$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft File: DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft (raw, json) Hash identifier: xAKGZy+yOihgVUbtJ5FRvStoGcmsRWI+htldByTP1i0= Subject key identifier: BC:29:48:7C:F5:49:E5:4E:25:A1:1C:4F:07:4D:C9:78:E6:8D:62:A9 Authority key identifier: DC:AA:50:0E:56:DF:59:B6:81:7A:DE:1D:51:B5:60:5F:52:26:4D:76 Certificate issuer: /CN=DCAA500E56DF59B6817ADE1D51B5605F52264D76 Certificate serial: 7C8D04199BAC481F565148203CA70974704D5389 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCAA500E56DF59B6817ADE1D51B5605F52264D76.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft Manifest number: BD Signing time: Mon 21 Sep 2026 01:13:01 +0000 Manifest this update: Mon 21 Sep 2026 01:08:01 +0000 Manifest next update: Tue 22 Sep 2026 04:25:01 +0000 Files and hashes: 1: DCAA500E56DF59B6817ADE1D51B5605F52264D76.crl (hash: ak9WBGP/S3dQDh/DBTseTdxtFLOJTkMDt75Kbgi2Sho=) 2: 3130332e3138362e38392e302f32342d3234203d3e20313439373137.roa (hash: CdzPgARwHWVAiNVpWfYHHcwq4khjb1oCYEqwBbuFJZI=) 3: 3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa (hash: hgyoReewnJKW4nr6+Jg49Hdij/Yxck5vrTJyyAU/fpU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.crl rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCAA500E56DF59B6817ADE1D51B5605F52264D76.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:25:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:8d:04:19:9b:ac:48:1f:56:51:48:20:3c:a7:09:74:70:4d:53:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCAA500E56DF59B6817ADE1D51B5605F52264D76 Validity Not Before: Sep 21 01:08:01 2026 GMT Not After : Sep 22 04:25:01 2026 GMT Subject: CN=BC29487CF549E54E25A11C4F074DC978E68D62A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:22:79:44:93:73:59:8c:4c:98:4b:31:ec:72: 64:df:fe:4e:a6:c3:37:96:42:0c:d7:b2:83:ab:0c: 93:d2:ab:21:74:23:56:4f:86:9e:6d:d4:10:7d:c5: 9a:e7:2e:e1:f3:6d:f4:d0:10:1f:7c:0f:ee:e6:c5: 30:50:89:29:bf:33:07:00:ff:00:92:92:49:ad:57: a4:38:a2:67:72:ad:28:dc:ed:c3:ff:46:ba:47:c4: 19:ff:25:9b:e9:fc:e2:26:37:2b:bb:6f:49:6d:c1: 0d:1d:0a:74:84:f7:b0:d5:4d:41:46:dd:19:06:d4: 37:fc:ce:9c:ad:aa:7c:a2:25:88:46:57:39:03:c0: 8b:22:f1:08:67:69:71:32:08:b4:ec:bd:40:01:9d: 09:18:6b:99:60:0b:8b:a0:76:b6:bd:d2:07:f6:2e: 89:95:43:69:7a:43:fb:85:da:62:49:ce:f7:f0:3d: 57:be:05:58:98:a9:07:94:3d:eb:47:a6:4a:3f:4f: 1e:bd:86:c9:3c:f2:69:4c:9b:90:fa:3c:8f:44:2a: e6:11:57:9f:4d:3b:e6:20:fb:01:85:20:3e:22:14: 74:eb:50:4c:9a:f5:25:b8:7f:e5:fc:d3:bf:cb:c4: 41:84:b0:f4:4f:c9:89:d9:b5:09:a8:17:4a:69:29: c9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:29:48:7C:F5:49:E5:4E:25:A1:1C:4F:07:4D:C9:78:E6:8D:62:A9 X509v3 Authority Key Identifier: keyid:DC:AA:50:0E:56:DF:59:B6:81:7A:DE:1D:51:B5:60:5F:52:26:4D:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCAA500E56DF59B6817ADE1D51B5605F52264D76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:31:a1:96:11:09:09:65:e6:d5:5f:1a:fb:73:42:fb:c9:5e: 56:47:69:1f:f0:f5:34:16:14:e7:f6:5b:e9:87:f2:28:1f:30: e3:69:4f:6f:03:a4:16:a5:b2:0d:4a:c4:46:3a:2c:6a:2a:c6: 08:c1:fd:40:b7:5a:61:c2:78:d2:43:62:ba:b3:c5:88:2f:f1: 9b:7e:af:0b:d3:c2:f1:40:55:b0:45:14:c9:cc:4e:c4:02:6f: 55:42:5a:08:2d:b8:26:11:3c:19:84:0c:1e:06:75:fa:ef:da: af:12:ff:e8:0e:8b:32:74:7f:72:95:c2:74:42:f4:58:d7:09: 5b:30:0b:5b:dc:36:dc:1b:d4:52:bd:52:22:f8:81:96:6a:0a: 53:2e:da:33:83:4d:7c:52:63:1c:12:81:06:db:da:12:7d:75: 82:0c:21:eb:32:69:e0:44:81:27:9f:07:4e:4f:95:34:5a:f2: c6:e8:58:da:8b:83:fd:5b:09:52:9f:ae:e5:13:fd:80:8d:1d: 1a:1a:fe:4d:ce:56:72:54:67:29:b8:0f:4c:62:59:1f:4d:bf: c0:96:92:ae:f3:e0:c9:24:38:dd:42:92:84:e3:68:a1:76:a8: 35:fb:87:1d:42:c3:f1:1b:2f:da:16:b2:15:42:18:36:db:0a: 4d:ef:3c:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfI0EGZusSB9WUUggPKcJdHBNU4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENBQTUwMEU1NkRGNTlCNjgxN0FERTFENTFCNTYwNUY1 MjI2NEQ3NjAeFw0yNjA5MjEwMTA4MDFaFw0yNjA5MjIwNDI1MDFaMDMxMTAvBgNV BAMTKEJDMjk0ODdDRjU0OUU1NEUyNUExMUM0RjA3NERDOTc4RTY4RDYyQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAInlEk3NZjEyYSzHscmTf/k6m wzeWQgzXsoOrDJPSqyF0I1ZPhp5t1BB9xZrnLuHzbfTQEB98D+7mxTBQiSm/MwcA /wCSkkmtV6Q4omdyrSjc7cP/RrpHxBn/JZvp/OImNyu7b0ltwQ0dCnSE97DVTUFG 3RkG1Df8zpytqnyiJYhGVzkDwIsi8QhnaXEyCLTsvUABnQkYa5lgC4ugdra90gf2 LomVQ2l6Q/uF2mJJzvfwPVe+BViYqQeUPetHpko/Tx69hsk88mlMm5D6PI9EKuYR V59NO+Yg+wGFID4iFHTrUEya9SW4f+X807/LxEGEsPRPyYnZtQmoF0ppKcm/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvClIfPVJ5U4loRxPB03JeOaNYqkwHwYDVR0j BBgwFoAU3KpQDlbfWbaBet4dUbVgX1ImTXYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTMyOTVkZTYtMjA1OC00NmE3LTkzNmItMDUyY2YyZmE5MjBkLzAvRENBQTUwMEU1 NkRGNTlCNjgxN0FERTFENTFCNTYwNUY1MjI2NEQ3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0FBNTAwRTU2REY1OUI2ODE3QURFMUQ1MUI1NjA1RjUyMjY0 RDc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTMyOTVkZTYtMjA1OC00NmE3LTkz NmItMDUyY2YyZmE5MjBkLzAvRENBQTUwMEU1NkRGNTlCNjgxN0FERTFENTFCNTYw NUY1MjI2NEQ3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAExoZYRCQll5tVfGvtzQvvJXlZHaR/w9TQW FOf2W+mH8igfMONpT28DpBalsg1KxEY6LGoqxgjB/UC3WmHCeNJDYrqzxYgv8Zt+ rwvTwvFAVbBFFMnMTsQCb1VCWggtuCYRPBmEDB4Gdfrv2q8S/+gOizJ0f3KVwnRC 9FjXCVswC1vcNtwb1FK9UiL4gZZqClMu2jODTXxSYxwSgQbb2hJ9dYIMIesyaeBE gSefB05PlTRa8sboWNqLg/1bCVKfruUT/YCNHRoa/k3OVnJUZym4D0xiWR9Nv8CW kq7z4MkkON1CkoTjaKF2qDX7hx1Cw/EbL9oWshVCGDbbCk3vPIs= -----END CERTIFICATE-----Generated at Mon Sep 21 20:56:50 2026 by rpki-client