$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.mft File: 284132D9179D6A105AD38E8CB47C2E2D877E8D8B.mft (raw, json) Hash identifier: rk5eE0z9EORVcdGEE6zeWpcvPMV6EH8XxN4H99Qx6xw= Subject key identifier: 6D:E2:F7:6D:84:ED:D5:62:94:F6:ED:98:8E:4A:B8:22:B8:45:A1:44 Authority key identifier: 28:41:32:D9:17:9D:6A:10:5A:D3:8E:8C:B4:7C:2E:2D:87:7E:8D:8B Certificate issuer: /CN=284132D9179D6A105AD38E8CB47C2E2D877E8D8B Certificate serial: 40338512AD0559D9C7E9D0C95E66245F3ED8DC3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 01:37:14 +0000 Manifest this update: Fri 25 Sep 2026 01:32:14 +0000 Manifest next update: Sat 26 Sep 2026 03:14:14 +0000 Files and hashes: 1: 284132D9179D6A105AD38E8CB47C2E2D877E8D8B.crl (hash: h/mn76XWlMlvYiUERdOLKHBPakAvayxinvyfAi4oyR8=) 2: 3130332e34322e3234332e302f32342d3234203d3e20313531353935.roa (hash: K06HluoUSneBunwOTMkxMJ0GcJy62PXja/IY39krYJE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.crl rsync://rpki-rsync.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 03:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:33:85:12:ad:05:59:d9:c7:e9:d0:c9:5e:66:24:5f:3e:d8:dc:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=284132D9179D6A105AD38E8CB47C2E2D877E8D8B Validity Not Before: Sep 25 01:32:14 2026 GMT Not After : Sep 26 03:14:14 2026 GMT Subject: CN=6DE2F76D84EDD56294F6ED988E4AB822B845A144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:38:dd:a8:ec:bc:05:90:5f:6f:1d:f6:ec:fd: 55:09:db:b3:d5:63:d4:4f:c1:ff:2a:c2:0f:54:7c: d1:96:7b:a6:81:7d:83:f9:5c:3b:f2:12:5c:86:98: 69:12:f7:60:54:be:d2:ec:6f:66:ed:57:c1:7d:12: e3:54:1a:9e:7b:07:8e:e8:ad:73:4f:07:34:70:f5: e7:46:69:bf:44:16:66:9e:59:46:f7:d6:a2:78:9d: e0:cc:8e:0e:82:47:b9:b2:5e:5b:2d:96:52:ac:bd: ff:3d:20:e9:89:3d:da:c4:6e:a9:db:00:6d:51:7d: 5b:38:73:f1:1e:01:30:8e:86:fc:67:3a:c6:27:7a: 95:83:0c:32:cc:36:ef:3b:4c:f9:16:ec:94:61:4b: 93:41:78:a9:1b:26:87:d1:b4:9c:02:81:fe:c0:5f: ad:97:32:df:5d:e9:ef:3b:be:76:49:52:7f:7c:e0: c4:c7:64:be:96:27:5f:9e:22:7c:5f:42:64:65:a9: 08:34:5f:bf:ec:25:5d:74:62:b9:96:88:7b:7f:55: 6a:f6:c7:71:5c:08:6f:f8:0e:a9:c5:65:c3:10:98: e2:47:a6:9e:ec:e9:0c:6e:5c:07:48:43:90:f3:25: 69:47:45:94:22:71:5c:e7:5d:67:c6:4a:54:93:85: be:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E2:F7:6D:84:ED:D5:62:94:F6:ED:98:8E:4A:B8:22:B8:45:A1:44 X509v3 Authority Key Identifier: keyid:28:41:32:D9:17:9D:6A:10:5A:D3:8E:8C:B4:7C:2E:2D:87:7E:8D:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:6d:56:45:74:2a:19:d2:af:8e:fd:c6:9d:8e:40:99:d1:f6: d3:b2:22:ce:f9:81:1c:66:67:2b:8f:cc:60:d6:c0:d7:61:08: dc:a8:80:1d:83:48:19:e0:f4:ff:68:03:41:a3:40:c9:f9:3e: 26:fc:12:47:94:31:c0:fa:14:ba:a7:c0:b3:18:1d:11:c0:09: df:26:cd:48:a3:5a:c3:a0:d7:09:74:b8:ba:28:72:1d:06:6a: ec:d6:d3:4a:6b:e9:b6:41:e5:ca:c2:d6:11:35:90:8e:36:3d: 6c:de:5b:07:31:1f:00:ae:94:99:87:7f:78:4d:62:37:73:9b: 51:ad:6d:6a:7c:9a:14:24:1d:6d:21:a8:d9:9a:f6:02:79:13: 17:13:27:52:21:98:2c:49:24:12:06:52:f3:36:ab:49:7b:4c: 3f:9f:ec:c4:b5:d8:bc:8f:20:d9:83:75:19:17:17:fc:01:9b: 97:79:7d:93:3f:b0:bc:5a:ba:a6:cc:e6:32:84:68:95:82:be: 50:63:e8:d6:0b:d0:7d:50:ff:ca:82:72:71:4a:82:5b:20:0a: 1c:c5:a6:41:4d:e6:84:95:1e:da:3f:ee:34:df:f4:84:71:94: d6:ed:06:3d:8f:34:5a:11:45:90:af:5a:89:ee:3e:3d:ec:b5: 14:d2:83:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQDOFEq0FWdnH6dDJXmYkXz7Y3DowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg0MTMyRDkxNzlENkExMDVBRDM4RThDQjQ3QzJFMkQ4 NzdFOEQ4QjAeFw0yNjA5MjUwMTMyMTRaFw0yNjA5MjYwMzE0MTRaMDMxMTAvBgNV BAMTKDZERTJGNzZEODRFREQ1NjI5NEY2RUQ5ODhFNEFCODIyQjg0NUExNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKON2o7LwFkF9vHfbs/VUJ27PV Y9RPwf8qwg9UfNGWe6aBfYP5XDvyElyGmGkS92BUvtLsb2btV8F9EuNUGp57B47o rXNPBzRw9edGab9EFmaeWUb31qJ4neDMjg6CR7myXlstllKsvf89IOmJPdrEbqnb AG1RfVs4c/EeATCOhvxnOsYnepWDDDLMNu87TPkW7JRhS5NBeKkbJofRtJwCgf7A X62XMt9d6e87vnZJUn984MTHZL6WJ1+eInxfQmRlqQg0X7/sJV10YrmWiHt/VWr2 x3FcCG/4DqnFZcMQmOJHpp7s6QxuXAdIQ5DzJWlHRZQicVznXWfGSlSThb4dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbeL3bYTt1WKU9u2Yjkq4IrhFoUQwHwYDVR0j BBgwFoAUKEEy2RedahBa046MtHwuLYd+jYswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmY5M2I4MTYtZTdiZS00NjRjLTg3ODUtNDk4YmY4NGQzNzM1LzAvMjg0MTMyRDkx NzlENkExMDVBRDM4RThDQjQ3QzJFMkQ4NzdFOEQ4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODQxMzJEOTE3OUQ2QTEwNUFEMzhFOENCNDdDMkUyRDg3N0U4 RDhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmY5M2I4MTYtZTdiZS00NjRjLTg3 ODUtNDk4YmY4NGQzNzM1LzAvMjg0MTMyRDkxNzlENkExMDVBRDM4RThDQjQ3QzJF MkQ4NzdFOEQ4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNtVkV0KhnSr479xp2OQJnR9tOyIs75gRxm ZyuPzGDWwNdhCNyogB2DSBng9P9oA0GjQMn5Pib8EkeUMcD6FLqnwLMYHRHACd8m zUijWsOg1wl0uLooch0GauzW00pr6bZB5crC1hE1kI42PWzeWwcxHwCulJmHf3hN Yjdzm1GtbWp8mhQkHW0hqNma9gJ5ExcTJ1IhmCxJJBIGUvM2q0l7TD+f7MS12LyP INmDdRkXF/wBm5d5fZM/sLxauqbM5jKEaJWCvlBj6NYL0H1Q/8qCcnFKglsgChzF pkFN5oSVHto/7jTf9IRxlNbtBj2PNFoRRZCvWonuPj3stRTSgxI= -----END CERTIFICATE-----Generated at Fri Sep 25 13:07:51 2026 by rpki-client