$ rpki-client -vvvf rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft File: D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft (raw, json) Hash identifier: sdqpwlSnXMCObxNbL2M9hewoe0Lzk6JTBYpGA14Rzg4= Subject key identifier: 69:91:93:75:A4:B8:1A:48:88:93:59:96:37:49:5A:33:9F:AA:97:A9 Authority key identifier: D8:BF:75:90:C4:0D:E7:31:6F:52:A1:DE:E7:CE:7B:ED:A4:30:82:C3 Certificate issuer: /CN=D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3 Certificate serial: 71324A563E6341A2B1B28AC91446DC506EE86702 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 14:03:21 +0000 Manifest this update: Thu 24 Sep 2026 13:58:21 +0000 Manifest next update: Fri 25 Sep 2026 14:25:21 +0000 Files and hashes: 1: 3136302e3139312e32362e302f32332d3234203d3e20313533313239.roa (hash: JFK4m68zG0lJAd7+KDHHharwdbO7qzWlnuoWt7ljQFI=) 2: 3136302e3139312e32362e302f32342d3234203d3e20313533313239.roa (hash: eXGHZrGd4sU2DLSEdy3de330+Fw4LKj8QHf1Kk8jl8M=) 3: 3136302e3139312e32372e302f32342d3234203d3e20313533313239.roa (hash: JFxGecPe7UA2eaCg+ZKJcplW/KcDw+sS4WqX6uOvlVg=) 4: D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.crl (hash: narjYH/IQ1qMlUyD4g4mPvN39oVeviYV95P4HRloUyc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.crl rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:32:4a:56:3e:63:41:a2:b1:b2:8a:c9:14:46:dc:50:6e:e8:67:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3 Validity Not Before: Sep 24 13:58:21 2026 GMT Not After : Sep 25 14:25:21 2026 GMT Subject: CN=69919375A4B81A488893599637495A339FAA97A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e6:b6:c5:00:ab:ce:3c:8c:75:9a:f0:dd:4b: be:b1:89:cd:e7:72:d0:fe:2c:47:a2:c1:15:6d:cb: cd:2b:b1:eb:41:e5:69:b3:24:40:86:a7:fe:48:6b: 74:1e:a6:3a:94:1d:eb:af:d9:62:b0:7d:1d:82:bf: 88:32:ce:14:f9:06:42:ce:e4:b1:7f:c8:3e:c2:22: 43:48:98:ba:47:f7:29:c5:88:36:1b:00:02:00:0d: 9d:b4:7c:23:58:df:fa:8e:a4:c2:01:e4:c9:22:ac: 75:48:9d:ac:31:13:65:02:10:6a:d2:e7:71:d8:cb: 41:c0:fa:2d:d3:54:fc:11:e1:74:a3:24:73:1f:0e: 20:87:39:11:f8:b3:3d:20:b4:d5:60:ef:f9:a6:89: f8:87:a5:e7:ec:31:8d:19:c1:28:14:3a:67:32:f4: f8:50:99:f1:97:06:24:9e:0b:e8:a7:52:46:ee:f1: e7:4c:10:9b:08:b6:1d:19:7e:41:3b:79:07:d6:72: 8c:52:2d:b6:67:17:8d:9e:ba:71:6d:46:a4:0f:8b: a2:01:eb:b3:17:8d:a5:60:ec:5c:e7:c9:e2:db:7f: 79:b5:52:e5:32:ac:5d:73:30:6c:b0:39:32:84:03: d4:b8:9a:53:f1:a3:42:c6:3e:8d:38:63:e8:a1:64: b1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:91:93:75:A4:B8:1A:48:88:93:59:96:37:49:5A:33:9F:AA:97:A9 X509v3 Authority Key Identifier: keyid:D8:BF:75:90:C4:0D:E7:31:6F:52:A1:DE:E7:CE:7B:ED:A4:30:82:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:bd:1b:82:64:a3:ae:1e:84:22:83:5c:2d:30:9a:03:45:92: 89:19:53:e4:62:8f:27:3d:27:75:bd:a4:2e:00:ce:a7:9d:25: 73:23:94:3d:ca:a8:07:56:63:8c:3f:55:c4:ae:0b:9f:8b:63: a8:bf:d6:10:63:5b:d2:82:a5:c7:84:b4:1e:d0:e4:28:ba:ad: 3d:22:3c:d8:c1:04:56:7a:a5:dd:39:87:7c:54:6f:5d:94:d9: 7b:72:a1:96:d3:e6:20:0a:27:64:dc:1a:1c:d0:fc:c6:62:eb: b3:b0:42:42:37:3c:08:f7:83:ec:aa:e9:28:2e:d2:d7:3e:a3: 27:60:9d:b3:5c:e0:28:b2:12:6a:b4:eb:6a:32:a4:66:09:a1: 74:19:7e:3b:55:47:50:38:08:78:8c:e5:e5:e5:49:1b:90:71: fa:ca:e4:00:e0:09:26:ad:6d:d3:5d:e2:f2:c7:89:3b:d6:32: 22:c0:62:5b:cc:83:d8:58:a0:86:01:e4:80:bb:2c:26:83:fb: 3a:bb:79:f7:02:a0:7d:56:25:fd:14:af:47:91:08:2c:7c:f3: b6:98:86:0d:fc:4e:74:c8:1d:bd:7d:40:96:6b:06:93:4b:0b: a4:2c:92:55:16:6d:0d:b3:e6:f1:43:8c:66:ab:76:9a:de:f9: ec:93:bc:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcTJKVj5jQaKxsorJFEbcUG7oZwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhCRjc1OTBDNDBERTczMTZGNTJBMURFRTdDRTdCRURB NDMwODJDMzAeFw0yNjA5MjQxMzU4MjFaFw0yNjA5MjUxNDI1MjFaMDMxMTAvBgNV BAMTKDY5OTE5Mzc1QTRCODFBNDg4ODkzNTk5NjM3NDk1QTMzOUZBQTk3QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE5rbFAKvOPIx1mvDdS76xic3n ctD+LEeiwRVty80rsetB5WmzJECGp/5Ia3QepjqUHeuv2WKwfR2Cv4gyzhT5BkLO 5LF/yD7CIkNImLpH9ynFiDYbAAIADZ20fCNY3/qOpMIB5MkirHVInawxE2UCEGrS 53HYy0HA+i3TVPwR4XSjJHMfDiCHORH4sz0gtNVg7/mmifiHpefsMY0ZwSgUOmcy 9PhQmfGXBiSeC+inUkbu8edMEJsIth0ZfkE7eQfWcoxSLbZnF42eunFtRqQPi6IB 67MXjaVg7FznyeLbf3m1UuUyrF1zMGywOTKEA9S4mlPxo0LGPo04Y+ihZLHzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaZGTdaS4GkiIk1mWN0laM5+ql6kwHwYDVR0j BBgwFoAU2L91kMQN5zFvUqHe58577aQwgsMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAzOTYzODgtMmQ2Yi00NzZlLTk2M2QtMWNjMzgxMzc0YjFjLzAvRDhCRjc1OTBD NDBERTczMTZGNTJBMURFRTdDRTdCRURBNDMwODJDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EOEJGNzU5MEM0MERFNzMxNkY1MkExREVFN0NFN0JFREE0MzA4 MkMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzAvRDhCRjc1OTBDNDBERTczMTZGNTJBMURFRTdDRTdC RURBNDMwODJDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKG9G4Jko64ehCKDXC0wmgNFkokZU+Rijyc9 J3W9pC4AzqedJXMjlD3KqAdWY4w/VcSuC5+LY6i/1hBjW9KCpceEtB7Q5Ci6rT0i PNjBBFZ6pd05h3xUb12U2XtyoZbT5iAKJ2TcGhzQ/MZi67OwQkI3PAj3g+yq6Sgu 0tc+oydgnbNc4CiyEmq062oypGYJoXQZfjtVR1A4CHiM5eXlSRuQcfrK5ADgCSat bdNd4vLHiTvWMiLAYlvMg9hYoIYB5IC7LCaD+zq7efcCoH1WJf0Ur0eRCCx887aY hg38TnTIHb19QJZrBpNLC6QsklUWbQ2z5vFDjGardpre+eyTvAM= -----END CERTIFICATE-----Generated at Fri Sep 25 04:58:54 2026 by rpki-client