$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft File: DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft (raw, json) Hash identifier: opFw8qDvDZgeDj4Rhddd1Kkaa+l2Vfs0MU16eDdGsJM= Subject key identifier: F2:1A:FB:67:23:51:85:7F:BE:58:9C:77:F6:8B:1C:9A:CB:F8:40:C3 Authority key identifier: DC:2E:00:B2:12:67:A4:6B:D6:95:F6:DB:BE:C2:98:9F:48:30:C8:B0 Certificate issuer: /CN=DC2E00B21267A46BD695F6DBBEC2989F4830C8B0 Certificate serial: 0C84D1AF051C856DC05AC594C29F9E6D7DB72417 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft Manifest number: BD Signing time: Sun 20 Sep 2026 14:29:49 +0000 Manifest this update: Sun 20 Sep 2026 14:24:49 +0000 Manifest next update: Mon 21 Sep 2026 15:49:49 +0000 Files and hashes: 1: DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.crl (hash: ywqdpvFRNf4ubdB5xL7o60xrktc7LHp8fynjTv7Unyk=) 2: 3130332e34342e31392e302f32342d3234203d3e20313530313931.roa (hash: 73zmQhG7Zu+0eZu4dZISk1NiR9ExgcKyarQj6CIDk/k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.crl rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 15:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:84:d1:af:05:1c:85:6d:c0:5a:c5:94:c2:9f:9e:6d:7d:b7:24:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC2E00B21267A46BD695F6DBBEC2989F4830C8B0 Validity Not Before: Sep 20 14:24:49 2026 GMT Not After : Sep 21 15:49:49 2026 GMT Subject: CN=F21AFB672351857FBE589C77F68B1C9ACBF840C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ba:8e:ef:01:ea:42:5a:c0:c1:0f:44:f1:80: 3d:1a:56:b9:df:79:4d:aa:d5:9d:87:3a:29:0a:05: 91:7c:94:15:f3:52:ab:68:7f:c3:50:3f:b6:45:81: 6a:64:fa:2b:cc:46:a1:a2:97:fb:5e:f4:ad:dc:b3: c8:46:74:0a:bf:63:96:b0:eb:f6:87:2f:4f:ad:34: ce:8b:46:20:ec:4f:c8:37:31:97:46:76:0c:69:33: 9e:2b:6d:a0:17:8a:3e:4b:41:f0:eb:c5:67:40:c2: 9f:ab:47:a8:5f:89:55:48:82:9a:27:11:74:0d:5c: 26:b0:79:61:fc:ae:1e:77:b2:8b:fc:04:be:16:bd: c3:c2:0c:23:1c:15:0f:2a:10:15:28:18:87:af:15: 99:b2:ec:7f:68:00:4d:e4:ef:9e:64:b8:cf:87:c5: 6a:cf:c6:91:45:3f:fe:c2:b3:8d:f1:54:d4:fd:75: 08:0c:6e:86:ce:b0:7f:b2:93:5f:e6:0e:89:dc:4b: 23:2c:b7:fe:e5:9f:8e:0d:04:eb:8a:8e:25:d0:7d: f7:e5:33:d8:f2:51:5d:d8:cd:62:7f:ee:12:df:3e: 2d:5d:e4:05:7b:4c:1d:be:38:00:a8:ff:9f:ec:0a: 9e:de:9a:ed:ad:ad:4b:2f:dc:3f:89:07:a5:13:67: 28:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1A:FB:67:23:51:85:7F:BE:58:9C:77:F6:8B:1C:9A:CB:F8:40:C3 X509v3 Authority Key Identifier: keyid:DC:2E:00:B2:12:67:A4:6B:D6:95:F6:DB:BE:C2:98:9F:48:30:C8:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:2e:49:51:03:6d:52:c8:25:1d:f5:b9:98:61:5d:b6:09:ca: 02:ce:02:91:13:be:28:f0:0a:f1:da:d7:6b:0c:1d:52:54:ea: 47:e5:cd:b9:6d:3a:27:cc:a8:16:a5:26:b7:42:8c:b8:9e:63: 5c:8c:cc:c4:c6:5a:c3:b6:5d:a9:84:39:1a:0c:9a:4a:2f:a9: f2:ef:b8:82:7a:b8:d4:66:c6:b2:c0:89:94:d6:31:4e:24:80: 2c:b7:6e:7f:fc:4a:80:79:2b:f2:58:44:af:e0:c3:55:81:42: 26:71:ff:db:14:1c:e0:61:27:2c:86:67:5d:ab:e2:20:fe:66: 37:06:a9:6e:e1:a9:a9:6c:c8:7e:8d:df:af:d1:3f:df:f0:b0: 34:31:e1:90:04:6e:6e:d6:e3:d9:1a:19:bf:df:11:2b:9b:f7: 4f:69:75:c8:3c:2c:05:05:a7:43:51:8d:7c:50:2d:ba:52:e4: 58:9f:5e:f7:7d:3f:9d:fe:ea:d8:62:3d:b0:91:d8:90:b5:54: 80:fd:f6:2a:e8:c6:37:bd:22:1d:55:b3:2d:82:ab:00:02:5f: 75:b5:2b:08:27:b9:6b:55:bd:51:7a:c5:30:c4:b0:1f:61:75: 70:d3:3a:a3:2e:0f:d5:4e:d6:21:19:1c:28:59:3b:19:14:2b: 8f:df:69:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDITRrwUchW3AWsWUwp+ebX23JBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMyRTAwQjIxMjY3QTQ2QkQ2OTVGNkRCQkVDMjk4OUY0 ODMwQzhCMDAeFw0yNjA5MjAxNDI0NDlaFw0yNjA5MjExNTQ5NDlaMDMxMTAvBgNV BAMTKEYyMUFGQjY3MjM1MTg1N0ZCRTU4OUM3N0Y2OEIxQzlBQ0JGODQwQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3uo7vAepCWsDBD0TxgD0aVrnf eU2q1Z2HOikKBZF8lBXzUqtof8NQP7ZFgWpk+ivMRqGil/te9K3cs8hGdAq/Y5aw 6/aHL0+tNM6LRiDsT8g3MZdGdgxpM54rbaAXij5LQfDrxWdAwp+rR6hfiVVIgpon EXQNXCaweWH8rh53sov8BL4WvcPCDCMcFQ8qEBUoGIevFZmy7H9oAE3k755kuM+H xWrPxpFFP/7Cs43xVNT9dQgMbobOsH+yk1/mDoncSyMst/7ln44NBOuKjiXQfffl M9jyUV3YzWJ/7hLfPi1d5AV7TB2+OACo/5/sCp7emu2trUsv3D+JB6UTZygNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8hr7ZyNRhX++WJx39oscmsv4QMMwHwYDVR0j BBgwFoAU3C4AshJnpGvWlfbbvsKYn0gwyLAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjgxMTdjYTgtYjRlNS00NjdhLTg4YTgtYTRiNjNlNDBjM2VkLzAvREMyRTAwQjIx MjY3QTQ2QkQ2OTVGNkRCQkVDMjk4OUY0ODMwQzhCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQzJFMDBCMjEyNjdBNDZCRDY5NUY2REJCRUMyOTg5RjQ4MzBD OEIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjgxMTdjYTgtYjRlNS00NjdhLTg4 YTgtYTRiNjNlNDBjM2VkLzAvREMyRTAwQjIxMjY3QTQ2QkQ2OTVGNkRCQkVDMjk4 OUY0ODMwQzhCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQuSVEDbVLIJR31uZhhXbYJygLOApETvijw CvHa12sMHVJU6kflzbltOifMqBalJrdCjLieY1yMzMTGWsO2XamEORoMmkovqfLv uIJ6uNRmxrLAiZTWMU4kgCy3bn/8SoB5K/JYRK/gw1WBQiZx/9sUHOBhJyyGZ12r 4iD+ZjcGqW7hqalsyH6N36/RP9/wsDQx4ZAEbm7W49kaGb/fESub909pdcg8LAUF p0NRjXxQLbpS5FifXvd9P53+6thiPbCR2JC1VID99iroxje9Ih1Vsy2CqwACX3W1 KwgnuWtVvVF6xTDEsB9hdXDTOqMuD9VO1iEZHChZOxkUK4/faTw= -----END CERTIFICATE-----Generated at Mon Sep 21 08:26:09 2026 by rpki-client