$ rpki-client -vvvf rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft File: 04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft (raw, json) Hash identifier: 7XWuf22xVoXGiNeUyuRnkBoOJtK3e70m10yBvjJ4Isk= Subject key identifier: F7:85:61:9E:21:E9:2F:A5:E4:6A:DD:4E:5C:D4:09:F4:44:F0:14:71 Authority key identifier: 04:DB:B5:85:11:EB:56:6D:9B:E1:98:B7:EC:E1:71:D2:AE:3F:0D:36 Certificate issuer: /CN=04DBB58511EB566D9BE198B7ECE171D2AE3F0D36 Certificate serial: 40AAE4E5F37AFEACEDD258995A90FBC39ED7058B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 01:33:07 +0000 Manifest this update: Wed 23 Sep 2026 01:28:07 +0000 Manifest next update: Thu 24 Sep 2026 03:51:07 +0000 Files and hashes: 1: 3138322e35342e3134302e302f32322d3234203d3e203535363835.roa (hash: jiJN5uTtVqTyi/LsSOB3CZxJlHQ5mjW5GcesMlLX4EE=) 2: 3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa (hash: ngWzWlF3BDUAfLENIH4eXpEMJ09d6MMBm0aRXwTS2DE=) 3: 04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.crl (hash: jkbf8BClkBc5D6gHF9pl+MuzX6BQvEC1OLXo0LbAfBM=) 4: 3130332e38302e38382e302f32322d3234203d3e203535363835.roa (hash: bImD2ZtrKw/qYZlZEa6DVDo0ea7PH2tJcz0npEPPdds=) 5: 3130332e38302e39312e302f32342d3234203d3e20313337333033.roa (hash: 8fVyhPJOnEawBWwgARzQly7FMcHwy/+Ghg0XkCT2OOs=) 6: 3130332e36302e3138302e302f32322d3234203d3e203535363835.roa (hash: Sxgjfc3rJMR/6kggcztr6diqTcIFdNjFMaFwfjqQRVc=) 7: 3130332e38302e39302e302f32342d3234203d3e20313337333033.roa (hash: vatB6xTCpKTsE4tbG+JDKUhfyJC22x4PAXCG04Pc2lA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.crl rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 03:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:aa:e4:e5:f3:7a:fe:ac:ed:d2:58:99:5a:90:fb:c3:9e:d7:05:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04DBB58511EB566D9BE198B7ECE171D2AE3F0D36 Validity Not Before: Sep 23 01:28:07 2026 GMT Not After : Sep 24 03:51:07 2026 GMT Subject: CN=F785619E21E92FA5E46ADD4E5CD409F444F01471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8d:32:d9:af:20:9e:a2:40:19:15:4b:8c:60: 0c:2c:5a:0f:60:2e:48:8c:e4:a2:e7:ed:25:ae:d8: a6:66:12:81:60:9a:ac:6d:1c:34:c1:d3:5a:9f:ed: c3:c0:a5:f4:06:71:77:a6:b1:8c:1f:39:3b:cc:08: f6:e7:b9:50:4f:45:ea:b5:bf:a0:02:01:f0:bb:62: 13:73:9f:e3:17:01:56:48:78:46:02:68:dd:22:9d: a8:79:15:99:e4:8c:64:48:f6:24:70:6e:dc:7e:1c: 2f:56:5b:a2:94:47:4f:ae:fc:07:57:78:f4:27:61: 09:8c:79:9b:ab:f9:73:38:e8:8e:a6:c8:33:e2:66: 12:1a:60:8f:06:24:0a:b4:93:c1:e3:65:45:c7:6f: 96:0d:68:79:e6:c7:8e:e9:4a:a8:f8:47:9c:f1:d2: 2e:b1:50:4a:6f:e5:3e:fe:e1:dd:e4:76:4f:dd:f2: 78:bb:49:49:86:cd:64:a7:8d:16:99:c7:b9:8d:1b: 22:e6:3f:2a:b6:87:41:77:50:d5:98:b0:bf:b4:dc: ba:6d:f2:60:8a:85:5d:91:68:e0:e7:f6:1c:94:7f: f8:8c:b9:0a:af:b7:61:a5:a4:54:b5:4b:fa:ee:0c: a0:46:d5:ee:f0:77:1f:f9:52:3a:6f:d8:2c:a8:f6: ef:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:85:61:9E:21:E9:2F:A5:E4:6A:DD:4E:5C:D4:09:F4:44:F0:14:71 X509v3 Authority Key Identifier: keyid:04:DB:B5:85:11:EB:56:6D:9B:E1:98:B7:EC:E1:71:D2:AE:3F:0D:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:35:c9:1b:7d:54:10:5e:9d:f2:d3:d7:27:d7:3c:e7:26:0f: 2b:79:d9:f0:b3:e0:ec:75:e2:f4:7e:9e:a3:ec:3b:12:10:63: 87:60:ae:23:29:4f:c8:9d:e4:26:8b:79:a5:62:61:83:a5:b7: 43:25:52:f7:a6:f9:1e:b0:01:be:2e:b2:ee:8e:15:bf:fe:d0: 3b:00:88:f2:25:31:35:9e:9d:8b:7c:cb:e0:ac:34:2c:b3:aa: ab:53:ec:be:8a:31:9b:f4:91:50:e7:e0:26:78:06:32:d6:96: 0d:8c:0d:24:f5:e9:04:e3:e6:ee:21:b5:af:2e:15:4f:e1:ca: 94:de:e5:3d:4f:a1:29:0b:33:56:3c:5e:f0:d0:23:2b:e5:6e: 8d:f3:d2:86:91:e2:f2:ae:59:1c:0a:46:73:a1:8c:22:51:a0: 7f:2a:31:68:fb:71:d0:21:5a:90:d8:2e:5d:2a:8d:b1:44:32: 6b:82:07:8f:28:0c:46:cb:34:90:87:d2:5b:03:ad:1a:25:1b: 49:67:f7:0a:51:9e:da:0e:55:5c:75:cf:e3:93:9d:d2:d3:c9: b1:69:2b:62:3c:ca:08:7b:88:5f:53:30:db:1c:0e:1d:dd:9b: b1:b1:fc:ac:0b:07:22:4a:03:a0:f9:53:38:7f:80:04:70:71: 86:88:7a:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQKrk5fN6/qzt0liZWpD7w57XBYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDREQkI1ODUxMUVCNTY2RDlCRTE5OEI3RUNFMTcxRDJB RTNGMEQzNjAeFw0yNjA5MjMwMTI4MDdaFw0yNjA5MjQwMzUxMDdaMDMxMTAvBgNV BAMTKEY3ODU2MTlFMjFFOTJGQTVFNDZBREQ0RTVDRDQwOUY0NDRGMDE0NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxjTLZryCeokAZFUuMYAwsWg9g LkiM5KLn7SWu2KZmEoFgmqxtHDTB01qf7cPApfQGcXemsYwfOTvMCPbnuVBPReq1 v6ACAfC7YhNzn+MXAVZIeEYCaN0inah5FZnkjGRI9iRwbtx+HC9WW6KUR0+u/AdX ePQnYQmMeZur+XM46I6myDPiZhIaYI8GJAq0k8HjZUXHb5YNaHnmx47pSqj4R5zx 0i6xUEpv5T7+4d3kdk/d8ni7SUmGzWSnjRaZx7mNGyLmPyq2h0F3UNWYsL+03Lpt 8mCKhV2RaODn9hyUf/iMuQqvt2GlpFS1S/ruDKBG1e7wdx/5Ujpv2Cyo9u8BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU94VhniHpL6Xkat1OXNQJ9ETwFHEwHwYDVR0j BBgwFoAUBNu1hRHrVm2b4Zi37OFx0q4/DTYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODIwMzJiYzktNjA1YS00MjUzLWE0Y2QtNjJmMTI0MTI2ZWFjLzAvMDREQkI1ODUx MUVCNTY2RDlCRTE5OEI3RUNFMTcxRDJBRTNGMEQzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNERCQjU4NTExRUI1NjZEOUJFMTk4QjdFQ0UxNzFEMkFFM0Yw RDM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODIwMzJiYzktNjA1YS00MjUzLWE0 Y2QtNjJmMTI0MTI2ZWFjLzAvMDREQkI1ODUxMUVCNTY2RDlCRTE5OEI3RUNFMTcx RDJBRTNGMEQzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFk1yRt9VBBenfLT1yfXPOcmDyt52fCz4Ox1 4vR+nqPsOxIQY4dgriMpT8id5CaLeaViYYOlt0MlUvem+R6wAb4usu6OFb/+0DsA iPIlMTWenYt8y+CsNCyzqqtT7L6KMZv0kVDn4CZ4BjLWlg2MDST16QTj5u4hta8u FU/hypTe5T1PoSkLM1Y8XvDQIyvlbo3z0oaR4vKuWRwKRnOhjCJRoH8qMWj7cdAh WpDYLl0qjbFEMmuCB48oDEbLNJCH0lsDrRolG0ln9wpRntoOVVx1z+OTndLTybFp K2I8ygh7iF9TMNscDh3dm7Gx/KwLByJKA6D5Uzh/gARwcYaIeuw= -----END CERTIFICATE-----Generated at Wed Sep 23 20:16:50 2026 by rpki-client