$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft File: D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft (raw, json) Hash identifier: AI1ngqXTkbfnBuK5zA/HUZT9/gjnbYx17OSkVlqHcQY= Subject key identifier: 62:6B:95:29:EA:50:CA:B8:67:44:03:8C:9A:FB:06:49:5B:F2:E0:5F Authority key identifier: D4:B5:3A:6A:5B:EF:99:B5:CD:68:B1:46:74:4A:87:E1:63:2C:24:F8 Certificate issuer: /CN=D4B53A6A5BEF99B5CD68B146744A87E1632C24F8 Certificate serial: 7F7CBFB03F0767209698EC2E4AD3B1522E239027 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 16:16:10 +0000 Manifest this update: Wed 23 Sep 2026 16:11:10 +0000 Manifest next update: Thu 24 Sep 2026 18:06:10 +0000 Files and hashes: 1: 3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa (hash: Tl47NYhV7p3ilyhNqNo+NuftHesBi3flI0jGsgT+BAM=) 2: D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.crl (hash: A+O4nGnNAxgfEPQ4N4wNubhDKMRcwCE7hwd41pp/UKI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.crl rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:06:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:7c:bf:b0:3f:07:67:20:96:98:ec:2e:4a:d3:b1:52:2e:23:90:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4B53A6A5BEF99B5CD68B146744A87E1632C24F8 Validity Not Before: Sep 23 16:11:10 2026 GMT Not After : Sep 24 18:06:10 2026 GMT Subject: CN=626B9529EA50CAB86744038C9AFB06495BF2E05F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:85:22:62:51:99:73:36:9e:c5:f9:bd:55:96: 51:e0:3f:55:d8:7f:82:76:4c:09:cf:26:7a:e7:81: d9:1f:91:7d:3b:9d:74:89:d6:d5:e3:f0:f6:f5:93: 8c:bc:06:23:18:4d:5c:75:d2:93:20:99:7f:51:db: b7:7b:85:df:24:df:9b:44:98:8d:10:f6:a1:e8:69: 2c:12:95:f9:3f:cd:87:c6:34:67:35:42:2a:63:5e: ae:5c:db:cf:82:b1:c8:51:21:3e:31:9d:e0:a0:05: 95:58:5c:5d:71:be:bc:01:b2:e4:00:d8:7e:ff:b1: 3d:5b:b3:05:1f:61:b2:d8:1d:b0:67:63:a7:7a:ff: a8:99:10:75:67:84:e7:b9:a0:fa:57:4d:f8:63:6a: 80:e3:11:06:47:a2:db:91:46:91:6d:be:fb:0e:6e: d0:42:75:1a:9c:e3:3c:b7:34:af:09:64:c3:5a:84: ca:45:1e:f4:56:bb:7e:cc:27:1f:c1:d5:ed:61:f2: 79:b4:42:51:8d:06:ac:ab:a0:a9:38:46:8d:dd:1a: a7:17:cf:4c:73:a6:fe:8c:30:39:18:00:38:b0:33: 43:8b:f9:a1:0e:31:80:25:11:b4:08:ed:21:68:a7: df:29:ec:b7:f6:d9:80:50:f6:45:47:e7:0e:9c:26: 5b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6B:95:29:EA:50:CA:B8:67:44:03:8C:9A:FB:06:49:5B:F2:E0:5F X509v3 Authority Key Identifier: keyid:D4:B5:3A:6A:5B:EF:99:B5:CD:68:B1:46:74:4A:87:E1:63:2C:24:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:87:fa:e4:37:bf:b6:14:fe:32:e0:87:78:d2:8b:02:df:ed: e1:70:8b:24:ac:ad:cc:4a:48:84:57:31:e4:dc:f5:e7:32:db: 54:e7:7f:9b:07:80:c4:75:98:c9:87:b5:c1:b4:c8:d2:5c:ed: 92:3e:02:4d:7d:73:a6:af:b3:18:7a:31:3d:3c:99:26:b2:35: a0:4c:89:63:48:43:30:c3:75:a8:ee:8a:5b:1b:04:37:22:c9: 5c:5f:96:9a:7d:83:99:a5:51:99:33:9b:18:d3:e8:ab:30:f5: 73:27:d4:49:26:70:13:68:9a:b8:15:14:c1:78:39:39:d9:45: ff:74:4e:ea:7c:b3:ec:40:77:d6:7d:5d:d0:a7:c1:92:6c:a3: ba:0a:f0:24:a8:55:5c:49:86:2d:0a:bf:14:2f:ac:91:db:04: 75:2f:a4:01:9d:af:86:65:6e:96:9d:49:a5:42:1f:14:97:5f: c8:53:c5:2e:dd:ac:93:98:84:a3:1b:74:69:c8:0c:1c:06:1d: 1a:85:69:51:0d:a9:94:de:23:0e:bf:12:44:66:d3:5a:a2:e9: ba:5b:70:78:1d:c6:3b:ee:6e:99:94:ec:90:73:eb:cc:47:83: 40:9b:62:2e:95:60:e9:4e:36:35:d6:4d:a7:e8:4b:cb:01:e7: 2e:27:ab:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf3y/sD8HZyCWmOwuStOxUi4jkCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRCNTNBNkE1QkVGOTlCNUNENjhCMTQ2NzQ0QTg3RTE2 MzJDMjRGODAeFw0yNjA5MjMxNjExMTBaFw0yNjA5MjQxODA2MTBaMDMxMTAvBgNV BAMTKDYyNkI5NTI5RUE1MENBQjg2NzQ0MDM4QzlBRkIwNjQ5NUJGMkUwNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkhSJiUZlzNp7F+b1VllHgP1XY f4J2TAnPJnrngdkfkX07nXSJ1tXj8Pb1k4y8BiMYTVx10pMgmX9R27d7hd8k35tE mI0Q9qHoaSwSlfk/zYfGNGc1QipjXq5c28+CschRIT4xneCgBZVYXF1xvrwBsuQA 2H7/sT1bswUfYbLYHbBnY6d6/6iZEHVnhOe5oPpXTfhjaoDjEQZHotuRRpFtvvsO btBCdRqc4zy3NK8JZMNahMpFHvRWu37MJx/B1e1h8nm0QlGNBqyroKk4Ro3dGqcX z0xzpv6MMDkYADiwM0OL+aEOMYAlEbQI7SFop98p7Lf22YBQ9kVH5w6cJluNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYmuVKepQyrhnRAOMmvsGSVvy4F8wHwYDVR0j BBgwFoAU1LU6alvvmbXNaLFGdEqH4WMsJPgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUxOTExYjktMWQyZi00YmI0LTlkNzUtOWFhM2MzNTEwMGU4LzAvRDRCNTNBNkE1 QkVGOTlCNUNENjhCMTQ2NzQ0QTg3RTE2MzJDMjRGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENEI1M0E2QTVCRUY5OUI1Q0Q2OEIxNDY3NDRBODdFMTYzMkMy NEY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUxOTExYjktMWQyZi00YmI0LTlk NzUtOWFhM2MzNTEwMGU4LzAvRDRCNTNBNkE1QkVGOTlCNUNENjhCMTQ2NzQ0QTg3 RTE2MzJDMjRGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+H+uQ3v7YU/jLgh3jSiwLf7eFwiySsrcxK SIRXMeTc9ecy21Tnf5sHgMR1mMmHtcG0yNJc7ZI+Ak19c6avsxh6MT08mSayNaBM iWNIQzDDdajuilsbBDciyVxflpp9g5mlUZkzmxjT6Ksw9XMn1EkmcBNomrgVFMF4 OTnZRf90Tup8s+xAd9Z9XdCnwZJso7oK8CSoVVxJhi0KvxQvrJHbBHUvpAGdr4Zl bpadSaVCHxSXX8hTxS7drJOYhKMbdGnIDBwGHRqFaVENqZTeIw6/EkRm01qi6bpb cHgdxjvubpmU7JBz68xHg0CbYi6VYOlONjXWTafoS8sB5y4nq0M= -----END CERTIFICATE-----Generated at Wed Sep 23 23:15:41 2026 by rpki-client