:73:7b: cc:71:59:49:02:3f:a4:73:85:51:a0:42:39:11:05:11:4c:d2: dc:f4:e7:14:d4:e0:be:fb:09:8e:7d:7a:91:97:79:a4:76:14: 23:3b:2b:ef:05:dc:17:00:9f:d8:64:78:52:d3:5e:15:e3:83: e4:84:c2:d2:a0:6d:bf:9a:1c:0d:09:a5:a7:b5:22:d1:03:fc: 4f:fd:df:61:c2:b5:c8:e2:30:f8:f4:23:e8:2a:bb:32:e5:f4: 0b:fe:78:fd:9e:2e:52:b6:a2:ab:21:76:a8:84:dd:4a:81:62: 4c:92:89:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe8Pw8/0CsqAArjQStoh1fzWi5UwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhBOTYzQ0U1N0U5OUIxQUJFMTYyQTg0NTJEOUU0RDM2 OEJCMDEyQTAeFw0yNjA5MjIwNDQ3MjZaFw0yNjA5MjMwNzEyMjZaMDMxMTAvBgNV BAMTKDlDRDk4NEE0ODc0MEYxMjVCNkFDMkU5NzA3ODlFODRCMDk4MDYzNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvgtnpQkJiAUjgFx1JQeE7745F mYSWcr1C5XA32Q7erhjeiY+SJuGIKl14kKXZChNIPYLxwPttcx/pTK6RX8miEQnb wtofB0p+MIlfbqFCmrTxjK1JD/s0xLZjsMKtqRDQILR8WS3u3CFZAm92VzAE03wo 5VxKfRT7OXw4T116jrKIh/nnDwqZNdEZCFiSFItVVl4mj1jhBqHyLOCdY53gXSxw RPZl5Njd5w9w83fEb2OuafQ+IK6lRhKFAxtIx94OMsUUP+BAuA6qtKZTRu/03KGL hg+P77NsusIkloyr+onLw0Waj2wVpQ6b861CPyCP5AmHa2t5Ff/hhj2JsC8vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnNmEpIdA8SW2rC6XB4noSwmAY0UwHwYDVR0j BBgwFoAU2Kljzlfpmxq+FiqEUtnk02i7ASowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjExY2E2MjAtZGFjZS00YTlmLWI4ZTgtYTNhMmU1ODE1MDBlLzAvRDhBOTYzQ0U1 N0U5OUIxQUJFMTYyQTg0NTJEOUU0RDM2OEJCMDEyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOEE5NjNDRTU3RTk5QjFBQkUxNjJBODQ1MkQ5RTREMzY4QkIw MTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjExY2E2MjAtZGFjZS00YTlmLWI4 ZTgtYTNhMmU1ODE1MDBlLzAvRDhBOTYzQ0U1N0U5OUIxQUJFMTYyQTg0NTJEOUU0 RDM2OEJCMDEyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHa2dI6ree6OlSTyPk1dkq3kJr0TYDhUsXQX AAx/8a85mFdrT9BAP2OT0381F5lZkZzDykYdenjI3OwJamQfcCcsuKr2M2snQqBM 4ySpW4DayQmvlrXxuWcx93yWKxlYkh9ajI2FQKjrHawQxCocalaTvcej9G1ab5EQ GUDHCwxgpeY/imWSFiaSqE84lvVze8xxWUkCP6RzhVGgQjkRBRFM0tz05xTU4L77 CY59epGXeaR2FCM7K+8F3BcAn9hkeFLTXhXjg+SEwtKgbb+aHA0Jpae1ItED/E/9 32HCtcjiMPj0I+gquzLl9Av+eP2eLlK2oqshdqiE3UqBYkySiQQ= -----END CERTIFICATE-----Generated at Tue Sep 22 13:29:34 2026 by rpki-client