$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft File: D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft (raw, json) Hash identifier: C1gDdRbNQq6nc++Ipe79bYWsondf2BG6Gcdjj62tr44= Subject key identifier: D4:80:04:36:CC:1D:19:A9:41:94:48:C8:3D:71:A1:80:BA:AD:D9:C2 Authority key identifier: D0:FF:50:D2:21:71:54:9D:8F:FA:9A:AB:3E:81:F8:76:6C:7F:7E:15 Certificate issuer: /CN=D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15 Certificate serial: 67FB49A82972B3BFD9A7B3AADAA8A65D44CBE2EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft Manifest number: C5 Signing time: Thu 24 Sep 2026 09:07:03 +0000 Manifest this update: Thu 24 Sep 2026 09:02:03 +0000 Manifest next update: Fri 25 Sep 2026 12:49:03 +0000 Files and hashes: 1: 3130332e3138352e33382e302f32332d3233203d3e203538383230.roa (hash: 96CDSdZcSo+UEQAQF3sCpQRuZ8lYkqGXZBprM0AA1aw=) 2: 3130332e3138352e33382e302f32342d3234203d3e20313339343536.roa (hash: IjalSDTSc8HchZQeF3J6Ob4TnTBMrEoHkiCdaMu5BeQ=) 3: D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl (hash: Yiw244lSj/7DJt8UVa7YMmktpCEYRDtw51KgIZf6iDk=) 4: 3130332e3138352e33392e302f32342d3234203d3e20313339343536.roa (hash: uW+IVxfV8f87IsoKQJA75zmndKbl8xC3CzJnrp9BN1Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:fb:49:a8:29:72:b3:bf:d9:a7:b3:aa:da:a8:a6:5d:44:cb:e2:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15 Validity Not Before: Sep 24 09:02:03 2026 GMT Not After : Sep 25 12:49:03 2026 GMT Subject: CN=D4800436CC1D19A9419448C83D71A180BAADD9C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:21:13:da:6a:bf:13:e5:e2:d4:e5:dd:3f:d2: 36:eb:e7:2b:e3:fa:d2:83:23:9c:d0:d2:dc:37:99: 8b:89:c9:e0:48:54:a4:8b:6b:74:39:68:d6:68:46: 73:d7:fe:8c:9d:79:6d:06:dc:85:ec:0c:d3:9b:85: 88:e2:af:b7:99:b9:58:69:7a:f9:22:ee:5b:91:43: 48:5b:d6:67:77:46:04:15:01:c4:da:c5:a1:49:9c: a6:96:ba:8d:7f:99:be:5b:bb:44:39:96:6b:72:fa: 3b:57:95:e2:8a:63:34:b9:c0:34:3d:ae:de:04:c2: 50:c1:57:da:b9:63:ad:63:d8:26:c5:2b:7c:43:13: f0:c9:d6:15:ba:dd:34:b2:89:3f:13:d8:7e:30:4b: 4b:20:50:75:df:b0:6e:c6:8a:fd:74:ac:36:70:cf: 4c:e4:5d:74:1a:11:e1:f4:4d:cc:8d:5b:13:a8:a7: 6e:ee:1f:d0:2f:45:0b:07:78:64:d5:97:c3:e4:fa: d7:e2:23:84:b3:12:a2:2a:8d:16:15:a8:d1:c1:50: 81:96:72:d9:30:63:a3:83:e6:f6:03:90:12:66:e1: 5d:15:22:c1:ca:97:5d:ea:7c:e2:27:6b:71:c3:52: 27:1c:8a:19:69:fe:3e:7c:a5:b9:c5:dc:9f:a3:53: f6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:80:04:36:CC:1D:19:A9:41:94:48:C8:3D:71:A1:80:BA:AD:D9:C2 X509v3 Authority Key Identifier: keyid:D0:FF:50:D2:21:71:54:9D:8F:FA:9A:AB:3E:81:F8:76:6C:7F:7E:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:35:4a:6a:35:5a:bd:81:12:d3:89:29:63:d9:3a:ba:88:0f: e6:85:c7:ab:fe:60:af:fa:44:58:07:2e:26:81:b8:f4:e0:3d: 59:cb:71:a5:d4:a3:2d:2a:41:c7:d4:e7:3b:36:71:b4:b2:e8: 7c:12:9a:a1:18:ba:6d:ab:32:9f:1c:dd:5d:3f:0e:ac:c1:52: 1b:30:4d:84:55:ed:48:16:10:2a:53:62:41:44:96:e9:e2:3f: 98:4d:e9:92:f3:11:31:6f:9e:67:5e:fa:ff:57:1e:48:7f:73: 48:33:90:cd:f9:ba:58:e4:08:cd:8a:5b:33:80:38:7b:af:a8: 46:d0:26:90:74:af:f6:79:15:b7:ae:be:d7:9d:ab:91:87:8e: 32:67:e6:a8:44:32:e1:59:bf:1a:ed:23:f8:b9:77:99:59:d4: 06:8a:08:f3:c1:8d:b1:15:df:da:d8:da:66:c5:d4:c9:db:7e: d0:f6:39:98:7f:64:9e:17:eb:38:38:4f:6b:7b:86:f0:18:03: 12:c2:b8:ea:93:09:04:2a:c1:c2:d5:72:bc:c7:4f:1d:dc:ac: be:c7:c5:e1:d1:6e:28:df:e2:75:08:3a:ae:e3:e4:12:2f:1c: 46:54:57:c3:73:22:b3:42:94:a2:69:8c:06:27:ca:e4:4d:4b: 67:bc:54:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ/tJqClys7/Zp7Oq2qimXUTL4u8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGRjUwRDIyMTcxNTQ5RDhGRkE5QUFCM0U4MUY4NzY2 QzdGN0UxNTAeFw0yNjA5MjQwOTAyMDNaFw0yNjA5MjUxMjQ5MDNaMDMxMTAvBgNV BAMTKEQ0ODAwNDM2Q0MxRDE5QTk0MTk0NDhDODNENzFBMTgwQkFBREQ5QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0IRPaar8T5eLU5d0/0jbr5yvj +tKDI5zQ0tw3mYuJyeBIVKSLa3Q5aNZoRnPX/oydeW0G3IXsDNObhYjir7eZuVhp evki7luRQ0hb1md3RgQVAcTaxaFJnKaWuo1/mb5bu0Q5lmty+jtXleKKYzS5wDQ9 rt4EwlDBV9q5Y61j2CbFK3xDE/DJ1hW63TSyiT8T2H4wS0sgUHXfsG7Giv10rDZw z0zkXXQaEeH0TcyNWxOop27uH9AvRQsHeGTVl8Pk+tfiI4SzEqIqjRYVqNHBUIGW ctkwY6OD5vYDkBJm4V0VIsHKl13qfOIna3HDUiccihlp/j58pbnF3J+jU/ZtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1IAENswdGalBlEjIPXGhgLqt2cIwHwYDVR0j BBgwFoAU0P9Q0iFxVJ2P+pqrPoH4dmx/fhUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmUwNWFiNjYtNjZhZi00MGE0LTg5YTUtODA2OTQwMjgzOWE5LzAvRDBGRjUwRDIy MTcxNTQ5RDhGRkE5QUFCM0U4MUY4NzY2QzdGN0UxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMEZGNTBEMjIxNzE1NDlEOEZGQTlBQUIzRTgxRjg3NjZDN0Y3 RTE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmUwNWFiNjYtNjZhZi00MGE0LTg5 YTUtODA2OTQwMjgzOWE5LzAvRDBGRjUwRDIyMTcxNTQ5RDhGRkE5QUFCM0U4MUY4 NzY2QzdGN0UxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIM1Smo1Wr2BEtOJKWPZOrqID+aFx6v+YK/6 RFgHLiaBuPTgPVnLcaXUoy0qQcfU5zs2cbSy6HwSmqEYum2rMp8c3V0/DqzBUhsw TYRV7UgWECpTYkFEluniP5hN6ZLzETFvnmde+v9XHkh/c0gzkM35uljkCM2KWzOA OHuvqEbQJpB0r/Z5Fbeuvtedq5GHjjJn5qhEMuFZvxrtI/i5d5lZ1AaKCPPBjbEV 39rY2mbF1MnbftD2OZh/ZJ4X6zg4T2t7hvAYAxLCuOqTCQQqwcLVcrzHTx3crL7H xeHRbijf4nUIOq7j5BIvHEZUV8NzIrNClKJpjAYnyuRNS2e8VFc= -----END CERTIFICATE-----Generated at Fri Sep 25 01:19:32 2026 by rpki-client