$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft File: D626CC25972BF9948C6B3BDE4E354C71F2570880.mft (raw, json) Hash identifier: mbw0B/o6MRoewliEeO98YT03NekL0koed15nFUj5GcU= Subject key identifier: 66:DD:2F:64:D0:F9:3B:4A:A2:1E:E4:B1:FB:C4:08:48:B4:9A:92:A3 Authority key identifier: D6:26:CC:25:97:2B:F9:94:8C:6B:3B:DE:4E:35:4C:71:F2:57:08:80 Certificate issuer: /CN=D626CC25972BF9948C6B3BDE4E354C71F2570880 Certificate serial: 4AC71326EAC7A3F982E5AC882BC0FBE0AB86F5B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft Manifest number: BE Signing time: Mon 21 Sep 2026 13:38:24 +0000 Manifest this update: Mon 21 Sep 2026 13:33:24 +0000 Manifest next update: Tue 22 Sep 2026 17:13:24 +0000 Files and hashes: 1: D626CC25972BF9948C6B3BDE4E354C71F2570880.crl (hash: pAYPT6yffVrghS3WdqcEOYj2CWj0lqujplcEzi4sCqI=) 2: 323430323a316134303a3a2f33322d3332203d3e20313336383639.roa (hash: nb8z2N9rnH96t5B0H624NhPlR7I0KYPMhvCR0O/fhs4=) 3: 3130332e3130342e3230342e302f32342d3234203d3e20313336383639.roa (hash: 0aDHxXMr4KUimzxt4JkDC404Ezku76mxRU40fEJqQUU=) 4: 3130332e3130342e3230362e302f32342d3234203d3e20313336383639.roa (hash: yo9Rg0RIu4bi5AvFSf1HgeoEO2ptRcGKCjbNNgnoU1A=) 5: 3130332e3130342e3230372e302f32342d3234203d3e20313336383639.roa (hash: jRI7u+pgcEtmrDDRmjulrcR4SRRZM/aGtsQfGUXuJ24=) 6: 3130332e3130342e3230352e302f32342d3234203d3e20313336383639.roa (hash: +bc1aSBLcX6ZQm4jECmlMCivSavxhqXkBTLrz820pWg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.crl rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 17:13:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:c7:13:26:ea:c7:a3:f9:82:e5:ac:88:2b:c0:fb:e0:ab:86:f5:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D626CC25972BF9948C6B3BDE4E354C71F2570880 Validity Not Before: Sep 21 13:33:24 2026 GMT Not After : Sep 22 17:13:24 2026 GMT Subject: CN=66DD2F64D0F93B4AA21EE4B1FBC40848B49A92A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:07:0f:d9:94:c3:e4:71:70:75:1a:ef:c4:c0: b8:91:d5:b3:38:2e:28:95:51:9a:b2:75:7d:22:aa: f7:ed:92:c8:f4:58:8e:b2:79:12:6c:24:66:1f:e1: 25:be:b1:23:f1:88:ff:b9:80:fb:02:e9:f3:ec:47: af:44:33:f2:b1:d4:ff:30:e3:5a:6e:57:50:44:ac: 56:60:ed:63:b8:ed:a0:7c:3a:43:b3:bf:89:f9:86: da:23:1c:67:c2:dd:d7:6b:ce:d2:1a:b4:13:4e:74: 87:19:b9:28:88:3d:c1:ac:31:fd:9c:23:90:ef:4b: 6c:08:aa:03:8c:85:77:72:1b:51:e6:01:62:4f:e5: 96:dc:b7:45:f3:ad:d4:29:59:fa:43:2c:1e:a3:bb: a2:08:3e:a9:34:9d:8c:cf:c2:aa:f2:33:23:1a:9b: 0f:db:81:1d:30:51:db:8c:1c:e0:27:4d:80:b3:9d: 01:84:b4:5e:d6:fb:19:a6:a4:c5:1b:72:8b:27:ba: cf:0a:44:43:4d:0f:49:6b:f2:45:a8:9c:69:d5:13: bd:e9:f6:05:58:ba:1a:4c:32:ef:a6:95:13:30:ca: bb:eb:ca:48:27:c7:6a:a8:84:8c:15:13:26:88:41: f5:ae:b6:c0:56:5e:eb:fb:79:99:89:58:2d:e3:05: a7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:DD:2F:64:D0:F9:3B:4A:A2:1E:E4:B1:FB:C4:08:48:B4:9A:92:A3 X509v3 Authority Key Identifier: keyid:D6:26:CC:25:97:2B:F9:94:8C:6B:3B:DE:4E:35:4C:71:F2:57:08:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:12:07:e9:bf:7e:96:7a:0f:a9:95:e4:c9:f5:e7:93:6a:b4: ae:5b:e8:9c:03:81:22:60:5f:fb:7f:3f:e3:52:c4:43:e5:5e: 37:e3:bb:05:96:30:8d:c0:c2:d3:cb:53:58:15:7e:d7:82:0f: 5e:a1:91:75:6e:e2:0e:a3:ed:5c:fb:00:1e:85:60:1e:d1:3e: 95:6f:99:85:e2:79:76:69:44:fa:82:d2:e4:8e:a3:f2:08:3b: ec:27:d4:08:80:76:e6:21:2c:cc:d5:df:a6:61:35:3a:74:15: 2b:8d:74:14:34:25:19:aa:eb:ac:08:f0:c1:11:0b:bd:3b:fa: 0b:a9:80:fc:5d:51:d6:ab:c2:cf:61:5e:a4:f2:b0:ba:ba:1e: 82:9d:e4:0c:7e:85:f2:9d:c8:d0:ae:b6:9b:44:23:8d:2e:ba: 9d:69:02:a2:d3:a2:9f:83:1a:38:d9:e8:7d:8f:d5:7f:e3:e4: 3d:6c:de:ed:0d:b8:39:25:3d:2c:46:36:73:15:7b:da:86:ee: 09:47:91:c7:f8:f3:4f:af:0d:30:d9:8a:9e:c1:6c:bf:7c:41: 38:07:e8:f8:51:c9:8a:9a:fd:0d:71:a2:cf:75:cb:1f:43:46: f8:fb:fc:c7:f2:d3:bd:c2:c9:2a:de:af:2f:a3:6a:d7:c0:dd: 70:9d:0d:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSscTJurHo/mC5ayIK8D74KuG9bQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYyNkNDMjU5NzJCRjk5NDhDNkIzQkRFNEUzNTRDNzFG MjU3MDg4MDAeFw0yNjA5MjExMzMzMjRaFw0yNjA5MjIxNzEzMjRaMDMxMTAvBgNV BAMTKDY2REQyRjY0RDBGOTNCNEFBMjFFRTRCMUZCQzQwODQ4QjQ5QTkyQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJBw/ZlMPkcXB1Gu/EwLiR1bM4 LiiVUZqydX0iqvftksj0WI6yeRJsJGYf4SW+sSPxiP+5gPsC6fPsR69EM/Kx1P8w 41puV1BErFZg7WO47aB8OkOzv4n5htojHGfC3ddrztIatBNOdIcZuSiIPcGsMf2c I5DvS2wIqgOMhXdyG1HmAWJP5Zbct0XzrdQpWfpDLB6ju6IIPqk0nYzPwqryMyMa mw/bgR0wUduMHOAnTYCznQGEtF7W+xmmpMUbcosnus8KRENND0lr8kWonGnVE73p 9gVYuhpMMu+mlRMwyrvrykgnx2qohIwVEyaIQfWutsBWXuv7eZmJWC3jBacTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZt0vZND5O0qiHuSx+8QISLSakqMwHwYDVR0j BBgwFoAU1ibMJZcr+ZSMazveTjVMcfJXCIAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDIzMWU2YjEtMTg0MS00NzZkLWI0NmItYjQ0YjljYjk2OGIwLzAvRDYyNkNDMjU5 NzJCRjk5NDhDNkIzQkRFNEUzNTRDNzFGMjU3MDg4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjI2Q0MyNTk3MkJGOTk0OEM2QjNCREU0RTM1NEM3MUYyNTcw ODgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDIzMWU2YjEtMTg0MS00NzZkLWI0 NmItYjQ0YjljYjk2OGIwLzAvRDYyNkNDMjU5NzJCRjk5NDhDNkIzQkRFNEUzNTRD NzFGMjU3MDg4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkSB+m/fpZ6D6mV5Mn155NqtK5b6JwDgSJg X/t/P+NSxEPlXjfjuwWWMI3AwtPLU1gVfteCD16hkXVu4g6j7Vz7AB6FYB7RPpVv mYXieXZpRPqC0uSOo/IIO+wn1AiAduYhLMzV36ZhNTp0FSuNdBQ0JRmq66wI8MER C707+gupgPxdUdarws9hXqTysLq6HoKd5Ax+hfKdyNCutptEI40uup1pAqLTop+D GjjZ6H2P1X/j5D1s3u0NuDklPSxGNnMVe9qG7glHkcf480+vDTDZip7BbL98QTgH 6PhRyYqa/Q1xos91yx9DRvj7/Mfy073CySrery+jatfA3XCdDVk= -----END CERTIFICATE-----Generated at Mon Sep 21 23:49:29 2026 by rpki-client