$ rpki-client -vvvf rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft File: DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft (raw, json) Hash identifier: Xj3ykwB9ByqE3DaHynAO1SrMCLJGrbR1tTTX/dPS8Jo= Subject key identifier: 3D:E9:F2:C3:66:F2:D4:8C:44:32:95:4A:96:D7:9F:04:4C:FB:EE:F3 Authority key identifier: DB:6D:BA:34:6A:8F:82:3E:A6:23:FD:51:60:4D:D1:AD:04:AD:F1:79 Certificate issuer: /CN=DB6DBA346A8F823EA623FD51604DD1AD04ADF179 Certificate serial: 49C56E1F53FDE280705AD7DCCCA04ECFD29D57B3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 14:03:33 +0000 Manifest this update: Wed 23 Sep 2026 13:58:33 +0000 Manifest next update: Thu 24 Sep 2026 15:08:33 +0000 Files and hashes: 1: 3130332e3232362e34392e302f32342d3234203d3e203539323733.roa (hash: A/eIZCdjAjL3nC9fTPZulgiI4xnKPeqKVVCm1GsNoq0=) 2: 3130332e3232362e34382e302f32342d3234203d3e203539323733.roa (hash: 2bDh3pCy+uB3wKVcO30FUZoEqtx5NRujKUHG722pPa4=) 3: DB6DBA346A8F823EA623FD51604DD1AD04ADF179.crl (hash: UV+X328gxc/Ra9ULd/JUEJ+TUILeqYtxV6L6/zlDFpc=) 4: 3130332e3232362e35302e302f32342d3234203d3e203539323733.roa (hash: nAblDLxmaukKprEhKvtDu9i3L7fU/W5iCD+tV6LRDRA=) 5: 3130332e3232362e34382e302f32322d3232203d3e203539323733.roa (hash: R4V9RaoU91VHm23qIyKQMVBSwsvtvml51U62CtUuF+k=) 6: 3130332e3232362e35312e302f32342d3234203d3e203539323733.roa (hash: FuQQoozIuhBoAt0eg75ZtwH9o1RmIcILodt9zflrFGE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.crl rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 15:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c5:6e:1f:53:fd:e2:80:70:5a:d7:dc:cc:a0:4e:cf:d2:9d:57:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6DBA346A8F823EA623FD51604DD1AD04ADF179 Validity Not Before: Sep 23 13:58:33 2026 GMT Not After : Sep 24 15:08:33 2026 GMT Subject: CN=3DE9F2C366F2D48C4432954A96D79F044CFBEEF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:67:11:94:23:39:4e:2c:1e:8d:a1:43:0e:f2: 06:a6:74:45:4d:81:a2:dd:4f:1e:42:f5:d9:f5:92: a7:25:71:a9:dd:03:40:1b:28:7d:e6:d3:2c:2e:fa: 74:7e:c1:c7:50:9d:12:28:27:e3:9f:24:51:a9:42: ac:38:33:6d:01:70:db:55:7b:47:3a:24:ad:65:6c: 72:b2:69:8b:a9:a2:a5:40:20:f8:7d:03:8a:1f:b6: dd:ac:97:5c:6f:29:ab:db:e6:fc:71:71:9b:81:9a: f8:ad:4d:79:b4:06:f4:57:f3:a1:eb:a2:ae:32:28: 78:06:e6:9e:8f:79:47:8c:10:32:be:f0:6d:6f:bb: b3:3f:13:91:58:e1:2b:d9:de:ed:fb:45:62:4e:b4: c4:7f:aa:e8:63:b4:6c:b3:4f:4f:05:93:23:6a:50: 57:4e:84:40:fd:15:43:52:27:ba:6f:94:d3:ca:f6: 33:67:23:d8:e2:f4:04:c0:2f:5a:ed:28:93:2b:77: b2:47:6d:54:cd:04:0d:30:9d:67:9f:3a:84:67:af: 6d:2f:76:24:94:f3:49:22:87:b5:7d:94:9e:3f:ca: e4:a7:cc:ef:89:06:e0:33:98:0f:5c:5e:07:b6:77: db:50:b7:7a:da:6e:e7:61:de:72:41:7c:f8:d3:a8: 77:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E9:F2:C3:66:F2:D4:8C:44:32:95:4A:96:D7:9F:04:4C:FB:EE:F3 X509v3 Authority Key Identifier: keyid:DB:6D:BA:34:6A:8F:82:3E:A6:23:FD:51:60:4D:D1:AD:04:AD:F1:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:57:dd:14:fc:88:11:8f:63:ae:1d:d0:fd:69:3b:8c:ff:75: 88:6d:b6:b2:a2:af:bb:8d:b3:00:4e:da:fd:40:23:cd:75:0a: 1d:a0:32:5a:8f:34:c2:3b:e9:6d:89:7d:28:ba:92:fc:40:e9: fe:b4:70:58:cf:58:3a:f4:8c:90:39:c0:62:df:07:48:0d:02: 5e:57:f3:2c:ad:7c:55:1d:97:cf:3c:e6:0f:64:4b:ca:ae:a0: fa:d2:e2:5e:c9:b7:24:9f:6c:05:80:08:e3:69:f9:e0:4b:2b: ab:30:9b:77:63:27:d2:14:b8:2f:b4:4d:91:f5:27:1b:47:b4: 9b:43:88:bd:6b:48:1e:47:6f:d7:48:74:0d:d8:5b:63:b6:5e: c4:5c:92:c1:28:79:ea:6b:64:e6:48:c7:b5:e4:4d:8b:b3:e3: 35:1e:97:35:8a:db:af:74:2c:e9:ad:db:34:32:f9:23:e8:ca: 30:ed:3a:e9:9d:b9:eb:9e:f2:fb:ab:35:9a:b3:53:4d:62:6c: af:f6:e6:44:9a:f2:a5:c1:51:d8:58:ea:40:70:c7:26:91:18: c7:6e:53:d5:fc:9e:80:c0:fb:e5:fa:09:32:52:3c:55:6f:60: 08:f1:0b:d6:fd:5a:16:d1:18:7f:37:a4:e5:d8:20:9b:c1:44: fb:43:94:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUScVuH1P94oBwWtfczKBOz9KdV7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2REJBMzQ2QThGODIzRUE2MjNGRDUxNjA0REQxQUQw NEFERjE3OTAeFw0yNjA5MjMxMzU4MzNaFw0yNjA5MjQxNTA4MzNaMDMxMTAvBgNV BAMTKDNERTlGMkMzNjZGMkQ0OEM0NDMyOTU0QTk2RDc5RjA0NENGQkVFRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ZxGUIzlOLB6NoUMO8gamdEVN gaLdTx5C9dn1kqclcandA0AbKH3m0ywu+nR+wcdQnRIoJ+OfJFGpQqw4M20BcNtV e0c6JK1lbHKyaYupoqVAIPh9A4oftt2sl1xvKavb5vxxcZuBmvitTXm0BvRX86Hr oq4yKHgG5p6PeUeMEDK+8G1vu7M/E5FY4SvZ3u37RWJOtMR/quhjtGyzT08FkyNq UFdOhED9FUNSJ7pvlNPK9jNnI9ji9ATAL1rtKJMrd7JHbVTNBA0wnWefOoRnr20v diSU80kih7V9lJ4/yuSnzO+JBuAzmA9cXge2d9tQt3rabudh3nJBfPjTqHfHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPenyw2by1IxEMpVKltefBEz77vMwHwYDVR0j BBgwFoAU2226NGqPgj6mI/1RYE3RrQSt8XkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDYwY2U3MzMtNzdmNC00ZTFkLWI1ZWMtNjFlZGU0ZGEwNzRkLzAvREI2REJBMzQ2 QThGODIzRUE2MjNGRDUxNjA0REQxQUQwNEFERjE3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQjZEQkEzNDZBOEY4MjNFQTYyM0ZENTE2MDRERDFBRDA0QURG MTc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDYwY2U3MzMtNzdmNC00ZTFkLWI1 ZWMtNjFlZGU0ZGEwNzRkLzAvREI2REJBMzQ2QThGODIzRUE2MjNGRDUxNjA0REQx QUQwNEFERjE3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtX3RT8iBGPY64d0P1pO4z/dYhttrKir7uN swBO2v1AI811Ch2gMlqPNMI76W2JfSi6kvxA6f60cFjPWDr0jJA5wGLfB0gNAl5X 8yytfFUdl8885g9kS8quoPrS4l7JtySfbAWACONp+eBLK6swm3djJ9IUuC+0TZH1 JxtHtJtDiL1rSB5Hb9dIdA3YW2O2XsRcksEoeeprZOZIx7XkTYuz4zUelzWK2690 LOmt2zQy+SPoyjDtOumdueue8vurNZqzU01ibK/25kSa8qXBUdhY6kBwxyaRGMdu U9X8noDA++X6CTJSPFVvYAjxC9b9WhbRGH83pOXYIJvBRPtDlGg= -----END CERTIFICATE-----Generated at Thu Sep 24 06:23:34 2026 by rpki-client