$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft File: DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft (raw, json) Hash identifier: 6ox/wJlOzXWAWWo0Q8ClalrEgGk5PDl7Tq2V83DBXh0= Subject key identifier: 84:7C:7C:53:B2:22:8D:94:04:0D:14:1F:3F:F3:B0:37:D9:20:AF:4A Authority key identifier: DF:EB:E2:63:0C:C0:A4:45:30:A5:44:21:24:4D:4B:8C:ED:2C:8A:C4 Certificate issuer: /CN=DFEBE2630CC0A44530A54421244D4B8CED2C8AC4 Certificate serial: 2D007032296AD119CB905D05F9C460387AD6D9D8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 17:27:37 +0000 Manifest this update: Wed 23 Sep 2026 17:22:37 +0000 Manifest next update: Thu 24 Sep 2026 18:34:37 +0000 Files and hashes: 1: 3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa (hash: e4+bi848oD/+O01Mx0cjiGiYFl4mEZMFhTrqMTZt/js=) 2: DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.crl (hash: /LY4timEGpTCEJ5SvHL2h7OvSX20li34oa8/SKyNZ54=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.crl rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:00:70:32:29:6a:d1:19:cb:90:5d:05:f9:c4:60:38:7a:d6:d9:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFEBE2630CC0A44530A54421244D4B8CED2C8AC4 Validity Not Before: Sep 23 17:22:37 2026 GMT Not After : Sep 24 18:34:37 2026 GMT Subject: CN=847C7C53B2228D94040D141F3FF3B037D920AF4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:de:15:5f:09:7f:3b:ce:ea:0c:03:c9:fd:09: 97:32:ee:f0:97:bf:12:69:02:e8:7c:45:3a:fe:58: 81:1d:7c:cf:a0:15:23:8f:c5:a9:6e:26:c8:98:3c: 4d:de:cc:93:2a:aa:96:1f:15:66:c0:9d:9d:41:fa: 84:27:39:6e:87:bb:26:65:fe:68:e4:7a:7a:98:ba: 82:57:e2:fe:77:f8:e0:c9:9c:42:41:8a:25:a2:ed: 46:d1:81:f3:8c:b3:2c:b6:16:85:64:fe:7a:34:ed: 11:9a:66:27:ed:f4:e0:e8:6d:1b:38:fe:98:99:bb: f3:06:76:fb:b8:3c:a9:51:f4:01:9f:66:2b:e7:64: 6e:34:8b:01:57:bc:26:53:42:b7:11:58:cf:6f:a1: 2a:e2:d6:46:b0:18:3b:86:8b:76:69:2c:46:0e:2b: 20:a4:9b:dc:25:82:a3:ff:d4:c8:03:e6:b3:e3:e5: be:9b:4e:f4:c8:ec:65:32:fb:ba:f2:a5:8a:80:fb: c5:9d:07:dc:94:88:e0:14:a8:5a:ec:bd:73:12:a5: 22:fb:c6:36:68:04:e6:5e:01:ba:52:41:80:45:18: 94:45:27:c2:36:ab:d4:30:56:ca:38:58:91:73:dc: 84:f8:6b:14:c8:2a:e8:5c:3f:e4:c7:ee:e4:36:8d: 40:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7C:7C:53:B2:22:8D:94:04:0D:14:1F:3F:F3:B0:37:D9:20:AF:4A X509v3 Authority Key Identifier: keyid:DF:EB:E2:63:0C:C0:A4:45:30:A5:44:21:24:4D:4B:8C:ED:2C:8A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:46:f8:9b:35:e7:50:3b:67:72:f8:9a:cd:80:6a:a6:33:4c: a1:70:9d:01:a2:69:43:bf:4c:3c:16:b7:d2:f1:f5:c3:a2:5d: a6:79:c6:b7:7f:f8:fe:1d:5c:1a:e3:ea:8f:48:de:35:83:ec: 25:3d:7b:47:18:5c:8c:98:b5:44:e2:6b:96:7b:1f:5d:89:19: 23:8a:ed:ff:a8:6c:83:32:30:89:49:b5:32:25:83:e8:5b:53: 7c:32:ba:66:43:34:fc:9f:47:92:57:e5:c7:78:ff:84:cf:77: d5:05:29:68:62:41:dd:26:00:70:22:37:a4:da:c1:4a:16:79: ca:4a:1c:0f:8b:ba:a1:58:3b:95:e7:59:8e:19:40:69:1d:5c: cf:77:d5:9c:60:44:aa:3c:fa:0e:4d:c7:00:be:a5:30:68:b6: c8:3d:02:15:ca:ea:21:27:be:f8:a7:3d:bc:d5:2f:64:89:14: f5:b3:8a:65:24:0d:b8:cc:d7:37:9e:ff:da:9c:c3:96:9d:5a: 4e:21:b7:00:a1:2c:22:00:0d:40:fe:b2:cb:48:55:4d:97:b5: 85:25:0a:9e:58:f4:41:69:4e:d1:29:23:e5:f2:29:44:2e:ca: 22:58:f4:9a:de:f5:db:f6:7b:9e:45:94:9f:25:f9:81:f4:79: 9a:32:ec:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULQBwMilq0RnLkF0F+cRgOHrW2dgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZFQkUyNjMwQ0MwQTQ0NTMwQTU0NDIxMjQ0RDRCOENF RDJDOEFDNDAeFw0yNjA5MjMxNzIyMzdaFw0yNjA5MjQxODM0MzdaMDMxMTAvBgNV BAMTKDg0N0M3QzUzQjIyMjhEOTQwNDBEMTQxRjNGRjNCMDM3RDkyMEFGNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw3hVfCX87zuoMA8n9CZcy7vCX vxJpAuh8RTr+WIEdfM+gFSOPxaluJsiYPE3ezJMqqpYfFWbAnZ1B+oQnOW6HuyZl /mjkenqYuoJX4v53+ODJnEJBiiWi7UbRgfOMsyy2FoVk/no07RGaZift9ODobRs4 /piZu/MGdvu4PKlR9AGfZivnZG40iwFXvCZTQrcRWM9voSri1kawGDuGi3ZpLEYO KyCkm9wlgqP/1MgD5rPj5b6bTvTI7GUy+7rypYqA+8WdB9yUiOAUqFrsvXMSpSL7 xjZoBOZeAbpSQYBFGJRFJ8I2q9QwVso4WJFz3IT4axTIKuhcP+TH7uQ2jUAtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhHx8U7IijZQEDRQfP/OwN9kgr0owHwYDVR0j BBgwFoAU3+viYwzApEUwpUQhJE1LjO0sisQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmJmYTQyNjUtYmI1OC00NmUyLTgzMDktM2FkMzk4MWEzNTE2LzAvREZFQkUyNjMw Q0MwQTQ0NTMwQTU0NDIxMjQ0RDRCOENFRDJDOEFDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERkVCRTI2MzBDQzBBNDQ1MzBBNTQ0MjEyNDRENEI4Q0VEMkM4 QUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmJmYTQyNjUtYmI1OC00NmUyLTgz MDktM2FkMzk4MWEzNTE2LzAvREZFQkUyNjMwQ0MwQTQ0NTMwQTU0NDIxMjQ0RDRC OENFRDJDOEFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAENG+Js151A7Z3L4ms2AaqYzTKFwnQGiaUO/ TDwWt9Lx9cOiXaZ5xrd/+P4dXBrj6o9I3jWD7CU9e0cYXIyYtUTia5Z7H12JGSOK 7f+obIMyMIlJtTIlg+hbU3wyumZDNPyfR5JX5cd4/4TPd9UFKWhiQd0mAHAiN6Ta wUoWecpKHA+LuqFYO5XnWY4ZQGkdXM931ZxgRKo8+g5NxwC+pTBotsg9AhXK6iEn vvinPbzVL2SJFPWzimUkDbjM1zee/9qcw5adWk4htwChLCIADUD+sstIVU2XtYUl Cp5Y9EFpTtEpI+XyKUQuyiJY9Jre9dv2e55FlJ8l+YH0eZoy7FA= -----END CERTIFICATE-----Generated at Thu Sep 24 09:38:28 2026 by rpki-client