$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft File: DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft (raw, json) Hash identifier: xmkc18yRBMu0qysYbXYcmStv9i+aE+FEV5p7XZa2/MY= Subject key identifier: 6A:A7:D8:7C:98:ED:73:42:26:4E:54:B2:B7:C6:C0:94:98:CD:99:09 Authority key identifier: DB:16:2C:17:AB:46:C7:2E:F7:49:4E:06:26:0E:B3:FE:57:4E:4C:EE Certificate issuer: /CN=DB162C17AB46C72EF7494E06260EB3FE574E4CEE Certificate serial: 71F14E5210F53F47018598C3D7DBA6368A321209 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 01:27:35 +0000 Manifest this update: Thu 24 Sep 2026 01:22:35 +0000 Manifest next update: Fri 25 Sep 2026 02:18:35 +0000 Files and hashes: 1: DB162C17AB46C72EF7494E06260EB3FE574E4CEE.crl (hash: Pf5lOgrHKwi1/dGsamBfcBs1KdWKOBqj2IsXKPlcvTI=) 2: 3130332e31352e3235312e302f32342d3234203d3e20313331373337.roa (hash: n2jgLsgpyvuRu9OXUICieAMoUsWBKFqPo1kbmePbqLI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.crl rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:18:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:f1:4e:52:10:f5:3f:47:01:85:98:c3:d7:db:a6:36:8a:32:12:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB162C17AB46C72EF7494E06260EB3FE574E4CEE Validity Not Before: Sep 24 01:22:35 2026 GMT Not After : Sep 25 02:18:35 2026 GMT Subject: CN=6AA7D87C98ED7342264E54B2B7C6C09498CD9909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:04:25:c0:00:7e:44:98:97:55:c1:fd:33:79: 79:de:3b:9b:6e:4e:70:c0:4d:8f:23:2f:52:08:ad: 8c:d8:9c:29:af:70:4d:67:e1:65:24:76:8b:cc:5e: 22:0f:8f:51:93:eb:3e:f7:e9:73:0d:04:22:c3:b2: 19:39:d7:ec:1e:32:0b:21:3d:74:58:7e:7a:bb:36: 90:f1:95:67:14:4c:da:76:41:83:ea:16:ad:12:54: d0:3e:9f:9b:58:39:c1:aa:60:9a:17:88:0a:32:14: 8f:1a:4f:5f:3a:b9:9b:ef:dc:79:f0:4a:9b:f9:82: 49:3b:d9:9b:04:52:4c:2c:13:c4:01:31:5c:f8:12: 73:80:63:29:4a:3b:98:a7:ed:8c:62:97:d1:47:2a: a7:12:08:30:9c:d4:e0:39:84:c0:fe:b3:a7:02:b4: 1c:1b:95:22:dd:1c:44:32:fd:1b:68:f1:53:8f:90: 37:32:98:c5:40:45:28:93:1a:20:41:1c:72:f1:17: 9e:cc:15:e4:f8:98:8d:77:bb:2f:84:fc:c1:0f:4e: 66:c8:1b:fe:8f:a2:94:18:a9:f4:61:e7:15:7e:bf: 08:76:fc:bc:ee:65:e5:14:7a:e0:bf:98:ac:93:d5: c0:9c:57:f1:b9:58:a1:63:29:0f:cc:a1:49:a7:77: b9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A7:D8:7C:98:ED:73:42:26:4E:54:B2:B7:C6:C0:94:98:CD:99:09 X509v3 Authority Key Identifier: keyid:DB:16:2C:17:AB:46:C7:2E:F7:49:4E:06:26:0E:B3:FE:57:4E:4C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:12:1e:86:a1:ec:8f:95:13:05:50:99:f4:aa:d9:58:e6:28: 18:26:d9:c5:0d:30:33:09:a5:c4:d1:78:c7:85:95:6f:3e:4f: be:ea:9a:46:40:c4:9d:ad:69:5b:0c:39:f7:7b:be:21:2e:20: 8e:71:80:d9:39:0c:c1:44:1a:3d:17:bb:20:40:08:c0:bb:fe: c0:bb:90:b2:9b:8c:b9:ab:2a:2d:eb:ce:1f:bc:25:bc:54:95: 74:50:e7:95:62:a2:92:78:ca:8b:1c:64:a8:f2:42:6c:30:23: c4:f8:30:2a:ef:56:a6:1b:0b:23:7e:fa:4c:2a:7b:f7:a4:1b: dc:c5:42:26:59:6d:e6:91:be:14:0f:ba:a9:3c:d7:ff:18:96: 68:51:be:bc:47:f8:9e:d3:76:c6:bb:5f:5c:72:79:f8:fa:73: e8:5e:c3:8c:29:c0:01:9f:c1:68:8b:f6:77:40:14:9f:7e:53: 5f:2f:90:dd:b4:a7:c2:a5:6a:3d:52:44:35:6e:c9:ca:c7:e9: d5:da:2b:05:5a:b3:0e:c9:31:62:c7:28:ab:8b:b6:03:03:b3: dc:37:0f:eb:0b:aa:b5:f5:73:13:88:55:cd:10:04:b9:57:33: f0:88:f9:c2:f2:40:45:e7:30:f3:55:75:3d:73:44:c9:9f:f8: 45:8b:d9:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcfFOUhD1P0cBhZjD19umNooyEgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxNjJDMTdBQjQ2QzcyRUY3NDk0RTA2MjYwRUIzRkU1 NzRFNENFRTAeFw0yNjA5MjQwMTIyMzVaFw0yNjA5MjUwMjE4MzVaMDMxMTAvBgNV BAMTKDZBQTdEODdDOThFRDczNDIyNjRFNTRCMkI3QzZDMDk0OThDRDk5MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7BCXAAH5EmJdVwf0zeXneO5tu TnDATY8jL1IIrYzYnCmvcE1n4WUkdovMXiIPj1GT6z736XMNBCLDshk51+weMgsh PXRYfnq7NpDxlWcUTNp2QYPqFq0SVNA+n5tYOcGqYJoXiAoyFI8aT186uZvv3Hnw Spv5gkk72ZsEUkwsE8QBMVz4EnOAYylKO5in7Yxil9FHKqcSCDCc1OA5hMD+s6cC tBwblSLdHEQy/Rto8VOPkDcymMVARSiTGiBBHHLxF57MFeT4mI13uy+E/MEPTmbI G/6PopQYqfRh5xV+vwh2/LzuZeUUeuC/mKyT1cCcV/G5WKFjKQ/MoUmnd7lHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaqfYfJjtc0ImTlSyt8bAlJjNmQkwHwYDVR0j BBgwFoAU2xYsF6tGxy73SU4GJg6z/ldOTO4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmNkZmQ4ZWItOGE0MC00ZThiLWE5ZTAtOTI3OGNkMDRmYTQzLzAvREIxNjJDMTdB QjQ2QzcyRUY3NDk0RTA2MjYwRUIzRkU1NzRFNENFRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQjE2MkMxN0FCNDZDNzJFRjc0OTRFMDYyNjBFQjNGRTU3NEU0 Q0VFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmNkZmQ4ZWItOGE0MC00ZThiLWE5 ZTAtOTI3OGNkMDRmYTQzLzAvREIxNjJDMTdBQjQ2QzcyRUY3NDk0RTA2MjYwRUIz RkU1NzRFNENFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK4SHoah7I+VEwVQmfSq2VjmKBgm2cUNMDMJ pcTReMeFlW8+T77qmkZAxJ2taVsMOfd7viEuII5xgNk5DMFEGj0XuyBACMC7/sC7 kLKbjLmrKi3rzh+8JbxUlXRQ55ViopJ4yoscZKjyQmwwI8T4MCrvVqYbCyN++kwq e/ekG9zFQiZZbeaRvhQPuqk81/8YlmhRvrxH+J7Tdsa7X1xyefj6c+hew4wpwAGf wWiL9ndAFJ9+U18vkN20p8Klaj1SRDVuycrH6dXaKwVasw7JMWLHKKuLtgMDs9w3 D+sLqrX1cxOIVc0QBLlXM/CI+cLyQEXnMPNVdT1zRMmf+EWL2SU= -----END CERTIFICATE-----Generated at Thu Sep 24 06:59:07 2026 by rpki-client