$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft File: 00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft (raw, json) Hash identifier: cU4m6se/UCK6Y7h456V6/fGvS+P3rihqx4pmv9I7ATw= Subject key identifier: D4:4B:D3:DD:68:34:3E:74:30:B6:D3:02:52:97:B6:9B:C0:0C:A9:A4 Authority key identifier: 00:84:1D:BD:E5:F6:CE:BF:8C:94:FD:EE:22:77:71:94:6E:21:52:CF Certificate issuer: /CN=00841DBDE5F6CEBF8C94FDEE227771946E2152CF Certificate serial: 6D25B3A7C6180A035E4B780A1A425F3A07444A14 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft Manifest number: C1 Signing time: Tue 22 Sep 2026 00:47:30 +0000 Manifest this update: Tue 22 Sep 2026 00:42:30 +0000 Manifest next update: Wed 23 Sep 2026 01:07:30 +0000 Files and hashes: 1: 00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl (hash: fgpbWBOePicbO1G1ZmIMALN2qu/S4KQ8aN0RsyNFK60=) 2: 3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa (hash: RevoOpF5++1wWoPWwmQB4PPK000UixnKZHWg4wTOKek=) 3: 323430343a643563303a3a2f33322d3438203d3e20313338383534.roa (hash: Rh9qnUB02qhjNfXj2g1O5tEu9u7bYMmnyx0Vs0JNy30=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 01:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:25:b3:a7:c6:18:0a:03:5e:4b:78:0a:1a:42:5f:3a:07:44:4a:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00841DBDE5F6CEBF8C94FDEE227771946E2152CF Validity Not Before: Sep 22 00:42:30 2026 GMT Not After : Sep 23 01:07:30 2026 GMT Subject: CN=D44BD3DD68343E7430B6D3025297B69BC00CA9A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:13:31:44:ea:c9:47:ff:f6:bb:a4:5d:c9:0e: 67:a2:c9:d4:a7:ae:6b:54:37:e8:24:d8:c4:b8:a0: 4e:91:2a:48:58:4d:0c:0d:d2:1d:28:c8:74:7b:7d: 1b:a9:91:61:cf:d9:0f:b4:27:76:16:ee:ec:3a:23: 62:a6:07:4d:5f:e4:dc:29:95:8a:c6:5c:6f:f1:89: b6:8c:93:e7:37:12:6b:99:1d:ab:52:7c:18:19:50: fe:e8:41:e5:ab:e2:e9:26:80:17:a0:8a:1f:15:3a: 4a:82:5d:e7:0a:a6:91:bf:80:f1:a9:9e:33:3b:38: c9:f0:ca:83:32:df:34:ea:fa:13:57:9c:c0:d9:08: 50:a9:20:e3:a6:af:12:aa:a5:6c:c4:9e:50:7f:eb: c3:dc:05:e8:21:a6:df:71:fb:ed:0f:71:37:f0:9f: da:4a:3d:81:7c:6d:17:f9:77:63:37:73:2c:e0:93: 4f:d7:3b:78:11:1c:dc:f8:e5:92:a0:b8:44:f2:7d: c4:c4:66:58:5d:c2:62:23:ab:9c:5d:a4:98:8f:4c: 63:ca:f0:f7:f3:7e:46:f4:7e:15:5f:4e:03:8a:f3: d3:c4:62:f2:1c:f3:d8:30:06:46:08:a4:1b:ea:ef: b1:53:9a:e7:c1:9b:fa:d7:1e:d7:3d:54:fc:0b:b1: ba:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4B:D3:DD:68:34:3E:74:30:B6:D3:02:52:97:B6:9B:C0:0C:A9:A4 X509v3 Authority Key Identifier: keyid:00:84:1D:BD:E5:F6:CE:BF:8C:94:FD:EE:22:77:71:94:6E:21:52:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:92:01:30:b0:30:2f:61:ca:84:53:bc:16:16:41:44:55:34: 44:bd:ef:05:43:28:35:f0:a3:e8:bf:b0:7b:a3:03:ba:0a:ba: 82:e6:b3:41:7a:7e:26:6e:03:b8:53:38:a7:3e:60:1d:c1:ca: d9:ad:c9:34:37:85:98:c6:7b:65:29:2c:f9:a0:71:35:26:f9: c5:98:ef:ae:e4:71:a6:ca:ba:4c:04:6c:07:ea:02:39:8e:9a: 9d:35:97:b4:b8:bb:c9:78:39:19:47:91:d4:16:71:2a:60:5d: 70:f5:cb:b5:b8:fa:c5:a1:d3:e5:ea:ea:3e:8f:e2:58:44:ab: a2:b6:e4:56:36:3f:fc:46:5a:af:d6:c6:45:bc:18:8c:81:2e: f8:f4:8d:ed:1d:e7:84:9b:5f:73:0d:37:ab:80:27:87:c8:c7: ae:ae:3f:25:71:77:49:0f:55:ce:2c:bb:95:cb:4d:1d:f2:63: e7:f3:b5:28:b4:40:01:1f:7f:af:87:5b:f7:03:09:35:74:b4: 68:15:23:33:14:1b:92:d5:6b:55:a5:e5:c4:a5:08:40:e0:f3: 6c:4a:a0:20:73:dc:66:a0:dc:f8:f5:75:72:21:16:9c:24:e0: 20:29:22:cd:15:94:18:34:d2:67:f3:16:2e:f9:41:13:4b:f0: c5:4b:37:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbSWzp8YYCgNeS3gKGkJfOgdEShQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDA4NDFEQkRFNUY2Q0VCRjhDOTRGREVFMjI3NzcxOTQ2 RTIxNTJDRjAeFw0yNjA5MjIwMDQyMzBaFw0yNjA5MjMwMTA3MzBaMDMxMTAvBgNV BAMTKEQ0NEJEM0RENjgzNDNFNzQzMEI2RDMwMjUyOTdCNjlCQzAwQ0E5QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmEzFE6slH//a7pF3JDmeiydSn rmtUN+gk2MS4oE6RKkhYTQwN0h0oyHR7fRupkWHP2Q+0J3YW7uw6I2KmB01f5Nwp lYrGXG/xibaMk+c3EmuZHatSfBgZUP7oQeWr4ukmgBegih8VOkqCXecKppG/gPGp njM7OMnwyoMy3zTq+hNXnMDZCFCpIOOmrxKqpWzEnlB/68PcBeghpt9x++0PcTfw n9pKPYF8bRf5d2M3cyzgk0/XO3gRHNz45ZKguETyfcTEZlhdwmIjq5xdpJiPTGPK 8Pfzfkb0fhVfTgOK89PEYvIc89gwBkYIpBvq77FTmufBm/rXHtc9VPwLsbrnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1EvT3Wg0PnQwttMCUpe2m8AMqaQwHwYDVR0j BBgwFoAUAIQdveX2zr+MlP3uIndxlG4hUs8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDI1MDIyMDUtNWM1NC00N2RiLWFlNmYtOWQ0OGUxODMyNDFjLzAvMDA4NDFEQkRF NUY2Q0VCRjhDOTRGREVFMjI3NzcxOTQ2RTIxNTJDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDg0MURCREU1RjZDRUJGOEM5NEZERUUyMjc3NzE5NDZFMjE1 MkNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDI1MDIyMDUtNWM1NC00N2RiLWFl NmYtOWQ0OGUxODMyNDFjLzAvMDA4NDFEQkRFNUY2Q0VCRjhDOTRGREVFMjI3Nzcx OTQ2RTIxNTJDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKOSATCwMC9hyoRTvBYWQURVNES97wVDKDXw o+i/sHujA7oKuoLms0F6fiZuA7hTOKc+YB3BytmtyTQ3hZjGe2UpLPmgcTUm+cWY 767kcabKukwEbAfqAjmOmp01l7S4u8l4ORlHkdQWcSpgXXD1y7W4+sWh0+Xq6j6P 4lhEq6K25FY2P/xGWq/WxkW8GIyBLvj0je0d54SbX3MNN6uAJ4fIx66uPyVxd0kP Vc4su5XLTR3yY+fztSi0QAEff6+HW/cDCTV0tGgVIzMUG5LVa1Wl5cSlCEDg82xK oCBz3Gag3Pj1dXIhFpwk4CApIs0VlBg00mfzFi75QRNL8MVLN3w= -----END CERTIFICATE-----Generated at Tue Sep 22 09:22:13 2026 by rpki-client