$ rpki-client -vvvf rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft File: 1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft (raw, json) Hash identifier: Ab6eJLX1LU4JBR6aRnJZCnjImY8OG2BsQQZchNhBevc= Subject key identifier: B3:96:07:33:0C:E2:7F:5D:01:9A:6D:40:31:2A:94:FC:62:BB:97:EF Authority key identifier: 1D:6D:FD:04:F8:DB:22:8D:A7:83:87:46:BB:66:5B:B2:CD:6F:B9:B9 Certificate issuer: /CN=1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9 Certificate serial: 73C098A7AD865A418419B0B86E3DD4A80B679E46 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 15:29:03 +0000 Manifest this update: Sat 26 Sep 2026 15:24:03 +0000 Manifest next update: Sun 27 Sep 2026 16:01:03 +0000 Files and hashes: 1: 3130332e3137322e39362e302f32342d3234203d3e20313437303736.roa (hash: zhUAsPQU+LACnP7Ok3rWyU2O9s5oA5N+R3I26q0xz80=) 2: 1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.crl (hash: 7q/uMQWucAnY9z1IUHaacGawhDEtYFqhavDBd8ObmyY=) 3: 3130332e3138392e3232392e302f32342d3234203d3e20313437303736.roa (hash: KV+jDI5u7NDFg1jUUu5ndk8c7SwXpZDQJflp05ARGsU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.crl rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:c0:98:a7:ad:86:5a:41:84:19:b0:b8:6e:3d:d4:a8:0b:67:9e:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9 Validity Not Before: Sep 26 15:24:03 2026 GMT Not After : Sep 27 16:01:03 2026 GMT Subject: CN=B39607330CE27F5D019A6D40312A94FC62BB97EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:10:f2:9e:89:b5:45:2b:0b:16:16:21:b9:3c: 7e:9b:3e:37:d4:85:16:1d:cb:6e:de:d7:11:9d:55: ff:25:32:c3:93:64:34:cc:05:4b:1e:3d:65:67:5e: 20:9e:91:28:ad:71:79:89:07:da:ef:93:8f:99:2a: a8:06:18:d4:a9:f8:48:74:ec:ca:24:30:03:e5:6f: c0:62:d9:7b:49:5f:4b:91:cc:f7:30:bd:92:62:34: 37:fe:92:e8:a3:3f:de:96:9b:fd:7b:8b:48:ca:0a: 83:65:0d:f0:e8:a2:1d:af:e8:3d:b6:54:67:8e:36: b4:c6:14:41:64:9a:87:2d:e8:9a:43:ae:29:c4:58: 18:0c:96:b4:de:0f:34:5a:2c:dd:2f:c7:0a:51:b6: f7:2c:05:f1:bb:52:b2:a1:d9:fa:12:e2:d7:a8:24: 2b:d2:c3:9d:e6:36:ad:1e:fd:09:9d:02:07:df:86: 5f:4b:25:ca:99:0d:4b:19:dd:4b:af:b1:f3:0c:42: f1:ae:64:67:a6:d5:26:8b:87:65:87:04:e6:d2:fa: 34:57:16:ba:68:f2:7a:c3:88:a6:7f:ec:24:86:10: 11:ac:ec:7d:dd:6d:62:54:3b:ce:25:c1:9b:c1:9c: 9e:4a:68:1c:e9:f8:41:fe:66:19:e2:27:a2:49:2f: 7d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:96:07:33:0C:E2:7F:5D:01:9A:6D:40:31:2A:94:FC:62:BB:97:EF X509v3 Authority Key Identifier: keyid:1D:6D:FD:04:F8:DB:22:8D:A7:83:87:46:BB:66:5B:B2:CD:6F:B9:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b5:eb:a2:a5:08:d8:ac:ec:8c:18:df:d8:96:2e:6a:10:25: 5f:1a:b4:0d:7b:a5:68:ce:27:d5:e0:ef:73:55:17:f7:2f:c1: b5:07:e2:6a:c0:1f:8b:ad:b8:e3:03:d6:c1:e4:71:7c:ae:c4: a6:c0:f3:d3:5f:fc:bd:27:fc:a6:d1:59:50:4e:6e:11:b5:1f: b2:aa:19:28:90:f2:9b:3e:f4:25:4b:09:3e:02:68:4c:fc:7a: db:57:57:98:d2:f4:4d:74:94:34:f2:39:84:f7:02:eb:16:80: 98:3b:aa:99:9c:20:21:84:ed:06:a7:e5:38:b2:25:7e:35:2f: 20:17:37:b6:9f:6e:f2:05:b1:a1:28:e1:f1:fa:45:1a:5b:33: 77:07:3c:4d:33:bb:0c:16:b0:d9:1a:7d:c5:5a:2a:66:b3:40: e5:c2:41:19:13:08:43:63:76:d7:cd:e2:1b:9b:13:50:ec:15: 06:dc:56:85:da:be:f1:50:e7:6b:cf:1c:52:c8:ba:f2:81:f8: ec:f7:1e:77:03:a1:3a:25:57:ce:6f:00:e0:d6:90:44:28:5a: 50:11:e4:43:46:56:a1:ea:50:d7:27:e5:02:4a:8f:9e:44:be: 5d:ba:d0:a8:24:04:e1:e2:1c:79:40:aa:70:db:b8:c4:9d:81: 60:d7:19:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc8CYp62GWkGEGbC4bj3UqAtnnkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ2REZEMDRGOERCMjI4REE3ODM4NzQ2QkI2NjVCQjJD RDZGQjlCOTAeFw0yNjA5MjYxNTI0MDNaFw0yNjA5MjcxNjAxMDNaMDMxMTAvBgNV BAMTKEIzOTYwNzMzMENFMjdGNUQwMTlBNkQ0MDMxMkE5NEZDNjJCQjk3RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUEPKeibVFKwsWFiG5PH6bPjfU hRYdy27e1xGdVf8lMsOTZDTMBUsePWVnXiCekSitcXmJB9rvk4+ZKqgGGNSp+Eh0 7MokMAPlb8Bi2XtJX0uRzPcwvZJiNDf+kuijP96Wm/17i0jKCoNlDfDooh2v6D22 VGeONrTGFEFkmoct6JpDrinEWBgMlrTeDzRaLN0vxwpRtvcsBfG7UrKh2foS4teo JCvSw53mNq0e/QmdAgffhl9LJcqZDUsZ3UuvsfMMQvGuZGem1SaLh2WHBObS+jRX Frpo8nrDiKZ/7CSGEBGs7H3dbWJUO84lwZvBnJ5KaBzp+EH+ZhniJ6JJL30RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs5YHMwzif10Bmm1AMSqU/GK7l+8wHwYDVR0j BBgwFoAUHW39BPjbIo2ng4dGu2Zbss1vubkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzk4ZWViMzgtNzc0Ni00ODk5LTlhMTAtNzk4MGY4YjkwNTMyLzAvMUQ2REZEMDRG OERCMjI4REE3ODM4NzQ2QkI2NjVCQjJDRDZGQjlCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDZERkQwNEY4REIyMjhEQTc4Mzg3NDZCQjY2NUJCMkNENkZC OUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzk4ZWViMzgtNzc0Ni00ODk5LTlh MTAtNzk4MGY4YjkwNTMyLzAvMUQ2REZEMDRGOERCMjI4REE3ODM4NzQ2QkI2NjVC QjJDRDZGQjlCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2166KlCNis7IwY39iWLmoQJV8atA17pWjO J9Xg73NVF/cvwbUH4mrAH4utuOMD1sHkcXyuxKbA89Nf/L0n/KbRWVBObhG1H7Kq GSiQ8ps+9CVLCT4CaEz8ettXV5jS9E10lDTyOYT3AusWgJg7qpmcICGE7Qan5Tiy JX41LyAXN7afbvIFsaEo4fH6RRpbM3cHPE0zuwwWsNkafcVaKmazQOXCQRkTCENj dtfN4hubE1DsFQbcVoXavvFQ52vPHFLIuvKB+Oz3HncDoTolV85vAODWkEQoWlAR 5ENGVqHqUNcn5QJKj55Evl260KgkBOHiHHlAqnDbuMSdgWDXGaA= -----END CERTIFICATE-----Generated at Sun Sep 27 08:12:55 2026 by rpki-client