$ rpki-client -vvvf rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft File: D8435659F33EE1F7005A21C1387F49D353431808.mft (raw, json) Hash identifier: 9DVyxRTbrNN0VnyGgpLyZv77ZbCF7kaAQ0+kWX71YyI= Subject key identifier: FE:7C:CF:79:C4:1F:54:25:7E:E3:73:85:61:AC:06:BD:42:17:D9:29 Authority key identifier: D8:43:56:59:F3:3E:E1:F7:00:5A:21:C1:38:7F:49:D3:53:43:18:08 Certificate issuer: /CN=D8435659F33EE1F7005A21C1387F49D353431808 Certificate serial: 3A076F1C4766338A3A3ABF90368684CB052AC74D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 10:08:14 +0000 Manifest this update: Thu 24 Sep 2026 10:03:14 +0000 Manifest next update: Fri 25 Sep 2026 13:21:14 +0000 Files and hashes: 1: 3130332e3234372e31332e302f32342d3234203d3e20313331373036.roa (hash: z4cKVwkKHopCzCusKw3/HTDbOMxbEcb0WxL0/PEi5qo=) 2: D8435659F33EE1F7005A21C1387F49D353431808.crl (hash: lRYtyx3e/kJ2/cnpz95JXgwBD8ODX+SOD3hfDG8jNUU=) 3: 3130332e3234372e31342e302f32332d3234203d3e20313331373036.roa (hash: blqaAQUh+/Ci23PSpz6kWjhOXoOQ7V7lhdmAJgQyDKE=) 4: 3132312e3130312e3132382e302f32312d3234203d3e20313331373036.roa (hash: DR008bVSYXJm82RMo+BhRQvkIWKNDedVtmRpjzWrQic=) 5: 323430323a653330303a3a2f33322d3438203d3e20313331373036.roa (hash: nwbiSYQUIY7u5484W08oCWpHX2RPW6F76Z3A6cL7rsY=) 6: 3130332e3234372e31322e302f32342d3234203d3e203535363935.roa (hash: ATVTOuHtUSrfebW1xU18JBrcd7qLtJdgSsLLVk33uGM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.crl rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:07:6f:1c:47:66:33:8a:3a:3a:bf:90:36:86:84:cb:05:2a:c7:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8435659F33EE1F7005A21C1387F49D353431808 Validity Not Before: Sep 24 10:03:14 2026 GMT Not After : Sep 25 13:21:14 2026 GMT Subject: CN=FE7CCF79C41F54257EE3738561AC06BD4217D929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:78:4a:07:4c:9e:6e:c7:78:14:0c:12:3e:03: b5:f1:7c:92:ae:9f:be:1f:71:a5:85:f7:cc:eb:89: eb:f7:bc:b8:cd:14:be:3a:d6:ef:3a:90:9b:b7:95: aa:a6:22:2b:dd:9d:67:08:0a:dc:60:5a:85:6a:4b: 06:9f:da:b8:d2:0c:be:34:06:29:ae:37:b8:40:31: 9d:39:d0:78:45:a3:e9:b4:c3:b0:59:4c:24:61:f5: b8:d4:1d:f4:77:d0:9b:4f:3c:b6:d0:03:e2:64:05: e4:0f:ee:81:6f:53:c1:ee:bb:21:1f:d2:02:72:d6: 07:78:8b:b9:30:90:f9:21:9a:7e:da:7f:46:35:83: b5:ee:cf:00:e2:36:f8:22:42:10:21:fc:62:67:5e: b3:da:60:33:5f:03:f1:e2:33:0d:07:78:2d:fc:3a: a6:23:1e:fa:ef:dc:55:e1:15:4b:db:ee:03:36:4a: 8b:2e:29:10:21:71:3d:c7:d4:dc:01:f7:b1:7c:63: ea:21:ed:56:f7:a1:bd:f9:2c:4a:28:50:91:7d:90: 68:1b:99:f8:14:cd:ad:2e:f8:0d:62:a3:6a:95:1e: 63:20:83:2a:ba:97:a7:f0:13:65:99:3b:6a:50:7c: 7a:f9:a0:2e:f3:c7:9c:64:88:e3:57:fc:3c:b6:e1: 3c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7C:CF:79:C4:1F:54:25:7E:E3:73:85:61:AC:06:BD:42:17:D9:29 X509v3 Authority Key Identifier: keyid:D8:43:56:59:F3:3E:E1:F7:00:5A:21:C1:38:7F:49:D3:53:43:18:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:e5:79:3e:61:be:44:8d:81:e3:9d:3d:1e:36:87:37:dd:aa: 73:ff:94:a7:bc:a0:e3:82:b0:38:01:d6:70:ea:d8:05:04:59: 7c:f1:86:4c:3b:08:f5:53:f4:ff:b7:28:8f:52:74:64:6c:ea: 65:1b:57:48:5b:7a:50:ab:30:8b:72:62:ae:88:8e:97:57:4e: ff:f8:fa:25:2f:d6:48:ca:1d:7f:e9:9a:37:56:74:e6:01:6d: 67:9a:5a:dd:3d:79:a1:d6:cc:7a:1e:ba:f3:27:f1:24:f8:8e: cd:31:db:2b:8f:32:46:f2:65:9e:f2:22:34:d4:f6:99:a8:bc: 73:e4:72:2d:e5:23:71:d3:45:be:7d:59:b3:3f:5f:bc:ec:59: 1d:37:3f:ec:c3:e3:93:ce:07:aa:89:d7:66:93:16:f8:63:2a: 70:2c:bd:b2:4a:76:36:98:50:aa:64:1b:07:94:36:4d:ad:47: b3:08:63:52:b0:e0:75:e1:97:7e:fa:e2:ee:cd:41:11:a0:4c: a2:9f:98:ad:1b:d5:1f:34:4a:2c:b3:11:e4:22:1a:0d:01:f5: 1e:d5:2d:29:f0:98:b6:b9:72:78:0f:a9:38:f2:35:e4:3a:7f: ba:c3:5d:df:d2:21:f1:2c:61:fa:85:eb:7c:6f:b3:bb:2e:7b: 25:13:96:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOgdvHEdmM4o6Or+QNoaEywUqx00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg0MzU2NTlGMzNFRTFGNzAwNUEyMUMxMzg3RjQ5RDM1 MzQzMTgwODAeFw0yNjA5MjQxMDAzMTRaFw0yNjA5MjUxMzIxMTRaMDMxMTAvBgNV BAMTKEZFN0NDRjc5QzQxRjU0MjU3RUUzNzM4NTYxQUMwNkJENDIxN0Q5MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDteEoHTJ5ux3gUDBI+A7XxfJKu n74fcaWF98zriev3vLjNFL461u86kJu3laqmIivdnWcICtxgWoVqSwaf2rjSDL40 BimuN7hAMZ050HhFo+m0w7BZTCRh9bjUHfR30JtPPLbQA+JkBeQP7oFvU8HuuyEf 0gJy1gd4i7kwkPkhmn7af0Y1g7XuzwDiNvgiQhAh/GJnXrPaYDNfA/HiMw0HeC38 OqYjHvrv3FXhFUvb7gM2SosuKRAhcT3H1NwB97F8Y+oh7Vb3ob35LEooUJF9kGgb mfgUza0u+A1io2qVHmMggyq6l6fwE2WZO2pQfHr5oC7zx5xkiONX/Dy24TxVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/nzPecQfVCV+43OFYawGvUIX2SkwHwYDVR0j BBgwFoAU2ENWWfM+4fcAWiHBOH9J01NDGAgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTI3YTZmMzQtMWI2ZS00ZTkyLWIyZDItMGI5MzAxYTY2NmE1LzAvRDg0MzU2NTlG MzNFRTFGNzAwNUEyMUMxMzg3RjQ5RDM1MzQzMTgwOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODQzNTY1OUYzM0VFMUY3MDA1QTIxQzEzODdGNDlEMzUzNDMx ODA4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTI3YTZmMzQtMWI2ZS00ZTkyLWIy ZDItMGI5MzAxYTY2NmE1LzAvRDg0MzU2NTlGMzNFRTFGNzAwNUEyMUMxMzg3RjQ5 RDM1MzQzMTgwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAnleT5hvkSNgeOdPR42hzfdqnP/lKe8oOOC sDgB1nDq2AUEWXzxhkw7CPVT9P+3KI9SdGRs6mUbV0hbelCrMItyYq6IjpdXTv/4 +iUv1kjKHX/pmjdWdOYBbWeaWt09eaHWzHoeuvMn8ST4js0x2yuPMkbyZZ7yIjTU 9pmovHPkci3lI3HTRb59WbM/X7zsWR03P+zD45POB6qJ12aTFvhjKnAsvbJKdjaY UKpkGweUNk2tR7MIY1Kw4HXhl3764u7NQRGgTKKfmK0b1R80SiyzEeQiGg0B9R7V LSnwmLa5cngPqTjyNeQ6f7rDXd/SIfEsYfqF63xvs7sueyUTlnA= -----END CERTIFICATE-----Generated at Thu Sep 24 21:22:36 2026 by rpki-client