$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft File: D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft (raw, json) Hash identifier: lLYPgv22oAMfIauVz/BbHapWQLJws1tgK2rDN3CPKis= Subject key identifier: 6B:71:CC:01:DD:BC:0A:64:6E:7F:C2:95:98:95:55:9E:6B:CB:EA:9F Authority key identifier: D0:CF:CA:6A:1F:D2:34:38:03:3F:81:7E:FD:3B:2A:18:0D:32:C0:C3 Certificate issuer: /CN=D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3 Certificate serial: 31E855AD729C54CA2465031C79B50F542F495642 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 21:42:26 +0000 Manifest this update: Thu 24 Sep 2026 21:37:26 +0000 Manifest next update: Sat 26 Sep 2026 01:40:26 +0000 Files and hashes: 1: 3130332e3134302e3130382e302f32342d3234203d3e203538333639.roa (hash: W9kmi6fSD3hfpz6c4ipA4kZ2ayaTmTarwmo8qVkL32c=) 2: 3130332e3134302e3130392e302f32342d3234203d3e203538333639.roa (hash: APyKoi1ZG2HKYN+LmPQKEKUBYkJq8d16Zc9c2T01Unc=) 3: D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.crl (hash: EmqUGvOQ/ocicPJ31Ma9JBWD/Mztvjv9sf2Z/g6wGJI=) 4: 3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa (hash: pd6OjyzAAcK8uT6naV7NfTNnsjqGHMwbU9/DgsoTtzo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.crl rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 01:40:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:e8:55:ad:72:9c:54:ca:24:65:03:1c:79:b5:0f:54:2f:49:56:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3 Validity Not Before: Sep 24 21:37:26 2026 GMT Not After : Sep 26 01:40:26 2026 GMT Subject: CN=6B71CC01DDBC0A646E7FC2959895559E6BCBEA9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:de:11:cf:71:92:31:6f:3d:82:fc:00:37:56: f8:ee:45:43:cf:2f:8a:7c:6b:2f:73:25:38:59:97: b4:2a:1f:df:4c:a0:de:2c:a4:8d:30:a7:87:ea:74: d3:6b:bb:9c:6b:28:8f:38:ab:d6:5d:9a:45:c4:f5: 7a:89:db:04:28:e5:f6:be:93:24:83:d9:ff:33:3a: e8:6c:35:77:e0:e6:08:fc:85:8a:8a:33:06:1e:57: a5:9d:6e:2a:91:1c:d1:dd:0b:8b:45:35:89:9e:91: 37:72:77:8b:a7:f2:50:a0:96:13:03:27:07:27:2c: 1b:24:3d:76:5a:ae:1c:18:e5:84:0f:11:51:7c:0e: d2:87:a6:7d:42:2a:b6:3c:94:05:6e:ad:96:a3:ca: d8:66:bf:d0:dd:7a:b0:9e:f9:33:2c:69:44:de:d3: c3:fd:ba:9b:5e:8a:da:fc:e5:ac:20:d4:65:be:76: 20:03:97:c8:b5:bd:da:16:91:58:d2:8a:89:68:59: 8b:2c:7c:65:b4:84:b9:c6:94:ce:22:a0:71:f5:9d: 58:2f:a3:1c:e3:e1:d6:93:99:f9:59:a6:5a:ad:96: 6d:4b:a5:eb:75:68:96:fb:9b:1a:a1:aa:d5:a4:07: 17:c6:46:05:63:25:20:13:52:08:45:54:5a:1d:72: df:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:71:CC:01:DD:BC:0A:64:6E:7F:C2:95:98:95:55:9E:6B:CB:EA:9F X509v3 Authority Key Identifier: keyid:D0:CF:CA:6A:1F:D2:34:38:03:3F:81:7E:FD:3B:2A:18:0D:32:C0:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:58:8f:78:3d:8b:24:35:0e:40:bc:70:9e:a2:fb:de:f2:fc: 71:07:b7:7a:7b:23:47:1c:6e:19:3b:da:82:88:0c:ae:6b:82: 9f:7e:40:f0:0e:92:68:0c:6b:2d:71:02:2f:ce:41:c1:a2:af: 4a:d9:09:76:d5:8a:2b:d6:50:63:d3:fd:27:22:90:b3:3d:d5: 4a:be:3f:ed:1e:69:e0:80:97:70:78:39:dd:e3:1f:b7:50:b6: a4:29:4d:f6:15:72:2f:e6:6c:08:d5:40:73:3e:13:7d:b6:95: 22:6c:86:58:58:79:13:6f:9e:f1:5a:89:7a:cd:23:6f:3d:e9: fa:bf:d4:33:5a:5f:27:43:e5:57:bd:6a:ac:ba:6d:07:c4:a5: ec:8f:03:f2:34:a1:6e:d1:55:54:34:d2:e3:d4:5e:85:61:9f: dc:0f:95:bd:ea:de:29:2a:c0:15:8f:57:26:3a:7e:75:08:c1: 22:9f:d3:af:2f:d4:db:5e:18:78:da:28:87:f7:2b:7c:30:25: 8a:7d:ce:8a:27:b9:57:3e:5c:ec:6b:b8:55:26:4a:99:65:a7: ee:e2:bc:d4:66:5c:b9:58:65:b1:2e:25:b4:ad:65:6d:af:0a: a3:df:30:77:d8:e5:06:4a:df:6c:5c:0c:78:72:1d:ea:af:96: 3a:dc:93:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMehVrXKcVMokZQMcebUPVC9JVkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDRkNBNkExRkQyMzQzODAzM0Y4MTdFRkQzQjJBMTgw RDMyQzBDMzAeFw0yNjA5MjQyMTM3MjZaFw0yNjA5MjYwMTQwMjZaMDMxMTAvBgNV BAMTKDZCNzFDQzAxRERCQzBBNjQ2RTdGQzI5NTk4OTU1NTlFNkJDQkVBOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh3hHPcZIxbz2C/AA3VvjuRUPP L4p8ay9zJThZl7QqH99MoN4spI0wp4fqdNNru5xrKI84q9ZdmkXE9XqJ2wQo5fa+ kySD2f8zOuhsNXfg5gj8hYqKMwYeV6WdbiqRHNHdC4tFNYmekTdyd4un8lCglhMD JwcnLBskPXZarhwY5YQPEVF8DtKHpn1CKrY8lAVurZajythmv9DderCe+TMsaUTe 08P9upteitr85awg1GW+diADl8i1vdoWkVjSioloWYssfGW0hLnGlM4ioHH1nVgv oxzj4daTmflZplqtlm1Lpet1aJb7mxqhqtWkBxfGRgVjJSATUghFVFodct89AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa3HMAd28CmRuf8KVmJVVnmvL6p8wHwYDVR0j BBgwFoAU0M/Kah/SNDgDP4F+/TsqGA0ywMMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE0YTIxYjktZjkxMi00MWYzLWI2MmMtMTIxNzU4MWM5NDhhLzAvRDBDRkNBNkEx RkQyMzQzODAzM0Y4MTdFRkQzQjJBMTgwRDMyQzBDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMENGQ0E2QTFGRDIzNDM4MDMzRjgxN0VGRDNCMkExODBEMzJD MEMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE0YTIxYjktZjkxMi00MWYzLWI2 MmMtMTIxNzU4MWM5NDhhLzAvRDBDRkNBNkExRkQyMzQzODAzM0Y4MTdFRkQzQjJB MTgwRDMyQzBDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdYj3g9iyQ1DkC8cJ6i+97y/HEHt3p7I0cc bhk72oKIDK5rgp9+QPAOkmgMay1xAi/OQcGir0rZCXbViivWUGPT/ScikLM91Uq+ P+0eaeCAl3B4Od3jH7dQtqQpTfYVci/mbAjVQHM+E322lSJshlhYeRNvnvFaiXrN I2896fq/1DNaXydD5Ve9aqy6bQfEpeyPA/I0oW7RVVQ00uPUXoVhn9wPlb3q3ikq wBWPVyY6fnUIwSKf068v1NteGHjaKIf3K3wwJYp9zoonuVc+XOxruFUmSpllp+7i vNRmXLlYZbEuJbStZW2vCqPfMHfY5QZK32xcDHhyHeqvljrck8U= -----END CERTIFICATE-----Generated at Fri Sep 25 18:00:04 2026 by rpki-client