$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft File: D69827B97765F94998CEA76A23999571F2BDA426.mft (raw, json) Hash identifier: gNPJmM3XflCdSdaelOymncCWPEoFalUTE4RZil7GRPM= Subject key identifier: 3E:9D:DD:E7:72:6E:A6:EC:10:B7:C5:C8:B8:94:B5:E0:85:CD:8A:FF Authority key identifier: D6:98:27:B9:77:65:F9:49:98:CE:A7:6A:23:99:95:71:F2:BD:A4:26 Certificate issuer: /CN=D69827B97765F94998CEA76A23999571F2BDA426 Certificate serial: 325E39A969BDF25945749F7F69A60AEA61CDDEA3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 05:37:46 +0000 Manifest this update: Thu 24 Sep 2026 05:32:46 +0000 Manifest next update: Fri 25 Sep 2026 06:35:46 +0000 Files and hashes: 1: 3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa (hash: TZoS498ctZpsXD1NhIQ84Q2pw5rT92BFxmYiyFfNKls=) 2: D69827B97765F94998CEA76A23999571F2BDA426.crl (hash: nIhU2Xc7rQRlqdB5b422jx4/0KVuhSNDof5obW0hqj0=) 3: 3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa (hash: vm3LwDwLeRAwMnQkRWhgtW4ETHGNuBudAWSRp1ytOKg=) 4: 3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa (hash: iLHx8gOj2lpsnRU9gP4XnWUqEugFMffYvM4rOFlrJs8=) 5: 323430353a633763303a3a2f33322d3332203d3e20313339393738.roa (hash: 0y6JUWjxpl3UiTjjA3rkmhxCstrj/MfIM81XvNQIAG8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.crl rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 06:35:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:5e:39:a9:69:bd:f2:59:45:74:9f:7f:69:a6:0a:ea:61:cd:de:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D69827B97765F94998CEA76A23999571F2BDA426 Validity Not Before: Sep 24 05:32:46 2026 GMT Not After : Sep 25 06:35:46 2026 GMT Subject: CN=3E9DDDE7726EA6EC10B7C5C8B894B5E085CD8AFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:25:13:87:11:b9:d2:3a:f3:4d:93:b3:d0:c3: 51:87:17:6d:a5:74:51:db:e8:78:bd:d2:15:07:03: 4e:ec:43:33:bc:3a:26:0c:12:a6:49:f6:2f:b4:06: df:36:42:29:77:f4:a7:5e:5a:df:8f:8b:54:a8:d0: 0f:d1:a5:ef:7d:8e:eb:2d:ef:b4:53:69:c8:f2:cd: 90:6d:a5:9a:f9:c4:85:56:b0:78:7a:bb:1b:10:3a: 49:c9:cb:13:ea:bf:30:b6:30:73:47:3e:e7:c6:3a: f5:87:b4:26:98:f1:b4:91:29:eb:b5:87:36:b5:46: d6:ea:3d:58:3f:18:92:c8:77:3b:d3:4c:63:82:1d: 81:d1:c0:e9:03:2e:37:cb:35:3f:22:3e:82:41:88: ca:a6:6f:e9:02:0f:0a:7a:ab:32:e3:55:64:e1:bf: 04:13:a6:98:9a:fd:f7:d9:98:3f:be:1a:02:fc:11: c1:42:5e:57:1f:60:c6:de:ec:d3:ff:76:43:11:e7: a0:d9:56:49:17:82:58:a0:2f:99:1b:50:d2:fa:24: 8f:47:1e:b2:c4:e4:b1:fd:9b:85:48:7f:56:86:a7: c2:c3:ec:9b:79:ec:3c:2a:b1:d8:9d:e9:e2:68:02: 4b:9b:33:fb:91:3e:4a:c8:f9:81:20:7f:90:aa:3a: 45:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9D:DD:E7:72:6E:A6:EC:10:B7:C5:C8:B8:94:B5:E0:85:CD:8A:FF X509v3 Authority Key Identifier: keyid:D6:98:27:B9:77:65:F9:49:98:CE:A7:6A:23:99:95:71:F2:BD:A4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:cf:74:38:04:a6:04:94:f4:60:0b:0f:00:2b:ac:35:25:6a: a8:66:e6:d9:5c:f5:3f:6c:34:47:2d:e4:19:55:35:db:3d:01: f9:9e:b7:53:ce:01:16:8c:d4:ff:4c:55:4a:1f:63:fa:d2:b5: 0f:a2:35:e3:18:e0:ca:81:19:b9:1c:b3:cc:fb:4f:d4:62:86: bb:3b:1b:0a:a6:fc:e1:f1:3b:84:63:9e:82:e2:05:9b:ed:0d: 5d:e2:a7:c4:9d:39:ee:03:d8:c7:0a:c3:dd:c4:7a:59:04:dd: 25:dd:10:6a:c3:5a:60:c3:ce:bf:ad:52:9c:a0:7e:13:80:c1: ee:d8:37:af:1e:91:13:6a:e1:dd:7b:00:f7:d1:a4:bd:9b:1b: ec:78:15:8f:48:3f:6e:98:ec:67:bc:b6:b3:83:fd:61:34:e2: 23:e0:bd:1a:cf:fe:a2:3c:8a:7b:d7:e0:51:e7:51:78:b0:b7: 71:0f:2b:8a:2f:34:da:32:d6:9c:34:89:1e:9f:6a:74:fb:1b: 13:ef:2f:b5:6e:3b:d0:13:70:be:e2:b2:a4:d1:4d:6e:1f:30: be:c1:ba:2e:9d:26:09:15:0c:91:53:d3:87:9c:a0:2b:67:17: 67:21:a4:d2:9d:31:88:e5:17:03:84:7e:9c:c0:1e:b4:b2:de: 65:8c:e7:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMl45qWm98llFdJ9/aaYK6mHN3qMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5ODI3Qjk3NzY1Rjk0OTk4Q0VBNzZBMjM5OTk1NzFG MkJEQTQyNjAeFw0yNjA5MjQwNTMyNDZaFw0yNjA5MjUwNjM1NDZaMDMxMTAvBgNV BAMTKDNFOUREREU3NzI2RUE2RUMxMEI3QzVDOEI4OTRCNUUwODVDRDhBRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUJROHEbnSOvNNk7PQw1GHF22l dFHb6Hi90hUHA07sQzO8OiYMEqZJ9i+0Bt82Qil39KdeWt+Pi1So0A/Rpe99just 77RTacjyzZBtpZr5xIVWsHh6uxsQOknJyxPqvzC2MHNHPufGOvWHtCaY8bSRKeu1 hza1RtbqPVg/GJLIdzvTTGOCHYHRwOkDLjfLNT8iPoJBiMqmb+kCDwp6qzLjVWTh vwQTppia/ffZmD++GgL8EcFCXlcfYMbe7NP/dkMR56DZVkkXgligL5kbUNL6JI9H HrLE5LH9m4VIf1aGp8LD7Jt57Dwqsdid6eJoAkubM/uRPkrI+YEgf5CqOkWnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPp3d53JupuwQt8XIuJS14IXNiv8wHwYDVR0j BBgwFoAU1pgnuXdl+UmYzqdqI5mVcfK9pCYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjdiODdmNmQtMjlhNy00YjRjLTgxYzctNWI0Y2JkYjJjYjZhLzAvRDY5ODI3Qjk3 NzY1Rjk0OTk4Q0VBNzZBMjM5OTk1NzFGMkJEQTQyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjk4MjdCOTc3NjVGOTQ5OThDRUE3NkEyMzk5OTU3MUYyQkRB NDI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjdiODdmNmQtMjlhNy00YjRjLTgx YzctNWI0Y2JkYjJjYjZhLzAvRDY5ODI3Qjk3NzY1Rjk0OTk4Q0VBNzZBMjM5OTk1 NzFGMkJEQTQyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDPdDgEpgSU9GALDwArrDUlaqhm5tlc9T9s NEct5BlVNds9Afmet1POARaM1P9MVUofY/rStQ+iNeMY4MqBGbkcs8z7T9Rihrs7 Gwqm/OHxO4RjnoLiBZvtDV3ip8SdOe4D2McKw93EelkE3SXdEGrDWmDDzr+tUpyg fhOAwe7YN68ekRNq4d17APfRpL2bG+x4FY9IP26Y7Ge8trOD/WE04iPgvRrP/qI8 invX4FHnUXiwt3EPK4ovNNoy1pw0iR6fanT7GxPvL7VuO9ATcL7isqTRTW4fML7B ui6dJgkVDJFT04ecoCtnF2chpNKdMYjlFwOEfpzAHrSy3mWM54M= -----END CERTIFICATE-----Generated at Fri Sep 25 01:02:43 2026 by rpki-client