$ rpki-client -vvvf rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft File: DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft (raw, json) Hash identifier: VGQe/Mok5S4E/gu2E5Vjq4QJYO95/rhk2rGSniI6rbk= Subject key identifier: B6:A8:08:1C:FE:49:88:E0:00:62:3C:90:73:87:83:A9:96:DA:60:7F Authority key identifier: DC:DF:EB:9B:30:70:53:1B:D7:F0:16:67:76:A9:BD:79:0D:81:56:F3 Certificate issuer: /CN=DCDFEB9B3070531BD7F0166776A9BD790D8156F3 Certificate serial: 269FBC3CF68A054800932783F338A5FA9933E382 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft Manifest number: BE Signing time: Mon 21 Sep 2026 16:21:54 +0000 Manifest this update: Mon 21 Sep 2026 16:16:54 +0000 Manifest next update: Tue 22 Sep 2026 19:56:54 +0000 Files and hashes: 1: DCDFEB9B3070531BD7F0166776A9BD790D8156F3.crl (hash: 1qL4Q3V1Aztva6S1vhgA3EAwQbfT1+iR/kOEIK4ZANk=) 2: 3130332e3233312e3131322e302f32322d3234203d3e203435373234.roa (hash: xTYeiw6tD9ub4a6qX/XD5duOKCOoUSMBMj8/IYpDd/U=) 3: 3230322e382e32382e302f32342d3234203d3e203435373234.roa (hash: WosTloIyziln5PL7ehnM5NRi5lB1Tbc4uPNxmDzbd8Y=) 4: 3230322e382e32392e302f32342d3234203d3e203435373234.roa (hash: Yc1lRGNv0/ivQZsDhjeb4Ll2thmzxFFCqYVkWRBmzS0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.crl rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 19:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:9f:bc:3c:f6:8a:05:48:00:93:27:83:f3:38:a5:fa:99:33:e3:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCDFEB9B3070531BD7F0166776A9BD790D8156F3 Validity Not Before: Sep 21 16:16:54 2026 GMT Not After : Sep 22 19:56:54 2026 GMT Subject: CN=B6A8081CFE4988E000623C90738783A996DA607F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c2:7d:df:83:83:e3:04:b3:eb:3c:d9:a1:21: d4:9e:41:3f:cf:33:11:02:fc:ba:78:2c:ad:12:17: 2e:fb:e7:4a:4b:e5:92:fd:32:e5:27:92:30:fd:4a: 3a:27:1d:5e:3f:55:b7:82:7a:e5:eb:cd:f7:16:cf: b4:48:7d:3e:4f:a2:d2:5e:bc:f4:cc:41:fa:9c:73: a2:52:67:54:97:e1:10:13:c1:e9:c2:e0:74:cd:7b: 05:36:a7:ad:fa:dc:b1:2b:30:1e:aa:03:27:aa:67: bb:26:02:7d:f7:87:bc:3e:69:11:a3:5b:71:9a:11: 3b:4a:24:78:f6:d1:97:3c:10:f8:8e:b1:c0:19:d2: 9a:f3:e2:45:39:e1:b3:21:be:c6:25:4c:65:9b:4b: 71:52:41:02:b0:7a:6e:95:6c:12:58:e2:e5:77:d6: cd:96:fa:67:45:c5:30:02:28:90:5b:76:87:bf:24: ba:96:aa:f8:06:b2:10:70:fd:d4:48:3b:4d:13:d4: 00:73:12:c3:93:6f:d2:b2:b7:08:79:59:ba:cd:4d: 17:d2:10:b4:9c:af:d2:ea:71:7b:28:da:5c:be:a6: 73:45:35:2c:6f:18:de:4c:39:50:51:aa:bf:ca:95: bb:5d:63:86:6e:68:44:10:74:72:79:e6:22:a1:16: 3b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A8:08:1C:FE:49:88:E0:00:62:3C:90:73:87:83:A9:96:DA:60:7F X509v3 Authority Key Identifier: keyid:DC:DF:EB:9B:30:70:53:1B:D7:F0:16:67:76:A9:BD:79:0D:81:56:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:fb:44:84:9d:0e:9a:c8:ea:74:12:a6:45:41:28:75:41:fd: b6:03:30:58:f0:e5:45:08:0f:1d:6b:d3:0f:68:b1:f9:a8:8f: 95:42:34:ec:ca:b8:91:cb:ef:73:66:53:2e:e5:f0:2a:c0:1c: 02:a3:83:0b:a0:52:59:77:c2:22:37:6c:63:89:fd:88:e8:3b: d8:e5:5a:ed:e3:ac:73:65:3d:f8:57:11:3f:6a:5b:cf:b5:53: 89:a8:5c:64:09:1f:b3:8d:ae:5b:19:48:25:a6:e1:85:86:01: 2a:ed:7e:75:5b:c1:f0:36:62:24:b9:65:9b:87:e7:e7:10:99: 19:31:b2:5a:04:8c:e4:fa:5d:69:86:22:5f:0d:fa:d9:2a:ea: 0c:fd:f4:c2:aa:47:fd:2f:f4:7a:44:94:a5:58:ed:db:2a:86: 61:a1:98:3c:54:d7:08:f1:93:79:43:77:f0:39:84:a5:62:0b: 9a:0b:da:c8:db:84:80:3f:e3:69:9c:7b:35:3e:39:38:2c:47: 54:66:53:65:b2:de:db:4a:2c:a3:8b:40:f2:b0:fd:8e:cc:3e: bc:3e:19:e6:8f:c5:35:59:9e:d1:9a:c7:18:e0:1d:bb:8d:4e: 64:9a:98:b4:7f:44:d6:25:3c:83:c7:50:50:51:2e:36:b3:91: 38:51:72:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJp+8PPaKBUgAkyeD8zil+pkz44IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENERkVCOUIzMDcwNTMxQkQ3RjAxNjY3NzZBOUJENzkw RDgxNTZGMzAeFw0yNjA5MjExNjE2NTRaFw0yNjA5MjIxOTU2NTRaMDMxMTAvBgNV BAMTKEI2QTgwODFDRkU0OTg4RTAwMDYyM0M5MDczODc4M0E5OTZEQTYwN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCawn3fg4PjBLPrPNmhIdSeQT/P MxEC/Lp4LK0SFy7750pL5ZL9MuUnkjD9SjonHV4/VbeCeuXrzfcWz7RIfT5PotJe vPTMQfqcc6JSZ1SX4RATwenC4HTNewU2p6363LErMB6qAyeqZ7smAn33h7w+aRGj W3GaETtKJHj20Zc8EPiOscAZ0prz4kU54bMhvsYlTGWbS3FSQQKwem6VbBJY4uV3 1s2W+mdFxTACKJBbdoe/JLqWqvgGshBw/dRIO00T1ABzEsOTb9Kytwh5WbrNTRfS ELScr9LqcXso2ly+pnNFNSxvGN5MOVBRqr/KlbtdY4ZuaEQQdHJ55iKhFjvzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtqgIHP5JiOAAYjyQc4eDqZbaYH8wHwYDVR0j BBgwFoAU3N/rmzBwUxvX8BZndqm9eQ2BVvMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGViOGI4ODktM2IzZC00ZWY1LWFkNzAtNWIxMDQ1ZWZmMzkzLzAvRENERkVCOUIz MDcwNTMxQkQ3RjAxNjY3NzZBOUJENzkwRDgxNTZGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0RGRUI5QjMwNzA1MzFCRDdGMDE2Njc3NkE5QkQ3OTBEODE1 NkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGViOGI4ODktM2IzZC00ZWY1LWFk NzAtNWIxMDQ1ZWZmMzkzLzAvRENERkVCOUIzMDcwNTMxQkQ3RjAxNjY3NzZBOUJE NzkwRDgxNTZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACn7RISdDprI6nQSpkVBKHVB/bYDMFjw5UUI Dx1r0w9osfmoj5VCNOzKuJHL73NmUy7l8CrAHAKjgwugUll3wiI3bGOJ/YjoO9jl Wu3jrHNlPfhXET9qW8+1U4moXGQJH7ONrlsZSCWm4YWGASrtfnVbwfA2YiS5ZZuH 5+cQmRkxsloEjOT6XWmGIl8N+tkq6gz99MKqR/0v9HpElKVY7dsqhmGhmDxU1wjx k3lDd/A5hKViC5oL2sjbhIA/42mcezU+OTgsR1RmU2Wy3ttKLKOLQPKw/Y7MPrw+ GeaPxTVZntGaxxjgHbuNTmSamLR/RNYlPIPHUFBRLjazkThRckE= -----END CERTIFICATE-----Generated at Tue Sep 22 13:10:03 2026 by rpki-client