$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft File: D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft (raw, json) Hash identifier: 6onVeo9h+IQJzdgjZHYaXScar+SZ660u9O7bi6Z1nDc= Subject key identifier: 8A:5B:10:51:6A:CC:9E:5C:3B:5B:2A:AB:76:59:59:59:00:CF:4E:C5 Authority key identifier: D1:F9:BE:E6:CF:09:00:BE:61:0D:2D:AC:AD:F3:EE:47:13:5C:0F:06 Certificate issuer: /CN=D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06 Certificate serial: 70E54D50EF42FD4B6E4905D7DAF7583AF283D7E2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 07:55:27 +0000 Manifest this update: Thu 24 Sep 2026 07:50:27 +0000 Manifest next update: Fri 25 Sep 2026 11:24:27 +0000 Files and hashes: 1: D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl (hash: QeTE1JprTpT+sImFg0AVQsF7MZQvygenan5UaVw3dP0=) 2: 3130332e3133392e3137352e302f32342d3234203d3e20313331373435.roa (hash: KRDZJxi0FxgUIEi2fP8SirXZmXhHmW7JJ3jDoLiPW4M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:e5:4d:50:ef:42:fd:4b:6e:49:05:d7:da:f7:58:3a:f2:83:d7:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06 Validity Not Before: Sep 24 07:50:27 2026 GMT Not After : Sep 25 11:24:27 2026 GMT Subject: CN=8A5B10516ACC9E5C3B5B2AAB7659595900CF4EC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e2:eb:d4:10:7e:1d:71:df:12:37:6b:1f:9e: 97:8f:6f:5c:24:56:36:12:a2:59:b2:c1:3b:db:ff: 4e:a4:3e:1d:73:4a:9c:31:13:a3:72:ca:c7:69:2c: da:48:79:f0:32:ff:5e:0f:83:87:ed:15:72:79:10: 8b:0e:e0:d4:9a:df:de:11:d5:40:9b:8c:7e:00:cb: 16:a1:5a:1b:5d:03:0d:f2:08:27:18:38:7d:87:dd: 23:1a:94:de:4f:7c:42:db:6e:e5:35:9b:76:52:8a: d4:ad:1e:33:00:2c:63:2d:8a:8e:fc:0b:cc:c5:8f: ac:d5:03:97:38:eb:5c:ee:83:27:3e:c4:10:68:93: c0:6c:f6:1e:a9:79:21:72:ac:b7:e3:dd:80:25:f7: db:5c:18:18:d3:20:b4:b3:8b:fd:db:a6:50:3c:ae: a4:20:12:86:e6:e7:69:85:9d:2b:9d:e2:e6:b2:ef: 95:87:98:e5:ec:91:87:9c:99:4f:93:03:be:88:42: ec:93:00:72:22:dc:ab:00:98:2d:b2:81:86:2d:f8: 58:ef:45:bd:5a:91:6f:28:8c:3f:24:20:04:f5:ec: 5f:49:5c:97:26:ca:75:a5:b3:54:9a:0a:6b:6e:ee: a1:e0:50:38:64:4b:1f:1a:46:ab:80:a3:43:13:cf: d7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5B:10:51:6A:CC:9E:5C:3B:5B:2A:AB:76:59:59:59:00:CF:4E:C5 X509v3 Authority Key Identifier: keyid:D1:F9:BE:E6:CF:09:00:BE:61:0D:2D:AC:AD:F3:EE:47:13:5C:0F:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:ce:2f:c2:0f:3a:5b:06:1f:03:6b:77:a9:b0:33:a7:ac:36: 65:ef:4b:b5:ae:86:61:ac:c2:35:c9:3f:2b:89:4b:64:7a:39: 6a:3d:9e:ee:c4:b9:a4:70:a9:b2:0d:80:56:00:5e:4d:be:44: 76:64:a7:60:7e:28:5f:a1:a7:02:80:25:ca:34:b4:91:80:6f: ae:22:09:e0:97:99:c2:9f:5d:64:8c:f6:55:c3:c2:db:0e:69: b5:a4:87:17:22:4a:d7:59:20:9e:5d:5e:a9:65:30:47:f7:e4: c2:47:aa:0a:97:5c:d7:0a:d6:1a:c6:d3:e2:e7:36:39:29:59: 43:f7:b5:d8:16:4b:b6:6c:05:98:82:85:ae:de:9b:86:3f:e6: 4c:bb:d4:87:eb:0f:9a:b1:1e:d9:8a:e6:36:2e:11:ab:0e:a8: 51:74:20:0c:d9:57:19:e9:fc:6e:7e:d7:1b:9d:42:ec:fb:ce: cd:74:04:3d:af:23:12:68:61:19:8e:12:70:ab:e9:cd:ad:a1: fd:dd:db:22:62:ff:ba:8f:02:ca:ee:f4:22:dd:87:33:04:c9: f3:cd:88:7c:5e:2d:c4:ab:17:1f:e2:a5:70:bc:17:f8:dd:0a: 8f:c1:c5:44:f9:7a:80:0b:d3:c7:27:f5:4c:64:35:29:b1:c4: b8:ab:01:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcOVNUO9C/UtuSQXX2vdYOvKD1+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFGOUJFRTZDRjA5MDBCRTYxMEQyREFDQURGM0VFNDcx MzVDMEYwNjAeFw0yNjA5MjQwNzUwMjdaFw0yNjA5MjUxMTI0MjdaMDMxMTAvBgNV BAMTKDhBNUIxMDUxNkFDQzlFNUMzQjVCMkFBQjc2NTk1OTU5MDBDRjRFQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf4uvUEH4dcd8SN2sfnpePb1wk VjYSolmywTvb/06kPh1zSpwxE6NyysdpLNpIefAy/14Pg4ftFXJ5EIsO4NSa394R 1UCbjH4AyxahWhtdAw3yCCcYOH2H3SMalN5PfELbbuU1m3ZSitStHjMALGMtio78 C8zFj6zVA5c461zugyc+xBBok8Bs9h6peSFyrLfj3YAl99tcGBjTILSzi/3bplA8 rqQgEobm52mFnSud4uay75WHmOXskYecmU+TA76IQuyTAHIi3KsAmC2ygYYt+Fjv Rb1akW8ojD8kIAT17F9JXJcmynWls1SaCmtu7qHgUDhkSx8aRquAo0MTz9cjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUilsQUWrMnlw7WyqrdllZWQDPTsUwHwYDVR0j BBgwFoAU0fm+5s8JAL5hDS2srfPuRxNcDwYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzkwMDIwOGItMzJhYy00YTI2LTlkOTItNjA5YWQ3NjE4M2MxLzAvRDFGOUJFRTZD RjA5MDBCRTYxMEQyREFDQURGM0VFNDcxMzVDMEYwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMUY5QkVFNkNGMDkwMEJFNjEwRDJEQUNBREYzRUU0NzEzNUMw RjA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzkwMDIwOGItMzJhYy00YTI2LTlk OTItNjA5YWQ3NjE4M2MxLzAvRDFGOUJFRTZDRjA5MDBCRTYxMEQyREFDQURGM0VF NDcxMzVDMEYwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDOL8IPOlsGHwNrd6mwM6esNmXvS7WuhmGs wjXJPyuJS2R6OWo9nu7EuaRwqbINgFYAXk2+RHZkp2B+KF+hpwKAJco0tJGAb64i CeCXmcKfXWSM9lXDwtsOabWkhxciStdZIJ5dXqllMEf35MJHqgqXXNcK1hrG0+Ln NjkpWUP3tdgWS7ZsBZiCha7em4Y/5ky71IfrD5qxHtmK5jYuEasOqFF0IAzZVxnp /G5+1xudQuz7zs10BD2vIxJoYRmOEnCr6c2tof3d2yJi/7qPAsru9CLdhzMEyfPN iHxeLcSrFx/ipXC8F/jdCo/BxUT5eoAL08cn9UxkNSmxxLirAaA= -----END CERTIFICATE-----Generated at Thu Sep 24 12:58:07 2026 by rpki-client