$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft File: D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft (raw, json) Hash identifier: YR45raI41ql3dvRPpYwOlYj+MuchNjl3a/3t+1cNNCA= Subject key identifier: D4:E5:75:F6:0A:94:BF:E4:67:59:CA:4C:AB:E8:C5:59:7A:7E:84:B1 Authority key identifier: D7:10:E4:74:38:E0:99:E6:B0:ED:24:56:74:ED:22:33:E1:D2:B2:C0 Certificate issuer: /CN=D710E47438E099E6B0ED245674ED2233E1D2B2C0 Certificate serial: 6F021C60CA9244DBD9579D06908102FB0DCC1251 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft Manifest number: BE Signing time: Mon 21 Sep 2026 08:57:30 +0000 Manifest this update: Mon 21 Sep 2026 08:52:30 +0000 Manifest next update: Tue 22 Sep 2026 09:57:30 +0000 Files and hashes: 1: 3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa (hash: Mz/HLsc5z0NW9is9cK/jPV/c2edacNGieAld99v6XRg=) 2: 3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa (hash: nih8Qs0LKBkZCWGMFeuGnh3q/46VGBkvPVPuLWWc1eE=) 3: D710E47438E099E6B0ED245674ED2233E1D2B2C0.crl (hash: FZ0KZf8IB6+o5+9hOdbEj7C45Yd+lXVZ2ru/cY8MlpM=) 4: 3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa (hash: tYzh/ONrnE/vB4p4w+wsr7jUrg+O1DSqJcNbYqdE1O4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.crl rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:02:1c:60:ca:92:44:db:d9:57:9d:06:90:81:02:fb:0d:cc:12:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D710E47438E099E6B0ED245674ED2233E1D2B2C0 Validity Not Before: Sep 21 08:52:30 2026 GMT Not After : Sep 22 09:57:30 2026 GMT Subject: CN=D4E575F60A94BFE46759CA4CABE8C5597A7E84B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5f:fd:72:72:05:3a:ff:01:4c:c3:b9:26:bd: bf:ff:37:1f:8e:30:ff:33:04:81:f4:3d:3a:04:d3: a7:69:44:85:f7:2e:8d:95:ca:c7:0d:6f:bf:95:09: 70:16:16:6e:ce:8a:f2:b9:7c:24:74:63:be:66:0b: d9:d4:a2:df:7a:ee:43:bc:49:f1:85:de:64:23:c2: c6:39:3d:a2:3d:5c:17:76:3f:07:86:e9:f9:32:ba: af:58:cf:bf:a0:0e:e3:08:a4:a1:ba:4f:aa:37:b3: fc:a7:dd:51:1b:3b:13:a0:86:de:95:39:a4:0a:1f: e3:f4:da:da:3e:03:7e:6e:1d:74:ef:86:c2:66:25: 88:ce:d6:60:0d:92:67:e5:74:00:b4:f1:4f:b8:c8: 7a:81:dc:bf:70:59:59:ba:64:ed:10:fe:cb:8f:fb: dd:8c:68:f4:aa:6d:bd:f2:ad:1e:a5:27:76:41:a7: b0:29:4e:dc:c6:d5:9f:36:0a:0c:e2:b4:3b:ba:05: 90:4e:37:74:18:39:c3:23:4a:0a:e4:8f:a0:eb:c0: d5:ee:13:e4:fd:81:bc:b3:16:ef:99:4b:91:8c:07: d5:62:71:9d:fc:0a:7d:9b:0a:d7:4e:cd:94:f3:48: c1:d8:97:b3:ab:75:4c:97:ad:9a:39:e9:3c:2d:bd: 9b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E5:75:F6:0A:94:BF:E4:67:59:CA:4C:AB:E8:C5:59:7A:7E:84:B1 X509v3 Authority Key Identifier: keyid:D7:10:E4:74:38:E0:99:E6:B0:ED:24:56:74:ED:22:33:E1:D2:B2:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:80:7c:b1:cb:57:c5:f6:df:1c:fd:1d:94:8b:32:db:df:b9: 45:a7:c0:fd:4f:fb:2e:3d:6e:b0:85:88:33:00:96:b0:65:61: 7b:1f:33:e7:3f:ed:7a:b4:be:bc:a3:d9:09:05:10:81:68:56: 48:b4:f9:46:a2:cc:4c:c7:e9:64:1d:29:9f:36:2d:ac:2e:85: 6f:9b:14:e8:ba:21:7f:2b:e1:47:5a:f8:3d:23:81:9a:f3:9c: 38:83:be:d5:35:f5:26:8c:70:5a:a8:1e:28:72:83:9e:cb:9d: 4b:c6:bb:ea:bd:7d:7d:f6:b8:14:8e:88:1c:20:ed:a3:b2:96: ed:7c:e3:3f:06:11:4a:34:b2:11:29:13:56:be:72:72:d1:82: 6c:45:62:54:cf:ba:81:53:8b:06:1f:f0:95:f1:e6:03:3c:58: f4:28:37:f0:ce:30:f3:ce:9d:a9:1a:d8:59:84:f1:30:fb:1f: f5:04:83:34:2c:27:a1:21:0e:68:ed:df:ab:a2:1a:73:bd:4a: 4e:7c:15:5a:78:06:ec:48:db:15:5c:56:4e:a0:8a:8b:87:fc: e3:d6:c3:ad:b8:87:ca:7e:e9:94:87:7e:83:56:75:77:96:b1: d3:c6:67:06:a1:f9:ac:29:1c:66:8d:37:21:c0:c7:12:f4:46: 89:be:b2:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbwIcYMqSRNvZV50GkIEC+w3MElEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcxMEU0NzQzOEUwOTlFNkIwRUQyNDU2NzRFRDIyMzNF MUQyQjJDMDAeFw0yNjA5MjEwODUyMzBaFw0yNjA5MjIwOTU3MzBaMDMxMTAvBgNV BAMTKEQ0RTU3NUY2MEE5NEJGRTQ2NzU5Q0E0Q0FCRThDNTU5N0E3RTg0QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiX/1ycgU6/wFMw7kmvb//Nx+O MP8zBIH0PToE06dpRIX3Lo2VyscNb7+VCXAWFm7OivK5fCR0Y75mC9nUot967kO8 SfGF3mQjwsY5PaI9XBd2PweG6fkyuq9Yz7+gDuMIpKG6T6o3s/yn3VEbOxOght6V OaQKH+P02to+A35uHXTvhsJmJYjO1mANkmfldAC08U+4yHqB3L9wWVm6ZO0Q/suP +92MaPSqbb3yrR6lJ3ZBp7ApTtzG1Z82CgzitDu6BZBON3QYOcMjSgrkj6DrwNXu E+T9gbyzFu+ZS5GMB9VicZ38Cn2bCtdOzZTzSMHYl7OrdUyXrZo56TwtvZvJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1OV19gqUv+RnWcpMq+jFWXp+hLEwHwYDVR0j BBgwFoAU1xDkdDjgmeaw7SRWdO0iM+HSssAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDU0ZTQ1NmQtZGJlMi00NjBjLTg2ZDQtZWJjMmQxMTU2MTc2LzAvRDcxMEU0NzQz OEUwOTlFNkIwRUQyNDU2NzRFRDIyMzNFMUQyQjJDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzEwRTQ3NDM4RTA5OUU2QjBFRDI0NTY3NEVEMjIzM0UxRDJC MkMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDU0ZTQ1NmQtZGJlMi00NjBjLTg2 ZDQtZWJjMmQxMTU2MTc2LzAvRDcxMEU0NzQzOEUwOTlFNkIwRUQyNDU2NzRFRDIy MzNFMUQyQjJDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6AfLHLV8X23xz9HZSLMtvfuUWnwP1P+y49 brCFiDMAlrBlYXsfM+c/7Xq0vryj2QkFEIFoVki0+UaizEzH6WQdKZ82LawuhW+b FOi6IX8r4Uda+D0jgZrznDiDvtU19SaMcFqoHihyg57LnUvGu+q9fX32uBSOiBwg 7aOylu184z8GEUo0shEpE1a+cnLRgmxFYlTPuoFTiwYf8JXx5gM8WPQoN/DOMPPO naka2FmE8TD7H/UEgzQsJ6EhDmjt36uiGnO9Sk58FVp4BuxI2xVcVk6giouH/OPW w624h8p+6ZSHfoNWdXeWsdPGZwah+awpHGaNNyHAxxL0Rom+slI= -----END CERTIFICATE-----Generated at Mon Sep 21 12:39:10 2026 by rpki-client