$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft File: DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft (raw, json) Hash identifier: P9PpOdk85xVFnkpfvNCx9dvAammxtZW6UpNGBG4+9i0= Subject key identifier: 84:78:40:55:47:1B:FB:2D:32:1B:DC:BD:6F:56:68:16:ED:32:43:93 Authority key identifier: DE:4E:99:EA:03:0A:F8:AE:BF:B7:B6:A7:A0:E9:16:74:DD:B2:9A:C3 Certificate issuer: /CN=DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3 Certificate serial: 34BB59F1226479474E96132FC4E0B7D273A30725 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 21:01:34 +0000 Manifest this update: Thu 24 Sep 2026 20:56:34 +0000 Manifest next update: Fri 25 Sep 2026 23:35:34 +0000 Files and hashes: 1: 3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa (hash: 2xJo8vO5RtzGv7BkUmxulZhOANWhCfhuYoau31MaZh0=) 2: 323430323a613530303a3a2f33322d3332203d3e2034383231.roa (hash: BDfl1ljAlzUeNiFgOAogNvfZpmtNq6Kp37cGWuK0R5E=) 3: 3232332e32352e3130372e302f32342d3234203d3e20313439373138.roa (hash: f+1xV3V7eIo4yjJqos+xUQVvX1GIUuOZUCoIKtF+llo=) 4: DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.crl (hash: KBG4SG/C5pGsVwP7idQ4EHHH0RHKa4p1xThw5N0X/CA=) 5: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (hash: d26NLF/sKVXadNSIsUNq9koHjOM/iTFNcX1v1zkyxRU=) 6: 3232332e32352e3130382e302f32342d3234203d3e2034383231.roa (hash: lZy/D3zEI+V1zNnvBB6OJZ7BzAoFD7HSvYryTbhRU2s=) 7: 3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa (hash: ovVBKtJH+Wixf+bjFfGN0BaqhZuS+FBdLYnDH3wV8vw=) 8: 3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa (hash: D8gdQFYf8NnWhum3Srq97Jkm5hnXUuKFuTsge2OROqA=) 9: 3232332e32352e39362e302f32312d3234203d3e2039333431.roa (hash: 7Jy3y4ltltsmzNhSvINfLmQPgIpSxy3LDWGrSnNQ3Zk=) 10: 3232332e32352e3130352e302f32342d3234203d3e2034383231.roa (hash: zkjugBCGR1RTN3rv+4fVMMpCR+DjhaqSm22RICfrfmA=) 11: 3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa (hash: zZohFjEfg5KbgTKUDn03P4ViER6I84zu0tvUUBWCbms=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.crl rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 23:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:bb:59:f1:22:64:79:47:4e:96:13:2f:c4:e0:b7:d2:73:a3:07:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3 Validity Not Before: Sep 24 20:56:34 2026 GMT Not After : Sep 25 23:35:34 2026 GMT Subject: CN=84784055471BFB2D321BDCBD6F566816ED324393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:44:db:00:4a:cb:a7:f6:d5:f1:d6:65:d6:6f: 9f:51:5a:7e:1b:8a:dc:fd:26:8d:31:f6:e4:e1:3a: 36:f1:91:eb:18:bf:bb:dc:24:6b:ac:37:9d:8d:7a: ae:96:89:07:b3:c8:19:2c:cf:51:f5:00:a7:51:47: f8:f8:ed:d6:53:a0:a6:76:a5:4c:2d:71:96:52:eb: e3:75:2a:91:3c:81:bc:57:60:40:93:05:3f:b3:f8: ab:ed:66:e1:2c:a1:f5:09:e9:33:ec:b1:b7:80:3a: 33:56:27:d6:a6:6f:f2:4c:a0:0c:63:db:8d:15:7a: 68:69:4f:ef:86:19:46:82:29:e2:a0:ea:55:02:ca: cb:8e:09:9a:13:b3:13:94:95:2c:3f:4a:7f:6a:75: 57:ba:c6:6e:37:d8:bd:e1:40:5e:cf:b8:b1:c1:38: b1:93:23:b7:f6:e8:83:2b:72:ae:02:33:2f:fd:45: 85:56:8c:03:85:12:f4:d3:d5:73:6c:75:9c:bd:e8: 4e:25:43:b2:53:f3:d4:c3:23:33:d3:89:ba:80:ad: 47:01:e5:18:af:7b:19:fd:aa:32:3f:39:4e:7a:91: 12:1a:40:e6:98:ea:8e:7c:96:56:7a:59:77:cd:95: d4:8b:a2:53:10:65:0e:65:96:eb:e0:21:33:5d:68: 8d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:78:40:55:47:1B:FB:2D:32:1B:DC:BD:6F:56:68:16:ED:32:43:93 X509v3 Authority Key Identifier: keyid:DE:4E:99:EA:03:0A:F8:AE:BF:B7:B6:A7:A0:E9:16:74:DD:B2:9A:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:05:9c:dd:5a:96:13:23:dc:cb:17:40:e6:3f:44:69:06:8c: 67:f2:d7:80:4f:27:bb:ef:1e:56:42:6e:fc:fd:4e:b5:f2:23: 08:3a:c5:29:08:97:1a:e7:ea:b1:1b:d4:89:8f:e2:5e:98:d5: 85:8a:2f:1a:3e:34:7f:4e:f5:ee:22:89:56:78:2d:3c:f8:c6: 38:28:bb:b2:00:a8:a6:18:8f:be:f1:66:2e:2f:5a:32:94:56: 14:56:f6:01:92:af:2f:e6:e9:ab:4a:5f:80:7b:22:82:9e:65: b9:12:31:6c:b6:04:10:a4:41:db:3b:69:af:be:57:e4:1e:db: 75:3d:22:a4:bb:5b:71:c1:d6:4c:cd:5b:7b:8a:6c:fe:95:f7: a6:ef:e2:12:75:e0:39:b9:47:24:7e:6b:0b:96:58:9e:9d:17: d0:07:6b:72:99:50:d5:f6:bf:e6:0e:da:b6:ab:6c:36:d4:ec: ad:f3:b9:e0:e4:0b:ff:c2:07:72:b9:c0:89:32:1b:08:e7:20: 1b:ee:4c:df:ea:ad:f0:06:87:7b:69:0b:b9:37:ed:38:9b:0f: f0:c5:18:a3:0d:1d:2e:3e:c1:82:90:e7:19:02:24:c4:c2:d1: 93:8a:43:bd:76:79:cd:37:83:be:1b:d9:87:69:44:ad:11:82: f1:e8:4e:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNLtZ8SJkeUdOlhMvxOC30nOjByUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0RTk5RUEwMzBBRjhBRUJGQjdCNkE3QTBFOTE2NzRE REIyOUFDMzAeFw0yNjA5MjQyMDU2MzRaFw0yNjA5MjUyMzM1MzRaMDMxMTAvBgNV BAMTKDg0Nzg0MDU1NDcxQkZCMkQzMjFCRENCRDZGNTY2ODE2RUQzMjQzOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNRNsASsun9tXx1mXWb59RWn4b itz9Jo0x9uThOjbxkesYv7vcJGusN52Neq6WiQezyBksz1H1AKdRR/j47dZToKZ2 pUwtcZZS6+N1KpE8gbxXYECTBT+z+KvtZuEsofUJ6TPssbeAOjNWJ9amb/JMoAxj 240VemhpT++GGUaCKeKg6lUCysuOCZoTsxOUlSw/Sn9qdVe6xm432L3hQF7PuLHB OLGTI7f26IMrcq4CMy/9RYVWjAOFEvTT1XNsdZy96E4lQ7JT89TDIzPTibqArUcB 5Rivexn9qjI/OU56kRIaQOaY6o58llZ6WXfNldSLolMQZQ5lluvgITNdaI3rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhHhAVUcb+y0yG9y9b1ZoFu0yQ5MwHwYDVR0j BBgwFoAU3k6Z6gMK+K6/t7anoOkWdN2ymsMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQyNTQ0MTktNTNiZS00YWQ0LWJmN2YtMjlmODkxMjUyM2QwLzAvREU0RTk5RUEw MzBBRjhBRUJGQjdCNkE3QTBFOTE2NzREREIyOUFDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERTRFOTlFQTAzMEFGOEFFQkZCN0I2QTdBMEU5MTY3NEREQjI5 QUMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQyNTQ0MTktNTNiZS00YWQ0LWJm N2YtMjlmODkxMjUyM2QwLzAvREU0RTk5RUEwMzBBRjhBRUJGQjdCNkE3QTBFOTE2 NzREREIyOUFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYFnN1alhMj3MsXQOY/RGkGjGfy14BPJ7vv HlZCbvz9TrXyIwg6xSkIlxrn6rEb1ImP4l6Y1YWKLxo+NH9O9e4iiVZ4LTz4xjgo u7IAqKYYj77xZi4vWjKUVhRW9gGSry/m6atKX4B7IoKeZbkSMWy2BBCkQds7aa++ V+Qe23U9IqS7W3HB1kzNW3uKbP6V96bv4hJ14Dm5RyR+awuWWJ6dF9AHa3KZUNX2 v+YO2rarbDbU7K3zueDkC//CB3K5wIkyGwjnIBvuTN/qrfAGh3tpC7k37TibD/DF GKMNHS4+wYKQ5xkCJMTC0ZOKQ712ec03g74b2YdpRK0RgvHoTsU= -----END CERTIFICATE-----Generated at Fri Sep 25 13:34:32 2026 by rpki-client