$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft File: D69DF302479F4777A9A0892154204AF107B510B2.mft (raw, json) Hash identifier: pGjtDnZwDISCGTQOFFrAfucQbqmvQas36gpMCKXmwXs= Subject key identifier: 0F:76:1D:B8:5F:78:77:26:46:15:E3:BB:69:39:01:8D:5F:EE:4A:85 Authority key identifier: D6:9D:F3:02:47:9F:47:77:A9:A0:89:21:54:20:4A:F1:07:B5:10:B2 Certificate issuer: /CN=D69DF302479F4777A9A0892154204AF107B510B2 Certificate serial: 648E228408523607646C2826C8FF4F3C5D03C603 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69DF302479F4777A9A0892154204AF107B510B2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 00:05:50 +0000 Manifest this update: Thu 24 Sep 2026 00:00:50 +0000 Manifest next update: Fri 25 Sep 2026 03:00:50 +0000 Files and hashes: 1: 3130332e31342e3233312e302f32342d3234203d3e20313439393435.roa (hash: q5uFk3VLUA+Zp9Xrj3e+V8aDF57mtzIkLAnY1xqIYg8=) 2: D69DF302479F4777A9A0892154204AF107B510B2.crl (hash: OJh91iNW80w4wwCXnJ+EvdlfHFz6xEI9LcOA3iYxitw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.crl rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69DF302479F4777A9A0892154204AF107B510B2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:8e:22:84:08:52:36:07:64:6c:28:26:c8:ff:4f:3c:5d:03:c6:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D69DF302479F4777A9A0892154204AF107B510B2 Validity Not Before: Sep 24 00:00:50 2026 GMT Not After : Sep 25 03:00:50 2026 GMT Subject: CN=0F761DB85F7877264615E3BB6939018D5FEE4A85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:aa:04:6a:0a:36:f7:dd:d8:15:a0:78:39:58: 2c:d6:5f:eb:6e:55:1b:dd:11:e8:ed:33:8e:9e:92: d9:8a:7f:31:b9:60:59:4b:20:2c:07:99:65:00:bf: 9f:2b:d7:e6:5e:d6:dd:1d:03:65:12:53:99:71:6b: af:03:86:27:e7:3c:e2:36:8d:0e:eb:bd:85:02:62: ef:38:08:6e:81:a9:30:1a:12:0c:f7:c5:d2:34:fc: 43:e2:52:ae:7b:3f:4e:5b:e9:17:8e:72:bb:be:6f: 54:15:bc:f4:33:da:70:39:22:87:60:a5:65:a8:4b: 8b:23:7f:05:a2:bc:6d:96:06:3c:ac:47:fe:57:2c: 78:fd:71:db:bb:7d:d6:d2:aa:20:62:71:9a:ab:e3: 4e:be:bc:98:18:59:e7:cf:9b:9f:30:1d:5c:17:91: 20:d0:9c:3b:bd:2a:e0:41:c8:19:fa:63:47:10:c6: d0:83:13:61:4c:f4:5e:d5:f6:d3:ad:61:54:c4:28: 25:48:10:ec:b5:64:14:00:16:8e:4e:9a:16:28:75: 68:c9:28:d4:03:a8:ac:85:ec:fe:9d:3a:35:83:c8: 4c:a8:95:51:fa:7e:30:e7:39:45:d6:dd:a8:29:2b: d0:d4:03:8f:d7:11:d3:9c:7f:a0:79:34:cf:e0:e1: 75:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:76:1D:B8:5F:78:77:26:46:15:E3:BB:69:39:01:8D:5F:EE:4A:85 X509v3 Authority Key Identifier: keyid:D6:9D:F3:02:47:9F:47:77:A9:A0:89:21:54:20:4A:F1:07:B5:10:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69DF302479F4777A9A0892154204AF107B510B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:9f:b3:f7:7a:f0:d0:a9:91:e6:19:07:e1:b2:fc:c7:92:41: 99:fc:29:4f:3e:20:b1:f8:b2:b3:7f:ea:43:fb:d2:d4:00:46: a4:43:1d:a4:af:13:12:71:79:96:59:2d:a6:b5:fe:e8:74:1c: a5:3c:41:28:8a:94:62:34:a8:a6:a6:ee:57:13:c9:07:38:f1: 8b:9e:d2:51:b1:72:ba:7a:b9:7e:4a:27:a4:e7:a5:aa:72:61: a6:20:de:11:d0:6d:dc:75:c0:64:d7:f0:bd:84:88:29:a6:36: d5:d7:af:e8:dd:17:69:9d:a6:d4:7c:61:ef:30:e9:f2:cc:e8: 77:c9:ba:e0:20:55:17:81:1c:17:e1:58:32:cc:ce:6a:20:c3: c5:02:e3:2f:b4:f8:3f:67:4c:06:36:4d:0a:42:06:d5:42:e2: 5f:5c:6b:c7:01:ca:d4:8a:ee:4c:ed:53:16:30:aa:2b:77:a6: 70:b5:28:34:dc:c3:e5:55:81:33:ab:61:77:51:92:b0:e3:44: ed:6f:45:f2:c6:1d:0c:c4:4f:18:e1:a1:92:00:84:ff:60:c2: ee:71:c8:77:5a:c4:73:0d:74:39:7b:4d:5a:de:02:d4:c9:3f: d8:c5:a0:ae:7d:85:0e:f2:36:b5:06:db:20:64:15:c7:b4:2d: db:ea:b4:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZI4ihAhSNgdkbCgmyP9PPF0DxgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5REYzMDI0NzlGNDc3N0E5QTA4OTIxNTQyMDRBRjEw N0I1MTBCMjAeFw0yNjA5MjQwMDAwNTBaFw0yNjA5MjUwMzAwNTBaMDMxMTAvBgNV BAMTKDBGNzYxREI4NUY3ODc3MjY0NjE1RTNCQjY5MzkwMThENUZFRTRBODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrqgRqCjb33dgVoHg5WCzWX+tu VRvdEejtM46ektmKfzG5YFlLICwHmWUAv58r1+Ze1t0dA2USU5lxa68DhifnPOI2 jQ7rvYUCYu84CG6BqTAaEgz3xdI0/EPiUq57P05b6ReOcru+b1QVvPQz2nA5Iodg pWWoS4sjfwWivG2WBjysR/5XLHj9cdu7fdbSqiBicZqr406+vJgYWefPm58wHVwX kSDQnDu9KuBByBn6Y0cQxtCDE2FM9F7V9tOtYVTEKCVIEOy1ZBQAFo5OmhYodWjJ KNQDqKyF7P6dOjWDyEyolVH6fjDnOUXW3agpK9DUA4/XEdOcf6B5NM/g4XWhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD3YduF94dyZGFeO7aTkBjV/uSoUwHwYDVR0j BBgwFoAU1p3zAkefR3epoIkhVCBK8Qe1ELIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGRmNDI5NmYtMWNhOS00NWZjLWJiMDgtODQxMzVlYjAwZmE3LzAvRDY5REYzMDI0 NzlGNDc3N0E5QTA4OTIxNTQyMDRBRjEwN0I1MTBCMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjlERjMwMjQ3OUY0Nzc3QTlBMDg5MjE1NDIwNEFGMTA3QjUx MEIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGRmNDI5NmYtMWNhOS00NWZjLWJi MDgtODQxMzVlYjAwZmE3LzAvRDY5REYzMDI0NzlGNDc3N0E5QTA4OTIxNTQyMDRB RjEwN0I1MTBCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+fs/d68NCpkeYZB+Gy/MeSQZn8KU8+ILH4 srN/6kP70tQARqRDHaSvExJxeZZZLaa1/uh0HKU8QSiKlGI0qKam7lcTyQc48Yue 0lGxcrp6uX5KJ6TnpapyYaYg3hHQbdx1wGTX8L2EiCmmNtXXr+jdF2mdptR8Ye8w 6fLM6HfJuuAgVReBHBfhWDLMzmogw8UC4y+0+D9nTAY2TQpCBtVC4l9ca8cBytSK 7kztUxYwqit3pnC1KDTcw+VVgTOrYXdRkrDjRO1vRfLGHQzETxjhoZIAhP9gwu5x yHdaxHMNdDl7TVreAtTJP9jFoK59hQ7yNrUG2yBkFce0LdvqtHU= -----END CERTIFICATE-----Generated at Thu Sep 24 20:51:39 2026 by rpki-client