$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft File: D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft (raw, json) Hash identifier: 7rEA0O+C/LZE81cQp6ye/bQ7ZX3OQi2ktyIXqpPWqp4= Subject key identifier: FC:4B:B3:B6:6A:B7:33:EF:FB:C1:57:70:0A:C5:12:4D:56:19:FB:FB Authority key identifier: D5:48:4C:C7:34:0F:D3:8F:D1:52:B9:51:A8:12:A7:BB:0D:2D:C7:4C Certificate issuer: /CN=D5484CC7340FD38FD152B951A812A7BB0D2DC74C Certificate serial: 284988A25D48DD85A83B7FA05B09E7D369776DA9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft Manifest number: BE Signing time: Mon 21 Sep 2026 12:06:14 +0000 Manifest this update: Mon 21 Sep 2026 12:01:14 +0000 Manifest next update: Tue 22 Sep 2026 14:10:14 +0000 Files and hashes: 1: 3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa (hash: qJeB9IbjX5ag+QxaHUzr5lUIsrKHS9OTMwiaemsfQJ0=) 2: D5484CC7340FD38FD152B951A812A7BB0D2DC74C.crl (hash: El1WstRTBeZ9u9ThFTb9HZXtBvZ6vVZ3AWJZJtCpBeI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.crl rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:49:88:a2:5d:48:dd:85:a8:3b:7f:a0:5b:09:e7:d3:69:77:6d:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5484CC7340FD38FD152B951A812A7BB0D2DC74C Validity Not Before: Sep 21 12:01:14 2026 GMT Not After : Sep 22 14:10:14 2026 GMT Subject: CN=FC4BB3B66AB733EFFBC157700AC5124D5619FBFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:31:ff:f4:82:9d:00:a1:52:20:81:05:ef:e9: 19:b4:ac:b0:9b:c4:2a:0c:2b:72:fb:29:df:d7:e0: 38:cd:e1:b5:1a:16:7b:92:09:38:9c:64:26:ad:ed: 28:72:df:ab:d2:ec:71:0c:f5:80:03:a3:96:3a:2b: 57:ac:67:7f:b3:01:0e:5b:17:89:07:f5:8d:8d:8a: 13:a6:41:a6:5a:78:c5:9a:dc:65:c4:a5:c3:d2:3c: 90:11:e5:0f:87:d8:62:e5:ec:27:64:30:56:88:c2: 24:7a:b2:78:dc:c8:fb:cf:b8:48:4b:50:8d:fb:f8: b6:84:82:2c:f3:b8:1b:3c:9a:e7:b4:2d:21:87:ef: a8:de:63:61:74:fd:3f:02:10:02:28:d6:a3:ee:bc: c1:d2:84:fb:57:c4:7f:26:02:0f:1f:ef:3e:03:1f: a4:9b:fe:73:78:93:1c:e5:9c:82:3d:c2:ee:de:8d: 0f:96:d7:97:29:d7:7e:f4:34:2e:88:67:48:31:d0: b9:82:4a:ad:37:7b:24:71:89:54:bf:77:d1:de:93: c1:54:21:f9:6a:3c:a1:48:4e:ef:48:6a:8b:90:66: a6:f2:dc:51:02:61:6a:f8:37:31:e5:09:58:99:80: 1b:31:c8:82:93:4c:b0:e1:eb:dd:de:cf:cf:d6:dc: 2a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:4B:B3:B6:6A:B7:33:EF:FB:C1:57:70:0A:C5:12:4D:56:19:FB:FB X509v3 Authority Key Identifier: keyid:D5:48:4C:C7:34:0F:D3:8F:D1:52:B9:51:A8:12:A7:BB:0D:2D:C7:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:b0:d5:26:f8:93:a7:42:21:13:6e:82:3a:12:c1:50:9e:f4: 5c:bc:16:ac:ab:be:fb:c9:8e:0e:be:03:2f:7c:b6:38:41:d3: 49:a7:35:9e:37:93:c0:22:c2:c1:46:af:64:b7:23:16:9a:b1: 03:fa:89:7d:6f:aa:46:61:13:c4:62:7a:31:4a:9e:bf:38:ed: ef:c4:46:04:f8:79:f0:b9:38:f0:ca:80:b7:a3:94:0c:9f:7a: 2d:e9:02:00:21:64:04:0a:a3:90:79:f0:26:99:22:2d:01:f6: 52:e1:6e:13:2d:e7:2e:c3:95:9a:e2:b7:69:7f:82:cc:5a:b5: 97:c9:43:97:78:3e:50:b1:b0:70:47:38:79:f2:ee:e8:01:e7: ab:a1:75:00:09:dd:5c:d1:55:99:09:30:4c:d3:e4:4b:d6:ae: c6:91:91:78:d7:bf:4b:61:60:ec:50:d5:55:3d:31:ad:63:f1: 16:b6:85:ea:9f:6f:b9:ab:eb:0f:6c:d6:d7:6c:cc:13:47:43: 04:c8:4e:f7:d1:a1:1f:3a:72:3e:ef:3d:7e:4c:c0:ff:6b:7b: 68:83:66:29:1b:cc:76:cf:1c:19:7d:08:a5:59:66:e7:67:c2: d1:6a:1a:e5:c6:25:31:7e:fc:a8:57:2b:c6:48:51:f3:0c:3a: d1:8e:7a:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKEmIol1I3YWoO3+gWwnn02l3bakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0ODRDQzczNDBGRDM4RkQxNTJCOTUxQTgxMkE3QkIw RDJEQzc0QzAeFw0yNjA5MjExMjAxMTRaFw0yNjA5MjIxNDEwMTRaMDMxMTAvBgNV BAMTKEZDNEJCM0I2NkFCNzMzRUZGQkMxNTc3MDBBQzUxMjRENTYxOUZCRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRMf/0gp0AoVIggQXv6Rm0rLCb xCoMK3L7Kd/X4DjN4bUaFnuSCTicZCat7Shy36vS7HEM9YADo5Y6K1esZ3+zAQ5b F4kH9Y2NihOmQaZaeMWa3GXEpcPSPJAR5Q+H2GLl7CdkMFaIwiR6snjcyPvPuEhL UI37+LaEgizzuBs8mue0LSGH76jeY2F0/T8CEAIo1qPuvMHShPtXxH8mAg8f7z4D H6Sb/nN4kxzlnII9wu7ejQ+W15cp1370NC6IZ0gx0LmCSq03eyRxiVS/d9Hek8FU IflqPKFITu9IaouQZqby3FECYWr4NzHlCViZgBsxyIKTTLDh693ez8/W3CrBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Euztmq3M+/7wVdwCsUSTVYZ+/swHwYDVR0j BBgwFoAU1UhMxzQP04/RUrlRqBKnuw0tx0wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjJlM2U5ODEtYmYzOS00MmUwLWEyZjYtY2Y4N2M3NTdmODI3LzAvRDU0ODRDQzcz NDBGRDM4RkQxNTJCOTUxQTgxMkE3QkIwRDJEQzc0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTQ4NENDNzM0MEZEMzhGRDE1MkI5NTFBODEyQTdCQjBEMkRD NzRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjJlM2U5ODEtYmYzOS00MmUwLWEy ZjYtY2Y4N2M3NTdmODI3LzAvRDU0ODRDQzczNDBGRDM4RkQxNTJCOTUxQTgxMkE3 QkIwRDJEQzc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGaw1Sb4k6dCIRNugjoSwVCe9Fy8FqyrvvvJ jg6+Ay98tjhB00mnNZ43k8AiwsFGr2S3IxaasQP6iX1vqkZhE8RiejFKnr847e/E RgT4efC5OPDKgLejlAyfei3pAgAhZAQKo5B58CaZIi0B9lLhbhMt5y7DlZrit2l/ gsxatZfJQ5d4PlCxsHBHOHny7ugB56uhdQAJ3VzRVZkJMEzT5EvWrsaRkXjXv0th YOxQ1VU9Ma1j8Ra2heqfb7mr6w9s1tdszBNHQwTITvfRoR86cj7vPX5MwP9re2iD ZikbzHbPHBl9CKVZZudnwtFqGuXGJTF+/KhXK8ZIUfMMOtGOeoA= -----END CERTIFICATE-----Generated at Mon Sep 21 16:20:25 2026 by rpki-client