$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.mft File: 0834397E0D61D0AABF517AF83A3C2BA1DB62C242.mft (raw, json) Hash identifier: GFjDdDnQYMUYmsr0Ymh28zgKySeROCVIHSCFiTvunCo= Subject key identifier: 33:D1:DC:34:C3:A2:EA:08:8E:4B:E5:CD:3A:EB:96:94:AB:C6:34:3B Authority key identifier: 08:34:39:7E:0D:61:D0:AA:BF:51:7A:F8:3A:3C:2B:A1:DB:62:C2:42 Certificate issuer: /CN=0834397E0D61D0AABF517AF83A3C2BA1DB62C242 Certificate serial: 6DEEEFC8354A4FEB6514058E6A897D9B1F1BB250 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.mft Manifest number: BD Signing time: Mon 21 Sep 2026 00:16:50 +0000 Manifest this update: Mon 21 Sep 2026 00:11:50 +0000 Manifest next update: Tue 22 Sep 2026 04:09:50 +0000 Files and hashes: 1: 3130332e3135382e3139362e302f32342d3234203d3e20313431313333.roa (hash: +HdgvP+uGxgAxogBbgKZdpEZmiEj0DQvXIC1nOPvcEc=) 2: 0834397E0D61D0AABF517AF83A3C2BA1DB62C242.crl (hash: PwH77mDJnaaI7DFNz3V9yiNjYCSt+ZtXhJjpuRZMe0U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.crl rsync://rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:ee:ef:c8:35:4a:4f:eb:65:14:05:8e:6a:89:7d:9b:1f:1b:b2:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0834397E0D61D0AABF517AF83A3C2BA1DB62C242 Validity Not Before: Sep 21 00:11:50 2026 GMT Not After : Sep 22 04:09:50 2026 GMT Subject: CN=33D1DC34C3A2EA088E4BE5CD3AEB9694ABC6343B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bc:41:2f:d8:1f:76:7c:5f:71:98:5e:17:bf: 8e:84:a2:57:20:37:cc:b0:2f:1d:2b:17:ab:a1:73: 6c:f8:1e:20:39:37:48:92:d2:10:cd:56:ae:9d:d2: 7f:1e:5b:5d:ec:9b:04:cb:df:71:87:e4:54:72:18: c4:63:43:24:a6:95:8e:99:9a:bd:44:a7:45:91:05: 7a:ce:15:c8:eb:e5:88:77:0a:2b:8a:f8:c4:60:fa: e2:d3:2f:20:bf:a8:59:39:d5:b9:63:08:4b:3e:a7: 4e:d1:13:0b:5b:3c:8a:c6:b3:5d:e4:6b:58:39:c0: f4:9c:87:29:8b:74:1f:c5:d5:b1:9a:df:12:58:42: 91:80:74:3f:ae:4f:66:cf:31:cf:bb:0d:db:58:19: 93:7d:c8:19:c8:e1:5f:35:cd:51:c7:b2:a2:56:dc: 36:e3:1a:18:88:fa:7f:07:91:a4:8d:c3:7d:fc:b4: c5:c5:47:8d:e4:c7:71:bb:d8:a0:ac:00:df:5f:88: 96:c3:00:eb:58:aa:3c:00:28:f2:b3:7f:49:3c:86: 69:db:c2:7d:20:30:a3:f2:44:55:b7:24:3b:96:b4: 01:f5:0a:4f:8f:12:89:bc:8d:f9:e3:3b:d9:62:cd: 13:aa:b5:f3:2d:bf:f4:c5:2a:95:31:68:d5:6a:20: 81:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D1:DC:34:C3:A2:EA:08:8E:4B:E5:CD:3A:EB:96:94:AB:C6:34:3B X509v3 Authority Key Identifier: keyid:08:34:39:7E:0D:61:D0:AA:BF:51:7A:F8:3A:3C:2B:A1:DB:62:C2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:bc:0a:d2:3d:39:5b:57:27:88:dc:45:5c:48:9b:3c:a6:2d: 5c:b8:88:77:68:35:e7:1d:2b:0d:9c:88:d1:db:c5:68:0f:56: a1:0a:68:99:18:17:1e:2a:99:3b:96:be:d9:83:a6:63:36:ac: 7b:53:28:07:33:d7:34:ce:26:b3:c5:ed:ae:44:78:cc:40:63: 21:44:44:68:16:64:86:27:f0:a3:9b:ad:fa:2a:86:f2:1f:54: 62:39:2b:6a:ae:34:85:6b:64:0f:8b:6d:de:66:89:fa:3b:c6: 7c:71:25:0e:f7:a9:42:1d:8c:34:b7:03:d9:7c:52:64:78:68: 10:8f:90:5d:f0:02:16:09:3f:af:1a:6e:58:1f:a2:3c:57:d0: fc:fe:ec:76:e9:8c:7b:1d:67:b5:a7:ff:2e:cd:ed:10:8a:ff: 98:ae:8d:dd:02:8a:11:ab:3d:37:75:96:4a:a1:b0:9e:9a:0e: de:7f:0b:1b:ed:de:d9:f9:f8:8c:d4:09:a7:a5:6b:76:f9:32: b4:49:89:4a:58:e9:7b:b0:90:94:99:81:ac:62:d0:50:44:0b: 0c:44:10:9b:04:4c:52:46:f1:d7:a6:b8:da:62:b2:58:d9:98: 82:80:19:60:6d:10:94:c8:ca:3f:f7:20:47:2c:6a:da:bd:3f: ac:97:22:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbe7vyDVKT+tlFAWOaol9mx8bslAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDgzNDM5N0UwRDYxRDBBQUJGNTE3QUY4M0EzQzJCQTFE QjYyQzI0MjAeFw0yNjA5MjEwMDExNTBaFw0yNjA5MjIwNDA5NTBaMDMxMTAvBgNV BAMTKDMzRDFEQzM0QzNBMkVBMDg4RTRCRTVDRDNBRUI5Njk0QUJDNjM0M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9vEEv2B92fF9xmF4Xv46Eolcg N8ywLx0rF6uhc2z4HiA5N0iS0hDNVq6d0n8eW13smwTL33GH5FRyGMRjQySmlY6Z mr1Ep0WRBXrOFcjr5Yh3CiuK+MRg+uLTLyC/qFk51bljCEs+p07REwtbPIrGs13k a1g5wPSchymLdB/F1bGa3xJYQpGAdD+uT2bPMc+7DdtYGZN9yBnI4V81zVHHsqJW 3DbjGhiI+n8HkaSNw338tMXFR43kx3G72KCsAN9fiJbDAOtYqjwAKPKzf0k8hmnb wn0gMKPyRFW3JDuWtAH1Ck+PEom8jfnjO9lizROqtfMtv/TFKpUxaNVqIIF5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM9HcNMOi6giOS+XNOuuWlKvGNDswHwYDVR0j BBgwFoAUCDQ5fg1h0Kq/UXr4OjwrodtiwkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZkZGNiNGItNmQ4ZS00NTliLThhYTItOTlhNjA4ODYyNTZhLzAvMDgzNDM5N0Uw RDYxRDBBQUJGNTE3QUY4M0EzQzJCQTFEQjYyQzI0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wODM0Mzk3RTBENjFEMEFBQkY1MTdBRjgzQTNDMkJBMURCNjJD MjQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZkZGNiNGItNmQ4ZS00NTliLThh YTItOTlhNjA4ODYyNTZhLzAvMDgzNDM5N0UwRDYxRDBBQUJGNTE3QUY4M0EzQzJC QTFEQjYyQzI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+8CtI9OVtXJ4jcRVxImzymLVy4iHdoNecd Kw2ciNHbxWgPVqEKaJkYFx4qmTuWvtmDpmM2rHtTKAcz1zTOJrPF7a5EeMxAYyFE RGgWZIYn8KObrfoqhvIfVGI5K2quNIVrZA+Lbd5mifo7xnxxJQ73qUIdjDS3A9l8 UmR4aBCPkF3wAhYJP68ablgfojxX0Pz+7HbpjHsdZ7Wn/y7N7RCK/5iujd0CihGr PTd1lkqhsJ6aDt5/Cxvt3tn5+IzUCaela3b5MrRJiUpY6XuwkJSZgaxi0FBECwxE EJsETFJG8demuNpisljZmIKAGWBtEJTIyj/3IEcsatq9P6yXIqU= -----END CERTIFICATE-----Generated at Mon Sep 21 14:22:14 2026 by rpki-client