$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft File: D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft (raw, json) Hash identifier: OTkT7Wq8/iv48ZvqkcF7hu4A0/vWqQDPU/lBWSBcw/M= Subject key identifier: EA:88:CA:C1:94:07:24:4A:EB:8F:97:33:BC:EE:E9:DA:44:19:E3:B3 Authority key identifier: D3:98:21:43:FC:BA:44:20:C0:7A:A5:CE:EB:50:ED:B2:84:87:CF:2C Certificate issuer: /CN=D3982143FCBA4420C07AA5CEEB50EDB28487CF2C Certificate serial: 63CB694FE53C61216B0B3B73FDA1F5FAF9EC7E13 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft Manifest number: BD Signing time: Sun 20 Sep 2026 18:09:13 +0000 Manifest this update: Sun 20 Sep 2026 18:04:13 +0000 Manifest next update: Mon 21 Sep 2026 19:10:13 +0000 Files and hashes: 1: D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.crl (hash: dz+pBu8djnjrCVaHSY9B1CrCJFHOGS8LSlJS+w4C5E8=) 2: 3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa (hash: n33ojlZr3PPZOfsVvz1esHOzCxGjqSWfrz4yQc92lmw=) 3: 3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa (hash: mtrDV4mqgTGdX3FIVkCoXVE0ERKQErVYoLX9nuzS4rw=) 4: 3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa (hash: ecWkSgSwkV2u+u82kb3iMyEyHidsVg9ktP1OUEc0RVY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.crl rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 19:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:cb:69:4f:e5:3c:61:21:6b:0b:3b:73:fd:a1:f5:fa:f9:ec:7e:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3982143FCBA4420C07AA5CEEB50EDB28487CF2C Validity Not Before: Sep 20 18:04:13 2026 GMT Not After : Sep 21 19:10:13 2026 GMT Subject: CN=EA88CAC19407244AEB8F9733BCEEE9DA4419E3B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d4:09:fd:80:d4:75:ec:eb:99:35:a4:af:1b: d5:c8:ba:2b:ca:6f:d2:7a:98:74:6d:ed:d5:99:1a: c6:93:67:9f:51:58:f6:ad:04:be:ef:ea:b8:ed:49: 4b:15:bd:46:ab:17:f8:14:5c:53:e8:b7:5b:1a:06: f0:8a:f7:18:e7:d3:ae:f8:ed:bc:cf:f1:dc:d8:d0: 40:1d:b7:ac:3a:42:b0:3b:8d:0a:68:ca:d8:06:a4: b4:fc:09:ae:28:f7:4e:df:33:79:e5:b4:31:76:44: a6:34:7d:93:51:72:5b:b5:d9:26:c0:6b:e5:c1:88: 90:03:6b:32:f8:c7:fe:f4:3d:8a:9b:1c:ab:a3:5f: 34:97:c2:04:ab:65:89:d8:e8:49:90:28:fc:03:3f: a7:18:23:5c:7e:8b:51:a3:f2:f1:a3:69:c8:5c:38: 74:86:96:75:f2:c3:bc:08:7e:5e:0e:9e:3f:0b:88: 67:df:7a:48:5a:d1:53:84:3b:34:a7:07:67:5b:c8: f1:5b:03:b2:f0:dd:a6:c7:fc:0e:29:55:3d:9c:d6: 87:d6:83:ff:e3:60:e9:bb:2c:09:2f:13:63:8c:7d: d8:5c:4a:3f:28:df:62:02:0a:1a:31:f0:e8:4b:3e: e7:c9:25:81:98:1f:18:67:a6:70:96:86:a7:3c:26: e8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:88:CA:C1:94:07:24:4A:EB:8F:97:33:BC:EE:E9:DA:44:19:E3:B3 X509v3 Authority Key Identifier: keyid:D3:98:21:43:FC:BA:44:20:C0:7A:A5:CE:EB:50:ED:B2:84:87:CF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:5d:2b:0e:ff:34:3e:af:01:80:de:fc:c8:3c:a5:29:f1:c8: a1:36:58:c8:2d:d1:93:93:d3:13:1a:23:a7:ce:8f:46:ae:65: af:74:63:12:2e:9d:3c:b7:4e:fb:19:00:6c:28:e4:22:6f:bb: be:96:80:89:26:f7:a6:14:1d:83:09:1f:7c:32:40:66:99:33: b4:49:80:ac:98:db:9e:d1:58:68:fe:9d:c0:c9:cd:56:32:f3: cf:43:9a:a7:a2:2d:e0:0b:a9:e2:ae:fd:67:94:f3:4d:ad:68: 94:e4:73:f9:0f:f2:23:51:6f:b6:dd:dd:10:bf:c9:12:c0:8a: ec:02:b3:e0:fd:3c:a7:14:37:15:9d:da:c6:01:41:b3:eb:2a: f7:ab:b0:08:e9:b3:92:c9:c5:0e:1a:64:ac:85:b9:1a:c2:5b: 1c:74:d8:bd:af:f6:02:69:c3:d7:48:40:86:0b:c8:51:43:4f: 31:67:7a:7b:5d:30:94:51:3c:c8:d5:95:c6:46:4c:da:ca:9b: 3a:81:6e:fe:69:fc:16:dd:5d:8a:40:f1:f6:03:c1:68:62:26: 0e:28:30:08:bb:7e:30:0b:89:65:d0:4c:db:73:32:e4:9c:70: 3f:fa:cc:c1:e4:2a:b9:76:5c:e1:09:3e:af:7d:09:2c:22:a4: 6c:39:e7:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY8tpT+U8YSFrCztz/aH1+vnsfhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM5ODIxNDNGQ0JBNDQyMEMwN0FBNUNFRUI1MEVEQjI4 NDg3Q0YyQzAeFw0yNjA5MjAxODA0MTNaFw0yNjA5MjExOTEwMTNaMDMxMTAvBgNV BAMTKEVBODhDQUMxOTQwNzI0NEFFQjhGOTczM0JDRUVFOURBNDQxOUUzQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC01An9gNR17OuZNaSvG9XIuivK b9J6mHRt7dWZGsaTZ59RWPatBL7v6rjtSUsVvUarF/gUXFPot1saBvCK9xjn0674 7bzP8dzY0EAdt6w6QrA7jQpoytgGpLT8Ca4o907fM3nltDF2RKY0fZNRclu12SbA a+XBiJADazL4x/70PYqbHKujXzSXwgSrZYnY6EmQKPwDP6cYI1x+i1Gj8vGjachc OHSGlnXyw7wIfl4Onj8LiGffekha0VOEOzSnB2dbyPFbA7Lw3abH/A4pVT2c1ofW g//jYOm7LAkvE2OMfdhcSj8o32ICChox8OhLPufJJYGYHxhnpnCWhqc8JuiNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6ojKwZQHJErrj5czvO7p2kQZ47MwHwYDVR0j BBgwFoAU05ghQ/y6RCDAeqXO61DtsoSHzywwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZlZTgyYjctYzE4Mi00ZTgzLTg5N2MtZTAwZjNjZTFiMGQyLzAvRDM5ODIxNDNG Q0JBNDQyMEMwN0FBNUNFRUI1MEVEQjI4NDg3Q0YyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzk4MjE0M0ZDQkE0NDIwQzA3QUE1Q0VFQjUwRURCMjg0ODdD RjJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZlZTgyYjctYzE4Mi00ZTgzLTg5 N2MtZTAwZjNjZTFiMGQyLzAvRDM5ODIxNDNGQ0JBNDQyMEMwN0FBNUNFRUI1MEVE QjI4NDg3Q0YyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGpdKw7/ND6vAYDe/Mg8pSnxyKE2WMgt0ZOT 0xMaI6fOj0auZa90YxIunTy3TvsZAGwo5CJvu76WgIkm96YUHYMJH3wyQGaZM7RJ gKyY257RWGj+ncDJzVYy889DmqeiLeALqeKu/WeU802taJTkc/kP8iNRb7bd3RC/ yRLAiuwCs+D9PKcUNxWd2sYBQbPrKversAjps5LJxQ4aZKyFuRrCWxx02L2v9gJp w9dIQIYLyFFDTzFnentdMJRRPMjVlcZGTNrKmzqBbv5p/BbdXYpA8fYDwWhiJg4o MAi7fjALiWXQTNtzMuSccD/6zMHkKrl2XOEJPq99CSwipGw551g= -----END CERTIFICATE-----Generated at Mon Sep 21 11:59:11 2026 by rpki-client