$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft File: D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft (raw, json) Hash identifier: LotdvitVnjcYu9p6hfkdOWj0+q9eJCzXdMYIaWey/iQ= Subject key identifier: 30:95:51:C3:49:33:56:C2:21:9B:2D:A3:69:21:AB:D5:87:FD:2F:73 Authority key identifier: D8:CB:7F:8B:56:66:E0:7E:57:CB:EF:C0:23:C6:F6:03:46:F2:9D:7F Certificate issuer: /CN=D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F Certificate serial: 64B8D2BD9EB4D770017D572E648F4CBF37F3F812 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 19:24:53 +0000 Manifest this update: Wed 23 Sep 2026 19:19:53 +0000 Manifest next update: Thu 24 Sep 2026 21:44:53 +0000 Files and hashes: 1: D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl (hash: qo07+IfUtMpB5bFR+zcQJf69diaVZUbBW/vdR8LzseQ=) 2: 3130332e3130372e3137362e302f32332d3233203d3e20313530393434.roa (hash: BSuw1whkNZvJE4R4/j402PtZbyO7u4uvse4a8U9c4JA=) 3: 3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa (hash: 4zjQiDOO1u6032UYBIQ3bbHO8yvV/zbc51HnTLw1PKM=) 4: 3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa (hash: aqo6iqJhHng8SceS0GB2zDkvhHekA+jqXPQYRYjWZBA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:b8:d2:bd:9e:b4:d7:70:01:7d:57:2e:64:8f:4c:bf:37:f3:f8:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F Validity Not Before: Sep 23 19:19:53 2026 GMT Not After : Sep 24 21:44:53 2026 GMT Subject: CN=309551C3493356C2219B2DA36921ABD587FD2F73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d8:46:ce:34:99:40:10:4a:43:47:fa:4b:6b: f9:ed:de:20:e4:9d:08:83:0d:3d:69:9a:22:e7:1e: 0b:48:c6:33:2e:a5:86:f9:a8:8c:0c:cb:da:98:f5: 23:1c:e5:23:8d:01:ff:fc:49:47:e4:31:d6:30:31: 2f:14:e9:9b:d4:37:54:6e:50:8a:d5:cf:40:7d:df: 78:b3:f3:21:cb:af:ec:80:28:16:9e:16:7a:88:6d: 44:bf:d0:c8:97:d9:06:09:d6:2c:69:be:c4:9b:54: a0:22:77:32:94:80:8b:72:df:ae:f4:5f:b2:26:7e: 9f:9e:32:69:d6:11:0b:7d:4b:f1:2a:87:e1:4a:9c: eb:19:a1:2f:2e:88:cf:82:bb:4f:62:e0:59:46:f3: 07:96:93:5a:eb:bc:d6:7a:41:99:a0:93:a7:4f:b8: 3d:dd:3a:c9:f7:44:55:fe:3e:60:8d:b8:a1:0a:55: 55:52:97:1f:0f:a5:8d:8d:7a:aa:8c:63:06:0c:da: 69:cf:65:72:c8:5d:f7:32:ca:20:a0:2e:4c:83:47: 9d:61:40:15:a8:eb:25:d9:a9:cc:d6:23:9c:44:39: cb:02:a4:f4:8a:61:fe:f1:d0:4f:b7:18:a9:67:97: 3f:7e:6e:cd:ea:17:4e:09:f4:32:c7:9b:f3:4e:77: 1e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:95:51:C3:49:33:56:C2:21:9B:2D:A3:69:21:AB:D5:87:FD:2F:73 X509v3 Authority Key Identifier: keyid:D8:CB:7F:8B:56:66:E0:7E:57:CB:EF:C0:23:C6:F6:03:46:F2:9D:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:14:ab:0a:14:a1:da:ae:ad:a8:7a:66:f2:3a:0d:81:eb:ba: 98:20:d6:58:67:1a:56:cf:4b:81:ab:bf:cb:2b:88:68:88:51: 69:4f:09:70:ee:ec:58:ff:7d:6d:2a:70:12:12:58:ef:72:9e: 80:4d:d2:66:1e:a7:51:7a:63:18:b0:98:66:f6:8e:c0:56:1f: 69:a4:1f:10:96:c0:15:f7:56:53:e6:e4:b2:ee:c6:5b:29:92: fa:f6:df:fd:07:59:dd:6e:2a:9f:6c:61:19:9f:a4:af:3e:dd: 9e:cb:bb:95:22:0a:45:1c:1f:79:a7:84:6b:21:93:95:be:89: c8:cf:bb:7d:44:67:28:fa:a0:06:b4:fd:6b:13:72:54:50:ef: ba:d7:43:b3:43:55:da:97:7f:f6:0f:e5:67:9b:24:b4:7e:84: c2:e5:cd:25:11:07:dc:cc:2b:d3:95:41:47:e2:b0:a0:19:8d: 8a:ed:85:4b:03:94:fa:fd:12:1a:55:c1:3f:33:4d:4d:93:16: 51:af:da:e5:06:45:dd:d2:e3:37:f1:9c:a4:d4:ea:de:73:a6: 87:f9:08:b2:bd:d0:4d:9c:7a:98:ea:34:8f:bc:9c:23:1b:f5: 6d:63:c5:bf:d6:9a:da:fe:61:3e:4b:b6:38:5c:b7:72:0f:1a: 04:c5:d3:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZLjSvZ6013ABfVcuZI9Mvzfz+BIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhDQjdGOEI1NjY2RTA3RTU3Q0JFRkMwMjNDNkY2MDM0 NkYyOUQ3RjAeFw0yNjA5MjMxOTE5NTNaFw0yNjA5MjQyMTQ0NTNaMDMxMTAvBgNV BAMTKDMwOTU1MUMzNDkzMzU2QzIyMTlCMkRBMzY5MjFBQkQ1ODdGRDJGNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW2EbONJlAEEpDR/pLa/nt3iDk nQiDDT1pmiLnHgtIxjMupYb5qIwMy9qY9SMc5SONAf/8SUfkMdYwMS8U6ZvUN1Ru UIrVz0B933iz8yHLr+yAKBaeFnqIbUS/0MiX2QYJ1ixpvsSbVKAidzKUgIty3670 X7Imfp+eMmnWEQt9S/Eqh+FKnOsZoS8uiM+Cu09i4FlG8weWk1rrvNZ6QZmgk6dP uD3dOsn3RFX+PmCNuKEKVVVSlx8PpY2NeqqMYwYM2mnPZXLIXfcyyiCgLkyDR51h QBWo6yXZqczWI5xEOcsCpPSKYf7x0E+3GKlnlz9+bs3qF04J9DLHm/NOdx5LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMJVRw0kzVsIhmy2jaSGr1Yf9L3MwHwYDVR0j BBgwFoAU2Mt/i1Zm4H5Xy+/AI8b2A0bynX8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM2YWIwNGQtNjhjNy00MjQ5LWIxMDktNDZiMjhjZjgwM2YzLzAvRDhDQjdGOEI1 NjY2RTA3RTU3Q0JFRkMwMjNDNkY2MDM0NkYyOUQ3Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOENCN0Y4QjU2NjZFMDdFNTdDQkVGQzAyM0M2RjYwMzQ2RjI5 RDdGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM2YWIwNGQtNjhjNy00MjQ5LWIx MDktNDZiMjhjZjgwM2YzLzAvRDhDQjdGOEI1NjY2RTA3RTU3Q0JFRkMwMjNDNkY2 MDM0NkYyOUQ3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4UqwoUodqurah6ZvI6DYHrupgg1lhnGlbP S4Grv8sriGiIUWlPCXDu7Fj/fW0qcBISWO9ynoBN0mYep1F6YxiwmGb2jsBWH2mk HxCWwBX3VlPm5LLuxlspkvr23/0HWd1uKp9sYRmfpK8+3Z7Lu5UiCkUcH3mnhGsh k5W+icjPu31EZyj6oAa0/WsTclRQ77rXQ7NDVdqXf/YP5WebJLR+hMLlzSURB9zM K9OVQUfisKAZjYrthUsDlPr9EhpVwT8zTU2TFlGv2uUGRd3S4zfxnKTU6t5zpof5 CLK90E2cepjqNI+8nCMb9W1jxb/Wmtr+YT5Ltjhct3IPGgTF01o= -----END CERTIFICATE-----Generated at Thu Sep 24 02:06:59 2026 by rpki-client