$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/DFBD8473BE5516B109B5A1791D9DCBDF67230456.mft File: DFBD8473BE5516B109B5A1791D9DCBDF67230456.mft (raw, json) Hash identifier: 6Tk1cPGPKBJK3xKXleBvlWlXGuBkDvTfOSSWaLqXM9Y= Subject key identifier: 09:5B:4F:39:00:63:C8:96:10:4D:40:94:3E:A4:E9:C6:DD:5D:CE:86 Authority key identifier: DF:BD:84:73:BE:55:16:B1:09:B5:A1:79:1D:9D:CB:DF:67:23:04:56 Certificate issuer: /CN=DFBD8473BE5516B109B5A1791D9DCBDF67230456 Certificate serial: 2B27371B558CFE32FC662D4D97BF9FE6A9E2722C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFBD8473BE5516B109B5A1791D9DCBDF67230456.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/DFBD8473BE5516B109B5A1791D9DCBDF67230456.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 19:24:57 +0000 Manifest this update: Wed 23 Sep 2026 19:19:57 +0000 Manifest next update: Thu 24 Sep 2026 21:21:57 +0000 Files and hashes: 1: 3130332e37382e3234302e302f32342d3234203d3e20313530343836.roa (hash: /NpblNWeDyruUPm/IDhGAws5AddnYBZqkNeH/J3r+Ao=) 2: DFBD8473BE5516B109B5A1791D9DCBDF67230456.crl (hash: B1z84iFvzbf2JLHQQYmuRod+JPbspqVQY74FGbBddW8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/DFBD8473BE5516B109B5A1791D9DCBDF67230456.crl rsync://rpki-rsync.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/DFBD8473BE5516B109B5A1791D9DCBDF67230456.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFBD8473BE5516B109B5A1791D9DCBDF67230456.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:27:37:1b:55:8c:fe:32:fc:66:2d:4d:97:bf:9f:e6:a9:e2:72:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFBD8473BE5516B109B5A1791D9DCBDF67230456 Validity Not Before: Sep 23 19:19:57 2026 GMT Not After : Sep 24 21:21:57 2026 GMT Subject: CN=095B4F390063C896104D40943EA4E9C6DD5DCE86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7d:6a:4c:bc:97:46:04:e4:80:3e:d6:04:cb: 3e:91:12:e0:8c:ae:0a:18:8f:a3:41:00:46:8f:44: 06:d2:b4:a3:3a:f2:5e:1c:6b:f8:12:3b:70:02:40: fc:18:2d:72:70:1b:07:1b:f4:41:e9:d7:41:1b:54: 6e:1f:90:36:2d:a6:50:fd:f1:dd:a9:63:01:74:55: 8a:0b:93:fe:c0:8a:83:22:0f:4f:de:96:c1:4e:f3: e4:3f:ac:49:76:89:42:10:94:9b:52:de:6d:39:07: ba:5d:b4:4a:99:79:8c:62:ac:90:9f:30:7b:fc:0f: f3:54:10:99:bb:d3:e2:68:96:f6:b1:24:67:fe:38: f4:af:20:79:ee:ba:6b:cc:c2:9c:17:90:6b:e9:29: 56:71:10:3b:45:60:33:78:70:82:bd:75:04:bd:48: 01:8e:45:65:6d:86:d3:af:5b:ea:7c:d9:ac:25:55: 64:3b:b9:67:bf:5c:3c:da:40:29:eb:a2:00:ff:20: 96:8b:d0:1b:4f:05:84:23:06:ed:db:e6:92:65:cc: 6b:cf:83:16:17:1b:24:15:ef:0f:80:40:14:98:d5: 03:60:73:88:e0:a1:de:49:04:39:ef:23:1d:6b:d5: 07:d8:2e:81:68:48:a2:7a:be:73:1f:15:0f:91:75: de:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5B:4F:39:00:63:C8:96:10:4D:40:94:3E:A4:E9:C6:DD:5D:CE:86 X509v3 Authority Key Identifier: keyid:DF:BD:84:73:BE:55:16:B1:09:B5:A1:79:1D:9D:CB:DF:67:23:04:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/DFBD8473BE5516B109B5A1791D9DCBDF67230456.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFBD8473BE5516B109B5A1791D9DCBDF67230456.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/DFBD8473BE5516B109B5A1791D9DCBDF67230456.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:cc:73:27:12:1e:0e:22:c6:c8:11:86:10:24:56:3c:29:2a: c5:c7:d9:8b:a9:ce:3b:36:14:5d:7b:92:4b:c0:ff:55:c7:0f: 5c:4f:d6:d0:e3:22:38:34:64:cc:3a:66:98:18:12:ad:0c:1f: 0b:f2:51:c6:9f:ce:6c:84:2c:c1:e7:be:a8:f0:8d:ee:6d:49: 83:00:d3:5d:fc:79:39:fe:16:8a:86:f9:ee:50:c3:59:43:71: bb:81:e3:e2:07:d7:a3:24:87:37:7f:7e:f8:2f:1a:2f:fd:66: cd:86:01:05:16:c6:74:de:c3:6e:31:9b:42:b5:ae:61:fb:86: bd:65:69:25:fd:ce:ce:49:47:8c:89:b6:f4:9d:b3:a4:c4:e8: 2c:74:34:e9:80:7b:e6:aa:4b:ec:11:7c:8a:08:cd:3a:fe:7c: 50:46:ee:0b:8f:91:6d:ce:b1:01:aa:52:99:af:93:25:d1:b0: da:b6:d5:44:9d:67:d9:0b:d6:b7:ad:c6:4b:5a:66:85:f0:83: 54:46:3b:b8:f5:88:59:93:45:98:4b:e3:34:b4:df:d8:c9:e6: 80:bb:f9:fb:67:34:92:db:b1:a5:bf:e9:92:bc:d7:54:67:fe: c7:9d:27:40:5f:4e:7f:73:ca:50:d1:6a:81:26:3d:ba:c4:31: 3d:b9:d8:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKyc3G1WM/jL8Zi1Nl7+f5qniciwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZCRDg0NzNCRTU1MTZCMTA5QjVBMTc5MUQ5RENCREY2 NzIzMDQ1NjAeFw0yNjA5MjMxOTE5NTdaFw0yNjA5MjQyMTIxNTdaMDMxMTAvBgNV BAMTKDA5NUI0RjM5MDA2M0M4OTYxMDRENDA5NDNFQTRFOUM2REQ1RENFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/fWpMvJdGBOSAPtYEyz6REuCM rgoYj6NBAEaPRAbStKM68l4ca/gSO3ACQPwYLXJwGwcb9EHp10EbVG4fkDYtplD9 8d2pYwF0VYoLk/7AioMiD0/elsFO8+Q/rEl2iUIQlJtS3m05B7pdtEqZeYxirJCf MHv8D/NUEJm70+JolvaxJGf+OPSvIHnuumvMwpwXkGvpKVZxEDtFYDN4cIK9dQS9 SAGORWVthtOvW+p82awlVWQ7uWe/XDzaQCnrogD/IJaL0BtPBYQjBu3b5pJlzGvP gxYXGyQV7w+AQBSY1QNgc4jgod5JBDnvIx1r1QfYLoFoSKJ6vnMfFQ+Rdd4HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCVtPOQBjyJYQTUCUPqTpxt1dzoYwHwYDVR0j BBgwFoAU372Ec75VFrEJtaF5HZ3L32cjBFYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjNjOTczZDUtZmU5NC00MDBkLWJjYmYtZjIzM2U4YWM1NTM3LzAvREZCRDg0NzNC RTU1MTZCMTA5QjVBMTc5MUQ5RENCREY2NzIzMDQ1Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERkJEODQ3M0JFNTUxNkIxMDlCNUExNzkxRDlEQ0JERjY3MjMw NDU2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjNjOTczZDUtZmU5NC00MDBkLWJj YmYtZjIzM2U4YWM1NTM3LzAvREZCRDg0NzNCRTU1MTZCMTA5QjVBMTc5MUQ5RENC REY2NzIzMDQ1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKvMcycSHg4ixsgRhhAkVjwpKsXH2Yupzjs2 FF17kkvA/1XHD1xP1tDjIjg0ZMw6ZpgYEq0MHwvyUcafzmyELMHnvqjwje5tSYMA 0138eTn+FoqG+e5Qw1lDcbuB4+IH16Mkhzd/fvgvGi/9Zs2GAQUWxnTew24xm0K1 rmH7hr1laSX9zs5JR4yJtvSds6TE6Cx0NOmAe+aqS+wRfIoIzTr+fFBG7guPkW3O sQGqUpmvkyXRsNq21USdZ9kL1retxktaZoXwg1RGO7j1iFmTRZhL4zS039jJ5oC7 +ftnNJLbsaW/6ZK811Rn/sedJ0BfTn9zylDRaoEmPbrEMT252FU= -----END CERTIFICATE-----Generated at Thu Sep 24 09:01:05 2026 by rpki-client