$ rpki-client -vvvf rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft File: D341D8EA81805778BAF0FC25804627AB205A595B.mft (raw, json) Hash identifier: 2qRbAP8KvUZ94uGpeafmE+eyJqnxhWzEjkeawDFrAQw= Subject key identifier: 1B:4F:D0:FA:C2:BB:9E:3A:86:BA:E3:BE:AF:DB:7C:D3:A4:9E:BC:74 Authority key identifier: D3:41:D8:EA:81:80:57:78:BA:F0:FC:25:80:46:27:AB:20:5A:59:5B Certificate issuer: /CN=D341D8EA81805778BAF0FC25804627AB205A595B Certificate serial: 58CEBE11C84BFD5EB61A74C26595CEEA14BCCC20 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D341D8EA81805778BAF0FC25804627AB205A595B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 08:36:16 +0000 Manifest this update: Thu 24 Sep 2026 08:31:16 +0000 Manifest next update: Fri 25 Sep 2026 10:38:16 +0000 Files and hashes: 1: 3130332e3138362e3230382e302f32342d3234203d3e20313337333331.roa (hash: 9bLzC5cJz/hB1T6TsZaVOeXIoTd9norVTABcvOz2X24=) 2: D341D8EA81805778BAF0FC25804627AB205A595B.crl (hash: Mtg8ldtGo5eG/0dJ5jAbAk1cLf7D/6jevVSYyrUafTI=) 3: 3130332e3138362e3230392e302f32342d3234203d3e20313336383733.roa (hash: xc3Q1ltrywVJe3y21qqPN5TWdfqkKkKR0OL3qOrG5oc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.crl rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D341D8EA81805778BAF0FC25804627AB205A595B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ce:be:11:c8:4b:fd:5e:b6:1a:74:c2:65:95:ce:ea:14:bc:cc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D341D8EA81805778BAF0FC25804627AB205A595B Validity Not Before: Sep 24 08:31:16 2026 GMT Not After : Sep 25 10:38:16 2026 GMT Subject: CN=1B4FD0FAC2BB9E3A86BAE3BEAFDB7CD3A49EBC74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b9:9d:1d:d7:d4:d1:72:1b:eb:c1:68:0b:c6: a1:3d:71:5e:68:f7:03:ab:98:77:33:2b:a3:26:ae: d7:50:89:b8:19:88:bf:fd:fd:3d:fd:f4:a3:eb:ec: 0e:66:cd:00:2e:1e:30:d5:64:80:86:b6:a5:b1:48: d9:77:16:e6:1e:b7:7e:20:76:86:63:52:23:5b:a1: 19:02:f8:78:a0:43:25:09:ae:54:de:70:64:13:b4: 58:76:fb:37:62:d4:09:80:20:3c:a2:ab:1e:14:27: fe:c1:a3:08:4f:45:fe:b0:fb:9d:10:2a:b8:f1:e1: 42:cf:37:52:3f:9d:38:33:68:c7:94:71:9c:d5:cb: fe:cf:4c:3b:32:61:21:03:53:16:76:8c:3f:dd:84: da:eb:a8:9e:49:dd:19:7e:ba:17:2f:16:1c:b8:3f: e1:96:94:89:45:d5:98:e1:a3:40:b0:d8:c8:73:00: 8f:a4:8e:73:b3:d6:93:8c:74:70:6a:08:bc:42:b9: 8b:af:2f:13:50:30:1d:36:5d:d7:bc:ae:2f:f7:15: 2c:84:93:5a:cb:8a:cb:f5:c4:0c:11:15:2b:f4:ca: 70:c2:7f:12:59:79:14:00:e5:0c:5d:e1:72:8b:05: db:48:da:04:81:fb:0b:e8:1e:16:f2:67:a0:f4:fe: 47:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4F:D0:FA:C2:BB:9E:3A:86:BA:E3:BE:AF:DB:7C:D3:A4:9E:BC:74 X509v3 Authority Key Identifier: keyid:D3:41:D8:EA:81:80:57:78:BA:F0:FC:25:80:46:27:AB:20:5A:59:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D341D8EA81805778BAF0FC25804627AB205A595B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:41:3b:6f:ba:cd:86:de:f0:11:80:ba:e5:90:5f:f4:25:4a: 78:1e:50:46:ff:f9:fd:e3:ba:ab:ea:88:ba:09:5c:66:b2:e9: 2c:6b:78:72:30:5a:9d:96:6a:c5:43:55:7e:5d:9d:c7:65:a1: 28:59:73:df:47:c5:f6:ab:c0:17:0f:1a:78:58:10:77:71:ee: db:31:ac:60:f3:43:07:04:c6:4d:cd:73:d3:12:ca:ac:11:38: 65:f3:9e:7e:72:1c:5e:55:b2:ab:94:03:b6:79:8e:83:e1:73: 86:60:2e:c4:6f:70:f6:7a:23:45:9b:70:d5:90:d0:04:45:fc: 6b:e0:9b:d8:e2:98:0d:80:99:92:9d:17:06:f7:d0:11:b8:ef: 09:5e:3a:57:ca:25:8b:a7:ea:5d:4f:e7:71:dc:9d:22:46:b1: 60:62:e2:c7:c1:ad:c9:44:e4:ab:3c:6a:b3:11:47:b3:44:65: 62:8a:9a:f3:dd:bf:55:d8:51:f5:eb:36:e9:ac:9a:a1:10:d4: f1:fc:3d:99:43:11:b9:13:9d:07:47:31:d6:7b:ec:bc:f5:d0: 61:02:07:97:e7:8b:a8:09:b9:f5:6c:78:32:ce:b1:2a:e7:7b: 00:26:84:10:1d:c2:fc:15:fe:cf:a7:ec:5d:e1:1a:89:1c:80: ae:b7:cf:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWM6+EchL/V62GnTCZZXO6hS8zCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0MUQ4RUE4MTgwNTc3OEJBRjBGQzI1ODA0NjI3QUIy MDVBNTk1QjAeFw0yNjA5MjQwODMxMTZaFw0yNjA5MjUxMDM4MTZaMDMxMTAvBgNV BAMTKDFCNEZEMEZBQzJCQjlFM0E4NkJBRTNCRUFGREI3Q0QzQTQ5RUJDNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxuZ0d19TRchvrwWgLxqE9cV5o 9wOrmHczK6MmrtdQibgZiL/9/T399KPr7A5mzQAuHjDVZICGtqWxSNl3FuYet34g doZjUiNboRkC+HigQyUJrlTecGQTtFh2+zdi1AmAIDyiqx4UJ/7BowhPRf6w+50Q Krjx4ULPN1I/nTgzaMeUcZzVy/7PTDsyYSEDUxZ2jD/dhNrrqJ5J3Rl+uhcvFhy4 P+GWlIlF1Zjho0Cw2MhzAI+kjnOz1pOMdHBqCLxCuYuvLxNQMB02Xde8ri/3FSyE k1rLisv1xAwRFSv0ynDCfxJZeRQA5Qxd4XKLBdtI2gSB+wvoHhbyZ6D0/kdfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG0/Q+sK7njqGuuO+r9t806SevHQwHwYDVR0j BBgwFoAU00HY6oGAV3i68PwlgEYnqyBaWVswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDlhOWU4MzUtZjNhMS00YzM2LWI0N2QtNmYyZjcxZWI4YWE0LzAvRDM0MUQ4RUE4 MTgwNTc3OEJBRjBGQzI1ODA0NjI3QUIyMDVBNTk1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzQxRDhFQTgxODA1Nzc4QkFGMEZDMjU4MDQ2MjdBQjIwNUE1 OTVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDlhOWU4MzUtZjNhMS00YzM2LWI0 N2QtNmYyZjcxZWI4YWE0LzAvRDM0MUQ4RUE4MTgwNTc3OEJBRjBGQzI1ODA0NjI3 QUIyMDVBNTk1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdBO2+6zYbe8BGAuuWQX/QlSngeUEb/+f3j uqvqiLoJXGay6SxreHIwWp2WasVDVX5dncdloShZc99HxfarwBcPGnhYEHdx7tsx rGDzQwcExk3Nc9MSyqwROGXznn5yHF5VsquUA7Z5joPhc4ZgLsRvcPZ6I0WbcNWQ 0ARF/Gvgm9jimA2AmZKdFwb30BG47wleOlfKJYun6l1P53HcnSJGsWBi4sfBrclE 5Ks8arMRR7NEZWKKmvPdv1XYUfXrNumsmqEQ1PH8PZlDEbkTnQdHMdZ77Lz10GEC B5fni6gJufVseDLOsSrnewAmhBAdwvwV/s+n7F3hGokcgK63z4E= -----END CERTIFICATE-----Generated at Fri Sep 25 03:44:10 2026 by rpki-client