$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft File: D69827B97765F94998CEA76A23999571F2BDA426.mft (raw, json) Hash identifier: Uhy8cgWAeltZRK3MFa0ov9u1F72AAT8b4hF//WWEwjk= Subject key identifier: 3F:8B:23:F9:0A:AC:DE:13:FE:09:88:B7:22:2E:1F:D5:C1:E9:BE:12 Authority key identifier: D6:98:27:B9:77:65:F9:49:98:CE:A7:6A:23:99:95:71:F2:BD:A4:26 Certificate issuer: /CN=D69827B97765F94998CEA76A23999571F2BDA426 Certificate serial: 3104A420C44CF82E6AC516540DFAB2B3C0ABCFFC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft Manifest number: BE Signing time: Mon 21 Sep 2026 07:56:29 +0000 Manifest this update: Mon 21 Sep 2026 07:51:29 +0000 Manifest next update: Tue 22 Sep 2026 08:11:29 +0000 Files and hashes: 1: 3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa (hash: iLHx8gOj2lpsnRU9gP4XnWUqEugFMffYvM4rOFlrJs8=) 2: D69827B97765F94998CEA76A23999571F2BDA426.crl (hash: W9dfRlD4zLcn+3ENJ9Grbr39F95dBIPhAZoFefzM4l4=) 3: 3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa (hash: vm3LwDwLeRAwMnQkRWhgtW4ETHGNuBudAWSRp1ytOKg=) 4: 323430353a633763303a3a2f33322d3332203d3e20313339393738.roa (hash: 0y6JUWjxpl3UiTjjA3rkmhxCstrj/MfIM81XvNQIAG8=) 5: 3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa (hash: TZoS498ctZpsXD1NhIQ84Q2pw5rT92BFxmYiyFfNKls=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.crl rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:04:a4:20:c4:4c:f8:2e:6a:c5:16:54:0d:fa:b2:b3:c0:ab:cf:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D69827B97765F94998CEA76A23999571F2BDA426 Validity Not Before: Sep 21 07:51:29 2026 GMT Not After : Sep 22 08:11:29 2026 GMT Subject: CN=3F8B23F90AACDE13FE0988B7222E1FD5C1E9BE12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:38:53:88:dd:52:28:1a:6b:52:ac:d0:85:33: 22:0a:d4:92:37:e3:65:84:2c:0d:48:62:f4:ff:1c: b4:8c:de:20:f3:96:17:ce:01:ab:ce:8e:d1:7b:11: 97:c1:7d:41:9e:e4:17:fd:5d:12:f1:1a:53:08:ef: fa:90:e0:f1:3d:e2:fb:ef:95:c9:94:69:91:b0:ce: 4d:69:12:63:07:27:bd:cf:c9:99:8c:92:29:db:c3: f1:46:c5:c2:ec:6b:29:6d:0b:9a:79:b5:1a:34:d8: dc:2a:64:ba:03:e8:91:7d:11:4f:96:0b:b3:27:7f: d9:9b:d3:14:bb:95:84:49:5b:02:84:b6:07:21:e6: 16:32:89:a4:c6:40:f4:56:ca:72:2e:2e:06:4c:b4: 22:07:a3:40:dc:e1:4e:29:46:ac:63:d2:39:94:77: dc:73:26:4f:fb:43:81:d7:5d:e3:02:05:c1:05:cb: 76:bc:b2:2a:6c:57:b4:63:2e:30:db:75:a8:67:da: 71:9b:74:9d:17:60:45:e0:8b:3a:9e:69:26:03:6f: b5:eb:30:dd:65:80:d9:58:13:1e:78:14:42:9f:9e: 3c:7f:59:ce:6c:ca:d2:94:f4:da:eb:94:93:15:d8: 55:5c:a6:cd:a0:ca:08:39:16:28:55:ef:2f:2e:bd: 51:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:8B:23:F9:0A:AC:DE:13:FE:09:88:B7:22:2E:1F:D5:C1:E9:BE:12 X509v3 Authority Key Identifier: keyid:D6:98:27:B9:77:65:F9:49:98:CE:A7:6A:23:99:95:71:F2:BD:A4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:58:df:6d:20:44:8b:bc:74:e1:24:a1:38:29:3b:bd:58:a4: eb:01:af:e8:9f:be:2b:5d:ca:3f:04:2d:98:f8:aa:19:c8:5a: aa:4f:e5:ba:01:8a:9d:9e:53:eb:24:76:67:d1:fd:39:d8:a6: 0d:f2:99:19:f4:65:9c:7a:6e:3f:23:01:2c:52:18:87:45:00: ff:22:50:53:94:71:80:70:7d:c7:0b:9c:26:34:1c:a0:23:a2: 54:58:e9:d3:8b:89:5b:0c:4b:fd:a4:71:52:c4:e4:48:39:83: 44:f2:50:3f:b4:6a:0b:84:63:a2:7c:22:3c:9d:f8:53:6a:80: 65:a3:93:da:fd:8e:af:49:60:05:64:42:16:1e:1f:28:ef:84: af:17:2f:09:04:ea:fd:c5:2e:db:72:84:e9:f0:91:cd:34:16: 4a:a3:3e:fd:b7:38:a6:c2:6b:97:c3:31:7d:c9:5a:22:f2:96: 00:20:f2:e6:e0:38:a2:9e:3b:08:c3:13:82:ec:9d:73:3c:17: 7d:2c:33:0e:92:44:4c:5b:23:54:99:09:0a:43:a8:19:19:89: b7:7a:79:34:8b:0f:87:81:a4:a3:b8:c0:5c:21:42:60:89:a7: 5b:55:23:14:ce:75:e1:b7:2d:56:b7:89:64:13:2e:33:ac:bd: a0:21:80:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMQSkIMRM+C5qxRZUDfqys8Crz/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5ODI3Qjk3NzY1Rjk0OTk4Q0VBNzZBMjM5OTk1NzFG MkJEQTQyNjAeFw0yNjA5MjEwNzUxMjlaFw0yNjA5MjIwODExMjlaMDMxMTAvBgNV BAMTKDNGOEIyM0Y5MEFBQ0RFMTNGRTA5ODhCNzIyMkUxRkQ1QzFFOUJFMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXOFOI3VIoGmtSrNCFMyIK1JI3 42WELA1IYvT/HLSM3iDzlhfOAavOjtF7EZfBfUGe5Bf9XRLxGlMI7/qQ4PE94vvv lcmUaZGwzk1pEmMHJ73PyZmMkinbw/FGxcLsayltC5p5tRo02NwqZLoD6JF9EU+W C7Mnf9mb0xS7lYRJWwKEtgch5hYyiaTGQPRWynIuLgZMtCIHo0Dc4U4pRqxj0jmU d9xzJk/7Q4HXXeMCBcEFy3a8sipsV7RjLjDbdahn2nGbdJ0XYEXgizqeaSYDb7Xr MN1lgNlYEx54FEKfnjx/Wc5sytKU9NrrlJMV2FVcps2gygg5FihV7y8uvVEpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP4sj+Qqs3hP+CYi3Ii4f1cHpvhIwHwYDVR0j BBgwFoAU1pgnuXdl+UmYzqdqI5mVcfK9pCYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjdiODdmNmQtMjlhNy00YjRjLTgxYzctNWI0Y2JkYjJjYjZhLzAvRDY5ODI3Qjk3 NzY1Rjk0OTk4Q0VBNzZBMjM5OTk1NzFGMkJEQTQyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjk4MjdCOTc3NjVGOTQ5OThDRUE3NkEyMzk5OTU3MUYyQkRB NDI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjdiODdmNmQtMjlhNy00YjRjLTgx YzctNWI0Y2JkYjJjYjZhLzAvRDY5ODI3Qjk3NzY1Rjk0OTk4Q0VBNzZBMjM5OTk1 NzFGMkJEQTQyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRY320gRIu8dOEkoTgpO71YpOsBr+ifvitd yj8ELZj4qhnIWqpP5boBip2eU+skdmfR/TnYpg3ymRn0ZZx6bj8jASxSGIdFAP8i UFOUcYBwfccLnCY0HKAjolRY6dOLiVsMS/2kcVLE5Eg5g0TyUD+0aguEY6J8Ijyd +FNqgGWjk9r9jq9JYAVkQhYeHyjvhK8XLwkE6v3FLttyhOnwkc00FkqjPv23OKbC a5fDMX3JWiLylgAg8ubgOKKeOwjDE4LsnXM8F30sMw6SRExbI1SZCQpDqBkZibd6 eTSLD4eBpKO4wFwhQmCJp1tVIxTOdeG3LVa3iWQTLjOsvaAhgN8= -----END CERTIFICATE-----Generated at Mon Sep 21 16:34:37 2026 by rpki-client