$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft File: D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft (raw, json) Hash identifier: wfKpoMV8sEfOkyk6vg8mDP/qJ7BUbj+oDphXQl2TnJc= Subject key identifier: 3F:48:00:4B:0A:56:B7:2E:38:AC:53:EE:26:E4:C2:7A:54:07:F8:50 Authority key identifier: D8:8E:00:6D:21:97:30:C5:2D:DD:CB:D6:EB:05:C0:9A:2F:81:5C:03 Certificate issuer: /CN=D88E006D219730C52DDDCBD6EB05C09A2F815C03 Certificate serial: 068EFC73DB1E4CBDD0B3355ADCABD30728E7631E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 02:28:42 +0000 Manifest this update: Thu 24 Sep 2026 02:23:42 +0000 Manifest next update: Fri 25 Sep 2026 03:21:42 +0000 Files and hashes: 1: D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl (hash: zvd84CrB5lYVXeE9UXtARrajrEtnzNqelOt1TDevmNg=) 2: 3136302e32322e3139322e302f32342d3234203d3e20313532383330.roa (hash: xFfth544qMvDawFqjY1oWbMZQMZwR8ATU9ANAJM8pNM=) 3: 3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa (hash: mldeFV7Jf6QOev5E++VL/jRK/PuO8nW0ShYwDv/SkQ8=) 4: 3136302e32322e3139332e302f32342d3234203d3e20313532383330.roa (hash: IaAf1+vjln5sceJpZ1s3ScYLsPQRM51r/bqMTajLuUs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:8e:fc:73:db:1e:4c:bd:d0:b3:35:5a:dc:ab:d3:07:28:e7:63:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D88E006D219730C52DDDCBD6EB05C09A2F815C03 Validity Not Before: Sep 24 02:23:42 2026 GMT Not After : Sep 25 03:21:42 2026 GMT Subject: CN=3F48004B0A56B72E38AC53EE26E4C27A5407F850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ec:0a:61:69:b6:78:8f:82:95:ba:d1:7a:18: d2:64:75:04:3a:eb:a2:e4:e2:22:6e:95:01:2c:70: 95:c0:0d:dc:29:b4:8d:7b:28:b3:56:68:5b:a1:c9: 25:97:c9:16:de:be:91:29:d8:12:8e:58:a0:f1:e0: 67:6b:8b:c0:46:cc:42:df:18:7c:f2:bd:39:ed:7d: b0:76:71:8a:be:33:fb:e8:d9:b3:72:e1:e5:81:4f: 68:9c:29:7f:5b:02:1f:ad:09:b2:4f:eb:a6:85:11: 8b:65:00:52:c0:7d:6c:2c:98:03:ab:bb:05:1e:86: d0:4b:ef:56:2d:40:34:59:95:0e:00:27:f6:f7:72: b3:ba:54:c3:d1:94:8d:95:9b:15:4f:44:87:3c:ff: 3a:08:ce:63:ed:9b:0d:b2:43:0b:92:72:23:2c:2c: a7:e0:8e:1d:c1:a6:05:5e:59:4b:dd:05:de:73:23: 7b:d1:45:0e:cb:34:94:56:b0:67:ae:1d:25:6e:23: a9:c0:bb:23:cd:28:3d:03:80:30:43:de:34:da:74: 4b:a2:57:d6:38:ba:5f:e9:a5:47:e8:92:13:1e:34: fb:e0:c8:43:c1:f4:bc:20:bb:84:81:74:39:3b:3e: 52:01:0a:de:10:0b:e1:be:00:3b:96:4b:44:33:9e: bf:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:48:00:4B:0A:56:B7:2E:38:AC:53:EE:26:E4:C2:7A:54:07:F8:50 X509v3 Authority Key Identifier: keyid:D8:8E:00:6D:21:97:30:C5:2D:DD:CB:D6:EB:05:C0:9A:2F:81:5C:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:2e:fd:4f:dd:5f:69:ee:60:45:b5:9b:8c:38:dd:c7:cb:94: 26:82:3b:91:ff:f6:38:bb:66:e5:fc:d1:96:20:d2:24:aa:0f: e8:40:5a:1e:0a:da:5c:7a:ec:43:09:8a:19:5b:92:62:70:ad: 8f:e2:53:0b:c2:51:62:05:c5:5f:c2:19:dc:cb:dc:6d:0c:45: 36:70:8a:22:b6:cc:0e:9b:08:40:28:a0:d2:02:74:4c:dc:53: 75:e1:40:71:f0:02:df:9e:cc:99:61:51:cf:c0:c3:58:0d:bb: 8d:dd:1b:98:06:ea:93:ab:13:0b:e2:08:28:c6:b9:18:4a:6d: f3:cf:ea:2a:d9:b2:fc:82:22:9e:ae:b6:3f:bf:f2:c2:83:d4: 77:71:2c:fb:bd:cb:d9:60:3e:da:6f:ab:63:b4:bf:c1:00:5d: ab:f2:de:67:a8:72:df:ce:d3:c5:92:77:a6:81:d5:91:b4:c1: 8e:6b:6c:9c:5a:b1:40:c3:b9:27:86:45:2a:22:f3:77:34:d4: 84:5a:ed:7e:23:c7:92:6f:fa:c0:f0:6f:96:01:98:0f:99:a3: 93:98:7a:fd:c7:49:da:0f:ca:92:58:74:a6:97:e0:5e:14:fb: 7a:cb:d0:6d:5a:91:4c:16:d6:ba:0a:de:23:23:28:f8:1f:d1: db:26:02:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBo78c9seTL3QszVa3KvTByjnYx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg4RTAwNkQyMTk3MzBDNTJERERDQkQ2RUIwNUMwOUEy RjgxNUMwMzAeFw0yNjA5MjQwMjIzNDJaFw0yNjA5MjUwMzIxNDJaMDMxMTAvBgNV BAMTKDNGNDgwMDRCMEE1NkI3MkUzOEFDNTNFRTI2RTRDMjdBNTQwN0Y4NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS7AphabZ4j4KVutF6GNJkdQQ6 66Lk4iJulQEscJXADdwptI17KLNWaFuhySWXyRbevpEp2BKOWKDx4Gdri8BGzELf GHzyvTntfbB2cYq+M/vo2bNy4eWBT2icKX9bAh+tCbJP66aFEYtlAFLAfWwsmAOr uwUehtBL71YtQDRZlQ4AJ/b3crO6VMPRlI2VmxVPRIc8/zoIzmPtmw2yQwuSciMs LKfgjh3BpgVeWUvdBd5zI3vRRQ7LNJRWsGeuHSVuI6nAuyPNKD0DgDBD3jTadEui V9Y4ul/ppUfokhMeNPvgyEPB9Lwgu4SBdDk7PlIBCt4QC+G+ADuWS0Qznr+VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP0gASwpWty44rFPuJuTCelQH+FAwHwYDVR0j BBgwFoAU2I4AbSGXMMUt3cvW6wXAmi+BXAMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2EwMjEwYjMtY2NhMi00M2M1LTg5ZjktNWE5MDg2YTYwNzAzLzAvRDg4RTAwNkQy MTk3MzBDNTJERERDQkQ2RUIwNUMwOUEyRjgxNUMwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EODhFMDA2RDIxOTczMEM1MkRERENCRDZFQjA1QzA5QTJGODE1 QzAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzAvRDg4RTAwNkQyMTk3MzBDNTJERERDQkQ2RUIwNUMw OUEyRjgxNUMwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4u/U/dX2nuYEW1m4w43cfLlCaCO5H/9ji7 ZuX80ZYg0iSqD+hAWh4K2lx67EMJihlbkmJwrY/iUwvCUWIFxV/CGdzL3G0MRTZw iiK2zA6bCEAooNICdEzcU3XhQHHwAt+ezJlhUc/Aw1gNu43dG5gG6pOrEwviCCjG uRhKbfPP6irZsvyCIp6utj+/8sKD1HdxLPu9y9lgPtpvq2O0v8EAXavy3meoct/O 08WSd6aB1ZG0wY5rbJxasUDDuSeGRSoi83c01IRa7X4jx5Jv+sDwb5YBmA+Zo5OY ev3HSdoPypJYdKaX4F4U+3rL0G1akUwW1roK3iMjKPgf0dsmAuU= -----END CERTIFICATE-----Generated at Thu Sep 24 18:40:32 2026 by rpki-client