$ rpki-client -vvvf rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft File: DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft (raw, json) Hash identifier: +YWryTsGEBESbdr94rkpTFOfwAFfKFwW+KDFRKb+9PY= Subject key identifier: 55:2D:B8:CF:9A:35:BD:4F:5B:C5:8F:70:2C:AF:9D:75:43:36:52:73 Authority key identifier: DF:6A:98:7E:2F:9B:F1:04:B9:93:89:11:E8:F8:3F:4C:51:C5:A7:4D Certificate issuer: /CN=DF6A987E2F9BF104B9938911E8F83F4C51C5A74D Certificate serial: 07584202B8352DABE3C30884CD13C310976C83BD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft Manifest number: CA Signing time: Wed 30 Sep 2026 16:46:38 +0000 Manifest this update: Wed 30 Sep 2026 16:41:38 +0000 Manifest next update: Thu 01 Oct 2026 19:44:38 +0000 Files and hashes: 1: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: pUwBvJ0FIKqMG3YypxwtIACCh9fdPkCe3slROTdlAFQ=) 2: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: E89xRti4PVG0HV9DRFC+eJJ1GWYmvwIqGtNqlTsJLNs=) 3: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: 97HN/1c+8Hrc2pb/g0tPOiNTWcjkEdKOrzmx5piyFis=) 4: DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl (hash: 5d4bHTzAKKypO8KZ/fkQb4XzeZU8GQkpC9uYzMvzlPE=) 5: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: d1/YZ4nLn+eOZOqPz/6uDnp+bGReiCL4D5xWg3VSU5w=) 6: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: TkbyXPHwp6Kb69rQYjb4QN3MOoOzWNnMDZFwGXZxRRA=) 7: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: WjZRwtvJki8cX6/hev6SY7XFmEOdsbw7GQ4iNASnaI0=) 8: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: TTk5uxdYgabM/1XXzBbZ8h3cHs3Ef7zAmOsq9InOKKA=) 9: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: fD3NLzLgoJ82TLwu7Dwyse03F0V8LT4TWwHSpMtUfEc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:58:42:02:b8:35:2d:ab:e3:c3:08:84:cd:13:c3:10:97:6c:83:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF6A987E2F9BF104B9938911E8F83F4C51C5A74D Validity Not Before: Sep 30 16:41:38 2026 GMT Not After : Oct 1 19:44:38 2026 GMT Subject: CN=552DB8CF9A35BD4F5BC58F702CAF9D7543365273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0f:fa:df:b4:7a:b2:f1:70:b2:cf:67:9e:c6: 17:a2:e4:d9:be:82:e5:cc:da:4c:cc:a0:22:7e:f2: 8e:37:5e:10:03:27:c6:ba:bc:30:7f:00:3c:6e:fc: 15:dc:34:24:d9:c1:e4:3a:18:70:c0:2a:7b:3a:27: 4a:e3:37:ca:3d:b2:3c:a5:c0:2c:ce:d5:64:08:db: c7:27:2b:74:7b:6b:9a:aa:99:7a:20:f8:c4:0a:90: ba:25:fa:1c:45:76:db:da:48:23:23:ea:37:a1:b0: 97:7e:12:16:5e:f2:b3:ce:94:27:b3:00:1f:3c:d0: f4:dc:6a:3d:7f:9d:aa:f0:5b:be:6c:c5:cd:fb:50: 54:53:a5:5a:b3:1e:22:7b:4b:3e:03:be:63:b1:9c: 60:e2:8b:a2:62:25:9e:5b:4a:29:21:14:89:55:0b: 4c:53:cd:42:60:3b:d7:81:7f:15:76:57:89:6c:a9: ab:ce:27:bb:e0:5a:94:54:c7:9d:ba:0e:04:47:69: 1c:78:5f:65:9d:b4:2d:35:3d:5f:2e:b8:2c:8c:f5: 99:54:ca:31:b8:73:3e:d5:46:80:8b:e0:ba:62:3e: 5f:22:9c:40:76:e5:4f:ef:79:92:fe:4a:94:d7:8a: ae:cd:63:b3:96:75:3e:a2:5d:a9:a4:67:5f:02:5a: f1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2D:B8:CF:9A:35:BD:4F:5B:C5:8F:70:2C:AF:9D:75:43:36:52:73 X509v3 Authority Key Identifier: keyid:DF:6A:98:7E:2F:9B:F1:04:B9:93:89:11:E8:F8:3F:4C:51:C5:A7:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:29:60:0c:7f:c3:61:71:63:57:e8:40:ce:bd:13:00:8f:84: 5b:e6:c1:82:2c:00:08:77:47:d2:e3:f3:60:1c:e9:75:cb:2f: 91:34:42:4f:be:97:57:02:c8:78:41:d9:76:44:cb:af:76:bc: 77:80:5e:06:7c:fd:35:38:a0:3d:da:ff:57:42:9f:66:d6:c8: 05:99:08:6b:32:8e:cc:e0:c9:3c:05:4b:4b:77:c2:db:54:31: dd:54:17:c0:41:65:1b:75:e6:f9:52:6b:65:7a:7a:87:00:3b: 18:23:26:b0:1e:c7:41:23:b3:0f:80:83:2d:c4:8c:9b:0b:85: 98:3e:6d:98:fa:3a:c0:c8:f3:bb:89:17:06:bc:08:2c:63:9b: b9:23:51:c5:99:b0:c7:1c:b2:4b:43:b2:04:7d:fb:de:7f:c5: b2:45:a7:d7:44:51:1f:c6:31:09:76:06:eb:5f:36:74:79:c5: 2f:27:ad:f2:21:77:98:d6:2e:0b:c0:0c:01:4c:32:57:da:70: 5b:d6:74:ad:b4:8f:fe:9a:ff:c9:74:02:73:38:83:30:d4:a7: 96:b5:d3:0d:ef:89:84:53:ca:07:c3:f5:e4:4d:ac:a1:da:06: 20:a3:02:e3:b5:4a:0f:28:1b:34:4e:aa:6e:5b:5a:6e:65:df: ef:da:68:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB1hCArg1LavjwwiEzRPDEJdsg70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2QTk4N0UyRjlCRjEwNEI5OTM4OTExRThGODNGNEM1 MUM1QTc0RDAeFw0yNjA5MzAxNjQxMzhaFw0yNjEwMDExOTQ0MzhaMDMxMTAvBgNV BAMTKDU1MkRCOENGOUEzNUJENEY1QkM1OEY3MDJDQUY5RDc1NDMzNjUyNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSD/rftHqy8XCyz2eexhei5Nm+ guXM2kzMoCJ+8o43XhADJ8a6vDB/ADxu/BXcNCTZweQ6GHDAKns6J0rjN8o9sjyl wCzO1WQI28cnK3R7a5qqmXog+MQKkLol+hxFdtvaSCMj6jehsJd+EhZe8rPOlCez AB880PTcaj1/narwW75sxc37UFRTpVqzHiJ7Sz4DvmOxnGDii6JiJZ5bSikhFIlV C0xTzUJgO9eBfxV2V4lsqavOJ7vgWpRUx526DgRHaRx4X2WdtC01PV8uuCyM9ZlU yjG4cz7VRoCL4LpiPl8inEB25U/veZL+SpTXiq7NY7OWdT6iXamkZ18CWvFhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVS24z5o1vU9bxY9wLK+ddUM2UnMwHwYDVR0j BBgwFoAU32qYfi+b8QS5k4kR6Pg/TFHFp00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzBjMmExM2ItMWY0MC00YzAzLWJjMzUtZjY5NjE1MTZkNGQ5LzAvREY2QTk4N0Uy RjlCRjEwNEI5OTM4OTExRThGODNGNEM1MUM1QTc0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjZBOTg3RTJGOUJGMTA0Qjk5Mzg5MTFFOEY4M0Y0QzUxQzVB NzRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzBjMmExM2ItMWY0MC00YzAzLWJj MzUtZjY5NjE1MTZkNGQ5LzAvREY2QTk4N0UyRjlCRjEwNEI5OTM4OTExRThGODNG NEM1MUM1QTc0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQpYAx/w2FxY1foQM69EwCPhFvmwYIsAAh3 R9Lj82Ac6XXLL5E0Qk++l1cCyHhB2XZEy692vHeAXgZ8/TU4oD3a/1dCn2bWyAWZ CGsyjszgyTwFS0t3wttUMd1UF8BBZRt15vlSa2V6eocAOxgjJrAex0Ejsw+Agy3E jJsLhZg+bZj6OsDI87uJFwa8CCxjm7kjUcWZsMccsktDsgR9+95/xbJFp9dEUR/G MQl2ButfNnR5xS8nrfIhd5jWLgvADAFMMlfacFvWdK20j/6a/8l0AnM4gzDUp5a1 0w3viYRTygfD9eRNrKHaBiCjAuO1Sg8oGzROqm5bWm5l3+/aaKU= -----END CERTIFICATE-----Generated at Thu Oct 1 08:13:23 2026 by rpki-client