$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft File: D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft (raw, json) Hash identifier: KNUTZhiMjNJeClRDiPvrUaOmrZ739J4PPM2Fd2TcEcE= Subject key identifier: 49:E0:50:34:18:B7:DC:94:BF:42:53:BA:99:CB:37:CC:9A:34:73:F2 Authority key identifier: D5:51:D5:8F:28:76:BB:DA:9C:36:67:8E:FF:8D:27:1A:14:EA:D8:A3 Certificate issuer: /CN=D551D58F2876BBDA9C36678EFF8D271A14EAD8A3 Certificate serial: 37D12601F1992086B64C92509ED68BDB58B2D56F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft Manifest number: BC Signing time: Mon 21 Sep 2026 12:36:57 +0000 Manifest this update: Mon 21 Sep 2026 12:31:57 +0000 Manifest next update: Tue 22 Sep 2026 14:10:57 +0000 Files and hashes: 1: 3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa (hash: yiKtjyaJg+/4RrQVJVpsjcN53nYqA/23WnoDn5hFEmM=) 2: D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.crl (hash: 4xR3JLqrHGqhKN1qGFXNHOd0ATGmw4lsospUbrmnjAw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.crl rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:d1:26:01:f1:99:20:86:b6:4c:92:50:9e:d6:8b:db:58:b2:d5:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D551D58F2876BBDA9C36678EFF8D271A14EAD8A3 Validity Not Before: Sep 21 12:31:57 2026 GMT Not After : Sep 22 14:10:57 2026 GMT Subject: CN=49E0503418B7DC94BF4253BA99CB37CC9A3473F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cb:50:3c:27:ed:ae:e1:e4:1d:5a:4e:c7:90: f8:f6:6a:cf:8a:99:16:7a:5d:52:ed:f1:a4:7f:8f: ca:26:b6:66:00:2a:d2:85:69:b4:34:29:5f:12:86: 84:e2:1b:78:07:e7:1b:46:e3:e7:ac:ca:e3:e6:5f: 44:49:84:c0:92:ad:67:4a:d2:66:57:cd:49:7f:1a: d9:5e:d1:27:6e:4e:96:f5:e8:ca:fa:39:51:78:51: b8:1b:fb:98:53:b6:0c:9b:be:bf:a8:36:7f:9c:6d: 56:8d:19:32:2f:57:21:32:ea:11:09:9e:f7:cc:a6: 01:c0:9e:0c:81:73:2c:2b:45:a3:30:71:c4:0e:05: 06:18:c3:32:6f:53:4f:d1:be:d9:73:49:ee:4d:3b: 47:64:f5:af:bb:04:ce:3d:42:28:a1:f2:93:67:3b: 2e:73:b0:e4:df:4c:de:de:ab:e4:73:4b:e9:4c:87: 08:f8:f3:96:22:7e:23:de:69:9c:05:b5:85:84:56: b6:1c:9e:ec:83:2e:9a:f7:3d:1d:35:48:f2:0b:be: 6f:7d:db:2d:78:c6:8d:bd:8d:67:a2:0b:73:92:f6: 5f:85:bf:81:ca:ca:73:48:d9:c4:58:7a:44:75:7f: 81:35:40:36:24:72:0f:90:ef:0c:6e:7f:bc:fd:94: 4d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E0:50:34:18:B7:DC:94:BF:42:53:BA:99:CB:37:CC:9A:34:73:F2 X509v3 Authority Key Identifier: keyid:D5:51:D5:8F:28:76:BB:DA:9C:36:67:8E:FF:8D:27:1A:14:EA:D8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:26:2e:4c:25:21:2c:07:d3:b3:da:f3:7b:d5:55:1d:72:6c: 50:cc:d8:3a:9b:ab:1e:b3:3b:e4:f7:25:da:53:a1:a3:dc:30: 68:73:c5:42:b1:67:4f:89:ad:5c:8d:d0:d7:76:45:a0:fc:b8: 24:93:ff:f1:10:d7:6b:dd:c4:61:36:c5:81:e3:ac:6d:28:ba: cb:09:e7:3f:bc:d2:b2:d6:f2:6c:bc:30:e9:65:18:90:3b:2d: f6:29:5f:01:d5:9b:17:a2:33:a6:3b:64:c7:3b:47:c3:71:ee: 3f:35:d1:96:88:a0:70:dd:57:00:64:7b:75:65:73:ee:3e:9e: d8:20:cd:40:2e:b6:73:03:4e:fa:3f:84:c7:ae:7e:1f:10:ea: 7e:31:f7:48:85:98:1a:ae:ef:37:90:09:81:0b:ec:3e:0f:47: 43:2f:fc:50:f3:e3:2f:4e:73:c3:60:0c:d1:38:10:58:06:d5: 77:19:06:5d:d9:44:b6:98:04:be:a2:79:c4:c8:8b:ac:a1:1a: c6:7c:ac:cc:03:db:86:cf:87:c7:42:3c:55:3e:7a:c8:00:81: 7d:20:41:b6:66:bd:be:0b:cc:ab:80:10:9e:4e:aa:b0:5d:44: cb:1b:c0:34:66:57:23:f3:a3:b1:17:6d:1e:7d:b8:b0:05:22: 07:cd:86:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN9EmAfGZIIa2TJJQntaL21iy1W8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1MUQ1OEYyODc2QkJEQTlDMzY2NzhFRkY4RDI3MUEx NEVBRDhBMzAeFw0yNjA5MjExMjMxNTdaFw0yNjA5MjIxNDEwNTdaMDMxMTAvBgNV BAMTKDQ5RTA1MDM0MThCN0RDOTRCRjQyNTNCQTk5Q0IzN0NDOUEzNDczRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFy1A8J+2u4eQdWk7HkPj2as+K mRZ6XVLt8aR/j8omtmYAKtKFabQ0KV8ShoTiG3gH5xtG4+esyuPmX0RJhMCSrWdK 0mZXzUl/Gtle0SduTpb16Mr6OVF4Ubgb+5hTtgybvr+oNn+cbVaNGTIvVyEy6hEJ nvfMpgHAngyBcywrRaMwccQOBQYYwzJvU0/RvtlzSe5NO0dk9a+7BM49Qiih8pNn Oy5zsOTfTN7eq+RzS+lMhwj485YifiPeaZwFtYWEVrYcnuyDLpr3PR01SPILvm99 2y14xo29jWeiC3OS9l+Fv4HKynNI2cRYekR1f4E1QDYkcg+Q7wxuf7z9lE2pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSeBQNBi33JS/QlO6mcs3zJo0c/IwHwYDVR0j BBgwFoAU1VHVjyh2u9qcNmeO/40nGhTq2KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDQwYmQ2ZTQtYjRmYi00ZjQ4LWI4M2EtYWNiOGYyZDc0NTgzLzAvRDU1MUQ1OEYy ODc2QkJEQTlDMzY2NzhFRkY4RDI3MUExNEVBRDhBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENTUxRDU4RjI4NzZCQkRBOUMzNjY3OEVGRjhEMjcxQTE0RUFE OEEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDQwYmQ2ZTQtYjRmYi00ZjQ4LWI4 M2EtYWNiOGYyZDc0NTgzLzAvRDU1MUQ1OEYyODc2QkJEQTlDMzY2NzhFRkY4RDI3 MUExNEVBRDhBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMAmLkwlISwH07Pa83vVVR1ybFDM2Dqbqx6z O+T3JdpToaPcMGhzxUKxZ0+JrVyN0Nd2RaD8uCST//EQ12vdxGE2xYHjrG0oussJ 5z+80rLW8my8MOllGJA7LfYpXwHVmxeiM6Y7ZMc7R8Nx7j810ZaIoHDdVwBke3Vl c+4+ntggzUAutnMDTvo/hMeufh8Q6n4x90iFmBqu7zeQCYEL7D4PR0Mv/FDz4y9O c8NgDNE4EFgG1XcZBl3ZRLaYBL6iecTIi6yhGsZ8rMwD24bPh8dCPFU+esgAgX0g QbZmvb4LzKuAEJ5OqrBdRMsbwDRmVyPzo7EXbR59uLAFIgfNhmM= -----END CERTIFICATE-----Generated at Mon Sep 21 19:47:42 2026 by rpki-client