$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.mft File: D67DDCB46CF40B52641F71BF7756DFA29F4159A2.mft (raw, json) Hash identifier: PEAmSqVK3upwjJEZWb3q2No3qGoGXEsD3Pf5wMBMyow= Subject key identifier: A2:36:4B:D3:56:43:25:DE:B5:70:A8:69:96:69:7D:F5:1A:F4:5D:F7 Authority key identifier: D6:7D:DC:B4:6C:F4:0B:52:64:1F:71:BF:77:56:DF:A2:9F:41:59:A2 Certificate issuer: /CN=D67DDCB46CF40B52641F71BF7756DFA29F4159A2 Certificate serial: 509B69C3A8B41C1B28825FC3136EDBAFBCEEF0E4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.mft Manifest number: BF Signing time: Mon 21 Sep 2026 23:15:31 +0000 Manifest this update: Mon 21 Sep 2026 23:10:31 +0000 Manifest next update: Wed 23 Sep 2026 02:41:31 +0000 Files and hashes: 1: 3230332e3135332e39362e302f32302d3234203d3e203234323037.roa (hash: AhfkSgsUfVbnlwjYQF5FXALegxkl9ZVed7BF03/fBz8=) 2: 3230332e3135332e3131322e302f32312d3234203d3e203234323037.roa (hash: Lw1DMZ5kJp5ICeFivj5ZZ60njB9OoQuGFsGq8+auMdU=) 3: D67DDCB46CF40B52641F71BF7756DFA29F4159A2.crl (hash: KswS9Q+8ZVLfndXPn5LcMLaqgldIVKC3miUuVAA6/vI=) 4: 323430343a663630303a3a2f33322d3438203d3e203234323037.roa (hash: O3BW4/+vpeYZOrGXcLGA8HAU1zfqrZRISOMkRbThX6s=) 5: 3232322e3136352e3139322e302f31382d3234203d3e203234323037.roa (hash: XrQbHF8ES5i2bpLQRbTUE7Wl3M4ZUVmyaoRlPolZS6Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.crl rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 02:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:9b:69:c3:a8:b4:1c:1b:28:82:5f:c3:13:6e:db:af:bc:ee:f0:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D67DDCB46CF40B52641F71BF7756DFA29F4159A2 Validity Not Before: Sep 21 23:10:31 2026 GMT Not After : Sep 23 02:41:31 2026 GMT Subject: CN=A2364BD3564325DEB570A86996697DF51AF45DF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c2:d8:0d:03:79:74:82:77:f1:bc:e2:93:1a: 28:f0:9e:8f:ea:64:66:b3:73:a9:8b:20:22:7b:6a: 19:bd:a5:ef:89:49:f2:27:77:33:cd:4a:9a:3f:15: df:45:c9:3e:f0:f6:26:f3:40:30:47:11:c8:88:6a: 7b:be:42:2c:e0:50:b3:6b:99:e0:4a:7e:c7:28:0b: ea:0c:c8:53:49:31:e9:99:72:81:ec:e7:35:82:70: 23:99:d4:1a:9d:42:ee:c2:bd:ab:20:6b:2b:b6:cc: 53:73:f3:15:d5:53:e4:91:c4:23:7b:ba:a1:7e:61: 73:d7:cd:29:f9:8f:5a:7b:55:25:5c:11:ec:b7:8a: 02:66:bd:0e:ca:e2:fc:2e:f1:d3:96:a7:b1:d1:30: d6:47:7c:de:05:b6:27:54:70:d9:11:d5:ed:ae:d7: dd:bf:4d:c3:53:d4:dc:71:78:36:c6:ba:17:61:f4: ea:6e:18:1d:93:6f:12:dc:bf:3f:ca:76:4d:41:ca: 4e:a7:71:85:0b:9a:0b:5f:ba:ed:2d:34:3b:63:93: 8b:27:67:cc:29:35:5e:0a:93:ab:9e:5b:03:69:55: a9:77:13:5e:44:d0:26:31:96:cf:58:6b:b7:e5:a9: e2:17:68:d5:9d:9a:ee:67:2a:99:37:da:99:f6:80: 43:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:36:4B:D3:56:43:25:DE:B5:70:A8:69:96:69:7D:F5:1A:F4:5D:F7 X509v3 Authority Key Identifier: keyid:D6:7D:DC:B4:6C:F4:0B:52:64:1F:71:BF:77:56:DF:A2:9F:41:59:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:2f:6a:f2:7e:91:93:d8:1d:87:8c:ca:33:8d:24:fd:4f:2c: 1b:75:c7:49:83:5f:02:c7:55:f6:cd:fa:69:f3:81:31:cd:88: 0f:74:e1:2a:7e:eb:64:a3:83:e8:33:73:a2:58:64:97:0d:0e: 11:f4:38:bc:ce:c2:0d:af:84:92:ee:d1:d0:0b:aa:f7:96:9d: 6a:00:1b:5c:ad:41:ab:5e:52:b5:0d:c1:43:10:c6:83:76:01: a1:24:19:5a:00:ca:e5:57:fa:cd:7c:6c:4e:aa:5d:5d:35:81: b4:f0:64:ce:2f:90:4b:f1:4a:6e:8e:05:db:e1:29:3d:f1:91: 8e:b4:ed:97:fc:fc:78:87:31:55:f1:59:d7:94:9a:56:73:36: 60:83:17:69:16:31:77:e8:79:d7:d8:51:32:9d:d9:76:25:7f: 40:ff:9e:30:5f:be:79:79:c3:be:83:9b:40:c5:2c:f9:e0:65: f6:05:f3:42:83:0c:a2:10:28:6e:00:6b:27:8d:88:4c:f0:41: 31:8e:7e:94:ec:ee:ab:0a:02:c5:5f:04:d5:e5:5a:eb:08:a2: e6:6c:35:d9:13:90:5b:13:eb:bd:19:35:b7:6a:54:e2:7a:6a: b6:bb:da:dc:d1:40:f6:3f:a1:4e:70:82:a5:08:36:1f:7b:82: ec:d9:a1:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUJtpw6i0HBsogl/DE27br7zu8OQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY3RERDQjQ2Q0Y0MEI1MjY0MUY3MUJGNzc1NkRGQTI5 RjQxNTlBMjAeFw0yNjA5MjEyMzEwMzFaFw0yNjA5MjMwMjQxMzFaMDMxMTAvBgNV BAMTKEEyMzY0QkQzNTY0MzI1REVCNTcwQTg2OTk2Njk3REY1MUFGNDVERjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlwtgNA3l0gnfxvOKTGijwno/q ZGazc6mLICJ7ahm9pe+JSfIndzPNSpo/Fd9FyT7w9ibzQDBHEciIanu+QizgULNr meBKfscoC+oMyFNJMemZcoHs5zWCcCOZ1BqdQu7Cvasgayu2zFNz8xXVU+SRxCN7 uqF+YXPXzSn5j1p7VSVcEey3igJmvQ7K4vwu8dOWp7HRMNZHfN4FtidUcNkR1e2u 192/TcNT1NxxeDbGuhdh9OpuGB2TbxLcvz/Kdk1Byk6ncYULmgtfuu0tNDtjk4sn Z8wpNV4Kk6ueWwNpVal3E15E0CYxls9Ya7flqeIXaNWdmu5nKpk32pn2gEOpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUojZL01ZDJd61cKhplml99Rr0XfcwHwYDVR0j BBgwFoAU1n3ctGz0C1JkH3G/d1bfop9BWaIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmM3ZTgwODEtNjNhZi00OWU3LTk2NDYtNzZjMjVhNWU5N2NhLzAvRDY3RERDQjQ2 Q0Y0MEI1MjY0MUY3MUJGNzc1NkRGQTI5RjQxNTlBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjdERENCNDZDRjQwQjUyNjQxRjcxQkY3NzU2REZBMjlGNDE1 OUEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmM3ZTgwODEtNjNhZi00OWU3LTk2 NDYtNzZjMjVhNWU5N2NhLzAvRDY3RERDQjQ2Q0Y0MEI1MjY0MUY3MUJGNzc1NkRG QTI5RjQxNTlBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIgvavJ+kZPYHYeMyjONJP1PLBt1x0mDXwLH VfbN+mnzgTHNiA904Sp+62Sjg+gzc6JYZJcNDhH0OLzOwg2vhJLu0dALqveWnWoA G1ytQateUrUNwUMQxoN2AaEkGVoAyuVX+s18bE6qXV01gbTwZM4vkEvxSm6OBdvh KT3xkY607Zf8/HiHMVXxWdeUmlZzNmCDF2kWMXfoedfYUTKd2XYlf0D/njBfvnl5 w76Dm0DFLPngZfYF80KDDKIQKG4AayeNiEzwQTGOfpTs7qsKAsVfBNXlWusIouZs NdkTkFsT670ZNbdqVOJ6ara72tzRQPY/oU5wgqUINh97guzZobU= -----END CERTIFICATE-----Generated at Tue Sep 22 07:41:25 2026 by rpki-client