$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft File: DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft (raw, json) Hash identifier: aynws6PM6EhezQ5XE5bKnJIsc/YyLnOgKuP6GNJTct4= Subject key identifier: FB:F0:2C:94:BD:C1:75:49:E7:2D:E1:75:B5:9F:AA:BD:3B:E5:C1:23 Authority key identifier: DF:34:17:50:0C:E0:95:64:B4:A4:CE:AF:ED:E4:A7:6C:DF:A5:A4:25 Certificate issuer: /CN=DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425 Certificate serial: 77550B97BA97BFF4898EEFA5766BF2BD21E1A53B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft Manifest number: BE Signing time: Mon 21 Sep 2026 00:11:42 +0000 Manifest this update: Mon 21 Sep 2026 00:06:42 +0000 Manifest next update: Tue 22 Sep 2026 02:17:42 +0000 Files and hashes: 1: 3130332e3135312e39382e302f32342d3234203d3e203137353338.roa (hash: SGuts0/+uyJce0bHFyKC5/STYlo5gf3uXrTdV1Kngrs=) 2: 323030313a6466333a623938303a3a2f34382d3438203d3e203137353338.roa (hash: Bl/k50LueSgJjg8VDKjdeOLA5vAz35PavygXYOL9fXU=) 3: DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.crl (hash: qieetmEbijsavt+OnAwfMBbDBKPD4gh0IN9fkT5E+Qg=) 4: 3130332e3135312e39392e302f32342d3234203d3e203137353338.roa (hash: cHi+wDASSXBvEYUwne4ghJo+D7FzU4toHGViW0cqxos=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.crl rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:55:0b:97:ba:97:bf:f4:89:8e:ef:a5:76:6b:f2:bd:21:e1:a5:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425 Validity Not Before: Sep 21 00:06:42 2026 GMT Not After : Sep 22 02:17:42 2026 GMT Subject: CN=FBF02C94BDC17549E72DE175B59FAABD3BE5C123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ed:89:19:b6:56:0c:ad:4a:4b:7e:a1:d2:84: 58:41:7a:a9:9c:e6:91:04:59:5f:5a:da:13:9d:cb: 47:56:64:44:1e:e5:9f:2e:0c:3a:ac:e1:8a:25:29: c4:8d:3f:75:a3:64:ea:08:6d:06:3e:96:d3:5e:4d: a3:b7:e9:74:e9:0a:23:7d:2b:d4:07:1b:0d:a2:f1: b1:37:9b:65:2f:1f:40:3b:a8:48:2f:d8:4f:56:93: 7b:e9:57:b7:d6:44:bd:aa:f7:93:5f:4c:65:c6:64: 43:a6:84:a1:67:df:be:e7:52:3d:5b:ae:e1:e7:1f: 00:ec:25:4d:2f:fc:78:a7:a4:25:b3:11:62:18:30: f0:5e:e6:6c:63:33:9b:cf:e0:3a:6f:55:bc:1c:65: c9:c1:d0:c2:3f:50:3f:02:57:3e:64:3c:d6:7e:97: d1:64:fd:44:45:a6:61:d7:d7:fd:eb:4b:7e:e7:77: 3a:3d:68:31:c9:3f:86:1a:16:8e:3c:95:ae:4c:43: f6:f7:40:d5:72:6c:5f:44:63:58:e5:2a:cc:c8:73: e6:50:df:01:a4:59:a5:e1:a8:a3:54:2d:41:ee:27: 2f:27:f4:a1:a9:61:c6:55:ce:1f:9f:ac:bd:01:6a: 89:31:d4:02:9e:0e:35:a3:4b:c8:c4:ee:9b:9e:9e: 3f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F0:2C:94:BD:C1:75:49:E7:2D:E1:75:B5:9F:AA:BD:3B:E5:C1:23 X509v3 Authority Key Identifier: keyid:DF:34:17:50:0C:E0:95:64:B4:A4:CE:AF:ED:E4:A7:6C:DF:A5:A4:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:43:db:54:42:22:46:fc:9d:1a:21:d9:31:20:d0:ef:89:5b: dc:c0:b6:47:97:bd:6a:36:3d:ed:5c:44:4b:cb:39:78:dd:a9: 44:6c:f7:32:e4:f6:6a:e0:c4:58:0a:56:d5:d7:33:48:a4:84: 03:62:ef:a9:04:20:ac:e5:45:fe:36:7b:dd:2f:98:10:b9:ef: 3c:1f:27:88:5c:da:c3:2e:4e:0d:62:a5:96:7f:b8:c4:1b:b3: 84:37:4e:ba:7d:56:9d:d0:bf:eb:47:1d:21:5b:91:91:99:c0: ca:26:fd:d9:30:8c:d1:7c:d5:e7:5f:84:13:18:b7:b9:63:d3: 78:cd:30:9e:61:40:d7:30:8a:34:5a:8e:61:4f:8a:9b:dd:f3: f1:a2:46:92:ba:92:65:0f:df:f2:02:79:e1:7a:e4:03:8e:c0: c6:ea:a4:60:40:2e:89:e7:a0:2c:4d:8b:75:99:81:5a:d9:82: a5:72:0a:fd:11:4e:c7:90:cb:08:2a:39:91:45:35:9e:12:82: 07:5e:3a:43:97:96:35:10:85:f8:80:b4:cd:8d:ed:1a:3a:db: 7e:f1:4c:f3:85:0c:4d:91:c3:a2:0c:18:5b:7b:93:fa:72:e0: 97:bc:7c:93:ec:80:38:07:4e:59:9c:be:1b:7f:0c:da:d5:65: 82:50:b4:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd1ULl7qXv/SJju+ldmvyvSHhpTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNDE3NTAwQ0UwOTU2NEI0QTRDRUFGRURFNEE3NkNE RkE1QTQyNTAeFw0yNjA5MjEwMDA2NDJaFw0yNjA5MjIwMjE3NDJaMDMxMTAvBgNV BAMTKEZCRjAyQzk0QkRDMTc1NDlFNzJERTE3NUI1OUZBQUJEM0JFNUMxMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR7YkZtlYMrUpLfqHShFhBeqmc 5pEEWV9a2hOdy0dWZEQe5Z8uDDqs4YolKcSNP3WjZOoIbQY+ltNeTaO36XTpCiN9 K9QHGw2i8bE3m2UvH0A7qEgv2E9Wk3vpV7fWRL2q95NfTGXGZEOmhKFn377nUj1b ruHnHwDsJU0v/HinpCWzEWIYMPBe5mxjM5vP4DpvVbwcZcnB0MI/UD8CVz5kPNZ+ l9Fk/URFpmHX1/3rS37ndzo9aDHJP4YaFo48la5MQ/b3QNVybF9EY1jlKszIc+ZQ 3wGkWaXhqKNULUHuJy8n9KGpYcZVzh+frL0Baokx1AKeDjWjS8jE7puenj+TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+/AslL3BdUnnLeF1tZ+qvTvlwSMwHwYDVR0j BBgwFoAU3zQXUAzglWS0pM6v7eSnbN+lpCUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjM3ODVlNjUtNTFlMi00YjFiLTgyZjktZTc1M2FkNGIyNDBmLzAvREYzNDE3NTAw Q0UwOTU2NEI0QTRDRUFGRURFNEE3NkNERkE1QTQyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjM0MTc1MDBDRTA5NTY0QjRBNENFQUZFREU0QTc2Q0RGQTVB NDI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjM3ODVlNjUtNTFlMi00YjFiLTgy ZjktZTc1M2FkNGIyNDBmLzAvREYzNDE3NTAwQ0UwOTU2NEI0QTRDRUFGRURFNEE3 NkNERkE1QTQyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtD21RCIkb8nRoh2TEg0O+JW9zAtkeXvWo2 Pe1cREvLOXjdqURs9zLk9mrgxFgKVtXXM0ikhANi76kEIKzlRf42e90vmBC57zwf J4hc2sMuTg1ipZZ/uMQbs4Q3Trp9Vp3Qv+tHHSFbkZGZwMom/dkwjNF81edfhBMY t7lj03jNMJ5hQNcwijRajmFPipvd8/GiRpK6kmUP3/ICeeF65AOOwMbqpGBALonn oCxNi3WZgVrZgqVyCv0RTseQywgqOZFFNZ4SggdeOkOXljUQhfiAtM2N7Ro6237x TPOFDE2Rw6IMGFt7k/py4Je8fJPsgDgHTlmcvht/DNrVZYJQtO4= -----END CERTIFICATE-----Generated at Mon Sep 21 19:39:32 2026 by rpki-client