$ rpki-client -vvvf rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft File: DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft (raw, json) Hash identifier: bZx2BlV21zeXqhXVNSE3GLsbR+gBZPnfe5Wd17uehBA= Subject key identifier: 7C:C1:3A:EB:D1:7C:08:FB:1A:1C:88:F1:66:AC:11:96:04:67:09:16 Authority key identifier: DC:A3:C8:F8:E8:2C:D4:F9:E2:F8:F9:AE:C8:90:BC:1D:B0:98:A8:87 Certificate issuer: /CN=DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887 Certificate serial: 4FF61508DD8BCC3557ECF5A418447D2D4AA5E711 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 20:41:33 +0000 Manifest this update: Wed 23 Sep 2026 20:36:33 +0000 Manifest next update: Thu 24 Sep 2026 20:48:33 +0000 Files and hashes: 1: 3130332e31392e3138302e302f32322d3232203d3e20313332363432.roa (hash: swMIglkDWca6bTykcQAlBI8mPZmObmBmI7XJvNSgNmI=) 2: 3130332e31392e3138312e302f32342d3234203d3e20313332363432.roa (hash: 2hrlUfalWGLJAAgURvT2UIB10iFx48ljh0wmwwAeiOQ=) 3: 323430353a336463303a3a2f33322d3438203d3e20313332363432.roa (hash: BbljfPMaDaoCXmfqlX766e2gOwStRy9KRMwBeVYrNRA=) 4: DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.crl (hash: HH2YI3vZXxJmBsXEWSDxh7UM6KscXQ1Cfd3pslTEWlg=) 5: 3130332e31392e3138322e302f32342d3234203d3e20313332363432.roa (hash: ogZJ6AIvbYZ3rfPWkAwkD+wUu9pRc9HcU7kgCnHTVek=) 6: 3130332e31392e3138332e302f32342d3234203d3e20313332363432.roa (hash: b9ucf82rqvNvVvSo4KylGCCzRBHVOTbyEMd9uIlhwkk=) 7: 3130332e31392e3138302e302f32342d3234203d3e20313332363432.roa (hash: 7vL8y9qGcwGlBHTlp7W2DDNh7nh9ZG6pUOsZTFcC5m8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.crl rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:48:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:f6:15:08:dd:8b:cc:35:57:ec:f5:a4:18:44:7d:2d:4a:a5:e7:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887 Validity Not Before: Sep 23 20:36:33 2026 GMT Not After : Sep 24 20:48:33 2026 GMT Subject: CN=7CC13AEBD17C08FB1A1C88F166AC119604670916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e2:d3:29:c6:e7:30:22:02:3f:58:82:c0:d9: d7:50:b4:c0:29:df:74:9a:9b:54:e5:18:cb:92:7c: 8b:3e:9c:b1:4a:2d:b5:d2:7d:1c:3f:e4:db:50:01: 2e:3a:cb:c1:f2:b4:e8:fd:5c:eb:0b:99:d5:22:2a: bb:15:63:72:64:dd:7f:fa:7d:e0:d0:9e:c4:b9:92: 99:ce:f1:03:8e:27:f6:43:a7:17:0c:ff:16:36:dc: fb:bc:f4:5a:e9:9e:aa:7c:d1:a2:04:2e:75:7d:4d: 9b:86:a0:97:1c:0f:57:42:db:a8:90:2f:47:84:9c: 4a:6c:ab:a4:ad:37:40:b9:ac:bb:fb:4a:58:2d:6a: 3a:88:38:f0:8b:0b:3d:b8:dd:50:36:1f:d8:97:32: e8:94:90:cc:27:70:ae:a7:67:71:94:8d:9e:ea:a1: a1:d5:6a:94:3c:e3:75:4c:c7:e3:0c:c6:50:bc:ba: c8:e6:1f:7f:d5:ef:c8:cb:2b:88:83:3e:50:15:c8: 20:2a:25:8f:4f:78:1e:c1:02:f9:6f:c6:e7:23:da: 76:7f:89:63:a1:ae:35:51:0d:20:48:61:d0:4a:22: 94:98:52:48:7f:09:c4:d4:2b:95:f2:07:66:40:7b: a2:43:ec:51:5d:c1:0e:af:04:32:b9:eb:43:32:5f: f8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C1:3A:EB:D1:7C:08:FB:1A:1C:88:F1:66:AC:11:96:04:67:09:16 X509v3 Authority Key Identifier: keyid:DC:A3:C8:F8:E8:2C:D4:F9:E2:F8:F9:AE:C8:90:BC:1D:B0:98:A8:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:05:b8:6d:fb:38:dd:f6:cc:63:69:9e:c2:8e:82:1e:19:3f: ea:ea:2b:f0:22:f5:ea:57:60:e7:9a:c1:94:03:99:b9:77:b4: ed:16:ba:6b:87:b1:66:a0:b1:e8:26:84:5f:57:98:be:32:c0: 88:05:f5:ea:dc:1d:97:ac:f9:b5:aa:0d:8b:15:65:30:80:1a: 7e:07:a0:95:28:40:6d:39:f2:5d:c5:a0:32:2f:73:20:92:32: 4b:26:5e:58:7c:73:26:58:7d:66:7e:a8:e6:e1:31:42:42:b2: e1:7c:63:af:a2:5d:91:a0:d3:80:ce:af:8b:81:92:ef:31:bf: e3:e1:f0:e8:03:14:d8:b6:61:18:1b:e4:04:74:b2:c4:df:11: 6d:94:0e:ef:b3:19:40:3f:78:0b:d5:af:f3:55:50:b9:c2:8e: ea:e0:ef:bb:76:26:89:94:20:71:0d:40:1e:ac:37:b0:94:25: 66:8c:cc:ad:10:20:c0:e5:80:31:73:3e:3f:e3:40:87:b6:ea: 70:26:7c:0d:39:a1:c2:73:0f:22:02:ff:1f:42:3d:33:74:3c: e8:f6:56:3f:16:6b:18:4a:2c:8f:1d:a8:fd:32:ab:3d:71:35: 4b:1f:22:b6:e6:22:7f:d8:86:e9:23:ad:e4:5e:45:c5:60:00: 64:7e:b8:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT/YVCN2LzDVX7PWkGER9LUql5xEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENBM0M4RjhFODJDRDRGOUUyRjhGOUFFQzg5MEJDMURC MDk4QTg4NzAeFw0yNjA5MjMyMDM2MzNaFw0yNjA5MjQyMDQ4MzNaMDMxMTAvBgNV BAMTKDdDQzEzQUVCRDE3QzA4RkIxQTFDODhGMTY2QUMxMTk2MDQ2NzA5MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp4tMpxucwIgI/WILA2ddQtMAp 33Sam1TlGMuSfIs+nLFKLbXSfRw/5NtQAS46y8HytOj9XOsLmdUiKrsVY3Jk3X/6 feDQnsS5kpnO8QOOJ/ZDpxcM/xY23Pu89Frpnqp80aIELnV9TZuGoJccD1dC26iQ L0eEnEpsq6StN0C5rLv7SlgtajqIOPCLCz243VA2H9iXMuiUkMwncK6nZ3GUjZ7q oaHVapQ843VMx+MMxlC8usjmH3/V78jLK4iDPlAVyCAqJY9PeB7BAvlvxucj2nZ/ iWOhrjVRDSBIYdBKIpSYUkh/CcTUK5XyB2ZAe6JD7FFdwQ6vBDK560MyX/hZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfME669F8CPsaHIjxZqwRlgRnCRYwHwYDVR0j BBgwFoAU3KPI+Ogs1Pni+PmuyJC8HbCYqIcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTBjNzczYzgtZmI1Ni00NDlmLTg2NDktMTEyZDZlMTY4NmIzLzAvRENBM0M4RjhF ODJDRDRGOUUyRjhGOUFFQzg5MEJDMURCMDk4QTg4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0EzQzhGOEU4MkNENEY5RTJGOEY5QUVDODkwQkMxREIwOThB ODg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTBjNzczYzgtZmI1Ni00NDlmLTg2 NDktMTEyZDZlMTY4NmIzLzAvRENBM0M4RjhFODJDRDRGOUUyRjhGOUFFQzg5MEJD MURCMDk4QTg4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkFuG37ON32zGNpnsKOgh4ZP+rqK/Ai9epX YOeawZQDmbl3tO0WumuHsWagsegmhF9XmL4ywIgF9ercHZes+bWqDYsVZTCAGn4H oJUoQG058l3FoDIvcyCSMksmXlh8cyZYfWZ+qObhMUJCsuF8Y6+iXZGg04DOr4uB ku8xv+Ph8OgDFNi2YRgb5AR0ssTfEW2UDu+zGUA/eAvVr/NVULnCjurg77t2JomU IHENQB6sN7CUJWaMzK0QIMDlgDFzPj/jQIe26nAmfA05ocJzDyIC/x9CPTN0POj2 Vj8WaxhKLI8dqP0yqz1xNUsfIrbmIn/YhukjreReRcVgAGR+uLQ= -----END CERTIFICATE-----Generated at Thu Sep 24 03:44:30 2026 by rpki-client