$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft File: D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft (raw, json) Hash identifier: kxB0bQzfuH2KMQgqBWsLs36sKftloIfMt4/ozzHqo60= Subject key identifier: 6A:E5:16:BA:78:F9:3C:47:2E:9F:69:A7:7A:05:F7:2A:85:DB:FD:55 Authority key identifier: D9:00:F1:99:0F:32:4E:8B:FF:8E:6A:B4:F6:AF:00:66:2E:F4:A1:81 Certificate issuer: /CN=D900F1990F324E8BFF8E6AB4F6AF00662EF4A181 Certificate serial: 26D777D9786DC845D81CF3EE4A01F44B483B29AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 13:22:38 +0000 Manifest this update: Wed 23 Sep 2026 13:17:38 +0000 Manifest next update: Thu 24 Sep 2026 15:22:38 +0000 Files and hashes: 1: D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.crl (hash: wocOF2Uzu3Dv3xctPBPqAJ0gPGfsEKR3MeQV+EKXi5E=) 2: 3130332e37302e39322e302f32332d3234203d3e20313338303634.roa (hash: nTkoyc0s6mnt2tkKBJEFQNLgWGbaxLyUZAhyR5bx0jE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.crl rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 15:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:d7:77:d9:78:6d:c8:45:d8:1c:f3:ee:4a:01:f4:4b:48:3b:29:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D900F1990F324E8BFF8E6AB4F6AF00662EF4A181 Validity Not Before: Sep 23 13:17:38 2026 GMT Not After : Sep 24 15:22:38 2026 GMT Subject: CN=6AE516BA78F93C472E9F69A77A05F72A85DBFD55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c1:81:37:b7:be:47:a4:2e:e2:68:34:e5:15: bb:63:36:52:7c:a6:d9:9f:fc:29:8b:2b:3f:8b:bb: 5b:7e:cf:9f:72:6e:cf:a0:da:d9:d1:ee:fe:d1:5f: 31:f2:df:27:73:46:8b:82:a5:7b:43:65:fb:fb:80: 37:54:6a:b7:7a:d9:98:0d:4d:3f:62:b8:22:83:26: 1d:34:bd:08:34:75:76:6c:de:3e:85:20:68:49:d7: 5c:75:72:b5:1a:c0:41:f3:f6:7f:b5:88:eb:14:7f: 49:c2:87:88:12:aa:b8:67:81:61:74:22:0a:ea:96: d8:be:82:da:b6:4f:f5:fd:63:71:0e:5c:23:a4:1c: 53:9b:14:f8:8e:c9:9c:27:df:92:f8:d4:63:7e:ff: cd:ba:65:ee:05:d3:4b:17:d8:47:2b:a5:58:b4:c3: b6:b2:93:c1:9b:e8:50:ae:f9:b8:ed:e0:e8:0d:88: 20:70:9d:f1:89:d6:b6:0b:7b:09:44:e6:59:64:68: a1:da:0b:1c:7f:3e:35:51:c7:a0:75:29:55:ba:b3: d1:44:c6:f1:f1:60:3e:75:8d:3c:be:85:58:ef:ad: eb:a4:f7:22:d5:32:c5:b9:a5:57:80:71:5d:47:fa: 27:32:f2:33:ea:52:f6:55:1d:b3:86:7b:f6:c5:40: df:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E5:16:BA:78:F9:3C:47:2E:9F:69:A7:7A:05:F7:2A:85:DB:FD:55 X509v3 Authority Key Identifier: keyid:D9:00:F1:99:0F:32:4E:8B:FF:8E:6A:B4:F6:AF:00:66:2E:F4:A1:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:e0:4f:6b:b7:c8:79:bc:86:f8:67:d5:ba:be:c5:95:5b:36: 82:b3:59:44:8e:4b:ee:3b:cd:fb:c1:fe:01:c6:07:39:b8:a8: 68:3e:b1:bc:f4:a4:7b:44:77:8a:fc:f4:6a:e4:b6:2e:55:8b: b6:2a:a5:f2:5d:a0:fa:fd:56:eb:3d:e4:d4:e5:e9:65:55:50: 9b:1e:5f:db:94:e9:e8:2c:be:cb:e1:66:80:f7:eb:9e:67:6d: 51:f8:84:1c:17:24:15:95:18:74:bf:22:b4:f4:fb:09:4b:6a: 2d:58:de:9d:eb:06:77:0b:e6:99:6f:9a:cc:b0:7d:16:9d:8e: 05:6a:0e:1c:48:ba:99:59:9c:90:de:8b:8f:c6:7c:41:3c:3c: dc:fb:8c:fa:89:99:f0:d4:60:2a:69:d1:3c:02:b4:35:16:6a: 9c:cb:ff:9e:3b:3e:21:61:73:7d:53:bb:cd:a3:31:a9:fa:29: b0:f8:9f:03:22:fd:fc:b8:2f:77:e0:f6:17:11:16:e4:72:8a: 54:99:10:b2:90:dc:97:5f:31:d4:61:d8:e0:ad:6b:fe:1f:fd: a9:28:39:f0:fd:51:d7:a0:30:cc:f5:8c:cf:d1:86:90:67:d7: b8:86:bf:31:0b:4a:15:d2:57:12:e9:70:da:73:72:62:8e:dc: de:ff:d7:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJtd32XhtyEXYHPPuSgH0S0g7KawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkwMEYxOTkwRjMyNEU4QkZGOEU2QUI0RjZBRjAwNjYy RUY0QTE4MTAeFw0yNjA5MjMxMzE3MzhaFw0yNjA5MjQxNTIyMzhaMDMxMTAvBgNV BAMTKDZBRTUxNkJBNzhGOTNDNDcyRTlGNjlBNzdBMDVGNzJBODVEQkZENTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5wYE3t75HpC7iaDTlFbtjNlJ8 ptmf/CmLKz+Lu1t+z59ybs+g2tnR7v7RXzHy3ydzRouCpXtDZfv7gDdUard62ZgN TT9iuCKDJh00vQg0dXZs3j6FIGhJ11x1crUawEHz9n+1iOsUf0nCh4gSqrhngWF0 Igrqlti+gtq2T/X9Y3EOXCOkHFObFPiOyZwn35L41GN+/826Ze4F00sX2EcrpVi0 w7ayk8Gb6FCu+bjt4OgNiCBwnfGJ1rYLewlE5llkaKHaCxx/PjVRx6B1KVW6s9FE xvHxYD51jTy+hVjvreuk9yLVMsW5pVeAcV1H+icy8jPqUvZVHbOGe/bFQN/PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUauUWunj5PEcun2mnegX3KoXb/VUwHwYDVR0j BBgwFoAU2QDxmQ8yTov/jmq09q8AZi70oYEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU4OWY2NDMtMzdiYy00ZmZiLTk1MjktNDAxZTRiNmVmNjc1LzAvRDkwMEYxOTkw RjMyNEU4QkZGOEU2QUI0RjZBRjAwNjYyRUY0QTE4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOTAwRjE5OTBGMzI0RThCRkY4RTZBQjRGNkFGMDA2NjJFRjRB MTgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU4OWY2NDMtMzdiYy00ZmZiLTk1 MjktNDAxZTRiNmVmNjc1LzAvRDkwMEYxOTkwRjMyNEU4QkZGOEU2QUI0RjZBRjAw NjYyRUY0QTE4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL/gT2u3yHm8hvhn1bq+xZVbNoKzWUSOS+47 zfvB/gHGBzm4qGg+sbz0pHtEd4r89Grkti5Vi7YqpfJdoPr9Vus95NTl6WVVUJse X9uU6egsvsvhZoD3655nbVH4hBwXJBWVGHS/IrT0+wlLai1Y3p3rBncL5plvmsyw fRadjgVqDhxIuplZnJDei4/GfEE8PNz7jPqJmfDUYCpp0TwCtDUWapzL/547PiFh c31Tu82jMan6KbD4nwMi/fy4L3fg9hcRFuRyilSZELKQ3JdfMdRh2OCta/4f/ako OfD9UdegMMz1jM/RhpBn17iGvzELShXSVxLpcNpzcmKO3N7/12Y= -----END CERTIFICATE-----Generated at Thu Sep 24 06:52:25 2026 by rpki-client