$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft File: 01572889DF1075E65143A4EF4BC1D8C749046C13.mft (raw, json) Hash identifier: fqeFqVC7qG4TxZd0Sp6mS/9XXwl9m4LSpLf50k32vpc= Subject key identifier: D4:C2:09:2D:10:68:7C:0E:54:53:A9:19:62:74:AC:03:89:3D:ED:D4 Authority key identifier: 01:57:28:89:DF:10:75:E6:51:43:A4:EF:4B:C1:D8:C7:49:04:6C:13 Certificate issuer: /CN=01572889DF1075E65143A4EF4BC1D8C749046C13 Certificate serial: 50B45F9C8CD37CF780038A3332135AF4DEF1EC55 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01572889DF1075E65143A4EF4BC1D8C749046C13.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft Manifest number: BD Signing time: Sun 20 Sep 2026 20:01:35 +0000 Manifest this update: Sun 20 Sep 2026 19:56:35 +0000 Manifest next update: Mon 21 Sep 2026 20:46:35 +0000 Files and hashes: 1: 3130332e3134362e36322e302f32332d3234203d3e20313339343537.roa (hash: fXIslrIHsJvjLRQnP9cWAs1QTJuR4Stfwh7a8LYxHm8=) 2: 323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa (hash: oMj1Nm7h+Y4mu9LBu3K/xKLS+Wp19Y5meMISqDSZ+JY=) 3: 01572889DF1075E65143A4EF4BC1D8C749046C13.crl (hash: n/O+aMjx7C961UDhohMJ0Qzc+t7dVOJ3HOoKSKGJk0A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.crl rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01572889DF1075E65143A4EF4BC1D8C749046C13.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 20:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:b4:5f:9c:8c:d3:7c:f7:80:03:8a:33:32:13:5a:f4:de:f1:ec:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01572889DF1075E65143A4EF4BC1D8C749046C13 Validity Not Before: Sep 20 19:56:35 2026 GMT Not After : Sep 21 20:46:35 2026 GMT Subject: CN=D4C2092D10687C0E5453A9196274AC03893DEDD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bb:2a:56:1a:2b:2e:89:ed:79:b8:80:1c:50: d7:5e:42:fb:71:73:20:aa:39:b4:cb:b4:bb:fc:c6: b6:51:bb:6d:12:73:27:06:30:c1:45:b1:1e:1e:c2: 85:53:12:56:c8:3c:76:b1:b0:71:65:48:f9:b8:43: 1e:56:ae:b0:e6:a8:31:d6:20:88:6f:32:ea:0e:f1: 7f:48:79:06:c5:b0:d3:0d:b8:aa:18:b7:cf:9f:cf: 78:53:28:47:55:75:4a:9d:3c:99:7d:b6:13:c2:95: a8:a7:f8:26:c5:4c:c8:69:6e:23:c3:a4:1d:f7:bb: 0d:f3:ac:74:65:4b:16:65:a0:ce:0a:4c:3e:1f:b5: 3f:8f:6c:63:f7:62:57:df:2f:b0:2b:71:89:92:e3: 4a:6f:3c:20:59:7a:b3:a6:76:53:45:e1:61:88:2d: 79:c0:f7:1a:7c:c7:2d:da:6e:a2:cb:40:68:0e:2d: c3:fd:4d:e8:f8:01:1c:cc:ae:bd:f1:8b:a8:07:4b: 65:94:d2:8b:0e:98:aa:82:21:4b:86:43:6d:ab:c5: fe:29:a3:8b:0c:01:11:ff:4e:3c:dd:94:7e:3c:eb: e2:5c:aa:df:f4:30:73:ad:fd:6e:d9:e2:fe:be:2c: f9:7c:ad:48:00:72:16:e2:86:b6:e0:ae:91:29:df: b7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C2:09:2D:10:68:7C:0E:54:53:A9:19:62:74:AC:03:89:3D:ED:D4 X509v3 Authority Key Identifier: keyid:01:57:28:89:DF:10:75:E6:51:43:A4:EF:4B:C1:D8:C7:49:04:6C:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01572889DF1075E65143A4EF4BC1D8C749046C13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:ea:d8:4f:66:65:7f:06:b8:d1:48:18:9d:0f:2c:40:e8:d2: 06:d5:8d:78:6d:5f:97:53:ab:57:9b:f2:6a:1d:c4:f4:aa:80: 72:a6:27:7c:01:47:67:71:83:68:e6:f5:dc:87:a9:66:69:19: b3:f5:a3:13:a5:d8:c3:97:9b:c1:49:c5:ee:bb:3e:5a:38:a5: 53:e0:74:4b:1c:9d:d6:e9:2c:51:df:79:5a:08:ac:e2:34:d3: 3c:24:6f:d6:13:3f:0f:eb:52:f9:e1:55:89:32:63:fd:93:6f: ef:5f:97:c6:b8:f2:73:d9:f6:9c:ef:ac:84:88:16:21:bf:dd: 0a:79:01:17:e9:55:7e:d7:29:0d:05:dd:13:ae:88:93:9c:9c: b9:00:23:dd:52:48:fe:2d:5c:b9:8a:09:c2:2d:2c:0c:17:b2: e3:d4:08:61:1d:d2:f5:17:25:4b:15:25:43:e3:c3:3e:82:1a: fc:49:d9:ba:07:86:03:07:d3:25:60:6f:4a:39:f3:1e:bc:3b: 0a:85:8c:e3:77:40:b3:04:c7:f5:1d:95:51:fd:c8:af:25:10: 74:5c:e6:b2:46:5f:38:39:8f:16:a9:74:d4:77:1b:ab:fa:70: c8:d2:ec:ab:45:a9:83:bf:50:69:9c:08:e8:0d:fd:1a:fe:cf: 52:62:9d:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUULRfnIzTfPeAA4ozMhNa9N7x7FUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1NzI4ODlERjEwNzVFNjUxNDNBNEVGNEJDMUQ4Qzc0 OTA0NkMxMzAeFw0yNjA5MjAxOTU2MzVaFw0yNjA5MjEyMDQ2MzVaMDMxMTAvBgNV BAMTKEQ0QzIwOTJEMTA2ODdDMEU1NDUzQTkxOTYyNzRBQzAzODkzREVERDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0uypWGisuie15uIAcUNdeQvtx cyCqObTLtLv8xrZRu20ScycGMMFFsR4ewoVTElbIPHaxsHFlSPm4Qx5WrrDmqDHW IIhvMuoO8X9IeQbFsNMNuKoYt8+fz3hTKEdVdUqdPJl9thPClain+CbFTMhpbiPD pB33uw3zrHRlSxZloM4KTD4ftT+PbGP3YlffL7ArcYmS40pvPCBZerOmdlNF4WGI LXnA9xp8xy3abqLLQGgOLcP9Tej4ARzMrr3xi6gHS2WU0osOmKqCIUuGQ22rxf4p o4sMARH/TjzdlH486+Jcqt/0MHOt/W7Z4v6+LPl8rUgAchbihrbgrpEp37e/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1MIJLRBofA5UU6kZYnSsA4k97dQwHwYDVR0j BBgwFoAUAVcoid8QdeZRQ6TvS8HYx0kEbBMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGVhNzkzNDAtNGRiMi00NThkLTk1ZGQtYWYyMGI0ZmNkYjNkLzAvMDE1NzI4ODlE RjEwNzVFNjUxNDNBNEVGNEJDMUQ4Qzc0OTA0NkMxMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMTU3Mjg4OURGMTA3NUU2NTE0M0E0RUY0QkMxRDhDNzQ5MDQ2 QzEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGVhNzkzNDAtNGRiMi00NThkLTk1 ZGQtYWYyMGI0ZmNkYjNkLzAvMDE1NzI4ODlERjEwNzVFNjUxNDNBNEVGNEJDMUQ4 Qzc0OTA0NkMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHq2E9mZX8GuNFIGJ0PLEDo0gbVjXhtX5dT q1eb8modxPSqgHKmJ3wBR2dxg2jm9dyHqWZpGbP1oxOl2MOXm8FJxe67Plo4pVPg dEscndbpLFHfeVoIrOI00zwkb9YTPw/rUvnhVYkyY/2Tb+9fl8a48nPZ9pzvrISI FiG/3Qp5ARfpVX7XKQ0F3ROuiJOcnLkAI91SSP4tXLmKCcItLAwXsuPUCGEd0vUX JUsVJUPjwz6CGvxJ2boHhgMH0yVgb0o58x68OwqFjON3QLMEx/UdlVH9yK8lEHRc 5rJGXzg5jxapdNR3G6v6cMjS7KtFqYO/UGmcCOgN/Rr+z1JinQU= -----END CERTIFICATE-----Generated at Mon Sep 21 13:22:50 2026 by rpki-client