$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft File: D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft (raw, json) Hash identifier: NqYAwe92QFY513hzcf4AHqdRS0fzGG7SZ6R7lzkNpP4= Subject key identifier: AB:5B:45:13:0D:CD:6A:DD:B2:48:00:C6:AE:BC:B5:1A:22:3F:91:0F Authority key identifier: D0:F0:C8:D1:50:FE:AE:B3:B2:62:AE:26:0E:ED:6E:FA:46:C4:C6:25 Certificate issuer: /CN=D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625 Certificate serial: 6F08D7EDF47BCD6DB4A2B2905B971872996D77FD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft Manifest number: BF Signing time: Tue 22 Sep 2026 02:45:00 +0000 Manifest this update: Tue 22 Sep 2026 02:40:00 +0000 Manifest next update: Wed 23 Sep 2026 04:01:00 +0000 Files and hashes: 1: 3130332e3138302e3139372e302f32342d3234203d3e20313439333639.roa (hash: 6zRlVB+7VhU+EM3gEBCiqmflsWcB74DY3jlrVLYDaZ8=) 2: D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.crl (hash: omq9aeh1CjIMegn8cUWu8coCufwDRB/YIqKynRsqIXE=) 3: 323030313a6466303a363063303a3a2f34382d3438203d3e20313439333639.roa (hash: 4KthRL11gBmJfq1X/84ocL39dco9wY9VllXbFEY9aPQ=) 4: 3130332e3138302e3139362e302f32342d3234203d3e20313439333639.roa (hash: VU4Fqm4q9lM1qlbwtCDfQfln3xy8Zkz6BXFC8JhBhSw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.crl rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 04:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:08:d7:ed:f4:7b:cd:6d:b4:a2:b2:90:5b:97:18:72:99:6d:77:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625 Validity Not Before: Sep 22 02:40:00 2026 GMT Not After : Sep 23 04:01:00 2026 GMT Subject: CN=AB5B45130DCD6ADDB24800C6AEBCB51A223F910F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:99:58:62:0a:59:41:30:a9:cb:48:f0:04:57: 00:2a:3a:5d:e8:d5:de:31:26:1c:c7:bb:a9:01:30: 6e:f5:1a:27:0f:51:6f:e2:49:cc:90:38:97:9a:17: d9:06:82:ae:e5:65:39:02:5c:04:ab:42:91:a9:99: a3:ae:98:c8:3e:3d:e0:a6:66:d7:f1:15:5b:35:3f: 68:d8:3f:71:e8:c2:7c:13:ea:16:57:5d:1f:6b:40: 5e:8d:3f:34:11:de:d1:ca:be:d0:9b:f0:8f:08:e7: 10:20:88:35:27:91:b6:44:23:7c:bc:46:c4:22:d2: 3e:01:66:da:28:c6:ee:39:1b:ce:44:67:4f:85:97: 63:2f:f1:d4:77:05:12:47:fe:09:70:93:4e:e8:14: af:7e:3d:64:bf:15:c2:98:78:f4:5e:42:80:43:8f: 6a:c2:89:d9:75:7a:75:a8:74:7f:90:15:3a:ec:cd: ef:4a:eb:c4:f3:31:24:ff:85:d5:9e:8f:a8:1c:dc: 7c:cb:27:4a:dd:25:06:1a:b3:03:86:ac:8d:e6:02: fd:e3:cf:66:29:c3:91:58:13:53:61:10:f1:66:78: b3:58:48:7e:a9:2f:ac:ce:b2:b0:4c:0f:39:90:b8: db:83:28:10:ce:ac:b2:36:1c:0f:c9:95:3d:61:cd: df:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5B:45:13:0D:CD:6A:DD:B2:48:00:C6:AE:BC:B5:1A:22:3F:91:0F X509v3 Authority Key Identifier: keyid:D0:F0:C8:D1:50:FE:AE:B3:B2:62:AE:26:0E:ED:6E:FA:46:C4:C6:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:81:8b:65:3e:a7:f1:01:27:f2:4f:48:03:2d:80:db:50:ba: 52:fb:88:63:12:e8:e9:71:7d:6e:57:8b:5b:7e:cb:7b:9f:08: 8d:bd:3b:72:5b:5a:bb:11:76:12:2f:88:d2:57:54:80:43:c3: 4a:fb:27:bf:c0:41:fb:17:c5:82:03:08:4e:a0:f2:39:0d:23: d8:c8:31:84:32:6f:3a:0e:2d:e8:d4:e1:35:96:fb:19:27:72: e1:8e:42:a1:94:d5:d0:3d:11:8f:ab:3d:ca:18:57:7d:14:41: e2:32:8c:c5:63:e1:8d:c4:09:8e:2c:c2:3a:31:fb:2b:83:d7: 44:aa:7d:08:d4:31:91:56:24:a4:d8:66:3b:89:33:3f:52:c6: 65:21:4e:c2:9d:50:a3:44:86:0e:44:96:15:54:7e:a9:c2:9f: e8:d7:dd:3a:ce:86:d9:be:6d:46:aa:63:3f:fa:bd:bd:f4:22: 79:23:8a:4c:18:11:f9:57:4f:4f:ae:58:0d:df:5a:bf:54:0f: 29:73:af:1c:d9:89:6f:3d:69:e4:5f:fc:a0:f4:1f:08:7f:6f: 1d:f9:c7:95:13:e7:55:05:20:0f:9b:bb:7f:ba:c7:cb:20:e9: f6:87:a1:af:60:7c:2c:79:f8:63:74:ea:a1:26:df:15:08:8c: ba:22:24:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbwjX7fR7zW20orKQW5cYcpltd/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGMEM4RDE1MEZFQUVCM0IyNjJBRTI2MEVFRDZFRkE0 NkM0QzYyNTAeFw0yNjA5MjIwMjQwMDBaFw0yNjA5MjMwNDAxMDBaMDMxMTAvBgNV BAMTKEFCNUI0NTEzMERDRDZBRERCMjQ4MDBDNkFFQkNCNTFBMjIzRjkxMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBmVhiCllBMKnLSPAEVwAqOl3o 1d4xJhzHu6kBMG71GicPUW/iScyQOJeaF9kGgq7lZTkCXASrQpGpmaOumMg+PeCm ZtfxFVs1P2jYP3HownwT6hZXXR9rQF6NPzQR3tHKvtCb8I8I5xAgiDUnkbZEI3y8 RsQi0j4BZtooxu45G85EZ0+Fl2Mv8dR3BRJH/glwk07oFK9+PWS/FcKYePReQoBD j2rCidl1enWodH+QFTrsze9K68TzMST/hdWej6gc3HzLJ0rdJQYaswOGrI3mAv3j z2Ypw5FYE1NhEPFmeLNYSH6pL6zOsrBMDzmQuNuDKBDOrLI2HA/JlT1hzd/BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq1tFEw3Nat2ySADGrry1GiI/kQ8wHwYDVR0j BBgwFoAU0PDI0VD+rrOyYq4mDu1u+kbExiUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjUxZDZjOWMtZWFkNy00NWZlLWExOWEtNDIyMzVmYzUzNzgwLzAvRDBGMEM4RDE1 MEZFQUVCM0IyNjJBRTI2MEVFRDZFRkE0NkM0QzYyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMEYwQzhEMTUwRkVBRUIzQjI2MkFFMjYwRUVENkVGQTQ2QzRD NjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjUxZDZjOWMtZWFkNy00NWZlLWEx OWEtNDIyMzVmYzUzNzgwLzAvRDBGMEM4RDE1MEZFQUVCM0IyNjJBRTI2MEVFRDZF RkE0NkM0QzYyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGuBi2U+p/EBJ/JPSAMtgNtQulL7iGMS6Olx fW5Xi1t+y3ufCI29O3JbWrsRdhIviNJXVIBDw0r7J7/AQfsXxYIDCE6g8jkNI9jI MYQybzoOLejU4TWW+xkncuGOQqGU1dA9EY+rPcoYV30UQeIyjMVj4Y3ECY4swjox +yuD10SqfQjUMZFWJKTYZjuJMz9SxmUhTsKdUKNEhg5ElhVUfqnCn+jX3TrOhtm+ bUaqYz/6vb30InkjikwYEflXT0+uWA3fWr9UDylzrxzZiW89aeRf/KD0Hwh/bx35 x5UT51UFIA+bu3+6x8sg6faHoa9gfCx5+GN06qEm3xUIjLoiJDc= -----END CERTIFICATE-----Generated at Tue Sep 22 21:56:39 2026 by rpki-client