$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft File: D931809BED9AF438E358376B71B803D5CE61B2F5.mft (raw, json) Hash identifier: 4YCxwFRHXzr8TVBp3ri8l7MEnbradCk03hI2cuQuQdU= Subject key identifier: 04:C3:17:1B:6F:73:F1:46:56:74:91:0B:8A:63:0A:96:38:7A:54:4D Authority key identifier: D9:31:80:9B:ED:9A:F4:38:E3:58:37:6B:71:B8:03:D5:CE:61:B2:F5 Certificate issuer: /CN=D931809BED9AF438E358376B71B803D5CE61B2F5 Certificate serial: 1A12F7D8192C32A9B07E0AA0A19908E53CEAD4CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D931809BED9AF438E358376B71B803D5CE61B2F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft Manifest number: BE Signing time: Mon 21 Sep 2026 15:05:15 +0000 Manifest this update: Mon 21 Sep 2026 15:00:15 +0000 Manifest next update: Tue 22 Sep 2026 17:00:15 +0000 Files and hashes: 1: D931809BED9AF438E358376B71B803D5CE61B2F5.crl (hash: oN9OBirQ+RpPbATS/zyZLxaROmkZZsMvLhC/zcgjIg0=) 2: 3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa (hash: JqEBH5YvRn5xbIFqmvyQg68HK5OM9z3ELY7zjQkgJLI=) 3: 323030313a6466313a326430303a3a2f34382d3438203d3e20313336313132.roa (hash: RKwP+mZy2zIyOi9W+fTg2udU4bmegNaF/ZtZIeSMp7c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.crl rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D931809BED9AF438E358376B71B803D5CE61B2F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 17:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:12:f7:d8:19:2c:32:a9:b0:7e:0a:a0:a1:99:08:e5:3c:ea:d4:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D931809BED9AF438E358376B71B803D5CE61B2F5 Validity Not Before: Sep 21 15:00:15 2026 GMT Not After : Sep 22 17:00:15 2026 GMT Subject: CN=04C3171B6F73F1465674910B8A630A96387A544D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:28:1a:29:9b:dc:29:48:f8:38:3d:4c:81:28: 9f:11:ce:84:7b:76:7a:c6:e4:88:9a:54:18:c9:0e: 27:60:46:33:8d:68:e9:21:e1:d9:94:bc:06:6a:9e: fd:b3:2f:ae:bd:ac:18:0e:12:70:e5:d6:9c:9c:03: 01:73:5e:60:c7:03:37:b0:b3:e3:33:d9:f3:9c:e5: c6:2e:65:b9:1c:0b:8f:5c:7a:18:a2:3d:f2:65:2c: fe:32:8b:00:d0:93:dd:1a:e8:84:4b:27:e2:2c:2b: f4:1f:1a:69:aa:8a:91:56:7d:91:5e:d2:62:1c:0d: e7:94:79:d2:a0:2e:c6:86:46:d9:da:34:ab:8c:fe: d2:a2:ee:7e:85:df:f1:0b:cd:12:e7:8f:58:62:69: 02:f3:45:d4:a4:a0:17:49:8e:ff:05:8e:f3:1f:79: 39:5e:10:74:c8:40:6d:8e:6d:e5:3b:77:4d:ff:b3: 72:5c:26:09:fb:91:a6:d0:8c:24:c7:74:28:a8:e2: 06:8c:d4:87:1c:b4:61:b9:01:c9:00:45:84:78:f3: 0e:5a:bc:96:6d:0b:ea:de:a9:fc:b9:41:03:53:1b: 6c:c7:97:30:ca:cb:76:26:50:7e:5d:bb:83:0a:c0: 58:28:37:bd:56:d8:63:2b:c1:b9:2b:c2:00:8c:8a: 8e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C3:17:1B:6F:73:F1:46:56:74:91:0B:8A:63:0A:96:38:7A:54:4D X509v3 Authority Key Identifier: keyid:D9:31:80:9B:ED:9A:F4:38:E3:58:37:6B:71:B8:03:D5:CE:61:B2:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D931809BED9AF438E358376B71B803D5CE61B2F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:0e:18:3d:09:4d:00:f6:40:d4:11:80:20:7a:13:4b:aa:8d: c0:cc:57:3c:9c:12:63:6f:b4:0f:64:53:d5:10:f8:03:e5:a9: 60:1e:12:bd:4d:62:22:1f:68:13:7e:21:a4:48:55:af:e0:47: e2:2c:7b:c3:8f:1f:fc:93:0d:bc:49:d8:2b:ab:64:92:9a:e4: 29:83:a6:66:9e:43:f5:1f:45:cc:2e:48:4c:f5:79:ae:fc:2a: bb:d8:28:a7:da:29:21:89:48:53:7c:f9:57:52:83:cc:d2:9a: 39:ab:0b:f7:c5:ec:02:d9:6e:a4:1b:58:d3:82:c1:9a:c9:1e: 91:41:c1:1a:05:a2:10:a0:90:ce:11:ae:01:e3:b4:6b:98:b1: 13:e0:c1:cf:38:ad:30:3b:5e:66:c8:60:cf:24:b0:0f:ad:75: 54:fb:8b:29:42:f5:a0:2d:57:7f:0e:e0:29:a1:ba:27:76:44: a3:6f:1e:48:13:05:1e:4d:c1:bf:2f:fb:9d:d1:c7:75:f8:92: 06:f1:2f:36:c3:3e:bb:0a:f3:65:c7:5a:8c:03:37:92:06:6d: a7:95:84:52:82:c7:07:38:fc:f0:a0:36:67:79:3e:50:c0:84: 58:a6:b0:a3:13:8c:7a:e4:ac:ba:dd:33:e5:28:c5:fc:aa:90: e2:9e:ac:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGhL32BksMqmwfgqgoZkI5Tzq1MswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkzMTgwOUJFRDlBRjQzOEUzNTgzNzZCNzFCODAzRDVD RTYxQjJGNTAeFw0yNjA5MjExNTAwMTVaFw0yNjA5MjIxNzAwMTVaMDMxMTAvBgNV BAMTKDA0QzMxNzFCNkY3M0YxNDY1Njc0OTEwQjhBNjMwQTk2Mzg3QTU0NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvKBopm9wpSPg4PUyBKJ8RzoR7 dnrG5IiaVBjJDidgRjONaOkh4dmUvAZqnv2zL669rBgOEnDl1pycAwFzXmDHAzew s+Mz2fOc5cYuZbkcC49cehiiPfJlLP4yiwDQk90a6IRLJ+IsK/QfGmmqipFWfZFe 0mIcDeeUedKgLsaGRtnaNKuM/tKi7n6F3/ELzRLnj1hiaQLzRdSkoBdJjv8FjvMf eTleEHTIQG2ObeU7d03/s3JcJgn7kabQjCTHdCio4gaM1IcctGG5AckARYR48w5a vJZtC+reqfy5QQNTG2zHlzDKy3YmUH5du4MKwFgoN71W2GMrwbkrwgCMio45AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBMMXG29z8UZWdJELimMKljh6VE0wHwYDVR0j BBgwFoAU2TGAm+2a9DjjWDdrcbgD1c5hsvUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjBlMTFmZmMtZTc1YS00YmY0LTg0NDgtYzY4ZTIwMzM1ZWU4LzAvRDkzMTgwOUJF RDlBRjQzOEUzNTgzNzZCNzFCODAzRDVDRTYxQjJGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOTMxODA5QkVEOUFGNDM4RTM1ODM3NkI3MUI4MDNENUNFNjFC MkY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjBlMTFmZmMtZTc1YS00YmY0LTg0 NDgtYzY4ZTIwMzM1ZWU4LzAvRDkzMTgwOUJFRDlBRjQzOEUzNTgzNzZCNzFCODAz RDVDRTYxQjJGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKkOGD0JTQD2QNQRgCB6E0uqjcDMVzycEmNv tA9kU9UQ+APlqWAeEr1NYiIfaBN+IaRIVa/gR+Ise8OPH/yTDbxJ2CurZJKa5CmD pmaeQ/UfRcwuSEz1ea78KrvYKKfaKSGJSFN8+VdSg8zSmjmrC/fF7ALZbqQbWNOC wZrJHpFBwRoFohCgkM4RrgHjtGuYsRPgwc84rTA7XmbIYM8ksA+tdVT7iylC9aAt V38O4Cmhuid2RKNvHkgTBR5Nwb8v+53Rx3X4kgbxLzbDPrsK82XHWowDN5IGbaeV hFKCxwc4/PCgNmd5PlDAhFimsKMTjHrkrLrdM+UoxfyqkOKerEg= -----END CERTIFICATE-----Generated at Tue Sep 22 06:30:40 2026 by rpki-client