$ rpki-client -vvvf rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.mft File: D5B392E916885394AA1C2B31FE082DC317BCE686.mft (raw, json) Hash identifier: wNDtep4OMz2jNcmxFJXfbyjzafloDF1+GJ7IdeWLAwA= Subject key identifier: 01:93:D3:B6:BF:73:49:65:E6:C2:A8:1A:3E:87:43:6D:63:7E:2B:24 Authority key identifier: D5:B3:92:E9:16:88:53:94:AA:1C:2B:31:FE:08:2D:C3:17:BC:E6:86 Certificate issuer: /CN=D5B392E916885394AA1C2B31FE082DC317BCE686 Certificate serial: 7F1C60AEBC6A61211F05E39E5CBFA974FB481800 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B392E916885394AA1C2B31FE082DC317BCE686.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 17:47:59 +0000 Manifest this update: Wed 23 Sep 2026 17:42:59 +0000 Manifest next update: Thu 24 Sep 2026 21:25:59 +0000 Files and hashes: 1: D5B392E916885394AA1C2B31FE082DC317BCE686.crl (hash: x1Ft0a5A3L8bOIA9QvEWDCLwETqTEDOY4NIm5UQ7pRo=) 2: 3130332e3134332e32322e302f32332d3233203d3e20313339343331.roa (hash: n/anw1j/p698bFcxqqm49V4G12x2QBboMMl4JYNKkrU=) 3: 3130332e3134332e32322e302f32342d3234203d3e20313339343331.roa (hash: Mij6gjlboJz168uvi1+veD3ghjYsq0hmKTYOHdpJFfc=) 4: 323430353a343663303a3a2f33322d3332203d3e20313339343331.roa (hash: 72ltkdAz77XwydUIwwc3kpnQIFXbCRX8QiK7JdJ6abI=) 5: 3130332e3134332e32332e302f32342d3234203d3e20313339343331.roa (hash: AcnbfkvX1w/c7v0ssG/zc+baC3z+ryz2Lyxv+skns7o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.crl rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B392E916885394AA1C2B31FE082DC317BCE686.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:1c:60:ae:bc:6a:61:21:1f:05:e3:9e:5c:bf:a9:74:fb:48:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5B392E916885394AA1C2B31FE082DC317BCE686 Validity Not Before: Sep 23 17:42:59 2026 GMT Not After : Sep 24 21:25:59 2026 GMT Subject: CN=0193D3B6BF734965E6C2A81A3E87436D637E2B24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:48:e3:d8:15:eb:12:57:10:e4:74:8e:9b:22: 33:e1:5b:89:07:9c:28:2d:89:9d:44:3c:70:ea:30: 6f:de:0e:c1:bd:1c:85:5a:01:be:20:21:43:a0:3e: 05:c2:7a:d2:5d:de:77:17:1b:50:94:af:0f:72:69: 64:af:71:4a:11:0b:7b:24:6d:af:15:2e:3a:c4:b3: d5:e1:b8:8b:b4:b7:42:b2:59:08:ab:7d:7a:8b:b3: f7:91:d1:f7:bd:9e:96:dc:92:14:db:a8:78:bf:13: 56:d7:eb:e2:02:13:d5:dd:a0:3b:c1:75:9f:ab:69: d3:5c:40:01:f7:2c:19:ac:07:84:16:a9:0c:d5:bf: 94:ba:ce:36:e3:04:c7:1b:d2:b9:68:53:4f:78:9f: 62:b6:ae:a5:ba:3d:d5:22:d7:cb:b6:9e:27:9b:d7: 74:90:8d:06:64:d5:b6:73:a1:6a:da:51:63:dc:14: b0:12:00:c1:15:6c:4d:e6:46:db:c3:3a:b5:ff:c3: 80:b6:9b:be:d9:23:ba:01:7b:38:76:4f:39:6c:46: fa:72:b4:2c:85:fc:5b:da:09:fe:41:22:52:38:84: 93:52:b3:33:37:6b:ac:c9:12:10:e7:30:58:b9:3f: bd:90:f8:df:39:eb:c9:90:e1:02:26:c0:af:1f:02: 0d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:93:D3:B6:BF:73:49:65:E6:C2:A8:1A:3E:87:43:6D:63:7E:2B:24 X509v3 Authority Key Identifier: keyid:D5:B3:92:E9:16:88:53:94:AA:1C:2B:31:FE:08:2D:C3:17:BC:E6:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B392E916885394AA1C2B31FE082DC317BCE686.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:4a:5e:ec:11:98:5d:18:d6:ba:29:17:7d:75:11:bf:76:6d: 53:40:c2:21:9d:c5:d6:a0:eb:b4:3e:15:47:1a:ec:a7:60:72: 66:f1:8f:f7:00:18:df:26:9b:68:f3:7c:1d:09:d6:37:fd:4e: 65:79:f2:32:88:7d:14:67:7b:f6:4c:91:f1:ab:92:e1:f8:be: a8:60:70:a9:88:52:68:77:a1:52:ff:0b:99:cf:66:81:9e:f6: 5e:42:bc:33:7e:bd:fe:0d:31:e0:33:18:1b:2a:20:35:19:15: b0:31:28:82:8c:f6:b0:45:6b:46:49:c2:52:6a:af:ee:fa:76: 8f:1a:1a:37:e6:1c:9c:e2:8b:a6:f9:5f:e5:9a:fb:2c:71:6c: 41:a4:d5:53:e7:c0:43:e8:6d:0e:9c:42:f3:df:5e:d4:3d:4e: 10:d8:d1:ee:ac:ed:cb:d4:62:73:6a:09:a5:d4:95:c3:6d:13: a7:dc:44:b2:98:75:fb:c1:0d:13:b6:f8:b8:71:91:15:c5:ac: 0d:eb:89:6f:b7:ea:75:86:60:f6:e9:d6:89:74:85:07:47:a5: 69:df:33:30:88:2d:11:aa:c1:ac:09:0b:b4:78:48:73:c0:46: 69:48:09:ac:86:82:07:74:dc:de:bb:de:25:ee:a6:7d:ca:06: 8d:ea:c6:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfxxgrrxqYSEfBeOeXL+pdPtIGAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVCMzkyRTkxNjg4NTM5NEFBMUMyQjMxRkUwODJEQzMx N0JDRTY4NjAeFw0yNjA5MjMxNzQyNTlaFw0yNjA5MjQyMTI1NTlaMDMxMTAvBgNV BAMTKDAxOTNEM0I2QkY3MzQ5NjVFNkMyQTgxQTNFODc0MzZENjM3RTJCMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiSOPYFesSVxDkdI6bIjPhW4kH nCgtiZ1EPHDqMG/eDsG9HIVaAb4gIUOgPgXCetJd3ncXG1CUrw9yaWSvcUoRC3sk ba8VLjrEs9XhuIu0t0KyWQirfXqLs/eR0fe9npbckhTbqHi/E1bX6+ICE9XdoDvB dZ+radNcQAH3LBmsB4QWqQzVv5S6zjbjBMcb0rloU094n2K2rqW6PdUi18u2nieb 13SQjQZk1bZzoWraUWPcFLASAMEVbE3mRtvDOrX/w4C2m77ZI7oBezh2TzlsRvpy tCyF/FvaCf5BIlI4hJNSszM3a6zJEhDnMFi5P72Q+N8568mQ4QImwK8fAg0xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAZPTtr9zSWXmwqgaPodDbWN+KyQwHwYDVR0j BBgwFoAU1bOS6RaIU5SqHCsx/ggtwxe85oYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ2ZjMzZjItZjA2ZS00ZWI2LWFlNjEtNTUyOWJjYTFjZGNkLzAvRDVCMzkyRTkx Njg4NTM5NEFBMUMyQjMxRkUwODJEQzMxN0JDRTY4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENUIzOTJFOTE2ODg1Mzk0QUExQzJCMzFGRTA4MkRDMzE3QkNF Njg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ2ZjMzZjItZjA2ZS00ZWI2LWFl NjEtNTUyOWJjYTFjZGNkLzAvRDVCMzkyRTkxNjg4NTM5NEFBMUMyQjMxRkUwODJE QzMxN0JDRTY4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxKXuwRmF0Y1ropF311Eb92bVNAwiGdxdag 67Q+FUca7Kdgcmbxj/cAGN8mm2jzfB0J1jf9TmV58jKIfRRne/ZMkfGrkuH4vqhg cKmIUmh3oVL/C5nPZoGe9l5CvDN+vf4NMeAzGBsqIDUZFbAxKIKM9rBFa0ZJwlJq r+76do8aGjfmHJzii6b5X+Wa+yxxbEGk1VPnwEPobQ6cQvPfXtQ9ThDY0e6s7cvU YnNqCaXUlcNtE6fcRLKYdfvBDRO2+LhxkRXFrA3riW+36nWGYPbp1ol0hQdHpWnf MzCILRGqwawJC7R4SHPARmlICayGggd03N673iXupn3KBo3qxsQ= -----END CERTIFICATE-----Generated at Thu Sep 24 09:08:45 2026 by rpki-client