$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft File: D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft (raw, json) Hash identifier: ZrZN4BiRuhn0t/ePNVLNSs7+ACBE8uTjMYo8VVtxZb8= Subject key identifier: 08:0F:54:8C:D0:9D:29:54:51:17:63:E7:7B:B3:34:DC:2E:BD:5B:66 Authority key identifier: D2:86:1B:66:14:2D:51:B5:DE:4E:39:CD:C5:E1:64:41:59:BC:7B:BC Certificate issuer: /CN=D2861B66142D51B5DE4E39CDC5E1644159BC7BBC Certificate serial: 4EAED21C3C3DF190A6A7F1F9D9EC3D6E59E12A36 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft Manifest number: BE Signing time: Tue 22 Sep 2026 01:48:42 +0000 Manifest this update: Tue 22 Sep 2026 01:43:42 +0000 Manifest next update: Wed 23 Sep 2026 04:42:42 +0000 Files and hashes: 1: D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.crl (hash: IBSD5ZD/FKb3GkfuT/pfYwbzXoKogg58bdqi8uFRmU4=) 2: 323030313a6466333a643163303a3a2f34382d3438203d3e20313532373538.roa (hash: KLJKltDFBgSRycUEiUgW7XKQBHKRYM0bmiK8DEJJdYA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.crl rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:ae:d2:1c:3c:3d:f1:90:a6:a7:f1:f9:d9:ec:3d:6e:59:e1:2a:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2861B66142D51B5DE4E39CDC5E1644159BC7BBC Validity Not Before: Sep 22 01:43:42 2026 GMT Not After : Sep 23 04:42:42 2026 GMT Subject: CN=080F548CD09D2954511763E77BB334DC2EBD5B66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:69:73:0f:e3:c8:a8:57:65:2b:25:be:fe:3f: bd:fc:ca:de:18:46:2c:42:84:0a:47:83:14:be:5d: 92:03:13:1a:5c:1f:e0:a2:78:06:7e:be:91:36:76: 08:bd:6e:03:2a:64:85:78:bb:b1:92:dc:c8:b6:5e: fb:b5:90:64:bf:b7:9f:6e:e3:21:81:a9:3b:ad:c5: bf:4d:1d:dc:b3:86:d1:73:f3:57:09:04:e6:48:91: 30:32:d5:68:98:ea:a0:5e:c2:57:a8:59:18:5d:33: f7:44:f1:af:59:10:3e:f2:8a:cb:3c:34:47:e0:36: 4c:c6:65:2b:16:66:10:85:1f:80:bb:a1:ff:fc:c7: 8b:c1:30:ba:78:53:9c:36:91:f3:a4:be:ae:84:7b: 72:de:cc:b1:61:06:56:07:57:c4:2d:b6:23:ae:81: 4b:cc:e2:9c:1f:bf:87:7d:21:d0:57:7e:37:9f:4a: f2:be:50:1e:75:3e:85:14:b0:12:13:92:de:aa:34: 2d:64:0b:23:b2:3e:40:fd:a6:0d:ad:4f:c8:18:bc: b0:63:b4:19:81:30:97:fa:e2:5a:0e:20:a0:4b:8f: 45:24:b3:91:84:27:09:50:b1:22:90:64:f2:37:19: 4d:5b:83:49:f0:dc:a7:fc:92:fa:89:da:4f:4d:fd: d6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0F:54:8C:D0:9D:29:54:51:17:63:E7:7B:B3:34:DC:2E:BD:5B:66 X509v3 Authority Key Identifier: keyid:D2:86:1B:66:14:2D:51:B5:DE:4E:39:CD:C5:E1:64:41:59:BC:7B:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:d6:9f:1e:0a:12:be:93:bf:15:35:62:e4:0f:4f:71:43:61: 70:76:e7:51:f6:bb:b4:d8:af:d0:d7:cb:59:43:23:a1:63:8a: 5c:13:7b:20:c0:46:4f:7a:d8:2b:ff:fb:73:72:8e:54:d6:2d: c7:57:b8:aa:9f:63:40:b1:e3:bb:f9:7e:16:88:ad:d0:08:91: c9:b8:c8:af:64:8c:af:e2:91:9e:59:31:2e:63:9a:9f:8f:a2: 09:83:b2:8d:30:b7:2d:e5:c8:18:9e:fe:cb:33:07:5a:58:80: 3f:11:35:8a:9e:02:b0:36:90:17:30:78:51:fe:e9:02:af:93: b3:be:46:43:06:d2:0d:14:c2:41:21:36:32:85:3e:54:af:5a: c0:b9:a8:55:67:f0:43:47:ef:fd:9a:4e:96:cd:a2:be:ec:16: 44:8e:53:bd:be:53:81:e9:1d:b0:97:49:71:ab:a1:1b:fa:57: ee:38:10:5c:31:c5:18:41:bc:bd:38:78:8f:0b:4e:90:2e:aa: 58:a1:48:21:9f:34:79:48:39:85:59:1b:f6:76:02:b8:53:f1: 19:36:0e:92:e0:8c:8c:44:22:05:fc:d5:ba:88:89:3c:19:77: a6:ea:0d:75:97:ce:0a:16:84:02:51:71:e9:8b:4c:42:f2:67: 05:11:ae:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTq7SHDw98ZCmp/H52ew9blnhKjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4NjFCNjYxNDJENTFCNURFNEUzOUNEQzVFMTY0NDE1 OUJDN0JCQzAeFw0yNjA5MjIwMTQzNDJaFw0yNjA5MjMwNDQyNDJaMDMxMTAvBgNV BAMTKDA4MEY1NDhDRDA5RDI5NTQ1MTE3NjNFNzdCQjMzNERDMkVCRDVCNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEaXMP48ioV2UrJb7+P738yt4Y RixChApHgxS+XZIDExpcH+CieAZ+vpE2dgi9bgMqZIV4u7GS3Mi2Xvu1kGS/t59u 4yGBqTutxb9NHdyzhtFz81cJBOZIkTAy1WiY6qBewleoWRhdM/dE8a9ZED7yiss8 NEfgNkzGZSsWZhCFH4C7of/8x4vBMLp4U5w2kfOkvq6Ee3LezLFhBlYHV8QttiOu gUvM4pwfv4d9IdBXfjefSvK+UB51PoUUsBITkt6qNC1kCyOyPkD9pg2tT8gYvLBj tBmBMJf64loOIKBLj0Uks5GEJwlQsSKQZPI3GU1bg0nw3Kf8kvqJ2k9N/dZZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCA9UjNCdKVRRF2Pne7M03C69W2YwHwYDVR0j BBgwFoAU0oYbZhQtUbXeTjnNxeFkQVm8e7wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdkZDI1MTktMzA3OC00N2QzLTllODYtNDhmZDNiZGU3NmM4LzEvRDI4NjFCNjYx NDJENTFCNURFNEUzOUNEQzVFMTY0NDE1OUJDN0JCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjg2MUI2NjE0MkQ1MUI1REU0RTM5Q0RDNUUxNjQ0MTU5QkM3 QkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzEvRDI4NjFCNjYxNDJENTFCNURFNEUzOUNEQzVFMTY0 NDE1OUJDN0JCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHWnx4KEr6TvxU1YuQPT3FDYXB251H2u7TY r9DXy1lDI6FjilwTeyDARk962Cv/+3NyjlTWLcdXuKqfY0Cx47v5fhaIrdAIkcm4 yK9kjK/ikZ5ZMS5jmp+PogmDso0wty3lyBie/sszB1pYgD8RNYqeArA2kBcweFH+ 6QKvk7O+RkMG0g0UwkEhNjKFPlSvWsC5qFVn8ENH7/2aTpbNor7sFkSOU72+U4Hp HbCXSXGroRv6V+44EFwxxRhBvL04eI8LTpAuqlihSCGfNHlIOYVZG/Z2ArhT8Rk2 DpLgjIxEIgX81bqIiTwZd6bqDXWXzgoWhAJRcemLTELyZwURrg0= -----END CERTIFICATE-----Generated at Tue Sep 22 05:59:54 2026 by rpki-client