$ rpki-client -vvvf rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft File: DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft (raw, json) Hash identifier: AmGLtoi0SuOG/WjSOwWhsmdQfTPuCnJ6TDDc267H5Wc= Subject key identifier: 3C:0E:9B:FE:04:3A:B4:87:BD:8F:94:AE:DC:32:A9:1F:F9:B2:0D:5C Authority key identifier: DB:F8:29:0B:AC:F2:AD:96:DB:B0:24:36:48:CC:6A:C6:D6:A7:76:18 Certificate issuer: /CN=DBF8290BACF2AD96DBB0243648CC6AC6D6A77618 Certificate serial: 40F5F537556D98DFAE36A43C595285C35CC6E758 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft Manifest number: BE Signing time: Mon 21 Sep 2026 12:11:21 +0000 Manifest this update: Mon 21 Sep 2026 12:06:21 +0000 Manifest next update: Tue 22 Sep 2026 13:48:21 +0000 Files and hashes: 1: 3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa (hash: MrbeRL/3NlCVWGAvenapRPN6GCB6X5UzgLlN8P6C5B4=) 2: DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl (hash: CtUss6vTaf/hYNExLiAutMWR7hzQaQrNTXqNANSJfwo=) 3: 3130332e3137322e3132322e302f32342d3234203d3e20313431353935.roa (hash: J7DIB6hfPPTu3E2KzBH8yAsIGJFne3bOrj0Y9GAdcDc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:f5:f5:37:55:6d:98:df:ae:36:a4:3c:59:52:85:c3:5c:c6:e7:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF8290BACF2AD96DBB0243648CC6AC6D6A77618 Validity Not Before: Sep 21 12:06:21 2026 GMT Not After : Sep 22 13:48:21 2026 GMT Subject: CN=3C0E9BFE043AB487BD8F94AEDC32A91FF9B20D5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5d:70:22:f4:9a:dd:00:7f:ca:cc:6b:b2:21: 58:9e:dd:f4:52:46:96:e2:18:98:6a:c2:7d:db:5d: c4:55:34:6e:5a:b6:7a:7d:74:fc:3d:ed:e6:30:a3: 72:74:a8:89:91:05:9a:8c:5c:c1:c3:93:0d:30:54: 30:e2:37:29:81:c0:9a:fe:13:75:ce:f4:53:e5:01: 4f:e8:ad:94:b0:19:1e:4a:dd:66:6c:d3:34:09:26: 85:aa:44:ed:57:88:43:fb:f7:26:c5:a2:30:69:c5: 8f:64:cb:67:1d:53:34:6a:ce:fc:46:b7:4b:a9:95: fa:12:39:03:13:47:3f:58:f1:71:fd:06:04:21:fb: 03:31:7c:44:ca:b5:f5:09:df:9d:3f:64:1d:8c:2b: f2:5d:9f:f8:87:3f:0e:d0:14:c7:02:71:b7:16:1f: 06:94:37:bf:d2:53:05:d3:1f:51:44:67:64:6c:6c: b7:b7:04:e2:08:2c:c5:4f:b7:ea:ab:27:53:f7:79: cb:48:b6:d3:dc:91:b3:83:e0:a0:25:c9:6d:8b:ed: 65:d8:34:16:ab:7c:fc:b1:1b:a7:6a:ed:e7:05:61: 8d:7e:6c:79:1d:f3:ee:ee:8e:41:4c:13:55:fc:e3: 74:4e:e9:69:29:d2:29:c0:e5:b6:b4:96:4e:de:42: 26:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0E:9B:FE:04:3A:B4:87:BD:8F:94:AE:DC:32:A9:1F:F9:B2:0D:5C X509v3 Authority Key Identifier: keyid:DB:F8:29:0B:AC:F2:AD:96:DB:B0:24:36:48:CC:6A:C6:D6:A7:76:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:f7:bc:4b:51:f2:5b:32:db:2c:f4:cc:15:0f:bd:0c:1b:8e: a9:1f:84:21:4e:ab:f0:a8:ed:b6:3e:7b:a1:d7:ef:77:98:0e: 1a:ef:c5:31:89:3e:04:d4:64:35:a0:8d:58:1a:98:9f:53:8d: 49:a7:e4:aa:27:04:f7:1b:d5:f2:d5:b7:5b:fa:e6:18:50:40: 58:46:44:7e:8c:76:74:fe:be:07:dd:e3:6a:d6:42:15:15:fe: ce:d3:0c:8b:45:32:0e:80:43:9a:87:07:3a:9b:7e:0e:dc:da: fe:e2:8d:15:07:72:f5:bd:88:19:c3:2f:cd:80:4f:3b:f6:14: 85:19:4a:7e:1b:2f:9b:db:3b:4d:0f:97:70:fc:3a:44:4c:6f: 95:2e:a7:ad:2d:17:4a:d4:07:05:29:e5:51:b5:93:f2:66:00: 26:1f:aa:cd:aa:56:1c:77:3c:58:cc:ba:9c:16:16:64:c0:f9: a5:09:df:93:9a:57:a1:49:15:ee:b3:71:0b:9a:ad:b0:8b:38: b4:3c:3f:99:75:1a:e1:6d:b4:3d:cd:c9:96:d0:d9:da:be:f6: 5a:a1:49:4b:79:4e:1c:46:75:f5:6a:47:e1:48:a4:2d:ee:c1: 0a:de:2a:02:b8:da:35:8b:9a:b3:8a:0a:1b:64:65:eb:6e:f0: be:0e:c1:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQPX1N1VtmN+uNqQ8WVKFw1zG51gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGODI5MEJBQ0YyQUQ5NkRCQjAyNDM2NDhDQzZBQzZE NkE3NzYxODAeFw0yNjA5MjExMjA2MjFaFw0yNjA5MjIxMzQ4MjFaMDMxMTAvBgNV BAMTKDNDMEU5QkZFMDQzQUI0ODdCRDhGOTRBRURDMzJBOTFGRjlCMjBENUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2XXAi9JrdAH/KzGuyIVie3fRS RpbiGJhqwn3bXcRVNG5atnp9dPw97eYwo3J0qImRBZqMXMHDkw0wVDDiNymBwJr+ E3XO9FPlAU/orZSwGR5K3WZs0zQJJoWqRO1XiEP79ybFojBpxY9ky2cdUzRqzvxG t0uplfoSOQMTRz9Y8XH9BgQh+wMxfETKtfUJ350/ZB2MK/Jdn/iHPw7QFMcCcbcW HwaUN7/SUwXTH1FEZ2RsbLe3BOIILMVPt+qrJ1P3ectIttPckbOD4KAlyW2L7WXY NBarfPyxG6dq7ecFYY1+bHkd8+7ujkFME1X843RO6Wkp0inA5ba0lk7eQiZdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPA6b/gQ6tIe9j5Su3DKpH/myDVwwHwYDVR0j BBgwFoAU2/gpC6zyrZbbsCQ2SMxqxtandhgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU2MDA0ODYtOTc4MC00M2VlLWJiMmQtYjgxMTA5NGExNDQ1LzAvREJGODI5MEJB Q0YyQUQ5NkRCQjAyNDM2NDhDQzZBQzZENkE3NzYxOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQkY4MjkwQkFDRjJBRDk2REJCMDI0MzY0OENDNkFDNkQ2QTc3 NjE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU2MDA0ODYtOTc4MC00M2VlLWJi MmQtYjgxMTA5NGExNDQ1LzAvREJGODI5MEJBQ0YyQUQ5NkRCQjAyNDM2NDhDQzZB QzZENkE3NzYxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHD3vEtR8lsy2yz0zBUPvQwbjqkfhCFOq/Co 7bY+e6HX73eYDhrvxTGJPgTUZDWgjVgamJ9TjUmn5KonBPcb1fLVt1v65hhQQFhG RH6MdnT+vgfd42rWQhUV/s7TDItFMg6AQ5qHBzqbfg7c2v7ijRUHcvW9iBnDL82A Tzv2FIUZSn4bL5vbO00Pl3D8OkRMb5Uup60tF0rUBwUp5VG1k/JmACYfqs2qVhx3 PFjMupwWFmTA+aUJ35OaV6FJFe6zcQuarbCLOLQ8P5l1GuFttD3NyZbQ2dq+9lqh SUt5ThxGdfVqR+FIpC3uwQreKgK42jWLmrOKChtkZetu8L4OwZ8= -----END CERTIFICATE-----Generated at Mon Sep 21 22:16:06 2026 by rpki-client