$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft File: D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft (raw, json) Hash identifier: G82dAbBx+aFzLhUH8w9+VYRkwiFlAQ39kiK1iWbCvKU= Subject key identifier: 3F:46:91:FB:72:C7:DB:FF:05:A3:43:25:FE:88:C6:17:8F:71:03:69 Authority key identifier: D2:82:55:06:79:8E:48:EE:4F:6B:D0:B7:C8:A4:B9:80:BD:F3:FD:89 Certificate issuer: /CN=D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89 Certificate serial: 193BE9BD44AF6D76B49EF31DA70E5C82CF55B4D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 11:40:33 +0000 Manifest this update: Wed 23 Sep 2026 11:35:33 +0000 Manifest next update: Thu 24 Sep 2026 15:36:33 +0000 Files and hashes: 1: 3130332e3137382e31362e302f32342d3234203d3e2039333431.roa (hash: dz8GDvSUHBxefCxM449tm0eNclhVLJnu4XpLW3XQ1J8=) 2: 3130332e3137382e31372e302f32342d3234203d3e2039333431.roa (hash: Jbbv7LheQBY4j7uxSO+OAvKD/NoLJjSel5LCZW8mlwI=) 3: 3130332e3137382e31362e302f32332d3233203d3e2039333431.roa (hash: L6oL2whYFSSKY1+OlvsQBxpegvioTL+JL/PrizaKM4w=) 4: D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl (hash: V8wKe5Yrm2gwdx8y+Nt8r87mmZX3OexSTx9tDlrwuv4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 15:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:3b:e9:bd:44:af:6d:76:b4:9e:f3:1d:a7:0e:5c:82:cf:55:b4:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89 Validity Not Before: Sep 23 11:35:33 2026 GMT Not After : Sep 24 15:36:33 2026 GMT Subject: CN=3F4691FB72C7DBFF05A34325FE88C6178F710369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a2:f1:3b:94:16:20:32:c8:68:03:23:3b:26: 38:89:3f:96:3a:41:5a:69:6e:b2:6f:a0:d1:8e:b5: cd:ae:92:0a:b2:f9:10:f6:a0:2e:75:2c:2e:54:af: c6:ee:41:b0:a3:a4:26:a3:c3:87:bc:92:45:b3:ef: aa:5c:7b:5f:34:59:b1:ce:38:fd:60:ce:c7:99:95: bf:d5:dd:b5:5b:96:ef:bd:dc:c5:4c:ac:60:a1:a3: a0:dd:69:e8:4b:84:d3:86:e8:22:87:ee:77:df:2b: 70:d3:14:fb:51:e7:87:f4:f9:42:c5:b1:81:13:3b: e2:4f:e0:ba:a6:bd:bb:bb:1a:6f:16:ec:5f:98:89: 8d:fc:47:a3:ea:8a:be:ec:3b:ef:ad:72:e6:35:ea: a8:0c:76:d1:10:c9:c5:bb:f8:6b:c7:46:3e:fe:c0: 61:b4:09:fb:04:3d:46:b5:bc:22:19:16:d9:39:ff: f0:7e:fc:93:26:2a:83:07:95:4c:bd:e6:9f:21:91: c6:21:1c:35:1b:0c:ae:9b:58:3e:49:b3:65:39:f1: b6:91:56:e7:86:0a:ed:90:ff:67:67:1e:fc:84:18: 4a:0a:51:51:dd:24:bd:cd:00:73:74:ec:0a:14:d9: 8b:18:2f:0a:8c:e4:f1:67:e8:ae:78:05:51:94:6a: 06:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:46:91:FB:72:C7:DB:FF:05:A3:43:25:FE:88:C6:17:8F:71:03:69 X509v3 Authority Key Identifier: keyid:D2:82:55:06:79:8E:48:EE:4F:6B:D0:B7:C8:A4:B9:80:BD:F3:FD:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:d9:86:2e:a9:12:21:68:14:07:d7:e5:f8:8c:9c:85:90:b7: d4:82:ee:d0:15:22:43:c6:c3:26:9a:ab:f9:a9:5d:3c:2f:21: 7e:31:86:c4:52:fd:e3:fb:0e:65:f1:72:20:e4:be:92:92:dd: 54:17:79:80:d9:08:44:6b:4f:6c:0a:e8:51:a4:dd:c9:48:3d: c3:d9:08:7d:91:f5:07:16:5b:d8:e4:c1:9b:4b:54:55:1d:2a: 73:c4:b6:64:7c:d3:6b:ca:e1:2c:99:ba:bd:70:91:1d:b2:01: 4a:21:4a:4e:29:f6:cd:c0:90:37:c0:81:95:8d:5a:43:75:50: 94:29:43:02:1e:b3:d2:04:23:05:27:fd:f9:4f:f4:ce:eb:56: 50:a9:8d:37:50:1b:e2:74:d4:ed:1b:ea:ec:71:bf:10:27:70: c8:03:6f:23:9b:1a:d3:6b:6c:8c:1d:da:20:ed:a1:4f:15:81: 3a:97:fe:26:be:83:7a:84:41:73:e4:9f:e8:d6:33:4a:c0:21: a7:ec:b8:a5:c2:17:0e:ce:27:5d:2c:f7:8d:d8:24:e6:dc:12: 52:b7:c1:7d:d5:56:78:51:c7:72:79:ec:27:9a:5d:a3:40:e7: ee:fd:78:34:9e:fe:46:11:6b:ea:c8:7a:dc:5a:d3:e3:3e:73: 54:22:0c:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGTvpvUSvbXa0nvMdpw5cgs9VtNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4MjU1MDY3OThFNDhFRTRGNkJEMEI3QzhBNEI5ODBC REYzRkQ4OTAeFw0yNjA5MjMxMTM1MzNaFw0yNjA5MjQxNTM2MzNaMDMxMTAvBgNV BAMTKDNGNDY5MUZCNzJDN0RCRkYwNUEzNDMyNUZFODhDNjE3OEY3MTAzNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ovE7lBYgMshoAyM7JjiJP5Y6 QVppbrJvoNGOtc2ukgqy+RD2oC51LC5Ur8buQbCjpCajw4e8kkWz76pce180WbHO OP1gzseZlb/V3bVblu+93MVMrGCho6DdaehLhNOG6CKH7nffK3DTFPtR54f0+ULF sYETO+JP4Lqmvbu7Gm8W7F+YiY38R6Pqir7sO++tcuY16qgMdtEQycW7+GvHRj7+ wGG0CfsEPUa1vCIZFtk5//B+/JMmKoMHlUy95p8hkcYhHDUbDK6bWD5Js2U58baR VueGCu2Q/2dnHvyEGEoKUVHdJL3NAHN07AoU2YsYLwqM5PFn6K54BVGUagZrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP0aR+3LH2/8Fo0Ml/ojGF49xA2kwHwYDVR0j BBgwFoAU0oJVBnmOSO5Pa9C3yKS5gL3z/YkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGMxZTgwZDQtNmViZS00OTJjLWEwYzUtZDc1OTgyNzUzM2IzLzAvRDI4MjU1MDY3 OThFNDhFRTRGNkJEMEI3QzhBNEI5ODBCREYzRkQ4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjgyNTUwNjc5OEU0OEVFNEY2QkQwQjdDOEE0Qjk4MEJERjNG RDg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGMxZTgwZDQtNmViZS00OTJjLWEw YzUtZDc1OTgyNzUzM2IzLzAvRDI4MjU1MDY3OThFNDhFRTRGNkJEMEI3QzhBNEI5 ODBCREYzRkQ4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADTZhi6pEiFoFAfX5fiMnIWQt9SC7tAVIkPG wyaaq/mpXTwvIX4xhsRS/eP7DmXxciDkvpKS3VQXeYDZCERrT2wK6FGk3clIPcPZ CH2R9QcWW9jkwZtLVFUdKnPEtmR802vK4SyZur1wkR2yAUohSk4p9s3AkDfAgZWN WkN1UJQpQwIes9IEIwUn/flP9M7rVlCpjTdQG+J01O0b6uxxvxAncMgDbyObGtNr bIwd2iDtoU8VgTqX/ia+g3qEQXPkn+jWM0rAIafsuKXCFw7OJ10s943YJObcElK3 wX3VVnhRx3J57CeaXaNA5+79eDSe/kYRa+rIetxa0+M+c1QiDKA= -----END CERTIFICATE-----Generated at Thu Sep 24 08:14:55 2026 by rpki-client