$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft File: DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft (raw, json) Hash identifier: Ztl2WjJMEl8b9qT53F/cfuE6OymF7f5eRwxN1DGZF2Q= Subject key identifier: FA:7F:34:1C:AA:0E:B3:8B:8A:7A:8E:2B:1F:A9:9E:54:40:4A:06:66 Authority key identifier: DC:C1:42:E4:BC:0A:93:D2:22:74:4D:76:4B:A3:1B:31:C5:F7:21:F4 Certificate issuer: /CN=DCC142E4BC0A93D222744D764BA31B31C5F721F4 Certificate serial: 1E89DE39E74C2046ADBCD36D977FF444D55FEA2E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft Manifest number: BF Signing time: Tue 22 Sep 2026 03:20:49 +0000 Manifest this update: Tue 22 Sep 2026 03:15:49 +0000 Manifest next update: Wed 23 Sep 2026 03:53:49 +0000 Files and hashes: 1: DCC142E4BC0A93D222744D764BA31B31C5F721F4.crl (hash: 5uWKE5alaG/au8CuguMlit8GBvK1QSfYWN8uqeJm4ak=) 2: 3130332e3136362e32362e302f32342d3234203d3e20313431393334.roa (hash: kO0czL3TN60s3A1dU0vSyh5gDjSRSVnVJULPxG64o8c=) 3: 3130332e3136362e32362e302f32332d3233203d3e20313431393334.roa (hash: KOwZSGqnrtZ75etXMGQpPSN15jiljiF6C7JF8Icyb+k=) 4: 3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa (hash: 8pY7CX5C+z8Wdb/RykV2FDaB/r21Vc0UIOUPAUQlFnI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.crl rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:89:de:39:e7:4c:20:46:ad:bc:d3:6d:97:7f:f4:44:d5:5f:ea:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCC142E4BC0A93D222744D764BA31B31C5F721F4 Validity Not Before: Sep 22 03:15:49 2026 GMT Not After : Sep 23 03:53:49 2026 GMT Subject: CN=FA7F341CAA0EB38B8A7A8E2B1FA99E54404A0666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:66:b7:02:e4:7b:c0:07:88:e9:c7:48:3a:a1: 3d:06:60:0f:00:79:e2:f8:f0:7a:6d:5b:5d:55:dd: 63:35:ec:4c:03:f6:a8:e0:97:61:36:c7:c8:e6:2c: 91:31:87:c7:86:43:16:6d:43:56:e9:74:cd:5b:8d: b1:f1:63:f8:11:ef:7b:b1:5f:49:ef:68:b8:86:df: 74:43:c2:fd:05:37:00:3c:0b:53:8b:80:3b:c6:fd: a1:77:70:6c:4d:bb:13:56:be:1d:fa:db:91:56:74: 4d:be:b8:76:c3:16:dd:5d:9c:12:c9:9f:8c:99:95: 87:4b:a7:aa:33:42:54:f1:2a:e3:fa:02:5a:9c:0a: ed:32:88:f5:ae:3d:43:36:3e:9b:a1:3a:ab:58:d7: bf:c8:99:33:76:f0:ee:2a:3a:99:5d:ae:ad:0e:e7: 92:8e:00:15:62:43:81:eb:66:3c:be:01:07:5e:8a: fc:14:17:96:80:8f:f6:ea:a8:ba:7d:d9:15:a4:6c: 54:a3:a2:77:84:bb:67:44:b6:6b:f7:e2:1c:85:5c: ba:aa:9a:26:6a:58:d7:7f:83:65:d1:7c:d8:48:b2: 20:9c:ac:b5:5d:80:b8:33:1c:88:7c:fb:d6:35:09: 4d:60:af:00:ec:07:cc:5c:50:9c:88:93:b2:57:ff: bd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7F:34:1C:AA:0E:B3:8B:8A:7A:8E:2B:1F:A9:9E:54:40:4A:06:66 X509v3 Authority Key Identifier: keyid:DC:C1:42:E4:BC:0A:93:D2:22:74:4D:76:4B:A3:1B:31:C5:F7:21:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:e7:f3:89:1c:2d:af:bc:39:dd:86:cb:f6:8b:f9:23:b1:43: 85:0d:30:f3:8a:48:35:06:6b:44:32:19:92:8c:35:1a:f3:70: 0c:bc:33:d7:8c:5e:8f:00:77:64:34:dd:8d:e4:49:a5:74:5f: 5e:4d:a7:17:a1:f8:fa:2b:83:77:55:f9:3b:2d:f5:79:14:f4: 9b:0c:6e:29:ef:86:21:2b:31:e0:a5:13:34:4d:25:d3:e0:56: b8:29:b2:f1:78:eb:95:89:b9:0d:db:3a:b7:06:51:ce:15:d1: d3:97:b7:70:1f:09:62:84:ef:a6:36:5a:81:5d:12:36:ad:4e: 92:83:d9:70:13:f8:ba:dc:6f:3b:1a:6d:43:3a:39:2d:8b:66: 2b:ab:bc:c9:42:97:68:01:1a:0a:32:07:8c:71:d1:8b:9b:2d: 78:83:c8:b5:14:bd:c6:df:92:a6:c0:15:0f:30:ea:58:f3:13: a7:d2:3c:05:ed:9c:0c:79:4b:52:69:32:dc:e2:86:48:dc:6b: 59:ea:75:94:15:a1:cc:16:d4:d0:43:6b:44:e2:3d:7e:0d:0b: f3:58:d5:54:6a:df:ec:03:d8:d9:60:a9:c9:b4:bb:59:49:1d: ca:ec:d9:31:3f:67:2e:e7:ee:d6:fb:8f:d0:ed:57:d5:d9:73: 06:7d:77:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHoneOedMIEatvNNtl3/0RNVf6i4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENDMTQyRTRCQzBBOTNEMjIyNzQ0RDc2NEJBMzFCMzFD NUY3MjFGNDAeFw0yNjA5MjIwMzE1NDlaFw0yNjA5MjMwMzUzNDlaMDMxMTAvBgNV BAMTKEZBN0YzNDFDQUEwRUIzOEI4QTdBOEUyQjFGQTk5RTU0NDA0QTA2NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZZrcC5HvAB4jpx0g6oT0GYA8A eeL48HptW11V3WM17EwD9qjgl2E2x8jmLJExh8eGQxZtQ1bpdM1bjbHxY/gR73ux X0nvaLiG33RDwv0FNwA8C1OLgDvG/aF3cGxNuxNWvh3625FWdE2+uHbDFt1dnBLJ n4yZlYdLp6ozQlTxKuP6AlqcCu0yiPWuPUM2PpuhOqtY17/ImTN28O4qOpldrq0O 55KOABViQ4HrZjy+AQdeivwUF5aAj/bqqLp92RWkbFSjoneEu2dEtmv34hyFXLqq miZqWNd/g2XRfNhIsiCcrLVdgLgzHIh8+9Y1CU1grwDsB8xcUJyIk7JX/71XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+n80HKoOs4uKeo4rH6meVEBKBmYwHwYDVR0j BBgwFoAU3MFC5LwKk9IidE12S6MbMcX3IfQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmE0MTU0MzgtYWQwMS00MmRjLThjOTItMTUxYmM4YzI3MjFmLzAvRENDMTQyRTRC QzBBOTNEMjIyNzQ0RDc2NEJBMzFCMzFDNUY3MjFGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0MxNDJFNEJDMEE5M0QyMjI3NDRENzY0QkEzMUIzMUM1Rjcy MUY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmE0MTU0MzgtYWQwMS00MmRjLThj OTItMTUxYmM4YzI3MjFmLzAvRENDMTQyRTRCQzBBOTNEMjIyNzQ0RDc2NEJBMzFC MzFDNUY3MjFGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLn84kcLa+8Od2Gy/aL+SOxQ4UNMPOKSDUG a0QyGZKMNRrzcAy8M9eMXo8Ad2Q03Y3kSaV0X15Npxeh+Porg3dV+Tst9XkU9JsM binvhiErMeClEzRNJdPgVrgpsvF465WJuQ3bOrcGUc4V0dOXt3AfCWKE76Y2WoFd EjatTpKD2XAT+LrcbzsabUM6OS2LZiurvMlCl2gBGgoyB4xx0YubLXiDyLUUvcbf kqbAFQ8w6ljzE6fSPAXtnAx5S1JpMtzihkjca1nqdZQVocwW1NBDa0TiPX4NC/NY 1VRq3+wD2Nlgqcm0u1lJHcrs2TE/Zy7n7tb7j9DtV9XZcwZ9d0M= -----END CERTIFICATE-----Generated at Tue Sep 22 14:34:23 2026 by rpki-client