$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft File: DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft (raw, json) Hash identifier: o0IVzlAT2AB1iURQ3m3rJ06BbN4bvBNHhm6vDWwwnx4= Subject key identifier: 95:6C:A0:05:12:86:18:98:30:D8:58:0F:0C:B9:1F:2B:9B:B6:CE:55 Authority key identifier: DB:9A:40:F2:EA:DC:88:1D:0D:A3:EE:A0:05:7E:81:00:29:94:C3:FC Certificate issuer: /CN=DB9A40F2EADC881D0DA3EEA0057E81002994C3FC Certificate serial: 2CB95934107DB59E6F57124028108A6E35312075 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 20:56:59 +0000 Manifest this update: Wed 23 Sep 2026 20:51:59 +0000 Manifest next update: Thu 24 Sep 2026 22:57:59 +0000 Files and hashes: 1: DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.crl (hash: dCe2CqSMDHwXjpsXrfXxiLaFk+YxxU5f7KQ17rAivoI=) 2: 323030313a6466333a643934303a3a2f34382d3438203d3e20313532373732.roa (hash: gnONcz3sXVxJxBOxBVij9AaOro25JvPxAm2egbKmGvk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.crl rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:57:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:b9:59:34:10:7d:b5:9e:6f:57:12:40:28:10:8a:6e:35:31:20:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB9A40F2EADC881D0DA3EEA0057E81002994C3FC Validity Not Before: Sep 23 20:51:59 2026 GMT Not After : Sep 24 22:57:59 2026 GMT Subject: CN=956CA0051286189830D8580F0CB91F2B9BB6CE55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:95:12:d0:0d:28:02:f6:78:25:ae:55:97:d6: f9:35:87:53:76:3f:87:aa:50:0a:85:3e:e0:31:e7: ca:ba:5b:6d:6d:e7:27:8d:39:86:ab:aa:f2:ea:9d: 41:73:fc:09:99:db:dd:f7:e0:6c:e9:68:ad:57:a5: a4:cd:3c:a6:91:29:6e:08:82:05:e5:4f:11:62:29: b6:13:47:07:e6:3a:cb:f4:a7:a0:54:f3:ea:3f:ea: 94:76:43:72:da:23:d6:a5:94:c3:bc:81:34:c3:6c: ee:38:15:33:82:32:36:5b:ce:55:b4:10:d6:eb:95: 60:1e:84:5f:6b:b7:87:da:b1:50:d7:0a:68:21:e2: 4a:30:31:f7:aa:a3:fa:3e:22:f9:af:8d:c1:81:1e: 49:05:cb:3b:cf:a9:18:58:d0:cc:a5:e0:64:3e:f5: 8d:db:65:5e:8b:5f:42:d4:01:d7:db:32:62:9b:8d: 56:d1:4f:89:3a:a1:3e:dd:ab:14:f6:07:2c:70:e1: 6b:ec:da:a8:0f:fe:dc:89:d4:d7:3a:8a:ea:96:23: c1:22:93:5a:3b:8c:82:ef:24:67:1b:ca:2f:a3:79: c6:8f:52:fd:4b:ad:03:69:ba:51:aa:13:f2:de:9b: b4:b9:08:db:91:3e:ab:e7:47:0d:16:e0:a8:3b:0a: 1e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:6C:A0:05:12:86:18:98:30:D8:58:0F:0C:B9:1F:2B:9B:B6:CE:55 X509v3 Authority Key Identifier: keyid:DB:9A:40:F2:EA:DC:88:1D:0D:A3:EE:A0:05:7E:81:00:29:94:C3:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:3c:eb:27:c7:18:b1:f3:18:32:6d:27:13:e7:67:03:32:a7: 5e:ec:f7:3b:88:22:1f:57:dd:78:9c:f4:82:af:f3:c8:13:2d: 24:dd:e6:89:9b:63:4c:7a:78:b6:0f:38:26:ff:ff:a3:e4:16: 8e:bc:a2:2c:4b:ab:e8:0b:e0:1f:b5:99:28:03:d7:26:f0:0b: 08:fe:c6:b8:7d:da:5d:e7:58:1a:db:c9:07:dd:20:d7:98:79: d6:68:f9:a3:3d:ad:fd:4a:12:47:cb:e2:67:28:b3:74:fc:4d: 94:26:58:9b:12:4f:63:39:69:5c:b1:97:c4:5e:da:33:14:5e: 70:43:cd:20:55:6b:a1:45:67:d9:0f:5c:39:0a:7e:ed:ab:41: c8:93:69:e2:03:58:54:e8:ab:f6:a6:0f:3b:20:fe:b1:36:64: 9a:a6:2d:8e:9b:15:31:5e:0d:85:9e:5e:fa:63:87:fa:77:7e: 0e:63:f2:e2:e3:e7:d3:05:42:d0:eb:85:da:0f:8f:46:6e:3d: ec:fa:3a:70:0a:4f:2f:22:8b:61:59:76:14:2c:8b:66:b8:de: cc:38:a2:78:dd:0d:80:fe:80:d8:65:18:2d:16:1a:a5:97:f4: c6:64:bf:ca:8b:35:77:7f:aa:a1:54:14:fd:3c:d8:4b:bc:e2: 89:b2:54:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULLlZNBB9tZ5vVxJAKBCKbjUxIHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI5QTQwRjJFQURDODgxRDBEQTNFRUEwMDU3RTgxMDAy OTk0QzNGQzAeFw0yNjA5MjMyMDUxNTlaFw0yNjA5MjQyMjU3NTlaMDMxMTAvBgNV BAMTKDk1NkNBMDA1MTI4NjE4OTgzMEQ4NTgwRjBDQjkxRjJCOUJCNkNFNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrlRLQDSgC9nglrlWX1vk1h1N2 P4eqUAqFPuAx58q6W21t5yeNOYarqvLqnUFz/AmZ29334GzpaK1XpaTNPKaRKW4I ggXlTxFiKbYTRwfmOsv0p6BU8+o/6pR2Q3LaI9allMO8gTTDbO44FTOCMjZbzlW0 ENbrlWAehF9rt4fasVDXCmgh4kowMfeqo/o+IvmvjcGBHkkFyzvPqRhY0Myl4GQ+ 9Y3bZV6LX0LUAdfbMmKbjVbRT4k6oT7dqxT2Byxw4Wvs2qgP/tyJ1Nc6iuqWI8Ei k1o7jILvJGcbyi+jecaPUv1LrQNpulGqE/Lem7S5CNuRPqvnRw0W4Kg7Ch5XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlWygBRKGGJgw2FgPDLkfK5u2zlUwHwYDVR0j BBgwFoAU25pA8urciB0No+6gBX6BACmUw/wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2NmMDFlYzYtOGU4OS00MDJhLTkwYzctNTBjNmYxNGNkMjQyLzEvREI5QTQwRjJF QURDODgxRDBEQTNFRUEwMDU3RTgxMDAyOTk0QzNGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQjlBNDBGMkVBREM4ODFEMERBM0VFQTAwNTdFODEwMDI5OTRD M0ZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzEvREI5QTQwRjJFQURDODgxRDBEQTNFRUEwMDU3RTgx MDAyOTk0QzNGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAA86yfHGLHzGDJtJxPnZwMyp17s9zuIIh9X 3Xic9IKv88gTLSTd5ombY0x6eLYPOCb//6PkFo68oixLq+gL4B+1mSgD1ybwCwj+ xrh92l3nWBrbyQfdINeYedZo+aM9rf1KEkfL4mcos3T8TZQmWJsST2M5aVyxl8Re 2jMUXnBDzSBVa6FFZ9kPXDkKfu2rQciTaeIDWFToq/amDzsg/rE2ZJqmLY6bFTFe DYWeXvpjh/p3fg5j8uLj59MFQtDrhdoPj0ZuPez6OnAKTy8ii2FZdhQsi2a43sw4 onjdDYD+gNhlGC0WGqWX9MZkv8qLNXd/qqFUFP082Eu84omyVGU= -----END CERTIFICATE-----Generated at Thu Sep 24 10:04:17 2026 by rpki-client