$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft File: DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft (raw, json) Hash identifier: CxY3EKeFyWG9qZIrYWw2gdq+MJShGtYEregoQBsHn1M= Subject key identifier: DF:00:35:D3:EF:68:8A:C6:FB:CB:F8:DC:44:F5:D5:B3:33:1B:1C:55 Authority key identifier: DC:FA:CD:04:E9:47:8A:36:F0:58:CD:17:DE:0E:A6:B7:FB:6E:4D:09 Certificate issuer: /CN=DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09 Certificate serial: 194B8F64E33087C4D5B660F2D619013DBDE069DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 15:24:51 +0000 Manifest this update: Thu 24 Sep 2026 15:19:51 +0000 Manifest next update: Fri 25 Sep 2026 18:32:51 +0000 Files and hashes: 1: DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.crl (hash: qk9NlYlfzLeSG6z1xnArmp8/CMi80aS+QHhbJrxZBpg=) 2: 3130332e3136302e34302e302f32342d3234203d3e20313431353936.roa (hash: 8kH9OYeCGgkpS6ETOYa6DFVI3BcrTxBasG8Wv5iWOP8=) 3: 3130332e3136302e34312e302f32342d3234203d3e20313431353936.roa (hash: lXhYJ0DA1ZPF7j87Xae2VDeesVSyf9L7rCounE/aVVg=) 4: 3130332e3136302e34302e302f32332d3233203d3e20313431353936.roa (hash: uFKAqSD6oWq2rEbik7/vRzt6HsV3cf1Z8RYkorvCjFs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.crl rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 18:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:4b:8f:64:e3:30:87:c4:d5:b6:60:f2:d6:19:01:3d:bd:e0:69:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09 Validity Not Before: Sep 24 15:19:51 2026 GMT Not After : Sep 25 18:32:51 2026 GMT Subject: CN=DF0035D3EF688AC6FBCBF8DC44F5D5B3331B1C55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:33:c6:f6:fb:1e:ed:f1:aa:d1:8f:dd:30:5f: 68:9f:e7:79:7d:40:8e:ac:91:a2:8a:c9:83:26:62: f2:a9:2b:2b:d6:20:db:c2:ba:31:c9:45:36:06:55: 85:08:ed:57:89:9e:0b:80:3c:b0:6a:a7:d3:e9:f9: 2f:cc:7e:96:f2:9e:18:d0:fc:ad:82:00:c9:78:85: 38:f7:67:a1:57:6b:03:5d:5d:58:7e:3d:48:e1:22: 96:06:ce:bc:74:de:26:06:ae:4d:4c:9e:22:26:cb: d0:30:fa:f5:32:19:40:89:28:c0:66:2c:70:b4:17: 65:e7:61:b6:99:a8:14:a7:a4:80:f3:39:f0:f4:03: 0d:9a:a8:32:f8:a8:b5:d3:8f:58:d7:d2:e5:76:ca: f9:7e:94:a7:f3:c7:40:18:f0:28:f9:25:75:b2:2c: 56:90:45:8e:4f:5f:67:7d:8d:78:04:a8:d9:11:c9: 64:3d:9a:96:30:a2:b0:40:1f:79:80:d5:53:67:4e: 48:31:9b:7e:e5:49:bc:8f:50:5c:36:f1:e0:cb:6c: ea:bc:e0:7e:42:0b:4b:d6:05:1a:38:f0:d6:74:eb: ea:5a:39:af:d7:d7:3a:bc:2a:e3:c4:71:fb:df:4c: 1a:c4:24:77:e1:fb:fd:4b:6a:b5:6b:b3:2b:ac:0c: db:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:00:35:D3:EF:68:8A:C6:FB:CB:F8:DC:44:F5:D5:B3:33:1B:1C:55 X509v3 Authority Key Identifier: keyid:DC:FA:CD:04:E9:47:8A:36:F0:58:CD:17:DE:0E:A6:B7:FB:6E:4D:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:17:8c:12:17:af:e4:51:e8:0d:c6:76:2a:0d:4c:ba:af:ac: b0:63:cd:e8:c0:3f:31:8c:58:04:f7:c6:65:74:40:51:20:10: f3:c3:ac:bd:96:b1:ad:67:ec:e0:ad:14:16:30:8f:4c:10:27: 31:72:23:91:3a:d0:49:f5:72:0e:ad:99:f1:33:8e:39:b8:d7: c8:74:2e:80:7f:ec:68:70:6d:cc:c6:2c:9b:6b:73:85:c8:77: 8e:ec:9a:65:c5:bd:bf:60:ea:85:f8:29:86:03:e9:46:53:5e: 76:69:1c:fc:ee:db:20:49:f4:0d:5b:ef:65:e4:1d:3e:68:6e: 6d:18:4a:53:d7:47:5a:d5:88:d8:28:15:50:98:49:fd:bb:e7: c7:62:13:4d:6c:37:bb:c0:9b:06:17:f5:e3:5c:bb:a9:60:41: 61:93:8b:0d:1c:57:49:fb:58:72:9b:e7:d6:d4:1b:2f:1a:aa: 53:4f:2d:59:b5:ce:1e:68:ae:08:35:f3:e5:ca:02:44:92:89: a2:9a:99:db:40:e1:cb:d7:bd:31:82:fc:cc:9e:a7:32:e8:24: e6:3e:bf:ec:70:9d:45:63:e2:36:93:2c:13:f5:84:eb:d7:4a: 89:64:f4:d2:47:93:e9:78:a1:bf:85:f5:54:e7:71:33:d2:7a: f8:6b:ac:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGUuPZOMwh8TVtmDy1hkBPb3gad4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENGQUNEMDRFOTQ3OEEzNkYwNThDRDE3REUwRUE2QjdG QjZFNEQwOTAeFw0yNjA5MjQxNTE5NTFaFw0yNjA5MjUxODMyNTFaMDMxMTAvBgNV BAMTKERGMDAzNUQzRUY2ODhBQzZGQkNCRjhEQzQ0RjVENUIzMzMxQjFDNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHM8b2+x7t8arRj90wX2if53l9 QI6skaKKyYMmYvKpKyvWINvCujHJRTYGVYUI7VeJnguAPLBqp9Pp+S/MfpbynhjQ /K2CAMl4hTj3Z6FXawNdXVh+PUjhIpYGzrx03iYGrk1MniImy9Aw+vUyGUCJKMBm LHC0F2XnYbaZqBSnpIDzOfD0Aw2aqDL4qLXTj1jX0uV2yvl+lKfzx0AY8Cj5JXWy LFaQRY5PX2d9jXgEqNkRyWQ9mpYworBAH3mA1VNnTkgxm37lSbyPUFw28eDLbOq8 4H5CC0vWBRo48NZ06+paOa/X1zq8KuPEcfvfTBrEJHfh+/1LarVrsyusDNsrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3wA10+9oisb7y/jcRPXVszMbHFUwHwYDVR0j BBgwFoAU3PrNBOlHijbwWM0X3g6mt/tuTQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGEwOTlhZGYtN2UxMi00ZTgzLTk1YzItZGQ3Zjc3NDk0Nzg4LzAvRENGQUNEMDRF OTQ3OEEzNkYwNThDRDE3REUwRUE2QjdGQjZFNEQwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0ZBQ0QwNEU5NDc4QTM2RjA1OENEMTdERTBFQTZCN0ZCNkU0 RDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGEwOTlhZGYtN2UxMi00ZTgzLTk1 YzItZGQ3Zjc3NDk0Nzg4LzAvRENGQUNEMDRFOTQ3OEEzNkYwNThDRDE3REUwRUE2 QjdGQjZFNEQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGwXjBIXr+RR6A3GdioNTLqvrLBjzejAPzGM WAT3xmV0QFEgEPPDrL2Wsa1n7OCtFBYwj0wQJzFyI5E60En1cg6tmfEzjjm418h0 LoB/7GhwbczGLJtrc4XId47smmXFvb9g6oX4KYYD6UZTXnZpHPzu2yBJ9A1b72Xk HT5obm0YSlPXR1rViNgoFVCYSf2758diE01sN7vAmwYX9eNcu6lgQWGTiw0cV0n7 WHKb59bUGy8aqlNPLVm1zh5orgg18+XKAkSSiaKamdtA4cvXvTGC/MyepzLoJOY+ v+xwnUVj4jaTLBP1hOvXSolk9NJHk+l4ob+F9VTncTPSevhrrH0= -----END CERTIFICATE-----Generated at Fri Sep 25 06:58:34 2026 by rpki-client