$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft File: D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft (raw, json) Hash identifier: BKGgqUDs/MT2lqjDlwp7IRUiRxwlsVKp5liDjdXZLlM= Subject key identifier: 65:B5:A6:7E:CE:69:69:57:64:77:06:3D:7C:83:BE:43:C4:F4:3E:2E Authority key identifier: D6:0F:BD:2B:1B:51:51:C3:F4:07:34:AE:4A:95:27:7F:C9:BD:8C:BF Certificate issuer: /CN=D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF Certificate serial: 254D34C4E280CACE910C932F719016A2FC314C26 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 16:47:11 +0000 Manifest this update: Tue 22 Sep 2026 16:42:11 +0000 Manifest next update: Wed 23 Sep 2026 17:57:11 +0000 Files and hashes: 1: D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl (hash: DAAQ5BzyE5cDbYmJBydRJ4Rw0Rvl20vlCwul9pF30Ms=) 2: 3135372e36362e32302e302f32342d3234203d3e20313337333439.roa (hash: hKC4O+Dbys8awahI6Y0F2x8aosLXlC3tFEHhosWplhc=) 3: 3135372e36362e32312e302f32342d3234203d3e20313431353932.roa (hash: g/M/W8nBgP5S2ayXN1SiAqh0ligQCCsMJq/IueYk4OY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 17:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:4d:34:c4:e2:80:ca:ce:91:0c:93:2f:71:90:16:a2:fc:31:4c:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF Validity Not Before: Sep 22 16:42:11 2026 GMT Not After : Sep 23 17:57:11 2026 GMT Subject: CN=65B5A67ECE6969576477063D7C83BE43C4F43E2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:88:bf:7a:bd:41:91:b7:8d:38:ef:ca:ce:b6: 61:43:16:1f:0a:98:5e:23:77:e0:93:7d:20:52:d2: 20:99:87:77:d2:53:05:25:52:b4:2c:0c:ec:08:54: b1:67:18:4f:55:99:7b:8a:24:a8:fa:83:28:de:5d: 39:06:07:d9:02:ed:0a:63:a1:5a:20:c6:a4:f6:2c: 48:71:aa:a4:f0:5b:17:27:73:28:a9:a6:be:81:aa: 65:fa:c0:86:c3:85:f2:15:5b:5c:2d:6f:6d:7e:b5: 7e:e8:03:18:57:1f:96:d7:2f:4b:a8:76:41:ea:af: 88:80:40:fc:c4:63:86:0d:f2:06:76:bf:19:bc:c1: 70:57:80:ce:3b:59:c1:f2:15:19:4e:0c:f6:96:e4: 25:62:b9:e5:c3:0f:5c:7f:41:e2:ce:d2:80:4c:70: 5c:21:7d:21:af:3e:b8:99:27:a2:1d:7e:45:f8:b2: 14:4d:25:71:47:81:e1:45:74:f5:d3:4f:a0:2f:93: dc:25:d9:27:6c:50:ee:bf:ab:fc:c7:d8:d6:b9:76: 4b:9a:06:35:bf:55:57:61:2a:61:c4:03:94:e7:95: 02:27:3f:bc:e4:0c:ec:6e:42:95:6f:10:af:49:f8: f5:b5:0f:f2:af:bd:e2:3e:4f:d8:aa:e2:23:d3:ea: 67:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B5:A6:7E:CE:69:69:57:64:77:06:3D:7C:83:BE:43:C4:F4:3E:2E X509v3 Authority Key Identifier: keyid:D6:0F:BD:2B:1B:51:51:C3:F4:07:34:AE:4A:95:27:7F:C9:BD:8C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:6a:8d:70:2d:57:fb:b5:2c:ef:11:57:f3:f4:b0:1b:41:bb: 28:9a:00:55:a0:e9:23:97:d8:de:e3:b5:ec:04:32:84:c1:e5: ef:13:29:93:d0:80:29:dd:41:19:0b:d6:45:5b:57:f3:11:d2: 91:04:e1:59:13:6a:4a:12:c4:b7:54:f1:df:8a:0c:96:16:04: e2:8f:7f:bb:00:b8:a0:6a:a5:fa:02:c1:ac:9e:df:9d:2f:dc: 47:4d:b1:e9:3e:0f:6b:10:84:1a:1c:75:eb:90:b6:6d:9e:52: 55:d3:5c:7d:94:14:04:45:ab:e1:aa:06:36:4f:d8:c2:ea:4d: 37:9b:02:21:53:62:4b:35:77:4d:0c:e7:b9:ff:3e:04:80:38: 3c:89:be:59:78:0d:b5:5e:6e:42:62:97:ef:f2:b0:03:f3:0a: 14:8f:42:ab:ea:48:5c:c7:6e:e2:c6:04:3b:e5:e1:8f:1b:28: 52:37:31:e5:c0:ff:fa:8e:eb:68:d3:5f:41:db:29:ff:04:11: 8e:f9:72:7c:fd:ac:33:c5:2c:25:9f:d7:02:6d:5b:f2:e0:61: 82:e6:f8:f0:d3:2a:2f:d8:43:c3:21:2f:30:45:67:31:28:58: 58:8b:7c:5f:ea:ee:07:af:53:00:d1:76:52:43:a8:f5:8b:fc: 29:38:3e:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJU00xOKAys6RDJMvcZAWovwxTCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYwRkJEMkIxQjUxNTFDM0Y0MDczNEFFNEE5NTI3N0ZD OUJEOENCRjAeFw0yNjA5MjIxNjQyMTFaFw0yNjA5MjMxNzU3MTFaMDMxMTAvBgNV BAMTKDY1QjVBNjdFQ0U2OTY5NTc2NDc3MDYzRDdDODNCRTQzQzRGNDNFMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGiL96vUGRt40478rOtmFDFh8K mF4jd+CTfSBS0iCZh3fSUwUlUrQsDOwIVLFnGE9VmXuKJKj6gyjeXTkGB9kC7Qpj oVogxqT2LEhxqqTwWxcncyippr6BqmX6wIbDhfIVW1wtb21+tX7oAxhXH5bXL0uo dkHqr4iAQPzEY4YN8gZ2vxm8wXBXgM47WcHyFRlODPaW5CViueXDD1x/QeLO0oBM cFwhfSGvPriZJ6IdfkX4shRNJXFHgeFFdPXTT6Avk9wl2SdsUO6/q/zH2Na5dkua BjW/VVdhKmHEA5TnlQInP7zkDOxuQpVvEK9J+PW1D/KvveI+T9iq4iPT6mcnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZbWmfs5paVdkdwY9fIO+Q8T0Pi4wHwYDVR0j BBgwFoAU1g+9KxtRUcP0BzSuSpUnf8m9jL8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjVmNWVmMTgtNmZmYS00ZDY5LThjMGMtMzUxOGNmYTg3NThlLzAvRDYwRkJEMkIx QjUxNTFDM0Y0MDczNEFFNEE5NTI3N0ZDOUJEOENCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENjBGQkQyQjFCNTE1MUMzRjQwNzM0QUU0QTk1Mjc3RkM5QkQ4 Q0JGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjVmNWVmMTgtNmZmYS00ZDY5LThj MGMtMzUxOGNmYTg3NThlLzAvRDYwRkJEMkIxQjUxNTFDM0Y0MDczNEFFNEE5NTI3 N0ZDOUJEOENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMxqjXAtV/u1LO8RV/P0sBtBuyiaAFWg6SOX 2N7jtewEMoTB5e8TKZPQgCndQRkL1kVbV/MR0pEE4VkTakoSxLdU8d+KDJYWBOKP f7sAuKBqpfoCwaye350v3EdNsek+D2sQhBocdeuQtm2eUlXTXH2UFARFq+GqBjZP 2MLqTTebAiFTYks1d00M57n/PgSAODyJvll4DbVebkJil+/ysAPzChSPQqvqSFzH buLGBDvl4Y8bKFI3MeXA//qO62jTX0HbKf8EEY75cnz9rDPFLCWf1wJtW/LgYYLm +PDTKi/YQ8MhLzBFZzEoWFiLfF/q7gevUwDRdlJDqPWL/Ck4PmQ= -----END CERTIFICATE-----Generated at Wed Sep 23 04:30:58 2026 by rpki-client