$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft File: D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft (raw, json) Hash identifier: jG6gXeaXdfIR74BOgBxrjOfIT2PDue9542M1OavHZ/w= Subject key identifier: 3B:3C:B9:D8:00:05:2A:25:20:19:D0:A5:7C:87:26:A3:EC:89:9E:C4 Authority key identifier: D8:B1:AA:A4:D2:2A:2E:22:59:E5:5E:7A:50:CB:15:FF:4D:D1:F5:24 Certificate issuer: /CN=D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524 Certificate serial: 45D455B4A8C5869C3A1DA544E42D45CD1EA447C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft Manifest number: C9 Signing time: Tue 29 Sep 2026 19:23:51 +0000 Manifest this update: Tue 29 Sep 2026 19:18:51 +0000 Manifest next update: Wed 30 Sep 2026 23:22:51 +0000 Files and hashes: 1: D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.crl (hash: JQDmuPLZHBQtcoRZjbyjFDukGAGDYuNJcAiwwNtc+5A=) 2: 323030313a6466333a356238303a3a2f34382d3438203d3e20313430333839.roa (hash: GMEzbs3Ig2nQxKeMH+leqKXvdoQrLyt3lFNSHrwIV3w=) 3: 3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa (hash: B9uGziJoJ3vGf5NvgTMOSPQWAPSbs6/SbCQ1GHvUQS0=) 4: 3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa (hash: bR+rHQrh2BbDBIEXZD76jtCgM3z29GB3K8OSA3PHxZ8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.crl rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:d4:55:b4:a8:c5:86:9c:3a:1d:a5:44:e4:2d:45:cd:1e:a4:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524 Validity Not Before: Sep 29 19:18:51 2026 GMT Not After : Sep 30 23:22:51 2026 GMT Subject: CN=3B3CB9D800052A252019D0A57C8726A3EC899EC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e5:6d:35:e9:54:0b:01:88:18:8d:8c:90:1f: 67:30:b4:62:fa:11:05:fa:55:5f:b2:b0:7e:b5:b9: 11:a2:f6:05:41:74:09:da:98:53:66:c7:22:e9:90: d4:22:00:19:b8:ef:04:75:df:6f:2a:3b:22:22:40: 3b:16:ac:ab:e7:ad:d4:80:30:32:72:97:5c:1b:a1: cc:72:d2:55:39:58:c7:2b:4a:12:62:63:fc:4b:35: 06:5a:c8:18:f2:26:73:f7:cb:8f:36:31:a6:27:c5: 17:70:67:a8:41:ef:7f:45:17:2c:e7:6d:d6:e5:dc: f9:96:23:1f:95:b4:6e:62:11:2c:07:88:ac:9c:92: 5b:c7:65:c7:7a:97:26:34:68:ef:87:6c:7d:e3:e8: 98:bc:ae:ce:e2:bd:f9:40:40:80:ee:5e:3a:2b:8d: be:11:0b:f9:38:75:f7:5d:66:5f:df:b3:4e:a4:e9: 1f:47:b2:e0:c7:56:fb:9b:3a:54:fd:f1:35:6a:78: 15:58:c9:00:b1:33:c6:43:60:70:18:47:ef:40:16: 1e:01:52:53:c2:8f:66:95:bb:15:33:67:ab:04:72: 07:8b:2a:d3:6c:68:0c:9b:0d:6f:88:ca:56:d8:78: 04:b6:dc:31:65:24:d4:71:c4:e6:ad:21:33:7a:a5: a3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3C:B9:D8:00:05:2A:25:20:19:D0:A5:7C:87:26:A3:EC:89:9E:C4 X509v3 Authority Key Identifier: keyid:D8:B1:AA:A4:D2:2A:2E:22:59:E5:5E:7A:50:CB:15:FF:4D:D1:F5:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:76:1c:df:bf:56:b9:53:70:89:90:10:93:c3:db:54:7b:84: 6d:ef:24:8d:ee:7f:e7:99:1a:ad:cb:0f:80:ba:ee:3e:09:69: 99:be:a6:56:2a:6f:a0:c8:3b:ca:6d:24:24:a4:29:bf:fe:a9: be:0b:72:dd:f9:19:79:c1:7e:a4:3e:3f:f3:80:27:1e:7f:7f: 5b:c0:9b:0c:8f:6e:43:2c:08:1c:30:af:1d:9c:c3:54:09:79: b5:bf:f9:65:c1:09:30:aa:79:7f:e3:f2:ad:c5:94:cb:90:83: 68:fb:4f:99:bc:ba:b2:6f:d7:c8:04:40:6b:5b:5e:27:eb:5d: a2:1f:2e:b5:fd:d2:f9:d8:c8:8b:fb:ac:c6:70:cd:0f:68:72: 85:7d:c9:98:9d:7a:46:38:b1:f2:87:ba:73:0e:27:49:cd:0e: 2e:9b:7a:d1:17:e0:43:07:58:f2:05:cb:3b:6d:78:c2:22:be: 4d:cf:6b:57:70:de:82:a7:1b:85:09:1e:99:90:05:5e:6d:47: d5:c1:56:8b:f8:00:25:ac:d5:17:de:6c:79:9c:bb:a8:16:94: 4c:1a:27:ae:51:49:8c:e2:8a:96:33:07:ce:ce:33:78:b1:85: 6d:55:60:3c:75:28:2b:73:40:85:00:fa:18:32:2e:09:43:95: 4c:2d:86:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURdRVtKjFhpw6HaVE5C1FzR6kR8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhCMUFBQTREMjJBMkUyMjU5RTU1RTdBNTBDQjE1RkY0 REQxRjUyNDAeFw0yNjA5MjkxOTE4NTFaFw0yNjA5MzAyMzIyNTFaMDMxMTAvBgNV BAMTKDNCM0NCOUQ4MDAwNTJBMjUyMDE5RDBBNTdDODcyNkEzRUM4OTlFQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC05W016VQLAYgYjYyQH2cwtGL6 EQX6VV+ysH61uRGi9gVBdAnamFNmxyLpkNQiABm47wR1328qOyIiQDsWrKvnrdSA MDJyl1wbocxy0lU5WMcrShJiY/xLNQZayBjyJnP3y482MaYnxRdwZ6hB739FFyzn bdbl3PmWIx+VtG5iESwHiKycklvHZcd6lyY0aO+HbH3j6Ji8rs7ivflAQIDuXjor jb4RC/k4dfddZl/fs06k6R9HsuDHVvubOlT98TVqeBVYyQCxM8ZDYHAYR+9AFh4B UlPCj2aVuxUzZ6sEcgeLKtNsaAybDW+IylbYeAS23DFlJNRxxOatITN6paPVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOzy52AAFKiUgGdClfIcmo+yJnsQwHwYDVR0j BBgwFoAU2LGqpNIqLiJZ5V56UMsV/03R9SQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2IzZWFiYjQtNGRiMy00MzczLWEzNDgtZmIxZWQ3MDU1NjUxLzAvRDhCMUFBQTRE MjJBMkUyMjU5RTU1RTdBNTBDQjE1RkY0REQxRjUyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOEIxQUFBNEQyMkEyRTIyNTlFNTVFN0E1MENCMTVGRjRERDFG NTI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2IzZWFiYjQtNGRiMy00MzczLWEz NDgtZmIxZWQ3MDU1NjUxLzAvRDhCMUFBQTREMjJBMkUyMjU5RTU1RTdBNTBDQjE1 RkY0REQxRjUyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ92HN+/VrlTcImQEJPD21R7hG3vJI3uf+eZ Gq3LD4C67j4JaZm+plYqb6DIO8ptJCSkKb/+qb4Lct35GXnBfqQ+P/OAJx5/f1vA mwyPbkMsCBwwrx2cw1QJebW/+WXBCTCqeX/j8q3FlMuQg2j7T5m8urJv18gEQGtb XifrXaIfLrX90vnYyIv7rMZwzQ9ocoV9yZidekY4sfKHunMOJ0nNDi6betEX4EMH WPIFyztteMIivk3Pa1dw3oKnG4UJHpmQBV5tR9XBVov4ACWs1RfebHmcu6gWlEwa J65RSYziipYzB87OM3ixhW1VYDx1KCtzQIUA+hgyLglDlUwthhw= -----END CERTIFICATE-----Generated at Tue Sep 29 23:53:16 2026 by rpki-client