$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft File: DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft (raw, json) Hash identifier: zQRvolGqtyCwXTX19pZFZkd55M8lAcvCL/2zO43u6lc= Subject key identifier: 94:5D:B0:08:96:99:31:DA:BC:E6:4C:7D:E1:56:D3:0D:8C:15:8D:7B Authority key identifier: DC:2E:00:B2:12:67:A4:6B:D6:95:F6:DB:BE:C2:98:9F:48:30:C8:B0 Certificate issuer: /CN=DC2E00B21267A46BD695F6DBBEC2989F4830C8B0 Certificate serial: 1AC921741FFA2A29E763C68A85AE28C4F5371F23 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 13:12:23 +0000 Manifest this update: Wed 23 Sep 2026 13:07:23 +0000 Manifest next update: Thu 24 Sep 2026 13:20:23 +0000 Files and hashes: 1: 3130332e34342e31392e302f32342d3234203d3e20313530313931.roa (hash: 73zmQhG7Zu+0eZu4dZISk1NiR9ExgcKyarQj6CIDk/k=) 2: DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.crl (hash: Sgq6NB6hwRZrY1xXt1tqJm+mk5EMadkWG43hCcGnZlo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.crl rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:c9:21:74:1f:fa:2a:29:e7:63:c6:8a:85:ae:28:c4:f5:37:1f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC2E00B21267A46BD695F6DBBEC2989F4830C8B0 Validity Not Before: Sep 23 13:07:23 2026 GMT Not After : Sep 24 13:20:23 2026 GMT Subject: CN=945DB008969931DABCE64C7DE156D30D8C158D7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cb:96:69:0c:1b:67:62:be:bf:e8:1f:82:87: 8a:51:4c:01:5a:4c:d8:f5:52:e4:75:d9:5a:4d:ea: ba:b8:63:1f:9e:2e:a2:a3:79:15:86:85:28:3c:06: ff:af:96:71:56:ba:da:cd:9f:ce:9f:96:b6:a9:06: 4c:9d:64:b9:bf:1d:1b:f1:88:77:51:44:57:4f:39: d9:71:0f:df:5a:31:1f:8c:53:1a:6f:aa:2f:64:d6: 8b:55:c3:f7:b7:2b:3b:a6:4c:30:78:47:a5:5e:4b: 70:a4:25:09:86:07:77:2c:0b:e6:4e:5f:ae:20:b8: 7e:56:fe:c9:bf:25:a7:db:9a:43:91:2f:8b:1a:09: 10:de:01:d7:9f:46:ff:51:0a:cc:3d:74:d6:34:1a: 60:c0:7f:cd:9a:83:1e:17:f8:71:07:9b:3e:26:53: 52:a5:6c:bf:d3:db:3b:e4:72:55:3f:38:0e:ce:93: e0:e6:0a:de:9c:3e:18:27:17:e2:20:89:d0:c0:62: eb:60:a2:21:a3:21:39:01:e5:89:07:0b:c2:68:73: 3b:84:41:53:5d:db:da:20:1d:ad:58:3e:78:63:17: 03:f2:d8:e2:78:44:6d:59:e7:4f:32:94:d6:2d:47: d9:2b:ad:76:08:3e:7b:e8:d9:51:f1:6d:63:db:de: 0d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5D:B0:08:96:99:31:DA:BC:E6:4C:7D:E1:56:D3:0D:8C:15:8D:7B X509v3 Authority Key Identifier: keyid:DC:2E:00:B2:12:67:A4:6B:D6:95:F6:DB:BE:C2:98:9F:48:30:C8:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:e4:80:66:6d:36:bd:0d:9a:f0:6a:37:03:67:c3:06:2c:c8: a1:f2:60:c4:71:0a:cf:cf:45:5d:84:a5:28:45:0d:95:51:d7: d5:7d:23:e1:2c:98:95:65:c9:20:3e:38:75:94:9f:bb:9b:6a: 58:d4:3c:4f:ec:44:22:cc:e6:11:fb:eb:d8:1c:b2:8b:37:77: c4:05:6a:a4:ae:1f:ac:39:05:c4:87:de:85:ff:42:81:4c:20: be:37:d6:9e:67:dd:af:00:0a:6e:d8:40:a5:82:85:7a:fb:c0: e2:aa:18:e0:66:fd:6a:1f:9e:d4:4a:a8:bb:25:1d:bc:be:63: b0:a2:b9:55:27:a7:73:47:d8:67:07:de:10:fd:6f:2c:08:24: db:16:51:5b:bc:29:ce:c3:60:a3:28:23:d5:d1:25:9b:a9:2d: 5c:84:06:54:1f:1b:70:be:5c:0e:4e:63:5c:f2:13:69:a5:a1: d2:cc:22:83:04:4a:a0:35:47:b8:24:fa:4d:83:b2:78:2a:35: ee:28:21:5e:6a:d0:61:69:4b:b3:c1:40:80:9d:2f:c1:d2:db: 53:3e:65:0d:ac:96:e9:bd:b1:a5:e2:1b:61:16:6d:52:03:f7: bd:fc:8d:c9:05:8c:ad:7e:34:a0:87:26:d3:53:b5:e8:f7:3a: 75:9c:18:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGskhdB/6KinnY8aKha4oxPU3HyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMyRTAwQjIxMjY3QTQ2QkQ2OTVGNkRCQkVDMjk4OUY0 ODMwQzhCMDAeFw0yNjA5MjMxMzA3MjNaFw0yNjA5MjQxMzIwMjNaMDMxMTAvBgNV BAMTKDk0NURCMDA4OTY5OTMxREFCQ0U2NEM3REUxNTZEMzBEOEMxNThEN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxy5ZpDBtnYr6/6B+Ch4pRTAFa TNj1UuR12VpN6rq4Yx+eLqKjeRWGhSg8Bv+vlnFWutrNn86flrapBkydZLm/HRvx iHdRRFdPOdlxD99aMR+MUxpvqi9k1otVw/e3KzumTDB4R6VeS3CkJQmGB3csC+ZO X64guH5W/sm/JafbmkORL4saCRDeAdefRv9RCsw9dNY0GmDAf82agx4X+HEHmz4m U1KlbL/T2zvkclU/OA7Ok+DmCt6cPhgnF+IgidDAYutgoiGjITkB5YkHC8JoczuE QVNd29ogHa1YPnhjFwPy2OJ4RG1Z508ylNYtR9krrXYIPnvo2VHxbWPb3g2DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlF2wCJaZMdq85kx94VbTDYwVjXswHwYDVR0j BBgwFoAU3C4AshJnpGvWlfbbvsKYn0gwyLAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjgxMTdjYTgtYjRlNS00NjdhLTg4YTgtYTRiNjNlNDBjM2VkLzAvREMyRTAwQjIx MjY3QTQ2QkQ2OTVGNkRCQkVDMjk4OUY0ODMwQzhCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQzJFMDBCMjEyNjdBNDZCRDY5NUY2REJCRUMyOTg5RjQ4MzBD OEIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjgxMTdjYTgtYjRlNS00NjdhLTg4 YTgtYTRiNjNlNDBjM2VkLzAvREMyRTAwQjIxMjY3QTQ2QkQ2OTVGNkRCQkVDMjk4 OUY0ODMwQzhCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHkgGZtNr0NmvBqNwNnwwYsyKHyYMRxCs/P RV2EpShFDZVR19V9I+EsmJVlySA+OHWUn7ubaljUPE/sRCLM5hH769gcsos3d8QF aqSuH6w5BcSH3oX/QoFMIL431p5n3a8ACm7YQKWChXr7wOKqGOBm/WofntRKqLsl Hby+Y7CiuVUnp3NH2GcH3hD9bywIJNsWUVu8Kc7DYKMoI9XRJZupLVyEBlQfG3C+ XA5OY1zyE2mlodLMIoMESqA1R7gk+k2DsngqNe4oIV5q0GFpS7PBQICdL8HS21M+ ZQ2slum9saXiG2EWbVID9738jckFjK1+NKCHJtNTtej3OnWcGLM= -----END CERTIFICATE-----Generated at Thu Sep 24 01:03:39 2026 by rpki-client