$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/93D5F733B129227DEDF25AC1218D70CEB9366645.mft File: 93D5F733B129227DEDF25AC1218D70CEB9366645.mft (raw, json) Hash identifier: ULm2K0UUn6B3wNqhfCpJrCguFoAYX5G+XT4O0eLUL0k= Subject key identifier: 57:60:94:49:6E:4C:49:53:99:F5:67:1C:59:54:70:1D:8D:97:EF:AF Authority key identifier: 93:D5:F7:33:B1:29:22:7D:ED:F2:5A:C1:21:8D:70:CE:B9:36:66:45 Certificate issuer: /CN=93D5F733B129227DEDF25AC1218D70CEB9366645 Certificate serial: 3AFA585140BC48DD7763C74FD712A6B75B5A429E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/93D5F733B129227DEDF25AC1218D70CEB9366645.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/93D5F733B129227DEDF25AC1218D70CEB9366645.mft Manifest number: BC Signing time: Sun 20 Sep 2026 08:37:46 +0000 Manifest this update: Sun 20 Sep 2026 08:32:46 +0000 Manifest next update: Mon 21 Sep 2026 11:42:46 +0000 Files and hashes: 1: 3131352e3138372e33312e302f32342d3234203d3e203538333639.roa (hash: UQmYBsNtM1m+x3eKuJQrDlYChCuWAKPJpdpYIjOVVGo=) 2: 3131352e3138372e33302e302f32342d3234203d3e203538333639.roa (hash: WyzY/OKpQz+OszoUW9tiE0D45FrPQkYlLFlFkX8+2y0=) 3: 93D5F733B129227DEDF25AC1218D70CEB9366645.crl (hash: A6Ynk5ItbElw7NmtCI0647volyw2KqH3zRsIqHIGpHw=) 4: 3131352e3138372e33302e302f32332d3233203d3e203538333639.roa (hash: 2r/DHoZQcARca/HdvnPXzAwXVYdOhWG0QN9UGO2QPik=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/93D5F733B129227DEDF25AC1218D70CEB9366645.crl rsync://rpki-rsync.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/93D5F733B129227DEDF25AC1218D70CEB9366645.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/93D5F733B129227DEDF25AC1218D70CEB9366645.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 11:42:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:fa:58:51:40:bc:48:dd:77:63:c7:4f:d7:12:a6:b7:5b:5a:42:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93D5F733B129227DEDF25AC1218D70CEB9366645 Validity Not Before: Sep 20 08:32:46 2026 GMT Not After : Sep 21 11:42:46 2026 GMT Subject: CN=576094496E4C495399F5671C5954701D8D97EFAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2b:5f:42:df:4e:14:a6:16:1d:49:91:7c:b9: 7b:a6:1a:0e:e8:d7:d5:c5:53:ee:87:fa:97:11:e7: 3c:79:24:9a:93:ba:b6:fd:aa:54:da:6a:b8:0d:82: 06:4d:30:db:30:f1:80:87:37:57:4c:08:70:43:b3: 8f:f4:90:11:24:ef:33:55:12:1f:33:d6:8c:61:dc: 30:4d:09:01:1f:8f:50:b1:31:65:a9:1a:9b:c6:6a: da:57:1a:94:6d:99:c6:d8:20:f4:3a:da:0e:48:f0: 1d:3e:4e:e4:77:8d:f4:91:57:48:3d:da:75:5d:ab: 5f:4c:b1:01:a4:45:77:3c:f7:49:be:42:c1:cf:81: c0:9f:4f:e9:c0:1e:f5:70:43:a3:50:53:e0:e4:6c: 79:e8:55:8b:30:56:8e:ac:dc:1a:4c:e2:c2:10:09: af:a1:0a:b2:89:5e:76:bd:4d:7a:8a:ff:9a:0b:4b: 66:ae:b1:68:0e:4a:2b:7d:ee:71:7d:d1:93:87:6c: b4:f1:2f:a9:b6:85:e8:8c:0b:7d:82:20:62:62:e5: 75:c5:a3:a4:c6:fd:63:61:98:b5:fa:44:8f:6f:56: 87:b4:d7:dc:5a:10:91:5f:23:d2:8f:e8:a6:2b:6f: 40:4f:42:c4:ec:13:b7:e4:44:9c:d3:28:09:5e:27: 53:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:60:94:49:6E:4C:49:53:99:F5:67:1C:59:54:70:1D:8D:97:EF:AF X509v3 Authority Key Identifier: keyid:93:D5:F7:33:B1:29:22:7D:ED:F2:5A:C1:21:8D:70:CE:B9:36:66:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/93D5F733B129227DEDF25AC1218D70CEB9366645.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/93D5F733B129227DEDF25AC1218D70CEB9366645.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/93D5F733B129227DEDF25AC1218D70CEB9366645.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:b0:d8:09:13:5a:21:54:f7:73:d5:72:3b:57:30:b8:6e:07: 4b:9b:68:0c:e5:07:6b:5a:3a:44:65:4e:04:1d:e2:2b:92:f0: 24:1d:72:b7:17:29:eb:95:75:c0:00:d9:1b:9e:1e:56:53:06: b0:fb:0f:6c:d1:33:3d:fd:ed:1f:c7:a1:5e:0e:ff:65:d7:b0: 0d:7f:74:2e:e6:26:c6:0a:c7:7b:53:dc:c2:42:61:07:19:a1: 88:9d:24:42:04:59:a8:bd:da:c5:00:b8:e2:6b:e0:24:14:5d: 11:5b:42:0b:8c:6a:2e:2f:d3:dc:6f:ba:78:fa:53:91:76:8f: 73:bd:82:35:cb:30:22:1f:f5:51:33:2d:78:77:4d:a8:b0:2c: 0a:4d:70:ff:bd:b3:19:86:fe:ec:95:8b:97:93:e7:ba:14:23: f1:db:e5:a9:6e:e4:dc:c9:48:f0:9a:69:c2:c1:65:34:16:eb: c2:74:0e:d9:7e:66:dd:c2:5a:5f:c8:4c:2a:0b:c5:54:db:ac: 68:4b:01:83:e8:c5:4f:ee:6c:3b:db:43:5d:79:88:33:14:ab: 01:cb:a1:30:ed:49:e3:76:69:fe:5d:7b:11:5a:a7:49:5b:b1: 76:20:84:46:bc:47:47:d4:62:3d:7e:5b:3f:9f:f3:b3:3a:a2: 76:40:16:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOvpYUUC8SN13Y8dP1xKmt1taQp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTNENUY3MzNCMTI5MjI3REVERjI1QUMxMjE4RDcwQ0VC OTM2NjY0NTAeFw0yNjA5MjAwODMyNDZaFw0yNjA5MjExMTQyNDZaMDMxMTAvBgNV BAMTKDU3NjA5NDQ5NkU0QzQ5NTM5OUY1NjcxQzU5NTQ3MDFEOEQ5N0VGQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkK19C304UphYdSZF8uXumGg7o 19XFU+6H+pcR5zx5JJqTurb9qlTaargNggZNMNsw8YCHN1dMCHBDs4/0kBEk7zNV Eh8z1oxh3DBNCQEfj1CxMWWpGpvGatpXGpRtmcbYIPQ62g5I8B0+TuR3jfSRV0g9 2nVdq19MsQGkRXc890m+QsHPgcCfT+nAHvVwQ6NQU+DkbHnoVYswVo6s3BpM4sIQ Ca+hCrKJXna9TXqK/5oLS2ausWgOSit97nF90ZOHbLTxL6m2heiMC32CIGJi5XXF o6TG/WNhmLX6RI9vVoe019xaEJFfI9KP6KYrb0BPQsTsE7fkRJzTKAleJ1P9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV2CUSW5MSVOZ9WccWVRwHY2X768wHwYDVR0j BBgwFoAUk9X3M7EpIn3t8lrBIY1wzrk2ZkUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA1NDA5ZWQtOWY0MC00ZjVhLWI1ZWUtYTA4OGRhMmY1OTc4LzAvOTNENUY3MzNC MTI5MjI3REVERjI1QUMxMjE4RDcwQ0VCOTM2NjY0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85M0Q1RjczM0IxMjkyMjdERURGMjVBQzEyMThENzBDRUI5MzY2 NjQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA1NDA5ZWQtOWY0MC00ZjVhLWI1 ZWUtYTA4OGRhMmY1OTc4LzAvOTNENUY3MzNCMTI5MjI3REVERjI1QUMxMjE4RDcw Q0VCOTM2NjY0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIaw2AkTWiFU93PVcjtXMLhuB0ubaAzlB2ta OkRlTgQd4iuS8CQdcrcXKeuVdcAA2RueHlZTBrD7D2zRMz397R/HoV4O/2XXsA1/ dC7mJsYKx3tT3MJCYQcZoYidJEIEWai92sUAuOJr4CQUXRFbQguMai4v09xvunj6 U5F2j3O9gjXLMCIf9VEzLXh3TaiwLApNcP+9sxmG/uyVi5eT57oUI/Hb5alu5NzJ SPCaacLBZTQW68J0Dtl+Zt3CWl/ITCoLxVTbrGhLAYPoxU/ubDvbQ115iDMUqwHL oTDtSeN2af5dexFap0lbsXYghEa8R0fUYj1+Wz+f87M6onZAFm4= -----END CERTIFICATE-----Generated at Sun Sep 20 21:27:47 2026 by rpki-client