$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft File: 602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft (raw, json) Hash identifier: /FhFO+xwF66u9uncp0tKPGn9krKfoLEerKYpgPPUOCU= Subject key identifier: 51:5B:63:2F:D5:0C:4A:A1:78:42:C2:44:FD:55:16:28:84:71:A4:FF Authority key identifier: 60:2D:C3:C0:42:45:09:89:50:9B:4B:AE:FD:B4:AA:29:1E:B6:F8:F6 Certificate issuer: /CN=602DC3C042450989509B4BAEFDB4AA291EB6F8F6 Certificate serial: 4F76F329B897A56BB748D00C09B2DFB3ADDD3B51 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft Manifest number: BF Signing time: Tue 22 Sep 2026 01:02:49 +0000 Manifest this update: Tue 22 Sep 2026 00:57:49 +0000 Manifest next update: Wed 23 Sep 2026 04:00:49 +0000 Files and hashes: 1: 602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl (hash: s+1e0vMoz4s/rqhqjdvmT1mT4tzX4mD7JvEW+JtOICY=) 2: 3136302e32302e33392e302f32342d3234203d3e20313532373637.roa (hash: 7YQRPlXdULMyA1HYWK14T5iCJHvbhMELTTePtHF2CN4=) 3: 3136302e32302e33382e302f32342d3234203d3e20313532373637.roa (hash: hlIEpb1QvuixIbQLzMUMoA0W+7btuV0cgzPbAs+Iw5M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 04:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:76:f3:29:b8:97:a5:6b:b7:48:d0:0c:09:b2:df:b3:ad:dd:3b:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=602DC3C042450989509B4BAEFDB4AA291EB6F8F6 Validity Not Before: Sep 22 00:57:49 2026 GMT Not After : Sep 23 04:00:49 2026 GMT Subject: CN=515B632FD50C4AA17842C244FD5516288471A4FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:99:46:11:bb:a8:a0:02:e5:60:f6:39:27:e2: 67:0a:7e:0d:d8:b8:01:22:af:1e:7e:52:de:6c:fc: d9:ac:55:93:77:7a:76:fd:59:4a:5f:17:2e:22:a5: 59:77:bc:20:05:79:02:db:a0:99:95:8f:73:03:7c: 50:87:67:96:a3:01:e2:82:6b:34:cb:05:bf:76:23: c6:e4:84:66:61:24:c2:40:25:0f:ad:a3:f7:9a:69: 18:4a:6c:d0:0b:57:e8:83:4f:05:c3:15:c4:94:60: 55:92:b4:5c:9c:d5:ca:15:25:d1:09:a3:d1:f0:9f: b5:1f:a6:12:92:05:e3:2f:3e:93:37:ce:91:97:cd: 48:21:c2:d9:1d:1a:31:e8:49:88:21:d7:60:93:57: 75:87:e3:fc:d5:67:e4:37:d2:80:b5:e3:13:93:b5: 13:b6:a6:59:3c:a1:ab:33:71:f4:03:a7:cd:9e:38: 9b:c5:89:7b:9a:5b:ab:8b:85:d3:2d:18:5a:1d:cb: ab:11:e7:57:ee:9a:cf:42:af:1b:42:11:e6:b0:26: 5d:a8:51:d2:f8:33:2a:e1:3f:17:15:13:02:18:1c: 94:0b:27:81:53:84:d9:4d:17:a6:b0:f2:96:db:50: 79:88:98:62:62:47:4a:9d:e5:e9:22:1b:78:8c:36: 7f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:5B:63:2F:D5:0C:4A:A1:78:42:C2:44:FD:55:16:28:84:71:A4:FF X509v3 Authority Key Identifier: keyid:60:2D:C3:C0:42:45:09:89:50:9B:4B:AE:FD:B4:AA:29:1E:B6:F8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:b1:9c:28:d1:31:8c:e1:36:35:53:75:c4:68:a3:e6:74:94: c6:16:0a:9b:3a:34:d8:38:7b:3c:5d:68:97:82:24:ee:10:28: bb:bd:e2:19:61:b0:c7:e4:2d:6e:dd:20:04:43:a1:2f:29:90: 32:f0:d4:82:c9:38:8c:2d:14:33:79:d4:7f:11:93:6b:15:8a: 14:f6:dd:01:b9:f1:dc:78:cf:1e:75:11:5d:24:7d:3f:c0:e3: ff:ca:62:58:40:dd:46:1f:3c:be:e4:5b:75:11:9b:87:0e:47: f9:19:2c:95:4e:f9:23:44:11:81:f1:62:8f:24:c4:b6:d8:5b: e2:1c:86:18:6e:6f:ab:8f:62:c2:24:50:e1:34:cc:5b:92:05: ef:b2:db:43:f4:32:6a:2e:e3:11:d3:a5:e4:79:6a:91:ca:9f: 88:2f:80:92:ca:eb:d6:12:5b:49:31:75:72:80:eb:a1:c5:fd: 84:68:d7:9f:57:95:01:95:5a:ea:61:d7:45:fe:9f:1c:22:ff: 01:a6:20:e7:d4:ee:bb:37:e3:47:89:ec:80:3b:25:4f:53:df: ab:9f:d0:83:95:21:70:f9:c4:77:86:34:0a:0b:49:b6:1a:f9: 5e:4d:8e:8e:58:fc:dd:34:65:31:3b:a1:98:62:34:31:30:8f: c4:36:0e:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT3bzKbiXpWu3SNAMCbLfs63dO1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAyREMzQzA0MjQ1MDk4OTUwOUI0QkFFRkRCNEFBMjkx RUI2RjhGNjAeFw0yNjA5MjIwMDU3NDlaFw0yNjA5MjMwNDAwNDlaMDMxMTAvBgNV BAMTKDUxNUI2MzJGRDUwQzRBQTE3ODQyQzI0NEZENTUxNjI4ODQ3MUE0RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZmUYRu6igAuVg9jkn4mcKfg3Y uAEirx5+Ut5s/NmsVZN3enb9WUpfFy4ipVl3vCAFeQLboJmVj3MDfFCHZ5ajAeKC azTLBb92I8bkhGZhJMJAJQ+to/eaaRhKbNALV+iDTwXDFcSUYFWStFyc1coVJdEJ o9Hwn7UfphKSBeMvPpM3zpGXzUghwtkdGjHoSYgh12CTV3WH4/zVZ+Q30oC14xOT tRO2plk8oaszcfQDp82eOJvFiXuaW6uLhdMtGFody6sR51fums9CrxtCEeawJl2o UdL4MyrhPxcVEwIYHJQLJ4FThNlNF6aw8pbbUHmImGJiR0qd5ekiG3iMNn+BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUVtjL9UMSqF4QsJE/VUWKIRxpP8wHwYDVR0j BBgwFoAUYC3DwEJFCYlQm0uu/bSqKR62+PYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZlN2RhY2MtMmI0NS00MTQxLTk3NzUtZjFiYjlmMDUyMzk2LzAvNjAyREMzQzA0 MjQ1MDk4OTUwOUI0QkFFRkRCNEFBMjkxRUI2RjhGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82MDJEQzNDMDQyNDUwOTg5NTA5QjRCQUVGREI0QUEyOTFFQjZG OEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZlN2RhY2MtMmI0NS00MTQxLTk3 NzUtZjFiYjlmMDUyMzk2LzAvNjAyREMzQzA0MjQ1MDk4OTUwOUI0QkFFRkRCNEFB MjkxRUI2RjhGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGuxnCjRMYzhNjVTdcRoo+Z0lMYWCps6NNg4 ezxdaJeCJO4QKLu94hlhsMfkLW7dIARDoS8pkDLw1ILJOIwtFDN51H8Rk2sVihT2 3QG58dx4zx51EV0kfT/A4//KYlhA3UYfPL7kW3URm4cOR/kZLJVO+SNEEYHxYo8k xLbYW+Ichhhub6uPYsIkUOE0zFuSBe+y20P0Mmou4xHTpeR5apHKn4gvgJLK69YS W0kxdXKA66HF/YRo159XlQGVWuph10X+nxwi/wGmIOfU7rs340eJ7IA7JU9T36uf 0IOVIXD5xHeGNAoLSbYa+V5Njo5Y/N00ZTE7oZhiNDEwj8Q2Dsc= -----END CERTIFICATE-----Generated at Tue Sep 22 19:36:58 2026 by rpki-client