$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft File: D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft (raw, json) Hash identifier: WUdEN/3jruqwSZqPtoGYwunW3n1n7Yu3BAuWxL636/Y= Subject key identifier: 0C:19:06:44:B1:E0:AC:CC:02:49:70:42:C2:3E:53:95:5A:88:62:CC Authority key identifier: D8:A9:63:CE:57:E9:9B:1A:BE:16:2A:84:52:D9:E4:D3:68:BB:01:2A Certificate issuer: /CN=D8A963CE57E99B1ABE162A8452D9E4D368BB012A Certificate serial: 79A416A54F4B8C3D4764052AF2D376F4CC71F8A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft Manifest number: C6 Signing time: Sat 26 Sep 2026 15:49:28 +0000 Manifest this update: Sat 26 Sep 2026 15:44:28 +0000 Manifest next update: Sun 27 Sep 2026 17:47:28 +0000 Files and hashes: 1: 3130332e3136392e3233382e302f32332d3233203d3e20313338383831.roa (hash: 6VIXf9PufTTIF0jlFfBvIGu6EFZnq37iO9mrrQ1/lbk=) 2: 3130332e3136392e3233392e302f32342d3234203d3e20313338383831.roa (hash: B7a7PzCNzeD/tq1cXAKoZlfFY/BQzoD5xWVoqKq0SF0=) 3: D8A963CE57E99B1ABE162A8452D9E4D368BB012A.crl (hash: N2W2BxnCYWdsD+7G5yJo7SrUZVM0VHCHjheWFhZFjbI=) 4: 3130332e3136392e3233382e302f32342d3234203d3e20313338383831.roa (hash: Jx05B7mkwgYoEihHJr1Mblw6Kt55kFXhZ9MUCvCt+Go=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.crl rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:a4:16:a5:4f:4b:8c:3d:47:64:05:2a:f2:d3:76:f4:cc:71:f8:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8A963CE57E99B1ABE162A8452D9E4D368BB012A Validity Not Before: Sep 26 15:44:28 2026 GMT Not After : Sep 27 17:47:28 2026 GMT Subject: CN=0C190644B1E0ACCC02497042C23E53955A8862CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2a:c7:f3:80:0f:84:08:90:7a:b7:e3:4c:cd: 21:5e:ce:34:03:3d:c3:0e:4d:85:00:15:6d:65:ac: c0:8b:5d:91:b9:fc:31:2c:14:89:f7:44:b4:29:2a: bd:1c:d1:54:48:0e:76:87:34:c8:bc:33:21:68:ca: 94:c4:7e:e3:e0:d9:39:08:f7:17:68:d9:43:a4:a9: 7c:09:c2:74:80:9f:a4:79:f7:48:e2:2a:c7:20:8e: 12:58:22:cd:15:aa:38:c1:cc:a4:b1:d9:5e:e0:83: f5:c9:4b:04:1d:d5:00:17:38:c0:ca:05:d8:2e:f7: 78:07:d0:64:e3:ee:7f:77:42:80:e6:04:26:e5:91: 99:bc:d8:32:d7:fc:71:87:5d:98:64:4b:e7:38:50: 32:b9:79:b6:62:b8:c3:c0:06:cb:de:f1:1b:bc:74: 0e:61:3e:22:69:12:62:27:9f:b7:0f:e5:37:8c:8e: 5b:22:3c:c8:7b:ba:b2:2f:4e:e3:c7:98:be:ee:60: b3:7e:2a:4b:70:b6:33:36:d4:cd:24:99:5b:81:99: 89:9b:16:6f:f5:83:cc:6e:d8:8b:3d:e6:81:f7:33: 3a:10:b5:43:cc:70:0c:35:f4:38:29:b3:00:b1:6f: 1e:39:d3:b2:dc:91:c1:12:a1:a7:2d:9c:1a:27:74: 46:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:19:06:44:B1:E0:AC:CC:02:49:70:42:C2:3E:53:95:5A:88:62:CC X509v3 Authority Key Identifier: keyid:D8:A9:63:CE:57:E9:9B:1A:BE:16:2A:84:52:D9:E4:D3:68:BB:01:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ee:78:e5:0f:97:18:c6:2c:2b:20:6d:70:b0:eb:3a:41:82:21: 51:7f:cd:a0:8b:25:b2:56:fa:93:06:6c:8c:11:99:8f:1f:ea: a9:de:dd:d5:1d:34:a3:67:5f:de:8d:1b:1a:41:ab:1e:73:24: 20:bb:5d:a2:e0:a8:f6:c7:8e:9a:e1:d0:0c:34:16:f8:1a:ac: aa:c8:3c:46:b2:99:e2:c7:b3:06:69:63:9d:c6:68:49:87:b8: b2:0d:7f:4d:35:32:b4:97:69:f0:80:9f:e8:08:d6:8e:f1:8a: 20:12:83:b4:1f:48:f9:20:3d:e7:fa:f9:79:c9:9f:a2:a9:14: 37:f1:69:fc:ae:72:30:a6:25:89:95:81:fd:5e:2a:4d:eb:07: 5a:a0:12:8c:4c:ad:5e:56:50:00:b8:5d:23:1b:77:69:ab:93: 01:6f:7c:57:d7:cc:47:31:3e:52:f1:15:44:03:2b:3e:96:cb: 96:55:48:35:2d:46:4d:46:10:d2:e1:c5:b8:32:1d:85:99:f6: 05:11:21:60:be:86:7b:4a:9c:9d:d5:b2:7d:fd:0e:a5:0e:40: 71:d1:d5:0f:3a:e1:99:72:fa:79:75:84:f2:78:33:2f:42:7e: 17:fc:b7:9c:0a:23:a5:b3:c9:ac:f0:81:ed:ea:41:9d:01:bd: 9e:1c:c1:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeaQWpU9LjD1HZAUq8tN29Mxx+KcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhBOTYzQ0U1N0U5OUIxQUJFMTYyQTg0NTJEOUU0RDM2 OEJCMDEyQTAeFw0yNjA5MjYxNTQ0MjhaFw0yNjA5MjcxNzQ3MjhaMDMxMTAvBgNV BAMTKDBDMTkwNjQ0QjFFMEFDQ0MwMjQ5NzA0MkMyM0U1Mzk1NUE4ODYyQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtKsfzgA+ECJB6t+NMzSFezjQD PcMOTYUAFW1lrMCLXZG5/DEsFIn3RLQpKr0c0VRIDnaHNMi8MyFoypTEfuPg2TkI 9xdo2UOkqXwJwnSAn6R590jiKscgjhJYIs0VqjjBzKSx2V7gg/XJSwQd1QAXOMDK Bdgu93gH0GTj7n93QoDmBCblkZm82DLX/HGHXZhkS+c4UDK5ebZiuMPABsve8Ru8 dA5hPiJpEmInn7cP5TeMjlsiPMh7urIvTuPHmL7uYLN+KktwtjM21M0kmVuBmYmb Fm/1g8xu2Is95oH3MzoQtUPMcAw19DgpswCxbx4507LckcESoactnBondEYLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDBkGRLHgrMwCSXBCwj5TlVqIYswwHwYDVR0j BBgwFoAU2Kljzlfpmxq+FiqEUtnk02i7ASowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjExY2E2MjAtZGFjZS00YTlmLWI4ZTgtYTNhMmU1ODE1MDBlLzAvRDhBOTYzQ0U1 N0U5OUIxQUJFMTYyQTg0NTJEOUU0RDM2OEJCMDEyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOEE5NjNDRTU3RTk5QjFBQkUxNjJBODQ1MkQ5RTREMzY4QkIw MTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjExY2E2MjAtZGFjZS00YTlmLWI4 ZTgtYTNhMmU1ODE1MDBlLzAvRDhBOTYzQ0U1N0U5OUIxQUJFMTYyQTg0NTJEOUU0 RDM2OEJCMDEyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAO545Q+XGMYsKyBtcLDrOkGCIVF/zaCLJbJW +pMGbIwRmY8f6qne3dUdNKNnX96NGxpBqx5zJCC7XaLgqPbHjprh0Aw0FvgarKrI PEaymeLHswZpY53GaEmHuLINf001MrSXafCAn+gI1o7xiiASg7QfSPkgPef6+XnJ n6KpFDfxafyucjCmJYmVgf1eKk3rB1qgEoxMrV5WUAC4XSMbd2mrkwFvfFfXzEcx PlLxFUQDKz6Wy5ZVSDUtRk1GENLhxbgyHYWZ9gURIWC+hntKnJ3Vsn39DqUOQHHR 1Q864Zly+nl1hPJ4My9Cfhf8t5wKI6Wzyazwge3qQZ0BvZ4cwS8= -----END CERTIFICATE-----Generated at Sun Sep 27 12:13:31 2026 by rpki-client