$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft File: DB23849BCF63AE719E7BE4FE89385D166773A883.mft (raw, json) Hash identifier: VeSPT23rg9V7/X6HivpIRqgnXr2k2S8k4dEdiYsDl7s= Subject key identifier: 37:57:14:A7:E8:51:14:72:15:AD:7C:46:76:C3:60:85:BF:45:39:0D Authority key identifier: DB:23:84:9B:CF:63:AE:71:9E:7B:E4:FE:89:38:5D:16:67:73:A8:83 Certificate issuer: /CN=DB23849BCF63AE719E7BE4FE89385D166773A883 Certificate serial: 2103E5CF49A394190F276C23041AC692626B4B72 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 18:49:20 +0000 Manifest this update: Wed 23 Sep 2026 18:44:20 +0000 Manifest next update: Thu 24 Sep 2026 21:46:20 +0000 Files and hashes: 1: DB23849BCF63AE719E7BE4FE89385D166773A883.crl (hash: iNSeSyfZlTXMXMogBjeperRDzy/UX3jYOsDrzFz9g0k=) 2: 3130332e3135372e32342e302f32342d3234203d3e20313431313035.roa (hash: g3WbWI1q18vac55oq8gdpUXBjsp4Aidv1FzJgM9YpdM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.crl rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:03:e5:cf:49:a3:94:19:0f:27:6c:23:04:1a:c6:92:62:6b:4b:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB23849BCF63AE719E7BE4FE89385D166773A883 Validity Not Before: Sep 23 18:44:20 2026 GMT Not After : Sep 24 21:46:20 2026 GMT Subject: CN=375714A7E851147215AD7C4676C36085BF45390D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:02:35:c8:70:de:4f:32:02:1f:86:ef:5c:05: 34:fc:70:ff:4b:81:da:1b:ac:7d:1a:ae:ff:2c:63: a7:c4:37:37:a4:16:96:15:e1:c8:1e:3c:44:2d:38: f6:85:3d:27:a2:56:68:e8:37:9e:cc:3e:dc:ab:a7: 08:91:1f:ba:44:a4:75:fe:d3:6a:d5:51:9f:fb:32: 52:2a:99:3e:f9:ed:61:61:58:0a:4e:5e:7a:e1:2c: 2c:0f:84:a8:6a:e3:ab:70:3f:17:e9:e7:b7:cf:4e: e0:de:d1:c3:c5:c9:a3:4b:1e:b5:1b:6d:96:dc:1d: 94:6f:e2:03:f3:de:77:ff:b4:69:f6:7a:8f:47:0f: 8a:51:86:7a:7c:b5:64:40:3b:54:e8:4f:32:1b:e2: 4d:12:57:31:a0:33:e6:e0:28:73:51:88:9a:ca:b1: 24:86:2e:1b:81:96:ea:1b:83:43:e5:71:e7:23:63: be:2f:57:79:b4:bc:5d:7e:79:bd:8a:0e:2c:ad:a7: ce:7e:e2:7d:a9:76:ba:6c:c1:04:34:79:37:8c:58: 46:aa:0a:a1:83:dc:4a:25:5f:9f:77:7e:40:6d:cd: 9e:ca:8f:82:23:6b:c2:e9:10:87:3a:1b:e5:1e:8d: 1e:4a:27:96:db:d1:4f:df:06:aa:03:bb:7c:f9:62: 6e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:57:14:A7:E8:51:14:72:15:AD:7C:46:76:C3:60:85:BF:45:39:0D X509v3 Authority Key Identifier: keyid:DB:23:84:9B:CF:63:AE:71:9E:7B:E4:FE:89:38:5D:16:67:73:A8:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:9c:b8:15:11:78:d8:9d:53:50:db:0f:30:e3:18:a5:6e:ff: e7:0e:23:1e:7b:78:da:06:7d:04:55:b6:27:d3:33:9f:26:a3: 10:58:8f:4f:52:75:fe:bd:e8:c5:8f:e9:46:4e:a6:ba:60:df: 03:37:9c:3e:ed:c3:b0:bb:12:fa:27:0f:fc:62:80:ba:57:d4: ec:58:13:74:96:bb:b8:ed:ef:09:66:58:c9:66:fa:c4:ae:e9: bc:ea:af:f5:79:fa:8c:09:de:02:c9:8b:9d:70:80:16:ea:da: 29:dd:0f:6d:fd:ab:c9:d5:a1:91:5d:6f:43:e4:a8:e6:f9:e1: 97:7e:90:de:3f:3d:ac:4e:dd:6d:95:ed:eb:8b:66:18:6d:d4: 31:b8:de:94:b8:47:30:89:29:8f:c0:0b:aa:dd:f1:ae:68:7a: 81:a7:44:3a:a2:c5:59:ac:d3:32:67:43:f7:98:01:aa:30:ec: a2:34:8f:d6:10:9c:75:f0:88:eb:1b:02:7b:57:dc:1e:3e:87: 9a:4e:5f:3c:e4:32:ed:6f:36:f5:49:44:be:f0:d7:fa:b1:ab: 81:82:70:03:bf:62:9f:ff:6c:e0:2b:95:ae:29:77:a6:c0:3f: 6b:e4:9c:b4:9d:cb:c3:07:2e:a3:58:cc:eb:29:c8:d7:df:3f: bb:58:48:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIQPlz0mjlBkPJ2wjBBrGkmJrS3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIyMzg0OUJDRjYzQUU3MTlFN0JFNEZFODkzODVEMTY2 NzczQTg4MzAeFw0yNjA5MjMxODQ0MjBaFw0yNjA5MjQyMTQ2MjBaMDMxMTAvBgNV BAMTKDM3NTcxNEE3RTg1MTE0NzIxNUFEN0M0Njc2QzM2MDg1QkY0NTM5MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaAjXIcN5PMgIfhu9cBTT8cP9L gdobrH0arv8sY6fENzekFpYV4cgePEQtOPaFPSeiVmjoN57MPtyrpwiRH7pEpHX+ 02rVUZ/7MlIqmT757WFhWApOXnrhLCwPhKhq46twPxfp57fPTuDe0cPFyaNLHrUb bZbcHZRv4gPz3nf/tGn2eo9HD4pRhnp8tWRAO1ToTzIb4k0SVzGgM+bgKHNRiJrK sSSGLhuBluobg0PlcecjY74vV3m0vF1+eb2KDiytp85+4n2pdrpswQQ0eTeMWEaq CqGD3EolX593fkBtzZ7Kj4Ija8LpEIc6G+UejR5KJ5bb0U/fBqoDu3z5Ym5jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN1cUp+hRFHIVrXxGdsNghb9FOQ0wHwYDVR0j BBgwFoAU2yOEm89jrnGee+T+iThdFmdzqIMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJjNjViOGMtMzllOS00NzhkLTg3NDItYzUzNWI2MWJhZTU5LzAvREIyMzg0OUJD RjYzQUU3MTlFN0JFNEZFODkzODVEMTY2NzczQTg4My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQjIzODQ5QkNGNjNBRTcxOUU3QkU0RkU4OTM4NUQxNjY3NzNB ODgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJjNjViOGMtMzllOS00NzhkLTg3 NDItYzUzNWI2MWJhZTU5LzAvREIyMzg0OUJDRjYzQUU3MTlFN0JFNEZFODkzODVE MTY2NzczQTg4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGcuBUReNidU1DbDzDjGKVu/+cOIx57eNoG fQRVtifTM58moxBYj09Sdf696MWP6UZOprpg3wM3nD7tw7C7EvonD/xigLpX1OxY E3SWu7jt7wlmWMlm+sSu6bzqr/V5+owJ3gLJi51wgBbq2indD239q8nVoZFdb0Pk qOb54Zd+kN4/PaxO3W2V7euLZhht1DG43pS4RzCJKY/AC6rd8a5oeoGnRDqixVms 0zJnQ/eYAaow7KI0j9YQnHXwiOsbAntX3B4+h5pOXzzkMu1vNvVJRL7w1/qxq4GC cAO/Yp//bOArla4pd6bAP2vknLSdy8MHLqNYzOspyNffP7tYSKM= -----END CERTIFICATE-----Generated at Wed Sep 23 22:26:53 2026 by rpki-client