$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft File: D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft (raw, json) Hash identifier: RJwTNXyKGeF/hbCqMzrpnbbypKUnVgSvpzq1TNC2eCQ= Subject key identifier: 86:14:78:AE:F9:C2:0F:63:EF:D2:94:46:62:6E:A1:13:46:08:B0:43 Authority key identifier: D5:78:16:B8:6A:BF:0E:6E:25:D8:4D:1D:5E:B3:7F:57:67:20:82:E2 Certificate issuer: /CN=D57816B86ABF0E6E25D84D1D5EB37F57672082E2 Certificate serial: 6690787A933B9FF5FCCAB07A42B6D82872DD39F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 17:37:05 +0000 Manifest this update: Fri 25 Sep 2026 17:32:05 +0000 Manifest next update: Sat 26 Sep 2026 20:12:05 +0000 Files and hashes: 1: 3130332e31342e37352e302f32342d3234203d3e20313334363332.roa (hash: peOff/bMaPRVFv7RqgmuHQIO5KzTIHkBdGVMuXkb3Y0=) 2: 323030313a6466373a353430303a3a2f34382d3438203d3e20313334363332.roa (hash: rH/HlzNj8EN1t4rBBnxlIYgmTwkrb8JdSMLp5n/vbuw=) 3: D57816B86ABF0E6E25D84D1D5EB37F57672082E2.crl (hash: PiGosBStAsJKC9Cnnu+JC12ugNp7cOSyb98Gxp0gWtU=) 4: 3130332e31342e37342e302f32342d3234203d3e20313334363332.roa (hash: ut81wNpcxfZaRtfYOIEu10o1O6sE5PD51eUSrS4eL90=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.crl rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:90:78:7a:93:3b:9f:f5:fc:ca:b0:7a:42:b6:d8:28:72:dd:39:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D57816B86ABF0E6E25D84D1D5EB37F57672082E2 Validity Not Before: Sep 25 17:32:05 2026 GMT Not After : Sep 26 20:12:05 2026 GMT Subject: CN=861478AEF9C20F63EFD29446626EA1134608B043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f4:7e:a1:70:47:90:bb:ad:59:58:37:08:e9: 35:b1:1a:d1:37:fc:90:42:31:66:72:6d:ef:9d:71: 4a:7d:3a:60:76:68:67:e6:43:a3:11:5f:02:09:e6: 41:c6:a7:a9:67:52:3e:5a:80:c1:5e:df:14:18:b2: 8b:e9:b3:df:6b:23:93:4e:27:54:80:14:96:d4:d8: d4:38:80:49:05:ba:c6:03:60:d8:b6:8a:b4:70:68: 00:fa:94:4e:8c:4c:f9:19:80:6c:97:d4:5a:d7:9f: 89:ee:36:09:31:20:3a:3b:14:18:ef:0e:b9:07:e5: 3b:5a:3f:98:58:3a:58:f2:71:71:f5:58:25:66:05: 0f:98:37:9f:e0:6a:8d:8b:10:3f:94:77:70:fd:94: f0:d2:b6:15:cf:5f:fd:5e:ba:a7:05:ee:34:de:ee: 3f:06:fc:d5:d6:fc:c9:f3:cf:90:9b:a0:ce:15:7b: 03:6d:e5:2c:19:1d:43:e2:32:a3:13:c1:42:0a:9a: 32:c0:50:b3:57:f5:54:0e:82:f8:0f:84:10:cc:ce: 33:1c:34:65:4b:bc:6d:88:23:31:65:7d:c2:20:7b: 3a:66:0e:49:ce:90:12:d0:3a:48:e0:f3:f3:e5:20: 3e:41:53:f2:a6:0f:ae:a0:3d:97:46:d4:6b:fe:02: 56:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:14:78:AE:F9:C2:0F:63:EF:D2:94:46:62:6E:A1:13:46:08:B0:43 X509v3 Authority Key Identifier: keyid:D5:78:16:B8:6A:BF:0E:6E:25:D8:4D:1D:5E:B3:7F:57:67:20:82:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:2d:32:79:27:c2:27:2e:14:0b:df:5c:8a:62:d0:c7:52:63: 82:a3:a8:56:49:57:87:26:e7:78:53:c1:1a:2c:0d:ed:68:59: e2:54:d1:39:10:f9:6c:41:fd:25:4f:9e:ac:6a:3f:d9:52:22: a0:cc:a7:c4:6c:cf:25:84:aa:63:e1:e7:f9:a3:f9:58:e7:7b: 49:63:8c:92:f8:a7:d7:a0:9c:28:f0:8d:73:a0:d6:a2:e5:08: cf:6d:09:f8:73:ec:04:75:f7:fe:7c:20:35:d7:9a:b6:db:c1: 63:f3:e5:1b:ce:fc:ec:f3:10:34:68:15:06:30:e3:b2:ae:25: fc:6e:ae:28:4f:f0:45:2c:f8:c1:a4:1f:3a:eb:75:d1:3f:97: 52:14:f2:c0:a5:34:dd:b8:c4:15:98:ca:66:4e:ae:a6:4d:8f: 61:f6:32:ff:60:91:db:c7:52:30:cb:fc:5b:e9:ac:57:f9:f4: 18:25:00:38:e0:fc:f6:62:79:20:eb:78:86:73:af:15:d4:cf: aa:11:f2:e0:49:a3:6c:75:f7:ac:ab:92:ad:be:a3:0c:4d:dd: 05:33:45:e4:b6:14:6c:7a:0a:04:fe:50:5d:ee:61:24:a1:fa: 43:59:ad:1d:bc:5a:38:80:bf:73:7c:ae:64:b5:b1:37:af:ff: 47:a8:13:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZpB4epM7n/X8yrB6QrbYKHLdOfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU3ODE2Qjg2QUJGMEU2RTI1RDg0RDFENUVCMzdGNTc2 NzIwODJFMjAeFw0yNjA5MjUxNzMyMDVaFw0yNjA5MjYyMDEyMDVaMDMxMTAvBgNV BAMTKDg2MTQ3OEFFRjlDMjBGNjNFRkQyOTQ0NjYyNkVBMTEzNDYwOEIwNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw9H6hcEeQu61ZWDcI6TWxGtE3 /JBCMWZybe+dcUp9OmB2aGfmQ6MRXwIJ5kHGp6lnUj5agMFe3xQYsovps99rI5NO J1SAFJbU2NQ4gEkFusYDYNi2irRwaAD6lE6MTPkZgGyX1FrXn4nuNgkxIDo7FBjv DrkH5TtaP5hYOljycXH1WCVmBQ+YN5/gao2LED+Ud3D9lPDSthXPX/1euqcF7jTe 7j8G/NXW/Mnzz5CboM4VewNt5SwZHUPiMqMTwUIKmjLAULNX9VQOgvgPhBDMzjMc NGVLvG2IIzFlfcIgezpmDknOkBLQOkjg8/PlID5BU/KmD66gPZdG1Gv+AlYXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhhR4rvnCD2Pv0pRGYm6hE0YIsEMwHwYDVR0j BBgwFoAU1XgWuGq/Dm4l2E0dXrN/V2cgguIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTAwMGUyM2UtZjQ0YS00Y2ZjLWJmNTYtZDk5YTA5MmQ3MzE0LzAvRDU3ODE2Qjg2 QUJGMEU2RTI1RDg0RDFENUVCMzdGNTc2NzIwODJFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTc4MTZCODZBQkYwRTZFMjVEODREMUQ1RUIzN0Y1NzY3MjA4 MkUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTAwMGUyM2UtZjQ0YS00Y2ZjLWJm NTYtZDk5YTA5MmQ3MzE0LzAvRDU3ODE2Qjg2QUJGMEU2RTI1RDg0RDFENUVCMzdG NTc2NzIwODJFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwtMnknwicuFAvfXIpi0MdSY4KjqFZJV4cm 53hTwRosDe1oWeJU0TkQ+WxB/SVPnqxqP9lSIqDMp8RszyWEqmPh5/mj+Vjne0lj jJL4p9egnCjwjXOg1qLlCM9tCfhz7AR19/58IDXXmrbbwWPz5RvO/OzzEDRoFQYw 47KuJfxurihP8EUs+MGkHzrrddE/l1IU8sClNN24xBWYymZOrqZNj2H2Mv9gkdvH UjDL/FvprFf59BglADjg/PZieSDreIZzrxXUz6oR8uBJo2x196yrkq2+owxN3QUz ReS2FGx6CgT+UF3uYSSh+kNZrR28WjiAv3N8rmS1sTev/0eoE4g= -----END CERTIFICATE-----Generated at Sat Sep 26 03:24:17 2026 by rpki-client