$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft File: D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft (raw, json) Hash identifier: uhhtM1Lx51iVQS8VnonnGs2o4vg0BNSJz1Kaupk7ZXA= Subject key identifier: 8A:BC:6A:07:DC:2E:75:38:8E:3B:ED:96:88:95:7E:6D:F0:1C:74:83 Authority key identifier: D5:54:88:51:5F:49:C9:E2:A9:5F:61:47:52:BA:7C:BA:D5:DC:0C:17 Certificate issuer: /CN=D55488515F49C9E2A95F614752BA7CBAD5DC0C17 Certificate serial: 6681F5C751ACD10707543F4E3EDCE9DB868BCE29 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 19:50:27 +0000 Manifest this update: Wed 23 Sep 2026 19:45:27 +0000 Manifest next update: Thu 24 Sep 2026 20:06:27 +0000 Files and hashes: 1: 3130332e3139312e3231382e302f32332d3234203d3e20313439393330.roa (hash: whFYG+jTb2gWlU4tXTKDvr8VOmh33B5+fTwOyqIk0yw=) 2: 3130332e3139312e3231392e302f32342d3234203d3e20313439393330.roa (hash: glLFkt9sfYEvpqjXuBfssPvW+ZRZ2fl6wfErSqQG7zc=) 3: D55488515F49C9E2A95F614752BA7CBAD5DC0C17.crl (hash: WcD+Tb8N3+ubOhM89q7KnJ+poSoT+efBzgcDKG0tN4o=) 4: 3130332e3139312e3231382e302f32342d3234203d3e20313439393330.roa (hash: LLuRHn4xhc/MivkLWWh5CVLPBZ4K3sNosIj++ElGxco=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.crl rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:81:f5:c7:51:ac:d1:07:07:54:3f:4e:3e:dc:e9:db:86:8b:ce:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55488515F49C9E2A95F614752BA7CBAD5DC0C17 Validity Not Before: Sep 23 19:45:27 2026 GMT Not After : Sep 24 20:06:27 2026 GMT Subject: CN=8ABC6A07DC2E75388E3BED9688957E6DF01C7483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0c:7e:97:df:8c:76:d4:ad:2a:36:f4:72:08: 03:75:30:1e:d7:92:6f:c5:72:63:d8:72:ff:33:d6: 9f:98:60:0e:40:af:c8:f6:2f:2b:e2:b4:6b:72:21: 6e:27:83:17:5b:22:c2:0e:5b:fd:29:da:0b:b3:fc: 9f:27:fa:67:22:4e:fb:58:16:97:31:d7:5b:f5:5a: 12:93:f9:c3:9a:38:f9:4e:71:85:db:2f:36:87:c1: 44:86:a2:ac:11:32:81:ac:25:94:c3:cd:95:f4:5c: a8:ea:d6:f4:46:98:59:bc:f3:f6:25:db:00:78:c3: 99:6a:3b:1a:5c:f9:c6:35:0d:15:32:63:20:1e:11: b8:e6:6f:b9:a5:48:57:e6:97:62:d2:9f:d1:01:64: 8b:02:c6:6d:f9:ac:eb:9e:12:5b:12:34:dc:fa:e3: 31:ed:0b:1a:bb:18:11:9c:40:19:39:ac:19:0e:6b: 5d:4c:ae:81:bb:35:19:f7:64:b2:38:7e:2c:a9:09: 14:14:2a:64:60:33:50:24:18:a3:04:07:9a:94:27: 1d:82:a3:31:13:63:a0:95:57:f6:ad:fd:9b:c6:e9: b4:9e:96:7a:cf:5a:39:87:53:89:0f:54:08:ac:c4: 8f:1c:17:29:99:ef:8d:1c:88:db:97:80:00:7f:b4: 66:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BC:6A:07:DC:2E:75:38:8E:3B:ED:96:88:95:7E:6D:F0:1C:74:83 X509v3 Authority Key Identifier: keyid:D5:54:88:51:5F:49:C9:E2:A9:5F:61:47:52:BA:7C:BA:D5:DC:0C:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:be:ab:95:5d:24:77:8f:e0:b3:a8:df:f6:47:a4:4b:1e:79: 30:31:7b:43:a0:90:53:32:ae:d1:ff:b9:66:e5:78:a4:71:36: 03:fd:38:81:c0:01:df:c8:e9:2b:f7:fd:1e:dc:c5:82:28:01: ef:41:37:b9:14:b1:d7:99:e9:f3:02:cf:54:60:d5:86:f7:9e: b8:69:0b:c3:8f:2c:52:7b:c7:01:7e:68:19:35:9f:e7:d6:49: 56:57:17:ef:12:d3:b0:9f:bb:72:13:9c:4f:ef:a5:a7:e9:ca: bd:7d:59:99:08:44:ed:e0:d5:e0:1a:65:b3:bd:62:02:70:bd: 40:c8:ca:64:e8:da:68:d7:6f:e5:e7:8b:be:07:b2:d7:03:de: 16:ba:21:15:68:30:c8:aa:4a:a1:c3:47:e6:84:cc:9a:8f:89: 39:d0:de:14:4b:af:f8:3f:59:23:2d:d8:30:9c:27:2e:f8:a0: 3a:70:36:45:b8:3a:19:43:56:99:d9:af:14:24:b1:37:4d:1b: 50:d7:7f:2f:64:22:24:9a:41:d2:4e:d2:e4:b0:57:24:f1:a4: d9:05:d7:17:43:0d:62:fc:7a:78:1b:e5:f0:45:24:7c:9f:09: fd:49:a3:3d:87:9e:b1:f0:5c:23:ec:99:71:ba:b3:8f:c0:b0: 51:da:aa:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZoH1x1Gs0QcHVD9OPtzp24aLzikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDg4NTE1RjQ5QzlFMkE5NUY2MTQ3NTJCQTdDQkFE NURDMEMxNzAeFw0yNjA5MjMxOTQ1MjdaFw0yNjA5MjQyMDA2MjdaMDMxMTAvBgNV BAMTKDhBQkM2QTA3REMyRTc1Mzg4RTNCRUQ5Njg4OTU3RTZERjAxQzc0ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChDH6X34x21K0qNvRyCAN1MB7X km/FcmPYcv8z1p+YYA5Ar8j2LyvitGtyIW4ngxdbIsIOW/0p2guz/J8n+mciTvtY Fpcx11v1WhKT+cOaOPlOcYXbLzaHwUSGoqwRMoGsJZTDzZX0XKjq1vRGmFm88/Yl 2wB4w5lqOxpc+cY1DRUyYyAeEbjmb7mlSFfml2LSn9EBZIsCxm35rOueElsSNNz6 4zHtCxq7GBGcQBk5rBkOa11MroG7NRn3ZLI4fiypCRQUKmRgM1AkGKMEB5qUJx2C ozETY6CVV/at/ZvG6bSelnrPWjmHU4kPVAisxI8cFymZ740ciNuXgAB/tGbvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUirxqB9wudTiOO+2WiJV+bfAcdIMwHwYDVR0j BBgwFoAU1VSIUV9JyeKpX2FHUrp8utXcDBcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjMzNzBkMjQtYTY1Ni00MzM2LTg0MmItOWJkNWRjYTJiNDBhLzAvRDU1NDg4NTE1 RjQ5QzlFMkE5NUY2MTQ3NTJCQTdDQkFENURDMEMxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTU0ODg1MTVGNDlDOUUyQTk1RjYxNDc1MkJBN0NCQUQ1REMw QzE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjMzNzBkMjQtYTY1Ni00MzM2LTg0 MmItOWJkNWRjYTJiNDBhLzAvRDU1NDg4NTE1RjQ5QzlFMkE5NUY2MTQ3NTJCQTdD QkFENURDMEMxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACa+q5VdJHeP4LOo3/ZHpEseeTAxe0OgkFMy rtH/uWbleKRxNgP9OIHAAd/I6Sv3/R7cxYIoAe9BN7kUsdeZ6fMCz1Rg1Yb3nrhp C8OPLFJ7xwF+aBk1n+fWSVZXF+8S07Cfu3ITnE/vpafpyr19WZkIRO3g1eAaZbO9 YgJwvUDIymTo2mjXb+Xni74HstcD3ha6IRVoMMiqSqHDR+aEzJqPiTnQ3hRLr/g/ WSMt2DCcJy74oDpwNkW4OhlDVpnZrxQksTdNG1DXfy9kIiSaQdJO0uSwVyTxpNkF 1xdDDWL8engb5fBFJHyfCf1Joz2HnrHwXCPsmXG6s4/AsFHaqoc= -----END CERTIFICATE-----Generated at Wed Sep 23 23:48:19 2026 by rpki-client