$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft File: DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft (raw, json) Hash identifier: TMMwpOct7ASMN6j0W5oGPREOzSdsR8xH47bxId/T4Ac= Subject key identifier: BE:05:BB:BD:48:57:C8:D8:36:2D:AE:6E:CC:59:7B:B2:72:D7:AF:8B Authority key identifier: DF:64:8D:B0:3E:C5:64:14:81:28:C7:0F:BB:6A:0C:C8:77:3A:EF:60 Certificate issuer: /CN=DF648DB03EC564148128C70FBB6A0CC8773AEF60 Certificate serial: 0BE1812B26EE82F055D3F4A39913399861CD0447 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF648DB03EC564148128C70FBB6A0CC8773AEF60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft Manifest number: BD Signing time: Mon 21 Sep 2026 09:18:02 +0000 Manifest this update: Mon 21 Sep 2026 09:13:02 +0000 Manifest next update: Tue 22 Sep 2026 12:58:02 +0000 Files and hashes: 1: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (hash: Sq/TPHjnHcU8BdlRhTUGNyaSgFRduqyHP60YOl+s/e4=) 2: DF648DB03EC564148128C70FBB6A0CC8773AEF60.crl (hash: ZtMts5SGG+2F46ZB9YmsKEfamHypdL09mKn5AI1f6hA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.crl rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF648DB03EC564148128C70FBB6A0CC8773AEF60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e1:81:2b:26:ee:82:f0:55:d3:f4:a3:99:13:39:98:61:cd:04:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF648DB03EC564148128C70FBB6A0CC8773AEF60 Validity Not Before: Sep 21 09:13:02 2026 GMT Not After : Sep 22 12:58:02 2026 GMT Subject: CN=BE05BBBD4857C8D8362DAE6ECC597BB272D7AF8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f8:02:0e:16:92:f8:3a:ab:03:6e:29:4f:b9: a9:80:22:0b:a2:cd:b3:00:d1:4c:83:9a:33:8e:ce: 96:9e:ed:96:86:e3:84:f5:aa:2a:d7:e5:41:41:bd: 91:83:99:c2:86:1e:87:09:42:fd:5b:f2:78:eb:94: 7b:63:c6:ca:74:a7:da:1a:e4:9f:db:ae:d5:a1:95: 76:f0:15:67:b2:53:b1:ac:a9:7a:b5:56:d9:7c:79: 98:42:e2:0b:10:e8:2c:b1:a9:36:09:a6:b2:3c:31: f3:54:3c:44:db:4b:0b:fa:7e:94:9d:81:e4:ee:e6: 82:89:59:2c:88:c6:b1:1a:60:4e:f9:5e:49:95:2b: 59:ab:54:5d:d6:df:6a:fb:26:7a:cf:7f:19:ae:9b: 4a:22:5a:d0:b5:d1:28:61:c7:b2:43:ac:68:e6:b2: 3a:de:be:5c:06:97:c6:3c:39:19:37:4d:ef:02:54: ba:ec:bb:63:7d:9d:0c:89:6e:97:18:36:07:0b:ae: 62:0f:1d:c0:e3:0b:ae:a6:c5:fa:8a:3e:90:9b:8b: dc:91:88:13:b9:ea:8f:a5:7b:36:61:04:55:66:78: 8a:77:8f:44:ab:69:7a:37:78:f1:63:f2:c8:d8:61: a8:12:e7:e2:8d:0e:67:e0:f5:96:6b:dd:80:4f:8e: a0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:05:BB:BD:48:57:C8:D8:36:2D:AE:6E:CC:59:7B:B2:72:D7:AF:8B X509v3 Authority Key Identifier: keyid:DF:64:8D:B0:3E:C5:64:14:81:28:C7:0F:BB:6A:0C:C8:77:3A:EF:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF648DB03EC564148128C70FBB6A0CC8773AEF60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:77:23:10:3f:1c:fe:73:f8:8d:5f:dd:2c:cc:45:7a:2d:45: 4b:f2:f8:2b:a1:0d:1f:64:53:c9:12:ab:72:9d:a4:69:1c:67: d7:29:28:f4:12:fb:2c:61:20:bc:ac:8d:65:4a:98:e0:a1:d2: bd:36:b4:1f:dd:ca:bc:6f:1f:3e:77:62:60:5c:fe:14:5b:79: 8b:9c:58:d4:a5:e1:9b:02:b1:26:39:46:a2:72:ac:af:bd:48: f0:5e:05:83:04:67:a5:f0:db:53:3c:62:da:aa:35:05:5f:5b: 81:4f:3d:42:58:f4:c8:fe:08:9b:c9:65:09:64:0a:ae:76:c3: 55:a1:7f:ef:7d:f9:3b:6e:34:34:1f:e2:a5:22:c9:98:a1:ae: 0a:b9:73:35:ae:04:ee:8c:47:58:15:5a:52:4c:dc:4a:e3:82: b0:4c:09:93:29:44:7a:73:9d:19:d9:59:34:bc:aa:d8:01:28: 45:d3:4c:ff:63:c6:1c:37:00:6a:37:cf:9c:45:8f:e4:10:28: dc:94:a9:21:7c:6f:3d:a7:db:48:7e:b6:e6:4a:cf:97:60:85: e9:e4:a6:27:0f:0e:1b:9c:f3:1c:e6:e4:db:48:e0:7a:1b:12: 8c:d0:d5:d9:69:3f:79:84:19:aa:56:77:08:36:dc:c5:c9:ba: 18:a1:97:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC+GBKybugvBV0/SjmRM5mGHNBEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2NDhEQjAzRUM1NjQxNDgxMjhDNzBGQkI2QTBDQzg3 NzNBRUY2MDAeFw0yNjA5MjEwOTEzMDJaFw0yNjA5MjIxMjU4MDJaMDMxMTAvBgNV BAMTKEJFMDVCQkJENDg1N0M4RDgzNjJEQUU2RUNDNTk3QkIyNzJEN0FGOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh+AIOFpL4OqsDbilPuamAIgui zbMA0UyDmjOOzpae7ZaG44T1qirX5UFBvZGDmcKGHocJQv1b8njrlHtjxsp0p9oa 5J/brtWhlXbwFWeyU7GsqXq1Vtl8eZhC4gsQ6CyxqTYJprI8MfNUPETbSwv6fpSd geTu5oKJWSyIxrEaYE75XkmVK1mrVF3W32r7JnrPfxmum0oiWtC10Shhx7JDrGjm sjrevlwGl8Y8ORk3Te8CVLrsu2N9nQyJbpcYNgcLrmIPHcDjC66mxfqKPpCbi9yR iBO56o+lezZhBFVmeIp3j0SraXo3ePFj8sjYYagS5+KNDmfg9ZZr3YBPjqAJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvgW7vUhXyNg2La5uzFl7snLXr4swHwYDVR0j BBgwFoAU32SNsD7FZBSBKMcPu2oMyHc672AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdkYjZjNGYtOWZkZi00N2Y2LWIyNGMtMDMzZmUzYTQ0ZDUwLzAvREY2NDhEQjAz RUM1NjQxNDgxMjhDNzBGQkI2QTBDQzg3NzNBRUY2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjY0OERCMDNFQzU2NDE0ODEyOEM3MEZCQjZBMENDODc3M0FF RjYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdkYjZjNGYtOWZkZi00N2Y2LWIy NGMtMDMzZmUzYTQ0ZDUwLzAvREY2NDhEQjAzRUM1NjQxNDgxMjhDNzBGQkI2QTBD Qzg3NzNBRUY2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZ3IxA/HP5z+I1f3SzMRXotRUvy+CuhDR9k U8kSq3KdpGkcZ9cpKPQS+yxhILysjWVKmOCh0r02tB/dyrxvHz53YmBc/hRbeYuc WNSl4ZsCsSY5RqJyrK+9SPBeBYMEZ6Xw21M8YtqqNQVfW4FPPUJY9Mj+CJvJZQlk Cq52w1Whf+99+TtuNDQf4qUiyZihrgq5czWuBO6MR1gVWlJM3ErjgrBMCZMpRHpz nRnZWTS8qtgBKEXTTP9jxhw3AGo3z5xFj+QQKNyUqSF8bz2n20h+tuZKz5dghenk picPDhuc8xzm5NtI4HobEozQ1dlpP3mEGapWdwg23MXJuhihl0s= -----END CERTIFICATE-----Generated at Mon Sep 21 19:40:50 2026 by rpki-client