$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft File: D522456371D4AC1AABD94B54197F5014F8E929A5.mft (raw, json) Hash identifier: U7PKVvVcU2IFQJefCeD2o5ceg7RsQXBsKF6HxnwenUU= Subject key identifier: BB:26:4B:67:64:DE:C7:E0:74:D4:2E:41:6B:0A:3B:4A:28:5E:3E:29 Authority key identifier: D5:22:45:63:71:D4:AC:1A:AB:D9:4B:54:19:7F:50:14:F8:E9:29:A5 Certificate issuer: /CN=D522456371D4AC1AABD94B54197F5014F8E929A5 Certificate serial: 69E3F012D6DE57277B7FD7D9F863F455DDFE9B0C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D522456371D4AC1AABD94B54197F5014F8E929A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 05:58:21 +0000 Manifest this update: Wed 23 Sep 2026 05:53:21 +0000 Manifest next update: Thu 24 Sep 2026 07:03:21 +0000 Files and hashes: 1: D522456371D4AC1AABD94B54197F5014F8E929A5.crl (hash: vtatBvnPo5cArApNPD2M156pHQxgar0B9bQL7TTB0UA=) 2: 3130332e3137392e3133362e302f32332d3234203d3e20313339393737.roa (hash: OUIoLLo/dAdijxG7HgPy+7u0dGo5YCKdHwzzHlzGJYU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.crl rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D522456371D4AC1AABD94B54197F5014F8E929A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 07:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:e3:f0:12:d6:de:57:27:7b:7f:d7:d9:f8:63:f4:55:dd:fe:9b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D522456371D4AC1AABD94B54197F5014F8E929A5 Validity Not Before: Sep 23 05:53:21 2026 GMT Not After : Sep 24 07:03:21 2026 GMT Subject: CN=BB264B6764DEC7E074D42E416B0A3B4A285E3E29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:64:3e:9e:23:cb:76:3e:3b:36:36:ef:d0:ab: 0b:08:4d:a1:37:d1:ea:bd:a8:61:4d:be:bc:c1:49: 44:93:9c:e2:e6:9a:14:5e:b7:6a:7c:ad:dc:27:cc: 79:27:54:31:45:70:f4:70:1c:b2:f4:73:7f:d2:ce: 4f:de:e6:be:37:59:71:e6:90:11:49:53:ea:ed:31: 2d:12:74:de:d3:9f:fd:db:8d:ee:64:7e:29:ea:be: 12:9f:fa:c4:8a:50:4d:c1:a7:20:db:1b:54:c9:07: f6:d5:40:41:93:58:d2:42:73:94:c9:9b:38:e0:69: 2a:c7:f9:b9:dc:47:dc:26:80:50:86:f4:2e:12:0d: 6b:7c:24:8c:73:d2:39:65:c6:19:2d:fb:85:f6:91: 5e:25:32:7e:fd:8e:bb:04:85:fc:78:78:80:44:a3: c3:06:ab:f3:a0:7c:65:0d:04:56:c5:35:5e:5f:11: a1:a6:38:ac:a9:f4:f7:ac:5c:59:55:2b:23:b4:e7: 33:f6:1e:f5:ec:91:2a:09:12:82:ec:cd:5c:6c:bd: d8:3f:69:f3:43:49:9c:03:28:73:00:7d:66:51:74: a3:1f:a3:9a:d0:9a:2a:d2:44:de:6d:82:87:6f:99: bd:fd:da:e8:f7:6c:c1:b0:4a:4b:3b:b8:d0:2f:b1: d2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:26:4B:67:64:DE:C7:E0:74:D4:2E:41:6B:0A:3B:4A:28:5E:3E:29 X509v3 Authority Key Identifier: keyid:D5:22:45:63:71:D4:AC:1A:AB:D9:4B:54:19:7F:50:14:F8:E9:29:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D522456371D4AC1AABD94B54197F5014F8E929A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:c7:26:71:b7:21:38:d0:ab:85:e2:4c:c1:6c:fa:88:d8:d6: 00:d7:eb:8c:e3:4c:df:e7:88:34:8c:27:bc:16:a4:84:86:3a: 83:d0:64:df:8b:f1:0a:d1:73:d3:65:04:c1:a7:ad:31:cb:8d: cc:7f:be:bd:b8:3a:05:f5:66:0b:af:ca:52:4d:df:95:d9:b4: 63:04:1c:16:38:47:cf:a6:bf:37:4a:0f:64:ce:75:44:cc:b5: fa:0d:2c:e6:e8:bb:a9:2f:2c:7e:80:1f:b3:71:12:39:cc:5d: f7:61:fe:a6:d8:ae:bf:d4:37:26:8f:91:c4:21:7f:1a:74:5f: 99:73:20:be:c0:3e:42:e2:f3:56:84:fc:f4:e2:cd:bd:4f:51: e6:d8:0b:12:0d:9e:50:c4:52:d9:bd:23:d7:75:4e:b3:cf:8a: b1:bc:b5:b1:f7:6e:ea:32:ac:48:95:52:0e:b3:35:01:d0:a6: 17:fc:67:03:15:9e:68:aa:1d:41:56:6b:51:65:59:4b:74:0d: aa:8d:80:31:c2:be:44:2b:53:85:35:37:6c:e0:64:6f:6e:05: 88:74:51:42:c4:ec:34:7d:f4:ed:d7:3e:f3:e8:aa:12:f8:df: 67:c2:08:9f:99:d8:94:33:23:9e:bc:4b:c8:90:97:17:95:59: f7:b3:13:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaePwEtbeVyd7f9fZ+GP0Vd3+mwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUyMjQ1NjM3MUQ0QUMxQUFCRDk0QjU0MTk3RjUwMTRG OEU5MjlBNTAeFw0yNjA5MjMwNTUzMjFaFw0yNjA5MjQwNzAzMjFaMDMxMTAvBgNV BAMTKEJCMjY0QjY3NjRERUM3RTA3NEQ0MkU0MTZCMEEzQjRBMjg1RTNFMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKZD6eI8t2Pjs2Nu/QqwsITaE3 0eq9qGFNvrzBSUSTnOLmmhRet2p8rdwnzHknVDFFcPRwHLL0c3/Szk/e5r43WXHm kBFJU+rtMS0SdN7Tn/3bje5kfinqvhKf+sSKUE3BpyDbG1TJB/bVQEGTWNJCc5TJ mzjgaSrH+bncR9wmgFCG9C4SDWt8JIxz0jllxhkt+4X2kV4lMn79jrsEhfx4eIBE o8MGq/OgfGUNBFbFNV5fEaGmOKyp9PesXFlVKyO05zP2HvXskSoJEoLszVxsvdg/ afNDSZwDKHMAfWZRdKMfo5rQmirSRN5tgodvmb392uj3bMGwSks7uNAvsdK7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuyZLZ2Tex+B01C5Bawo7SihePikwHwYDVR0j BBgwFoAU1SJFY3HUrBqr2UtUGX9QFPjpKaUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ4MGIzMjEtYWEzMS00MzE3LTlkMzEtYzJiZDE5MGMxMzg0LzAvRDUyMjQ1NjM3 MUQ0QUMxQUFCRDk0QjU0MTk3RjUwMTRGOEU5MjlBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTIyNDU2MzcxRDRBQzFBQUJEOTRCNTQxOTdGNTAxNEY4RTky OUE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ4MGIzMjEtYWEzMS00MzE3LTlk MzEtYzJiZDE5MGMxMzg0LzAvRDUyMjQ1NjM3MUQ0QUMxQUFCRDk0QjU0MTk3RjUw MTRGOEU5MjlBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALnHJnG3ITjQq4XiTMFs+ojY1gDX64zjTN/n iDSMJ7wWpISGOoPQZN+L8QrRc9NlBMGnrTHLjcx/vr24OgX1ZguvylJN35XZtGME HBY4R8+mvzdKD2TOdUTMtfoNLObou6kvLH6AH7NxEjnMXfdh/qbYrr/UNyaPkcQh fxp0X5lzIL7APkLi81aE/PTizb1PUebYCxINnlDEUtm9I9d1TrPPirG8tbH3buoy rEiVUg6zNQHQphf8ZwMVnmiqHUFWa1FlWUt0DaqNgDHCvkQrU4U1N2zgZG9uBYh0 UULE7DR99O3XPvPoqhL432fCCJ+Z2JQzI568S8iQlxeVWfezE98= -----END CERTIFICATE-----Generated at Wed Sep 23 19:44:26 2026 by rpki-client