$ rpki-client -vvvf rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft File: D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft (raw, json) Hash identifier: YDoD0tNkr4DFG0xBgSqvFxVuB4ijTVWUeH+g2Bz+ggU= Subject key identifier: B6:F6:22:11:59:E2:3D:7D:63:93:28:5A:FF:72:3E:79:F2:71:40:4A Authority key identifier: D0:C8:B4:3A:E8:5F:0F:09:D4:98:73:29:23:2B:EC:E8:BC:C7:4B:8E Certificate issuer: /CN=D0C8B43AE85F0F09D4987329232BECE8BCC74B8E Certificate serial: 631AF4EFEBAC1A23650B0B48C06D3049C6A8BD53 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 10:08:14 +0000 Manifest this update: Thu 24 Sep 2026 10:03:14 +0000 Manifest next update: Fri 25 Sep 2026 11:22:14 +0000 Files and hashes: 1: 3130332e3135372e362e302f32342d3234203d3e20313431313036.roa (hash: yr/oT9BlQ/M4JMNvCd0w0W7t+J3wxH6iIKEMfOlwP+M=) 2: D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.crl (hash: /cS5Q0rh3P9SVzYOfKIulC+aOmaHlLEWOM8RPI7Pqgg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.crl rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:1a:f4:ef:eb:ac:1a:23:65:0b:0b:48:c0:6d:30:49:c6:a8:bd:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C8B43AE85F0F09D4987329232BECE8BCC74B8E Validity Not Before: Sep 24 10:03:14 2026 GMT Not After : Sep 25 11:22:14 2026 GMT Subject: CN=B6F6221159E23D7D6393285AFF723E79F271404A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:06:35:d1:7e:19:0b:d9:9f:98:09:63:5a:35: 08:44:21:c0:7a:cd:4f:16:33:f7:03:a8:2e:6a:bd: 49:bf:f5:f3:d3:60:a6:f7:d7:9c:a8:89:96:e9:f9: 01:6d:71:52:21:4e:55:b8:5b:46:52:a5:4b:0f:f7: 09:2f:df:e8:cd:f1:cc:af:cb:d6:fb:1a:7d:06:b2: 84:96:b0:a0:0c:ad:e8:2f:fc:57:78:b6:c7:bb:a5: b2:b9:92:bc:7c:5a:53:06:4a:01:d5:0b:f7:e1:e6: d9:ee:64:d4:35:9c:37:4c:ae:6f:f7:d9:a2:d8:f5: 6b:52:1f:a2:8c:57:ab:5a:e9:ef:78:18:cb:d2:b1: da:b4:a3:a1:46:89:db:c6:38:ee:65:f6:fc:c5:18: 75:0d:83:8e:04:29:92:0e:f6:45:81:12:1b:72:14: de:48:0c:df:d6:b1:d4:4d:8a:f7:ab:78:e1:df:81: 18:f8:95:69:b5:e5:20:94:9e:48:fe:69:f3:44:31: 39:18:75:b2:c6:7e:70:ea:9c:26:b0:51:c9:31:24: cd:ef:54:f0:26:83:41:2b:26:2e:aa:bf:1a:bd:78: 47:b0:42:40:9e:16:b2:8b:dc:2d:c1:15:ab:ae:74: 5a:2a:f5:54:8b:30:6d:8d:4a:4c:a8:2a:26:70:2a: fa:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F6:22:11:59:E2:3D:7D:63:93:28:5A:FF:72:3E:79:F2:71:40:4A X509v3 Authority Key Identifier: keyid:D0:C8:B4:3A:E8:5F:0F:09:D4:98:73:29:23:2B:EC:E8:BC:C7:4B:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:71:c5:d0:96:5d:c5:75:a4:a3:3f:8b:0d:4a:58:8f:47:a7: f7:bc:e3:05:9f:67:36:ae:36:f8:15:75:3f:a5:44:87:26:31: be:0e:a8:55:dc:2f:4c:46:83:2e:4d:9d:cf:99:69:44:e8:62: 53:82:52:a4:27:9e:bf:06:a2:dc:84:e6:2d:94:43:3b:99:9a: d5:eb:5c:88:08:a2:11:48:f1:7d:ad:a9:79:6e:7b:ed:6f:89: 27:66:20:c4:a8:fe:99:2e:e1:f1:17:f9:bd:69:bc:55:0a:e0: 39:f9:08:90:b6:c1:6d:b0:c1:e0:35:63:a8:ea:c9:d5:cc:cf: 5a:fc:50:09:b4:6f:56:72:06:9c:5d:30:94:93:4a:3f:28:e1: 02:67:89:0c:a0:4e:67:84:ca:2a:96:f1:d5:ce:93:e5:c3:4d: 6e:05:96:07:54:92:08:5b:8d:6d:ff:41:9b:51:fb:39:29:11: 0f:0c:7f:d3:31:0d:44:9b:0a:00:75:a5:bc:11:6a:a3:6d:5c: aa:30:c7:4a:64:d1:1a:d8:31:5f:d0:86:ae:5e:34:60:e9:d8: fe:df:18:4a:35:4c:4c:39:66:50:eb:f0:bc:bc:1e:2d:cc:e8: 60:11:e7:69:ce:74:c8:41:38:9a:51:7c:fa:eb:c4:a2:f5:a4: 5c:32:8b:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYxr07+usGiNlCwtIwG0wScaovVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOEI0M0FFODVGMEYwOUQ0OTg3MzI5MjMyQkVDRThC Q0M3NEI4RTAeFw0yNjA5MjQxMDAzMTRaFw0yNjA5MjUxMTIyMTRaMDMxMTAvBgNV BAMTKEI2RjYyMjExNTlFMjNEN0Q2MzkzMjg1QUZGNzIzRTc5RjI3MTQwNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPBjXRfhkL2Z+YCWNaNQhEIcB6 zU8WM/cDqC5qvUm/9fPTYKb315yoiZbp+QFtcVIhTlW4W0ZSpUsP9wkv3+jN8cyv y9b7Gn0GsoSWsKAMregv/Fd4tse7pbK5krx8WlMGSgHVC/fh5tnuZNQ1nDdMrm/3 2aLY9WtSH6KMV6ta6e94GMvSsdq0o6FGidvGOO5l9vzFGHUNg44EKZIO9kWBEhty FN5IDN/WsdRNivereOHfgRj4lWm15SCUnkj+afNEMTkYdbLGfnDqnCawUckxJM3v VPAmg0ErJi6qvxq9eEewQkCeFrKL3C3BFauudFoq9VSLMG2NSkyoKiZwKvodAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtvYiEVniPX1jkyha/3I+efJxQEowHwYDVR0j BBgwFoAU0Mi0OuhfDwnUmHMpIyvs6LzHS44wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVkZDRmMTYtNTcwZS00YzhjLWE5OTItZGI4OWVhM2JhZDM2LzAvRDBDOEI0M0FF ODVGMEYwOUQ0OTg3MzI5MjMyQkVDRThCQ0M3NEI4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMEM4QjQzQUU4NUYwRjA5RDQ5ODczMjkyMzJCRUNFOEJDQzc0 QjhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVkZDRmMTYtNTcwZS00YzhjLWE5 OTItZGI4OWVhM2JhZDM2LzAvRDBDOEI0M0FFODVGMEYwOUQ0OTg3MzI5MjMyQkVD RThCQ0M3NEI4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBxxdCWXcV1pKM/iw1KWI9Hp/e84wWfZzau NvgVdT+lRIcmMb4OqFXcL0xGgy5Nnc+ZaUToYlOCUqQnnr8GotyE5i2UQzuZmtXr XIgIohFI8X2tqXlue+1viSdmIMSo/pku4fEX+b1pvFUK4Dn5CJC2wW2wweA1Y6jq ydXMz1r8UAm0b1ZyBpxdMJSTSj8o4QJniQygTmeEyiqW8dXOk+XDTW4FlgdUkghb jW3/QZtR+zkpEQ8Mf9MxDUSbCgB1pbwRaqNtXKowx0pk0RrYMV/Qhq5eNGDp2P7f GEo1TEw5ZlDr8Ly8Hi3M6GAR52nOdMhBOJpRfPrrxKL1pFwyiyI= -----END CERTIFICATE-----Generated at Thu Sep 24 21:18:29 2026 by rpki-client