$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft File: DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft (raw, json) Hash identifier: 6d81wWU9rM0DaAYvUJMVpVamtoTfDDYbhLMe7kPGsRM= Subject key identifier: 2A:01:A0:97:E0:A0:DC:AF:FC:B2:80:08:84:14:6F:5F:3D:91:96:F0 Authority key identifier: DF:34:17:50:0C:E0:95:64:B4:A4:CE:AF:ED:E4:A7:6C:DF:A5:A4:25 Certificate issuer: /CN=DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425 Certificate serial: 5F61B868F04B2FEC86483A1AE9AA25FCECC43DF5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 21:22:29 +0000 Manifest this update: Wed 23 Sep 2026 21:17:29 +0000 Manifest next update: Thu 24 Sep 2026 22:11:29 +0000 Files and hashes: 1: 3130332e3135312e39392e302f32342d3234203d3e203137353338.roa (hash: cHi+wDASSXBvEYUwne4ghJo+D7FzU4toHGViW0cqxos=) 2: 3130332e3135312e39382e302f32342d3234203d3e203137353338.roa (hash: SGuts0/+uyJce0bHFyKC5/STYlo5gf3uXrTdV1Kngrs=) 3: DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.crl (hash: yj+c4LtY9aKxL9XrQbQzAEho5p3XCUEO4egyMxxFnRE=) 4: 323030313a6466333a623938303a3a2f34382d3438203d3e203137353338.roa (hash: Bl/k50LueSgJjg8VDKjdeOLA5vAz35PavygXYOL9fXU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.crl rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:61:b8:68:f0:4b:2f:ec:86:48:3a:1a:e9:aa:25:fc:ec:c4:3d:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425 Validity Not Before: Sep 23 21:17:29 2026 GMT Not After : Sep 24 22:11:29 2026 GMT Subject: CN=2A01A097E0A0DCAFFCB2800884146F5F3D9196F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bc:d4:bb:d8:4a:ca:f9:84:03:4f:38:95:2c: 0c:93:93:3e:ea:1b:b3:3d:7c:d5:58:36:2e:ef:c0: c5:40:a8:f4:79:81:64:be:22:46:4b:10:98:e6:2a: c2:93:38:84:35:04:2f:94:b9:85:22:29:ea:1f:05: c3:35:17:a0:88:ac:78:d4:2f:d3:bc:d6:d3:74:8a: cd:e3:4f:ab:6c:b5:7f:d3:70:02:d0:dd:4e:0a:0b: 15:87:dc:c8:0f:d6:a2:c7:2c:94:c3:2d:2d:5d:0d: 47:90:f2:60:db:f9:ac:35:9f:11:14:f0:64:07:fc: 2d:bb:46:38:63:45:88:a5:67:17:26:f7:4f:f2:a5: 58:d5:c3:15:f1:cd:e7:ca:ee:16:56:2e:8b:0e:1c: 31:24:3c:b7:1e:57:62:44:2a:cb:fe:a6:7c:92:e4: 44:c3:b3:95:0c:20:be:4c:a2:b9:ad:c9:6d:10:ba: ae:c5:b6:a2:18:f8:08:69:19:ae:f1:b2:b5:32:e7: 31:af:f2:11:a8:be:01:ec:c3:e4:3d:98:eb:6d:1d: 92:27:3d:1a:da:f4:9f:3d:a8:db:b6:b2:5b:91:11: f8:bc:f3:9e:a1:fd:f5:9e:9d:42:5e:9f:0f:29:ed: 81:4d:51:5c:35:14:56:5e:5d:11:2e:d8:e5:30:74: f6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:01:A0:97:E0:A0:DC:AF:FC:B2:80:08:84:14:6F:5F:3D:91:96:F0 X509v3 Authority Key Identifier: keyid:DF:34:17:50:0C:E0:95:64:B4:A4:CE:AF:ED:E4:A7:6C:DF:A5:A4:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:5e:14:e1:98:f3:e9:97:4f:0d:b4:3b:ba:4f:ae:21:70:41: d7:22:d9:1b:66:a3:2b:be:87:b1:e6:d0:62:55:7c:ec:0e:60: 95:45:36:20:d4:2c:22:ff:f1:a7:0a:f2:5e:61:23:c0:f3:ba: 13:9b:12:a9:49:28:b0:ac:6f:bb:78:5d:52:c9:a6:df:e9:27: d8:f6:69:df:5b:a6:a5:af:e6:5b:28:35:22:38:ec:d9:2b:aa: b7:d0:b3:f0:24:90:a5:55:09:9a:c0:a5:55:65:e7:75:4d:30: 01:e3:e7:61:e4:c2:08:4e:3c:64:21:00:54:a9:a5:04:23:aa: f4:ef:7d:b0:2e:36:cd:f7:09:e4:ed:d5:68:16:f3:42:a0:4d: b3:d4:f0:ac:da:86:b8:57:0c:56:ae:f5:7a:5c:26:96:e6:0f: 99:34:54:aa:4a:45:06:2e:d2:fc:3e:02:8f:69:fc:ee:69:c8: b9:b6:d8:a6:82:40:95:d7:17:1c:27:d6:b2:42:27:74:c7:8b: 8f:d5:1e:0c:01:d6:af:b7:12:19:27:36:8b:33:bc:55:31:bb: 51:45:f2:2c:e6:80:08:51:22:7d:19:a7:cd:d9:b6:d2:3b:93: ee:3c:f4:42:8b:3c:1f:99:c6:7a:16:88:94:25:94:c9:4d:75: cb:6d:f3:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX2G4aPBLL+yGSDoa6aol/OzEPfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNDE3NTAwQ0UwOTU2NEI0QTRDRUFGRURFNEE3NkNE RkE1QTQyNTAeFw0yNjA5MjMyMTE3MjlaFw0yNjA5MjQyMjExMjlaMDMxMTAvBgNV BAMTKDJBMDFBMDk3RTBBMERDQUZGQ0IyODAwODg0MTQ2RjVGM0Q5MTk2RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8vNS72ErK+YQDTziVLAyTkz7q G7M9fNVYNi7vwMVAqPR5gWS+IkZLEJjmKsKTOIQ1BC+UuYUiKeofBcM1F6CIrHjU L9O81tN0is3jT6tstX/TcALQ3U4KCxWH3MgP1qLHLJTDLS1dDUeQ8mDb+aw1nxEU 8GQH/C27RjhjRYilZxcm90/ypVjVwxXxzefK7hZWLosOHDEkPLceV2JEKsv+pnyS 5ETDs5UMIL5MormtyW0Quq7FtqIY+AhpGa7xsrUy5zGv8hGovgHsw+Q9mOttHZIn PRra9J89qNu2sluREfi8856h/fWenUJenw8p7YFNUVw1FFZeXREu2OUwdPYZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKgGgl+Cg3K/8soAIhBRvXz2RlvAwHwYDVR0j BBgwFoAU3zQXUAzglWS0pM6v7eSnbN+lpCUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjM3ODVlNjUtNTFlMi00YjFiLTgyZjktZTc1M2FkNGIyNDBmLzAvREYzNDE3NTAw Q0UwOTU2NEI0QTRDRUFGRURFNEE3NkNERkE1QTQyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjM0MTc1MDBDRTA5NTY0QjRBNENFQUZFREU0QTc2Q0RGQTVB NDI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjM3ODVlNjUtNTFlMi00YjFiLTgy ZjktZTc1M2FkNGIyNDBmLzAvREYzNDE3NTAwQ0UwOTU2NEI0QTRDRUFGRURFNEE3 NkNERkE1QTQyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVeFOGY8+mXTw20O7pPriFwQdci2Rtmoyu+ h7Hm0GJVfOwOYJVFNiDULCL/8acK8l5hI8DzuhObEqlJKLCsb7t4XVLJpt/pJ9j2 ad9bpqWv5lsoNSI47NkrqrfQs/AkkKVVCZrApVVl53VNMAHj52HkwghOPGQhAFSp pQQjqvTvfbAuNs33CeTt1WgW80KgTbPU8KzahrhXDFau9XpcJpbmD5k0VKpKRQYu 0vw+Ao9p/O5pyLm22KaCQJXXFxwn1rJCJ3THi4/VHgwB1q+3EhknNoszvFUxu1FF 8izmgAhRIn0Zp83ZttI7k+489EKLPB+ZxnoWiJQllMlNdctt8yM= -----END CERTIFICATE-----Generated at Thu Sep 24 04:21:18 2026 by rpki-client