$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.mft File: D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.mft (raw, json) Hash identifier: wgRKJOaDlvlfFg16VLzeGpazfSNZE/+G3S0470bQYO0= Subject key identifier: 8C:B0:18:CA:6B:F3:7F:C4:A3:40:79:A1:AD:80:93:91:A3:E2:8F:4C Authority key identifier: D6:BB:B0:4A:96:DE:95:BA:1D:B1:CF:B1:59:DA:9A:E0:30:BB:39:8E Certificate issuer: /CN=D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E Certificate serial: 143096309A3EB6191A27A475DC0D5A0154170F3D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 08:31:08 +0000 Manifest this update: Thu 24 Sep 2026 08:26:08 +0000 Manifest next update: Fri 25 Sep 2026 11:21:08 +0000 Files and hashes: 1: D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.crl (hash: 7ycEiX0Mfx3mNtNhwbbOvnfGT+BxcHdq12V7TlLQr6A=) 2: 3130332e3131372e35382e302f32332d3234203d3e20313530393534.roa (hash: 50gojjHGXgJ+6nXVYxXceIc5Q4+LdUoXKFR2P9HxySs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.crl rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:30:96:30:9a:3e:b6:19:1a:27:a4:75:dc:0d:5a:01:54:17:0f:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E Validity Not Before: Sep 24 08:26:08 2026 GMT Not After : Sep 25 11:21:08 2026 GMT Subject: CN=8CB018CA6BF37FC4A34079A1AD809391A3E28F4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a1:94:32:49:d1:5f:42:43:27:70:3b:4e:84: cd:4b:e0:78:ae:a0:96:06:8b:59:6e:53:e9:c3:00: 9a:d1:ec:75:2d:4d:ba:ee:aa:09:08:81:47:29:48: dd:b4:d7:fa:62:db:44:92:8f:bc:33:29:d0:36:85: d7:8b:fe:a2:95:1e:5c:24:66:24:cf:c2:44:a7:bb: 72:85:06:c9:fc:1c:ee:6a:ff:f8:5f:d6:f5:74:27: 40:94:90:9b:78:30:8a:a6:9d:e8:db:d3:68:55:94: 0d:22:7a:51:03:2e:5b:d2:29:23:5c:3a:e9:2a:3c: e4:78:fc:df:bd:b5:ef:76:01:5f:dd:6b:81:a2:87: 5a:c9:d8:61:18:74:5c:38:93:57:c8:98:ae:7e:e8: 85:36:4c:7c:60:cb:1d:85:2a:c9:3c:c4:b1:99:f8: a8:60:0e:dd:ef:47:01:13:d4:75:2d:c1:6d:8b:6e: 54:c6:56:fd:f5:e6:9d:e7:86:a2:0b:ce:1c:a5:c7: ce:a3:f9:99:0b:4b:fb:a1:e5:95:41:5c:b2:a9:1b: 9a:2c:75:e6:ba:10:4c:a9:dd:1a:51:fd:cb:f5:f7: a4:ee:98:4c:fa:dd:ec:8a:43:59:3c:71:a2:2a:1d: 51:7b:77:c8:4b:f6:35:59:7a:3b:e8:04:55:3f:eb: 13:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B0:18:CA:6B:F3:7F:C4:A3:40:79:A1:AD:80:93:91:A3:E2:8F:4C X509v3 Authority Key Identifier: keyid:D6:BB:B0:4A:96:DE:95:BA:1D:B1:CF:B1:59:DA:9A:E0:30:BB:39:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:19:d0:d7:7a:b9:6a:e0:8d:01:56:62:af:65:54:52:d9:15: df:30:8c:79:f9:e7:3b:f6:10:01:3e:b6:74:22:88:7d:8c:4e: a4:32:55:64:c1:4f:56:61:ae:88:ef:e0:dc:56:34:d4:82:e0: 8f:c0:94:73:b6:e8:b7:31:be:98:39:e7:b8:e4:eb:53:d8:cc: 76:e4:07:bd:7b:bc:88:bf:b5:aa:43:84:06:8e:b7:a3:6c:87: 58:12:0f:54:b6:f2:89:ad:5e:f0:c8:41:a2:51:d4:47:6f:55: 50:c4:9a:e7:97:e6:b6:8e:c0:45:80:47:32:2c:88:08:4b:73: 2e:05:b7:0d:21:1e:7b:39:f1:fc:bf:ae:8a:be:d2:00:d1:03: 8f:ac:99:12:78:01:e9:2b:43:5c:4e:ea:37:85:fa:2b:1a:55: df:01:73:18:7d:92:cf:26:8a:97:6a:1d:34:1e:67:b8:d9:b6: d9:63:86:1d:30:8c:3a:7f:54:61:dc:6f:b7:b9:7f:cd:4a:9b: fd:fa:00:49:d5:9e:1e:85:5b:9e:25:f3:1c:99:73:60:83:c1: 99:ee:08:cf:c7:a9:a4:61:06:01:39:e4:6c:16:ea:4a:e3:9f: ae:22:a6:93:1e:33:f7:15:68:8b:ca:87:2e:66:9f:ea:37:af: 19:d4:86:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFDCWMJo+thkaJ6R13A1aAVQXDz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZCQkIwNEE5NkRFOTVCQTFEQjFDRkIxNTlEQTlBRTAz MEJCMzk4RTAeFw0yNjA5MjQwODI2MDhaFw0yNjA5MjUxMTIxMDhaMDMxMTAvBgNV BAMTKDhDQjAxOENBNkJGMzdGQzRBMzQwNzlBMUFEODA5MzkxQTNFMjhGNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLoZQySdFfQkMncDtOhM1L4Hiu oJYGi1luU+nDAJrR7HUtTbruqgkIgUcpSN201/pi20SSj7wzKdA2hdeL/qKVHlwk ZiTPwkSnu3KFBsn8HO5q//hf1vV0J0CUkJt4MIqmnejb02hVlA0ielEDLlvSKSNc OukqPOR4/N+9te92AV/da4Gih1rJ2GEYdFw4k1fImK5+6IU2THxgyx2FKsk8xLGZ +KhgDt3vRwET1HUtwW2LblTGVv315p3nhqILzhylx86j+ZkLS/uh5ZVBXLKpG5os dea6EEyp3RpR/cv196TumEz63eyKQ1k8caIqHVF7d8hL9jVZejvoBFU/6xPHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjLAYymvzf8SjQHmhrYCTkaPij0wwHwYDVR0j BBgwFoAU1ruwSpbelbodsc+xWdqa4DC7OY4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTI2MmQzNDEtOTRiNS00NzRlLThiY2QtZDE3OTg4ZjA5OWIzLzAvRDZCQkIwNEE5 NkRFOTVCQTFEQjFDRkIxNTlEQTlBRTAzMEJCMzk4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENkJCQjA0QTk2REU5NUJBMURCMUNGQjE1OURBOUFFMDMwQkIz OThFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTI2MmQzNDEtOTRiNS00NzRlLThi Y2QtZDE3OTg4ZjA5OWIzLzAvRDZCQkIwNEE5NkRFOTVCQTFEQjFDRkIxNTlEQTlB RTAzMEJCMzk4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIwZ0Nd6uWrgjQFWYq9lVFLZFd8wjHn55zv2 EAE+tnQiiH2MTqQyVWTBT1Zhrojv4NxWNNSC4I/AlHO26Lcxvpg557jk61PYzHbk B717vIi/tapDhAaOt6Nsh1gSD1S28omtXvDIQaJR1EdvVVDEmueX5raOwEWARzIs iAhLcy4Ftw0hHns58fy/roq+0gDRA4+smRJ4AekrQ1xO6jeF+isaVd8Bcxh9ks8m ipdqHTQeZ7jZttljhh0wjDp/VGHcb7e5f81Km/36AEnVnh6FW54l8xyZc2CDwZnu CM/HqaRhBgE55GwW6krjn64ippMeM/cVaIvKhy5mn+o3rxnUhuU= -----END CERTIFICATE-----Generated at Thu Sep 24 13:23:26 2026 by rpki-client