$ rpki-client -vvvf rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft File: D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft (raw, json) Hash identifier: oPo4fd9CfF3wPJdNZTX9M6/NPYXkAmuUuls4C58wDX0= Subject key identifier: B2:D4:EB:C7:1B:F6:DA:A9:C4:71:25:0A:CD:AC:CE:E1:71:E7:0A:56 Authority key identifier: D3:EC:32:7D:56:69:BC:0B:0F:B2:A4:24:56:17:E4:4E:36:DC:44:73 Certificate issuer: /CN=D3EC327D5669BC0B0FB2A4245617E44E36DC4473 Certificate serial: 0FE93E69988A93A781344A9D18DB0A739D5D487F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 04:05:40 +0000 Manifest this update: Thu 24 Sep 2026 04:00:40 +0000 Manifest next update: Fri 25 Sep 2026 06:01:40 +0000 Files and hashes: 1: D3EC327D5669BC0B0FB2A4245617E44E36DC4473.crl (hash: bkC4DyA0XQkKqr9IeiaO56sphi9BSVvphhCS3b++SY8=) 2: 3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (hash: EtsVHdeAuCEUKToYyc1AboiXRpshf+Ge4ld5y69utbM=) 3: 3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (hash: 7YRFkgWqBTb6xXfqMpSxUz7NK51JToKbqOBLvR25NTc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.crl rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 06:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e9:3e:69:98:8a:93:a7:81:34:4a:9d:18:db:0a:73:9d:5d:48:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3EC327D5669BC0B0FB2A4245617E44E36DC4473 Validity Not Before: Sep 24 04:00:40 2026 GMT Not After : Sep 25 06:01:40 2026 GMT Subject: CN=B2D4EBC71BF6DAA9C471250ACDACCEE171E70A56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1e:e6:4e:88:0c:ae:89:94:b0:b0:dd:89:4b: f9:81:8a:af:5a:4f:b3:98:69:4e:c9:85:77:47:77: 8d:66:17:a0:2e:c3:3a:9c:8a:f1:6b:fd:c3:c8:7f: 65:96:9e:92:c0:f3:3d:ff:af:c8:e1:a2:95:21:c9: 64:63:69:bc:5b:52:96:6f:b1:e3:6f:6e:e6:58:6d: 59:39:7a:6f:b7:0f:75:da:8d:06:12:94:26:3d:5b: 46:1d:61:7f:d5:f8:e8:57:9b:b3:b5:23:92:a7:66: 5b:9a:c8:4e:5c:a3:ce:b5:4f:04:50:f3:41:56:32: 46:75:74:64:3b:7b:72:96:af:75:3b:f7:e8:5f:9c: b9:20:70:7f:95:2f:8c:21:e7:dc:0a:ba:e7:7b:a6: db:45:9c:2a:b6:88:08:24:4e:7b:3a:81:1e:76:cb: 25:91:fa:75:ca:f0:ac:3f:f6:a8:e6:c4:2b:cd:27: 39:53:c0:29:66:fb:ed:11:6b:0c:ef:ad:14:58:f5: 30:0f:bb:94:d4:a2:c3:df:2f:d5:4d:2e:81:5a:8c: 78:78:c5:59:1d:75:22:d9:31:43:80:f9:0d:da:8b: f6:e4:0a:7c:64:b3:39:b7:a7:24:13:83:be:93:61: cb:da:40:11:47:6a:e7:d0:c0:35:28:24:0d:65:37: ee:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D4:EB:C7:1B:F6:DA:A9:C4:71:25:0A:CD:AC:CE:E1:71:E7:0A:56 X509v3 Authority Key Identifier: keyid:D3:EC:32:7D:56:69:BC:0B:0F:B2:A4:24:56:17:E4:4E:36:DC:44:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:ce:93:f2:c2:08:b9:e7:88:61:7c:d0:d5:77:2c:1f:ca:10: e4:d5:f0:c4:09:3d:ac:c9:49:ab:ab:45:7b:70:7e:e7:64:87: ce:4a:cc:db:41:bd:ad:8d:51:71:fb:1a:3e:58:17:63:a0:69: 2b:b5:14:9f:3a:94:5c:04:ea:c1:65:0c:df:79:e1:04:c0:3d: 08:bf:5d:a5:fe:12:d2:41:9d:f3:4d:73:93:ff:41:e0:a9:2a: 38:15:46:fc:1f:32:99:b2:03:89:87:97:99:96:e1:99:25:4d: fd:95:e6:a4:f7:c0:42:d0:4e:5f:a8:39:98:ad:5a:9a:ae:18: 41:da:44:01:0c:97:63:2b:fd:62:cf:fd:71:f4:2b:a5:d4:69: f1:64:0f:54:29:41:43:5e:04:16:88:88:52:1f:8b:35:43:e3: dc:fe:d5:ca:44:dc:41:d8:a5:96:1e:6f:9e:fd:92:4a:6f:64: 7a:d0:76:89:52:b1:e9:14:dd:cd:a7:e5:25:a8:4d:58:cf:da: 05:dd:1b:5b:0e:5e:ec:14:65:1b:f0:01:c3:9a:f8:af:06:c3: 2e:62:af:79:3f:88:6a:ea:d3:38:39:d3:3c:b4:c4:56:0a:af: 62:a5:2f:46:ab:92:c9:5c:49:f0:82:49:ea:17:07:8c:55:e9: 51:d5:f6:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD+k+aZiKk6eBNEqdGNsKc51dSH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNFQzMyN0Q1NjY5QkMwQjBGQjJBNDI0NTYxN0U0NEUz NkRDNDQ3MzAeFw0yNjA5MjQwNDAwNDBaFw0yNjA5MjUwNjAxNDBaMDMxMTAvBgNV BAMTKEIyRDRFQkM3MUJGNkRBQTlDNDcxMjUwQUNEQUNDRUUxNzFFNzBBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvHuZOiAyuiZSwsN2JS/mBiq9a T7OYaU7JhXdHd41mF6AuwzqcivFr/cPIf2WWnpLA8z3/r8jhopUhyWRjabxbUpZv seNvbuZYbVk5em+3D3XajQYSlCY9W0YdYX/V+OhXm7O1I5KnZluayE5co861TwRQ 80FWMkZ1dGQ7e3KWr3U79+hfnLkgcH+VL4wh59wKuud7pttFnCq2iAgkTns6gR52 yyWR+nXK8Kw/9qjmxCvNJzlTwClm++0RawzvrRRY9TAPu5TUosPfL9VNLoFajHh4 xVkddSLZMUOA+Q3ai/bkCnxkszm3pyQTg76TYcvaQBFHaufQwDUoJA1lN+43AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUstTrxxv22qnEcSUKzazO4XHnClYwHwYDVR0j BBgwFoAU0+wyfVZpvAsPsqQkVhfkTjbcRHMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTIzMDczOTAtNmVmMy00NDc2LWE2YWEtZDBjNTc4M2UxZjM3LzAvRDNFQzMyN0Q1 NjY5QkMwQjBGQjJBNDI0NTYxN0U0NEUzNkRDNDQ3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EM0VDMzI3RDU2NjlCQzBCMEZCMkE0MjQ1NjE3RTQ0RTM2REM0 NDczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTIzMDczOTAtNmVmMy00NDc2LWE2 YWEtZDBjNTc4M2UxZjM3LzAvRDNFQzMyN0Q1NjY5QkMwQjBGQjJBNDI0NTYxN0U0 NEUzNkRDNDQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAODOk/LCCLnniGF80NV3LB/KEOTV8MQJPazJ SaurRXtwfudkh85KzNtBva2NUXH7Gj5YF2OgaSu1FJ86lFwE6sFlDN954QTAPQi/ XaX+EtJBnfNNc5P/QeCpKjgVRvwfMpmyA4mHl5mW4ZklTf2V5qT3wELQTl+oOZit WpquGEHaRAEMl2Mr/WLP/XH0K6XUafFkD1QpQUNeBBaIiFIfizVD49z+1cpE3EHY pZYeb579kkpvZHrQdolSsekU3c2n5SWoTVjP2gXdG1sOXuwUZRvwAcOa+K8Gwy5i r3k/iGrq0zg50zy0xFYKr2KlL0arkslcSfCCSeoXB4xV6VHV9ic= -----END CERTIFICATE-----Generated at Thu Sep 24 14:29:16 2026 by rpki-client