$ rpki-client -vvvf rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft File: DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft (raw, json) Hash identifier: CVrNu7T5C6Qu0GMR1FfVlR0ol7iYOa/xyi2qo3muQ8U= Subject key identifier: 64:C9:1E:6D:D0:A6:4A:32:96:20:1E:14:72:D7:D6:C2:B9:51:44:DA Authority key identifier: DF:23:04:42:9B:18:F8:08:9F:AE:1F:C9:38:67:4F:36:A0:FD:77:B2 Certificate issuer: /CN=DF2304429B18F8089FAE1FC938674F36A0FD77B2 Certificate serial: 66720E1BE8691C3C9E6A5E1AC3A72637F8B03CB7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft Manifest number: C1 Signing time: Tue 22 Sep 2026 21:07:33 +0000 Manifest this update: Tue 22 Sep 2026 21:02:33 +0000 Manifest next update: Wed 23 Sep 2026 23:10:33 +0000 Files and hashes: 1: 3135372e31352e36372e302f32342d3234203d3e20313532333737.roa (hash: CpW+8vhTW86R4U0S/gqyxxfPZJCtlWIdT+jTSx+66zc=) 2: 3135372e31352e36362e302f32342d3234203d3e20313532333737.roa (hash: ftQeDYyrz6hB+RbX5fKWVbWWuQdAQyxBYb3VQF1+q6g=) 3: 3135372e31352e36362e302f32332d3233203d3e20313532333737.roa (hash: N6yMW5HjzqSkSXTxh8LYBYq0zgZeaS0wE1WlogwqRwM=) 4: DF2304429B18F8089FAE1FC938674F36A0FD77B2.crl (hash: e34r6pgyXJRuYPR+DLSWP5rcnZPmflzoF7z6zOnFQOM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.crl rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 23:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:72:0e:1b:e8:69:1c:3c:9e:6a:5e:1a:c3:a7:26:37:f8:b0:3c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF2304429B18F8089FAE1FC938674F36A0FD77B2 Validity Not Before: Sep 22 21:02:33 2026 GMT Not After : Sep 23 23:10:33 2026 GMT Subject: CN=64C91E6DD0A64A3296201E1472D7D6C2B95144DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3b:b8:11:16:5d:76:8e:c0:d0:c9:f5:b8:ac: d3:a9:af:f5:a8:2b:e2:ac:78:f2:5c:dc:a5:e4:81: 35:77:76:68:a3:4c:b5:04:74:18:14:7e:7e:60:46: 66:1e:6b:7a:38:a5:3b:07:82:7b:c4:e6:cc:dd:33: 7e:a7:97:32:ac:ef:5d:e2:3e:bf:c3:5e:98:fa:5e: c8:55:eb:84:d1:45:1a:0e:fd:0c:03:5c:69:7d:41: da:d3:31:21:34:5e:17:d0:2f:bd:70:e0:fd:ea:e5: d3:f9:42:95:08:d0:28:22:dc:ca:34:e3:f7:0c:80: af:02:f1:88:1a:ba:ca:56:5e:32:41:df:4a:83:0c: 04:17:0f:9a:d5:f0:8d:55:7b:19:44:1d:71:66:9b: 06:49:87:0a:a1:47:f0:12:a2:d0:e4:c6:1c:ee:47: 80:b8:70:85:7e:b1:d3:d6:ec:39:25:64:f7:96:b8: fe:d4:1d:43:63:2a:ea:27:c1:a9:c8:9d:5a:3a:37: 6e:e9:05:15:83:41:8a:20:80:1c:30:bd:a1:4f:08: 1a:7b:47:c2:fd:11:4c:e8:b9:8b:30:fa:05:43:dd: fd:61:8b:28:53:3e:5d:2e:93:c7:48:84:ff:3a:68: 9f:ab:68:01:52:b2:fd:fd:fd:5a:f1:26:16:f7:d9: 86:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C9:1E:6D:D0:A6:4A:32:96:20:1E:14:72:D7:D6:C2:B9:51:44:DA X509v3 Authority Key Identifier: keyid:DF:23:04:42:9B:18:F8:08:9F:AE:1F:C9:38:67:4F:36:A0:FD:77:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ba:91:66:34:3c:4d:58:e3:cd:cb:c0:b0:ac:17:20:e4:1c: ab:86:92:27:b5:3f:f5:5d:45:24:19:65:39:a0:19:81:19:58: 79:c3:49:75:25:d0:50:88:4d:94:b6:fa:aa:4f:9e:89:ad:9b: 5d:d9:68:a6:2a:8f:97:4d:d0:68:31:f7:d9:63:25:40:cf:1f: 71:90:e6:c8:c7:3c:85:24:55:5d:b1:7b:9e:57:b7:d7:ed:76: e8:ae:d4:1c:49:49:e2:0e:7f:da:da:f8:59:ed:39:e3:c0:95: f2:5d:82:27:80:38:be:3a:a6:d5:bd:9a:ad:cb:d2:11:97:af: 68:03:e4:b9:68:32:91:a5:f0:e5:05:1f:92:a4:9c:af:6a:74: c9:fe:22:1f:3c:84:b1:ed:de:a3:c2:41:05:7a:2c:16:19:05: 66:da:44:64:07:db:8a:b0:ce:75:e4:04:42:58:23:40:3e:af: 33:54:34:4b:bd:11:51:80:90:0b:f0:a1:79:d8:87:2a:47:f1: 9f:43:06:da:c3:af:57:8a:9a:73:1e:d2:63:92:4a:fd:b7:68: 57:75:b6:d3:08:26:2e:b1:34:42:2c:d3:be:15:98:47:aa:f6: 65:fb:be:5a:de:6f:02:db:c3:b3:9f:4e:2a:ef:77:4f:6c:95: 3b:c5:53:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZnIOG+hpHDyeal4aw6cmN/iwPLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYyMzA0NDI5QjE4RjgwODlGQUUxRkM5Mzg2NzRGMzZB MEZENzdCMjAeFw0yNjA5MjIyMTAyMzNaFw0yNjA5MjMyMzEwMzNaMDMxMTAvBgNV BAMTKDY0QzkxRTZERDBBNjRBMzI5NjIwMUUxNDcyRDdENkMyQjk1MTQ0REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYO7gRFl12jsDQyfW4rNOpr/Wo K+KsePJc3KXkgTV3dmijTLUEdBgUfn5gRmYea3o4pTsHgnvE5szdM36nlzKs713i Pr/DXpj6XshV64TRRRoO/QwDXGl9QdrTMSE0XhfQL71w4P3q5dP5QpUI0Cgi3Mo0 4/cMgK8C8YgauspWXjJB30qDDAQXD5rV8I1VexlEHXFmmwZJhwqhR/ASotDkxhzu R4C4cIV+sdPW7DklZPeWuP7UHUNjKuonwanInVo6N27pBRWDQYoggBwwvaFPCBp7 R8L9EUzouYsw+gVD3f1hiyhTPl0uk8dIhP86aJ+raAFSsv39/VrxJhb32YbNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZMkebdCmSjKWIB4UctfWwrlRRNowHwYDVR0j BBgwFoAU3yMEQpsY+Aifrh/JOGdPNqD9d7IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDg0ZTg3OWYtM2E1Ni00ZDhkLTgzZTgtMGU5Y2M2NTc3MGVhLzAvREYyMzA0NDI5 QjE4RjgwODlGQUUxRkM5Mzg2NzRGMzZBMEZENzdCMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ERjIzMDQ0MjlCMThGODA4OUZBRTFGQzkzODY3NEYzNkEwRkQ3 N0IyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDg0ZTg3OWYtM2E1Ni00ZDhkLTgz ZTgtMGU5Y2M2NTc3MGVhLzAvREYyMzA0NDI5QjE4RjgwODlGQUUxRkM5Mzg2NzRG MzZBMEZENzdCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGC6kWY0PE1Y483LwLCsFyDkHKuGkie1P/Vd RSQZZTmgGYEZWHnDSXUl0FCITZS2+qpPnomtm13ZaKYqj5dN0Ggx99ljJUDPH3GQ 5sjHPIUkVV2xe55Xt9ftduiu1BxJSeIOf9ra+FntOePAlfJdgieAOL46ptW9mq3L 0hGXr2gD5LloMpGl8OUFH5KknK9qdMn+Ih88hLHt3qPCQQV6LBYZBWbaRGQH24qw znXkBEJYI0A+rzNUNEu9EVGAkAvwoXnYhypH8Z9DBtrDr1eKmnMe0mOSSv23aFd1 ttMIJi6xNEIs074VmEeq9mX7vlrebwLbw7OfTirvd09slTvFU8c= -----END CERTIFICATE-----Generated at Wed Sep 23 13:13:57 2026 by rpki-client