$ rpki-client -vvvf rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft File: 1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft (raw, json) Hash identifier: 1Som1mU+8T4kxTl2nzV9e914+b5VkT2TS9aN32qwpkU= Subject key identifier: DD:BE:D8:B8:A5:F4:01:A8:D8:72:1A:79:B1:92:40:8B:C3:32:A1:36 Authority key identifier: 1D:84:43:F2:B1:B9:1B:F6:F0:27:8C:5B:3C:4B:C5:24:D8:58:15:08 Certificate issuer: /CN=1D8443F2B1B91BF6F0278C5B3C4BC524D8581508 Certificate serial: 4756A47C28C659855C8632A0C1CCFA4D9D5CA31F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft Manifest number: C6 Signing time: Sat 26 Sep 2026 05:01:22 +0000 Manifest this update: Sat 26 Sep 2026 04:56:22 +0000 Manifest next update: Sun 27 Sep 2026 08:41:22 +0000 Files and hashes: 1: 3130332e3138362e3136382e302f32332d3233203d3e20313439333135.roa (hash: jtaA1SPrzDUYTBX5hLaOl8wHf9I6oDuHtGJ4XR8iaqY=) 2: 3130332e3138362e3136392e302f32342d3234203d3e20313439333135.roa (hash: EMakdzLLxip5MgFZZxs3v2CftrvckpQUzvKJTpU8Ns0=) 3: 1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.crl (hash: 7IvmST1BzsiksM/5MVYnuGCIaQvIzzSxoWKaS00Mab8=) 4: 3130332e3138362e3136382e302f32342d3234203d3e20313439333135.roa (hash: qtpgdgclWZOTtoV+QMuAH0R7ZHXa3nSHqjG3rAHVlzk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.crl rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 08:41:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:56:a4:7c:28:c6:59:85:5c:86:32:a0:c1:cc:fa:4d:9d:5c:a3:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D8443F2B1B91BF6F0278C5B3C4BC524D8581508 Validity Not Before: Sep 26 04:56:22 2026 GMT Not After : Sep 27 08:41:22 2026 GMT Subject: CN=DDBED8B8A5F401A8D8721A79B192408BC332A136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:cd:a0:db:5e:47:bf:0b:27:79:9e:5a:ea:26: fb:b0:12:83:80:73:0d:cb:13:24:18:1d:fb:2e:38: c3:de:48:45:f3:95:05:a3:f9:80:b8:2c:60:cc:9d: 94:45:18:bd:34:20:89:d4:16:f5:58:28:60:de:14: 4c:c5:80:e0:e3:ee:a3:8b:b2:61:e5:4f:ea:29:62: 51:4e:8b:c2:1f:a1:21:33:c6:46:67:31:4d:96:56: ae:59:63:60:ea:43:b0:b3:8c:63:f5:a2:4f:b4:09: a2:c4:08:69:53:5b:3a:85:41:a3:cd:c9:1c:6e:0f: fa:6e:8b:68:51:bc:3f:80:84:bb:10:6a:f2:49:a7: 12:85:3f:75:80:97:69:91:64:f9:45:6d:08:fd:bb: a6:e6:2f:fb:62:99:ea:9b:a9:78:a2:63:c5:4f:da: 9e:07:58:78:67:d5:b9:13:fa:fe:35:37:d6:3f:62: 12:14:30:fc:df:eb:da:e6:3d:21:99:4c:cf:5c:0c: 9a:1d:ee:e5:9d:80:4e:3e:99:33:45:30:39:44:4e: 47:97:3f:c9:b4:1d:20:7d:1c:84:1c:f0:74:92:03: 7c:9b:df:d9:4f:92:1a:a0:98:92:b5:03:af:e1:16: 60:c4:85:76:5f:ec:fe:38:ed:93:9a:bd:34:ab:62: 48:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:BE:D8:B8:A5:F4:01:A8:D8:72:1A:79:B1:92:40:8B:C3:32:A1:36 X509v3 Authority Key Identifier: keyid:1D:84:43:F2:B1:B9:1B:F6:F0:27:8C:5B:3C:4B:C5:24:D8:58:15:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:af:2e:a8:45:d0:ed:71:5b:63:b1:dc:0f:eb:55:8a:a4:40: 5c:16:41:2e:f9:03:74:57:c4:f2:ad:c3:73:99:11:b6:07:2a: a9:67:f6:ba:a9:9e:98:18:db:8e:11:e9:8f:c1:e5:40:ad:b7: f9:7e:0a:dc:fa:cb:01:45:ba:ea:0a:81:cb:89:b5:65:04:31: 9f:6d:3b:71:8a:a5:98:c3:a2:d6:38:f9:ab:99:3e:c4:0e:22: 18:74:84:3e:a8:7a:2e:77:b4:1e:c8:32:15:bc:cd:3e:67:ed: 74:a7:ed:0f:3a:52:f1:48:40:27:7f:e8:a3:ca:46:64:fd:c2: 64:dd:67:4d:b2:8c:f8:68:e6:d0:6c:f7:5e:25:a6:34:8b:01: 28:51:8e:92:bc:13:fb:07:f0:8c:e2:3c:fe:6d:ef:eb:af:28: b4:9a:69:a5:32:1b:42:fc:6c:67:a7:5f:19:61:32:50:cf:17: 1a:60:59:31:a8:46:5d:3a:b3:a4:4e:b6:98:d4:cf:8e:8f:56: 97:d3:5a:52:fd:a4:82:85:b0:5f:2e:26:37:10:c8:3e:b9:3c: f0:e2:1b:05:f8:be:52:d8:c5:07:d0:29:20:9b:69:37:21:fb: 50:ca:d4:95:41:5a:ce:c7:46:cd:c8:79:57:2c:78:5b:c0:82: 86:43:2b:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR1akfCjGWYVchjKgwcz6TZ1cox8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ4NDQzRjJCMUI5MUJGNkYwMjc4QzVCM0M0QkM1MjRE ODU4MTUwODAeFw0yNjA5MjYwNDU2MjJaFw0yNjA5MjcwODQxMjJaMDMxMTAvBgNV BAMTKEREQkVEOEI4QTVGNDAxQThEODcyMUE3OUIxOTI0MDhCQzMzMkExMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmzaDbXke/Cyd5nlrqJvuwEoOA cw3LEyQYHfsuOMPeSEXzlQWj+YC4LGDMnZRFGL00IInUFvVYKGDeFEzFgODj7qOL smHlT+opYlFOi8IfoSEzxkZnMU2WVq5ZY2DqQ7CzjGP1ok+0CaLECGlTWzqFQaPN yRxuD/pui2hRvD+AhLsQavJJpxKFP3WAl2mRZPlFbQj9u6bmL/timeqbqXiiY8VP 2p4HWHhn1bkT+v41N9Y/YhIUMPzf69rmPSGZTM9cDJod7uWdgE4+mTNFMDlETkeX P8m0HSB9HIQc8HSSA3yb39lPkhqgmJK1A6/hFmDEhXZf7P447ZOavTSrYkj5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3b7YuKX0AajYchp5sZJAi8MyoTYwHwYDVR0j BBgwFoAUHYRD8rG5G/bwJ4xbPEvFJNhYFQgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDI3MTNhMzItZmFkYS00ODRlLWE2OGQtMGNhYzBmZmZhMzNjLzAvMUQ4NDQzRjJC MUI5MUJGNkYwMjc4QzVCM0M0QkM1MjREODU4MTUwOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDg0NDNGMkIxQjkxQkY2RjAyNzhDNUIzQzRCQzUyNEQ4NTgx NTA4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDI3MTNhMzItZmFkYS00ODRlLWE2 OGQtMGNhYzBmZmZhMzNjLzAvMUQ4NDQzRjJCMUI5MUJGNkYwMjc4QzVCM0M0QkM1 MjREODU4MTUwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESvLqhF0O1xW2Ox3A/rVYqkQFwWQS75A3RX xPKtw3OZEbYHKqln9rqpnpgY244R6Y/B5UCtt/l+Ctz6ywFFuuoKgcuJtWUEMZ9t O3GKpZjDotY4+auZPsQOIhh0hD6oei53tB7IMhW8zT5n7XSn7Q86UvFIQCd/6KPK RmT9wmTdZ02yjPho5tBs914lpjSLAShRjpK8E/sH8IziPP5t7+uvKLSaaaUyG0L8 bGenXxlhMlDPFxpgWTGoRl06s6ROtpjUz46PVpfTWlL9pIKFsF8uJjcQyD65PPDi GwX4vlLYxQfQKSCbaTch+1DK1JVBWs7HRs3IeVcseFvAgoZDK8E= -----END CERTIFICATE-----Generated at Sat Sep 26 16:48:11 2026 by rpki-client