$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft File: D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft (raw, json) Hash identifier: vcfeuxj45UnPQlcCwmo4PWr2CqTP9wghudESnVz3UEc= Subject key identifier: 78:0F:2C:A8:10:2E:67:DE:67:36:EF:DA:6F:E5:6F:A6:3D:32:7F:D2 Authority key identifier: D5:54:88:51:5F:49:C9:E2:A9:5F:61:47:52:BA:7C:BA:D5:DC:0C:17 Certificate issuer: /CN=D55488515F49C9E2A95F614752BA7CBAD5DC0C17 Certificate serial: 12E189DB3C91C62F0A01EFC8828654A9D7093382 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft Manifest number: BC Signing time: Sun 20 Sep 2026 21:54:02 +0000 Manifest this update: Sun 20 Sep 2026 21:49:02 +0000 Manifest next update: Mon 21 Sep 2026 22:59:02 +0000 Files and hashes: 1: D55488515F49C9E2A95F614752BA7CBAD5DC0C17.crl (hash: S5xOXGA5g3Y7xeBHg8iNH5YsQazGTCndpmGEFcGD7iw=) 2: 3130332e3139312e3231382e302f32342d3234203d3e20313439393330.roa (hash: LLuRHn4xhc/MivkLWWh5CVLPBZ4K3sNosIj++ElGxco=) 3: 3130332e3139312e3231382e302f32332d3234203d3e20313439393330.roa (hash: whFYG+jTb2gWlU4tXTKDvr8VOmh33B5+fTwOyqIk0yw=) 4: 3130332e3139312e3231392e302f32342d3234203d3e20313439393330.roa (hash: glLFkt9sfYEvpqjXuBfssPvW+ZRZ2fl6wfErSqQG7zc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.crl rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e1:89:db:3c:91:c6:2f:0a:01:ef:c8:82:86:54:a9:d7:09:33:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55488515F49C9E2A95F614752BA7CBAD5DC0C17 Validity Not Before: Sep 20 21:49:02 2026 GMT Not After : Sep 21 22:59:02 2026 GMT Subject: CN=780F2CA8102E67DE6736EFDA6FE56FA63D327FD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6f:b9:64:98:5f:b3:5d:2e:dc:23:5a:bd:6b: 02:c1:de:38:79:16:9f:d7:93:e4:cd:59:bd:56:a6: 72:c5:cc:b5:6f:a5:24:ae:37:0e:4e:ea:b5:2c:71: 96:05:7d:9c:a8:c7:4b:76:a6:33:ed:d7:b5:ea:69: 4e:df:66:0d:a4:34:14:b9:5e:30:1e:96:5c:ab:fb: 09:b5:2e:dd:d7:9e:e3:9d:c2:8b:a5:c3:88:50:89: 02:36:74:c4:16:bd:2c:fc:c1:a3:ca:f1:b2:db:bf: 79:02:53:2f:4c:6a:f9:7e:fd:02:14:06:81:9f:f4: 96:cf:17:b0:ac:0a:8f:6e:a3:bd:6b:08:f5:09:9f: 95:15:0e:81:13:d5:14:27:f8:a7:9e:e3:9c:d1:d0: 72:a9:64:a2:0f:a2:f6:fc:3d:77:eb:c1:c1:4d:32: f6:7e:35:d6:4e:ef:20:aa:5a:99:10:eb:4c:cd:c0: fe:e5:ab:4e:71:96:9c:3f:e1:14:b5:19:88:7d:75: 22:f2:15:66:64:bc:51:53:52:54:20:ba:38:3e:f0: 8e:55:3d:8c:d6:69:af:12:d5:57:45:ea:4a:da:0b: 4c:2c:ba:80:0e:f6:83:c3:e7:7c:aa:2d:0f:13:e2: 01:75:b6:60:fd:10:48:cd:48:53:39:02:34:88:0a: f5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0F:2C:A8:10:2E:67:DE:67:36:EF:DA:6F:E5:6F:A6:3D:32:7F:D2 X509v3 Authority Key Identifier: keyid:D5:54:88:51:5F:49:C9:E2:A9:5F:61:47:52:BA:7C:BA:D5:DC:0C:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:df:82:0f:06:8f:50:8e:16:bd:de:f8:26:98:88:8e:08:6d: 98:73:a5:4e:42:d3:f5:f8:c2:ba:0a:9c:48:9a:ee:78:a2:d7: f4:55:90:92:2d:d7:f0:17:f2:f6:a4:3e:36:ac:8c:25:a1:21: 32:ba:bc:e6:1d:f3:bb:ab:5e:bf:b5:76:b3:f3:d8:de:fd:2a: e9:98:90:ae:98:12:7e:ee:d6:94:64:42:08:d3:4b:ae:98:49: 58:a0:01:2e:93:6b:0f:5c:49:88:5c:62:45:d4:3f:63:7a:be: 71:f1:cd:1b:64:86:b9:2c:a8:38:c0:e4:44:0e:9c:fb:c8:52: e7:99:4b:59:2a:a6:27:9f:09:a8:20:6e:e8:35:7b:3d:5c:b7: 80:29:08:5e:b4:c3:e0:a1:73:33:5a:51:cb:b2:8e:35:a5:a1: 02:ed:d0:e5:33:a9:cb:8a:35:ac:22:3e:cf:eb:44:1d:1e:ee: a4:aa:dd:df:c2:76:ca:0b:fd:56:07:6a:78:a7:86:ed:56:4a: 22:16:0a:a4:85:dc:1b:40:25:ef:02:ff:48:f4:8e:21:b8:a2: 3a:98:2b:66:71:7e:d9:46:84:fd:81:85:87:89:98:7b:b8:73: 22:e4:dd:ca:80:e6:8e:80:ef:37:74:4b:78:2f:f4:61:d9:23: a9:1b:d9:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEuGJ2zyRxi8KAe/IgoZUqdcJM4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDg4NTE1RjQ5QzlFMkE5NUY2MTQ3NTJCQTdDQkFE NURDMEMxNzAeFw0yNjA5MjAyMTQ5MDJaFw0yNjA5MjEyMjU5MDJaMDMxMTAvBgNV BAMTKDc4MEYyQ0E4MTAyRTY3REU2NzM2RUZEQTZGRTU2RkE2M0QzMjdGRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/b7lkmF+zXS7cI1q9awLB3jh5 Fp/Xk+TNWb1WpnLFzLVvpSSuNw5O6rUscZYFfZyox0t2pjPt17XqaU7fZg2kNBS5 XjAellyr+wm1Lt3XnuOdwoulw4hQiQI2dMQWvSz8waPK8bLbv3kCUy9Mavl+/QIU BoGf9JbPF7CsCo9uo71rCPUJn5UVDoET1RQn+Kee45zR0HKpZKIPovb8PXfrwcFN MvZ+NdZO7yCqWpkQ60zNwP7lq05xlpw/4RS1GYh9dSLyFWZkvFFTUlQgujg+8I5V PYzWaa8S1VdF6kraC0wsuoAO9oPD53yqLQ8T4gF1tmD9EEjNSFM5AjSICvW3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeA8sqBAuZ95nNu/ab+Vvpj0yf9IwHwYDVR0j BBgwFoAU1VSIUV9JyeKpX2FHUrp8utXcDBcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjMzNzBkMjQtYTY1Ni00MzM2LTg0MmItOWJkNWRjYTJiNDBhLzAvRDU1NDg4NTE1 RjQ5QzlFMkE5NUY2MTQ3NTJCQTdDQkFENURDMEMxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTU0ODg1MTVGNDlDOUUyQTk1RjYxNDc1MkJBN0NCQUQ1REMw QzE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjMzNzBkMjQtYTY1Ni00MzM2LTg0 MmItOWJkNWRjYTJiNDBhLzAvRDU1NDg4NTE1RjQ5QzlFMkE5NUY2MTQ3NTJCQTdD QkFENURDMEMxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHfgg8Gj1COFr3e+CaYiI4IbZhzpU5C0/X4 wroKnEia7nii1/RVkJIt1/AX8vakPjasjCWhITK6vOYd87urXr+1drPz2N79KumY kK6YEn7u1pRkQgjTS66YSVigAS6Taw9cSYhcYkXUP2N6vnHxzRtkhrksqDjA5EQO nPvIUueZS1kqpiefCaggbug1ez1ct4ApCF60w+ChczNaUcuyjjWloQLt0OUzqcuK NawiPs/rRB0e7qSq3d/CdsoL/VYHaninhu1WSiIWCqSF3BtAJe8C/0j0jiG4ojqY K2ZxftlGhP2BhYeJmHu4cyLk3cqA5o6A7zd0S3gv9GHZI6kb2bw= -----END CERTIFICATE-----Generated at Mon Sep 21 03:23:50 2026 by rpki-client