$ rpki-client -vvvf rpki-rsync.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/D4F6C5CD98629D37237B4EC98958EBAC927800A2.mft File: D4F6C5CD98629D37237B4EC98958EBAC927800A2.mft (raw, json) Hash identifier: MoMp/juAbS59Bdr+dvyO9zI2Zsrnn/lufMMF8btzgI8= Subject key identifier: 04:82:ED:FD:42:15:AA:23:81:18:74:F0:E8:2E:EE:26:A6:CE:29:E9 Authority key identifier: D4:F6:C5:CD:98:62:9D:37:23:7B:4E:C9:89:58:EB:AC:92:78:00:A2 Certificate issuer: /CN=D4F6C5CD98629D37237B4EC98958EBAC927800A2 Certificate serial: 0D724156FB7C4C974732487A907ED72724ACDC2E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4F6C5CD98629D37237B4EC98958EBAC927800A2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/D4F6C5CD98629D37237B4EC98958EBAC927800A2.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 09:58:01 +0000 Manifest this update: Thu 24 Sep 2026 09:53:01 +0000 Manifest next update: Fri 25 Sep 2026 11:02:01 +0000 Files and hashes: 1: 3130332e3136322e3130362e302f32332d3234203d3e20313431363533.roa (hash: PgyWI4yshXqNjgdCXVpkLlAnO45nUwUpbrwhDkW6kTc=) 2: D4F6C5CD98629D37237B4EC98958EBAC927800A2.crl (hash: ApL8AgnjRNdPlBg1uN9eONVPeZZWEvKTtw+vDRg9+qM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/D4F6C5CD98629D37237B4EC98958EBAC927800A2.crl rsync://rpki-rsync.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/D4F6C5CD98629D37237B4EC98958EBAC927800A2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4F6C5CD98629D37237B4EC98958EBAC927800A2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:72:41:56:fb:7c:4c:97:47:32:48:7a:90:7e:d7:27:24:ac:dc:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4F6C5CD98629D37237B4EC98958EBAC927800A2 Validity Not Before: Sep 24 09:53:01 2026 GMT Not After : Sep 25 11:02:01 2026 GMT Subject: CN=0482EDFD4215AA23811874F0E82EEE26A6CE29E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:86:49:19:d7:8a:5a:29:7c:e5:0b:58:bc:d2: 2c:cf:29:ab:91:6a:8a:a1:93:25:09:17:a4:55:74: 98:5f:8f:a1:1a:9c:e4:49:a7:2b:46:b5:06:81:35: 6e:e1:34:f1:10:86:d2:be:0c:b2:f0:56:f6:24:68: ef:7a:ce:25:60:0f:2c:61:1b:3e:fb:b7:19:d2:a1: da:d9:17:04:af:17:74:c3:ae:07:4b:a2:8d:45:12: 87:62:8b:04:42:d3:7e:4f:b3:e2:4b:b9:62:55:69: 60:a0:e0:31:05:18:54:c1:f0:2e:a0:06:06:fd:f1: 53:24:b9:12:47:e9:bd:23:52:8d:ce:11:79:e2:b8: 8b:d5:63:50:fb:dc:a1:de:f9:d5:c9:75:94:53:8b: 21:46:d0:f1:2a:08:4f:84:1b:d1:3e:27:bf:89:c1: 6a:ef:42:49:e6:86:50:5f:fd:9a:10:76:26:90:e4: 2f:60:39:64:ce:30:78:d7:37:0c:4f:ca:6d:74:c2: c3:b3:e6:59:e1:58:0e:d1:98:bd:78:9c:85:59:34: 8a:55:00:e4:2e:cb:3d:4a:73:00:cb:e3:66:c5:23: 56:90:13:d9:65:4c:d6:0a:47:45:f2:b6:a9:bd:2a: a1:82:f8:b1:8d:b4:25:d8:c4:81:58:41:06:18:d8: 73:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:82:ED:FD:42:15:AA:23:81:18:74:F0:E8:2E:EE:26:A6:CE:29:E9 X509v3 Authority Key Identifier: keyid:D4:F6:C5:CD:98:62:9D:37:23:7B:4E:C9:89:58:EB:AC:92:78:00:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/D4F6C5CD98629D37237B4EC98958EBAC927800A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4F6C5CD98629D37237B4EC98958EBAC927800A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/D4F6C5CD98629D37237B4EC98958EBAC927800A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:7b:91:1f:ec:84:f4:61:2e:98:e9:ce:79:11:86:f6:b5:2b: ec:36:cc:bd:01:7b:f4:66:ba:8f:51:89:83:c0:21:ed:8b:f5: 40:9b:6a:d9:e5:b0:b2:7d:65:bd:1a:47:ff:51:1b:ba:1c:c3: 1c:f5:33:59:23:69:1b:1b:aa:62:ff:f2:06:cd:a3:af:4b:34: f2:40:6d:9a:4c:b4:9f:dd:43:7e:a4:23:61:6f:81:30:f7:f1: 3f:65:6c:60:e5:43:ed:95:5e:28:b9:60:6a:fa:4c:dc:ee:88: 84:15:6d:9a:f7:8a:39:64:e2:45:7a:72:27:2c:dd:20:e7:86: b4:a6:81:56:12:e0:95:65:22:bb:97:6b:10:43:0b:04:82:b0: 9b:9e:0a:73:1f:ee:9e:1a:0b:a3:77:d5:69:37:93:74:16:7e: 48:de:d9:6d:6f:8b:44:9e:61:5d:52:af:a9:1a:91:84:0e:60: fc:19:92:57:31:e8:31:c7:2a:1e:9e:11:92:57:fd:43:84:e1: ad:ab:b0:c0:e3:2c:35:18:d7:1d:64:00:a8:ef:3c:36:e6:30: 7c:55:e2:d7:ce:75:ca:e4:23:08:8f:79:20:80:73:0d:4f:01: 79:50:13:0b:7e:7f:dd:f0:2f:c2:ca:d0:4c:9e:a9:8b:5a:6e: ee:ed:3e:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDXJBVvt8TJdHMkh6kH7XJySs3C4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRGNkM1Q0Q5ODYyOUQzNzIzN0I0RUM5ODk1OEVCQUM5 Mjc4MDBBMjAeFw0yNjA5MjQwOTUzMDFaFw0yNjA5MjUxMTAyMDFaMDMxMTAvBgNV BAMTKDA0ODJFREZENDIxNUFBMjM4MTE4NzRGMEU4MkVFRTI2QTZDRTI5RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDihkkZ14paKXzlC1i80izPKauR aoqhkyUJF6RVdJhfj6EanORJpytGtQaBNW7hNPEQhtK+DLLwVvYkaO96ziVgDyxh Gz77txnSodrZFwSvF3TDrgdLoo1FEodiiwRC035Ps+JLuWJVaWCg4DEFGFTB8C6g Bgb98VMkuRJH6b0jUo3OEXniuIvVY1D73KHe+dXJdZRTiyFG0PEqCE+EG9E+J7+J wWrvQknmhlBf/ZoQdiaQ5C9gOWTOMHjXNwxPym10wsOz5lnhWA7RmL14nIVZNIpV AOQuyz1KcwDL42bFI1aQE9llTNYKR0Xytqm9KqGC+LGNtCXYxIFYQQYY2HN5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBILt/UIVqiOBGHTw6C7uJqbOKekwHwYDVR0j BBgwFoAU1PbFzZhinTcje07JiVjrrJJ4AKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjliYmU1YzAtNzllZC00NmZhLTg5ODktODhkOGFjYzg3Y2Y4LzAvRDRGNkM1Q0Q5 ODYyOUQzNzIzN0I0RUM5ODk1OEVCQUM5Mjc4MDBBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENEY2QzVDRDk4NjI5RDM3MjM3QjRFQzk4OTU4RUJBQzkyNzgw MEEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjliYmU1YzAtNzllZC00NmZhLTg5 ODktODhkOGFjYzg3Y2Y4LzAvRDRGNkM1Q0Q5ODYyOUQzNzIzN0I0RUM5ODk1OEVC QUM5Mjc4MDBBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN17kR/shPRhLpjpznkRhva1K+w2zL0Be/Rm uo9RiYPAIe2L9UCbatnlsLJ9Zb0aR/9RG7ocwxz1M1kjaRsbqmL/8gbNo69LNPJA bZpMtJ/dQ36kI2FvgTD38T9lbGDlQ+2VXii5YGr6TNzuiIQVbZr3ijlk4kV6cics 3SDnhrSmgVYS4JVlIruXaxBDCwSCsJueCnMf7p4aC6N31Wk3k3QWfkje2W1vi0Se YV1Sr6kakYQOYPwZklcx6DHHKh6eEZJX/UOE4a2rsMDjLDUY1x1kAKjvPDbmMHxV 4tfOdcrkIwiPeSCAcw1PAXlQEwt+f93wL8LK0EyeqYtabu7tPtY= -----END CERTIFICATE-----Generated at Thu Sep 24 23:32:49 2026 by rpki-client