$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft File: D3CDCB356F94C51B241188653C7ADC2C79D79424.mft (raw, json) Hash identifier: YfL3soVjF/vSMwmOFcoNfXVCsK6Qma671tCfWcj9UwI= Subject key identifier: 37:80:E9:D4:B3:5D:2D:58:F9:9E:2F:D7:6F:DB:14:54:B7:14:A0:08 Authority key identifier: D3:CD:CB:35:6F:94:C5:1B:24:11:88:65:3C:7A:DC:2C:79:D7:94:24 Certificate issuer: /CN=D3CDCB356F94C51B241188653C7ADC2C79D79424 Certificate serial: 2B1F923F2C1CA109AEC3E3BC662ED0480206CC42 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft Manifest number: BE Signing time: Sun 20 Sep 2026 15:41:24 +0000 Manifest this update: Sun 20 Sep 2026 15:36:24 +0000 Manifest next update: Mon 21 Sep 2026 18:42:24 +0000 Files and hashes: 1: D3CDCB356F94C51B241188653C7ADC2C79D79424.crl (hash: ehnZ21eHLwFy58Gs2pdStxQT+7PgcuSf5ipjqU7y898=) 2: 3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa (hash: 83bYI1z3e7ETkpXnXGTkrnk19/a7Qfy/7K16nNObwH0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.crl rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:1f:92:3f:2c:1c:a1:09:ae:c3:e3:bc:66:2e:d0:48:02:06:cc:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3CDCB356F94C51B241188653C7ADC2C79D79424 Validity Not Before: Sep 20 15:36:24 2026 GMT Not After : Sep 21 18:42:24 2026 GMT Subject: CN=3780E9D4B35D2D58F99E2FD76FDB1454B714A008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a5:fd:e0:73:2e:07:2c:54:9d:38:1a:10:0e: 90:4e:f2:49:ea:24:fc:17:7a:12:55:4d:e5:8c:61: da:88:b6:42:30:35:a7:e5:7f:a2:ed:2b:67:8c:52: ae:1c:b7:66:fc:96:cd:6d:d9:fa:ae:9e:54:53:df: 01:7a:92:89:90:d3:29:c9:f7:3c:0b:6b:9e:3a:2c: b4:04:35:8f:61:22:03:b2:2c:cb:89:8d:16:fa:98: 09:01:59:ef:f0:f5:07:91:a7:e3:e6:b7:e9:25:03: 72:08:f5:aa:a7:88:7e:01:a7:a2:23:d9:67:b1:a3: 27:fe:1b:6e:2c:74:56:8c:1d:8e:1f:21:63:93:88: ae:ff:87:b5:40:97:6a:18:16:51:43:27:0a:a0:e2: 11:a7:b1:bb:cc:2c:66:a1:01:e2:69:a3:85:2e:21: ed:7c:6e:da:88:09:a4:60:8e:2a:16:74:cd:b4:69: 56:90:72:29:29:11:7c:7e:ae:1f:52:23:c1:8b:81: 66:6b:80:cc:23:b1:84:65:21:1c:27:ff:79:24:8c: 87:13:21:6c:9c:3b:41:cf:af:48:96:70:f9:81:d8: 24:ad:a7:31:de:71:48:f4:40:5c:e2:42:18:84:80: 10:85:36:bc:16:b7:a6:d3:bf:61:50:c9:57:92:dd: 68:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:80:E9:D4:B3:5D:2D:58:F9:9E:2F:D7:6F:DB:14:54:B7:14:A0:08 X509v3 Authority Key Identifier: keyid:D3:CD:CB:35:6F:94:C5:1B:24:11:88:65:3C:7A:DC:2C:79:D7:94:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:fb:47:7d:e7:2e:88:09:f7:33:d3:37:7c:8c:c7:ab:de:d5: 3f:a2:07:66:8b:76:f5:0d:c4:29:9a:d7:7f:d2:56:39:8e:b8: dc:f1:cf:10:cc:47:9a:f3:38:6f:f3:15:78:74:f9:82:70:79: 95:0d:0d:e0:64:4e:22:8f:11:71:95:06:28:15:bb:e1:f8:d3: b0:cd:15:53:40:e1:0a:26:fd:b7:3d:e1:07:de:f1:27:43:11: 65:33:0c:a8:e6:c8:e3:6a:16:b9:2c:78:31:72:77:bf:ab:47: 83:fd:5e:26:a4:d6:cd:60:87:1c:06:c0:09:c1:8b:93:63:08: e5:4e:bb:90:ce:44:db:63:e2:d2:80:59:81:04:e4:86:2e:81: e5:57:33:6d:5b:5a:84:b7:dd:b1:61:12:65:27:9a:4b:f5:5b: d7:4f:52:97:81:5f:c8:30:27:49:ba:3d:cf:d6:97:f7:62:dd: 5f:2d:6e:0e:c3:45:b4:a9:08:9f:b5:35:8d:09:cd:9f:c8:66: 0e:b1:e6:93:1a:89:9b:7d:39:05:8f:8a:9c:41:2f:00:0d:4f: 53:50:8c:8a:6c:fa:62:92:6a:e9:ee:a7:e8:d2:9c:90:ab:3f: 9a:a0:e1:03:1e:ba:56:fd:17:c6:be:7c:86:4b:a0:4d:e4:72: d3:3c:0c:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKx+SPywcoQmuw+O8Zi7QSAIGzEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNDRENCMzU2Rjk0QzUxQjI0MTE4ODY1M0M3QURDMkM3 OUQ3OTQyNDAeFw0yNjA5MjAxNTM2MjRaFw0yNjA5MjExODQyMjRaMDMxMTAvBgNV BAMTKDM3ODBFOUQ0QjM1RDJENThGOTlFMkZENzZGREIxNDU0QjcxNEEwMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfpf3gcy4HLFSdOBoQDpBO8knq JPwXehJVTeWMYdqItkIwNaflf6LtK2eMUq4ct2b8ls1t2fqunlRT3wF6komQ0ynJ 9zwLa546LLQENY9hIgOyLMuJjRb6mAkBWe/w9QeRp+Pmt+klA3II9aqniH4Bp6Ij 2Wexoyf+G24sdFaMHY4fIWOTiK7/h7VAl2oYFlFDJwqg4hGnsbvMLGahAeJpo4Uu Ie18btqICaRgjioWdM20aVaQcikpEXx+rh9SI8GLgWZrgMwjsYRlIRwn/3kkjIcT IWycO0HPr0iWcPmB2CStpzHecUj0QFziQhiEgBCFNrwWt6bTv2FQyVeS3WgtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN4Dp1LNdLVj5ni/Xb9sUVLcUoAgwHwYDVR0j BBgwFoAU083LNW+UxRskEYhlPHrcLHnXlCQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2FmY2JmYmItYmEzZi00ZDUzLWEwNGYtMTRkNmY0YmUwY2IxLzAvRDNDRENCMzU2 Rjk0QzUxQjI0MTE4ODY1M0M3QURDMkM3OUQ3OTQyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EM0NEQ0IzNTZGOTRDNTFCMjQxMTg4NjUzQzdBREMyQzc5RDc5 NDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzAvRDNDRENCMzU2Rjk0QzUxQjI0MTE4ODY1M0M3QURD MkM3OUQ3OTQyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIj7R33nLogJ9zPTN3yMx6ve1T+iB2aLdvUN xCma13/SVjmOuNzxzxDMR5rzOG/zFXh0+YJweZUNDeBkTiKPEXGVBigVu+H407DN FVNA4Qom/bc94Qfe8SdDEWUzDKjmyONqFrkseDFyd7+rR4P9Xiak1s1ghxwGwAnB i5NjCOVOu5DORNtj4tKAWYEE5IYugeVXM21bWoS33bFhEmUnmkv1W9dPUpeBX8gw J0m6Pc/Wl/di3V8tbg7DRbSpCJ+1NY0JzZ/IZg6x5pMaiZt9OQWPipxBLwANT1NQ jIps+mKSaunup+jSnJCrP5qg4QMeulb9F8a+fIZLoE3kctM8DFs= -----END CERTIFICATE-----Generated at Mon Sep 21 05:16:28 2026 by rpki-client