$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft File: D3CDCB356F94C51B241188653C7ADC2C79D79424.mft (raw, json) Hash identifier: k/nqUKn6gkgyXDwjJi3HvkB6Mw9pfAfpaUcHCCJnXNY= Subject key identifier: 74:B8:18:59:B7:23:EA:E4:39:C7:22:7B:E5:20:DC:BA:6B:C5:A0:3C Authority key identifier: D3:CD:CB:35:6F:94:C5:1B:24:11:88:65:3C:7A:DC:2C:79:D7:94:24 Certificate issuer: /CN=D3CDCB356F94C51B241188653C7ADC2C79D79424 Certificate serial: 5611F3B2A0E737A492CACDA8175835F22E0E5C8F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 00:01:15 +0000 Manifest this update: Tue 22 Sep 2026 23:56:15 +0000 Manifest next update: Thu 24 Sep 2026 01:01:15 +0000 Files and hashes: 1: 3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa (hash: 83bYI1z3e7ETkpXnXGTkrnk19/a7Qfy/7K16nNObwH0=) 2: D3CDCB356F94C51B241188653C7ADC2C79D79424.crl (hash: 4s3S8QDEGVOSc6BFLvU066rQSjIEY63bV/dnRCbfv3c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.crl rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 01:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:11:f3:b2:a0:e7:37:a4:92:ca:cd:a8:17:58:35:f2:2e:0e:5c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3CDCB356F94C51B241188653C7ADC2C79D79424 Validity Not Before: Sep 22 23:56:15 2026 GMT Not After : Sep 24 01:01:15 2026 GMT Subject: CN=74B81859B723EAE439C7227BE520DCBA6BC5A03C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3a:db:5e:ed:76:86:15:6f:20:e5:9d:ee:b6: a9:8f:2a:ae:86:28:4e:0b:d6:31:79:35:44:73:78: b1:71:7c:5c:19:a0:63:bb:7b:22:cb:e9:90:33:1a: ab:be:9a:f2:c0:58:dc:c5:fa:db:44:3f:1f:ed:6a: 4e:29:fc:cd:28:5f:aa:df:39:75:2c:bb:ca:3f:5a: 08:0e:97:9f:e6:c0:a1:3a:d2:50:50:80:fc:2c:4e: 8d:ab:76:f9:a0:09:46:fb:93:9c:0f:36:06:ad:8d: 0f:d3:66:d9:e1:9f:6f:64:53:8f:a8:cb:c7:6e:cd: 14:81:0c:24:a3:8a:a8:64:91:7b:d5:ed:2c:f0:94: b8:d6:1c:f5:70:c1:24:d0:a2:17:92:79:28:05:c3: ad:f0:92:46:6b:e5:aa:d0:96:9c:1e:4a:e4:f0:18: 4c:df:39:6a:59:6d:91:40:3a:c5:21:62:53:5a:b3: 60:af:f8:b9:de:df:da:eb:3a:c6:f2:0f:61:8e:b2: d0:df:d0:d9:9e:f5:39:1b:24:ef:e6:5e:30:e8:65: 24:d8:3e:fa:15:46:6e:98:48:a5:0e:97:b5:ec:18: 43:24:8d:7d:36:d5:f8:6f:a1:09:50:60:25:71:12: 89:6c:77:0b:09:c9:80:d8:16:61:ed:78:61:74:10: dd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B8:18:59:B7:23:EA:E4:39:C7:22:7B:E5:20:DC:BA:6B:C5:A0:3C X509v3 Authority Key Identifier: keyid:D3:CD:CB:35:6F:94:C5:1B:24:11:88:65:3C:7A:DC:2C:79:D7:94:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:87:5a:76:7e:61:c9:8f:43:80:60:4c:e5:b9:2a:81:05:84: 37:ae:d6:c3:55:55:a1:92:cb:78:e4:68:37:5b:5c:18:3b:de: da:d5:29:83:7a:94:9a:93:3f:92:f6:f2:ba:e8:b4:2c:4b:c1: 06:62:fe:17:48:ab:9e:cd:39:d4:bc:40:64:3c:7d:0a:b1:51: 82:27:77:40:ab:03:bb:55:21:82:28:6a:17:7e:ea:61:0a:7f: 67:be:b2:99:14:a4:11:d6:63:cc:64:c0:b5:aa:c3:62:e9:eb: 84:f4:de:08:fd:1d:80:89:a0:35:60:20:75:02:2d:e0:66:22: 60:68:25:30:62:f2:84:e4:72:51:d2:c3:87:df:83:dd:56:ff: d8:51:40:66:7a:fa:d9:b5:3e:8d:78:ed:b6:99:0f:9e:9c:32: ef:cb:bc:8b:fc:1d:39:a9:93:be:96:60:60:8c:58:56:5a:28: 56:df:69:64:54:83:05:40:07:0a:24:a4:22:0f:3d:81:2d:21: 95:a4:48:1a:25:91:72:f8:8c:3d:28:49:62:57:89:0d:d3:af: f8:a3:96:a0:a9:95:0b:71:3f:81:4d:a1:82:5b:34:5a:a5:f6: 04:45:0a:7e:79:14:5f:2f:8a:c8:9f:ce:14:73:f5:57:68:a7: 95:2e:24:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVhHzsqDnN6SSys2oF1g18i4OXI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNDRENCMzU2Rjk0QzUxQjI0MTE4ODY1M0M3QURDMkM3 OUQ3OTQyNDAeFw0yNjA5MjIyMzU2MTVaFw0yNjA5MjQwMTAxMTVaMDMxMTAvBgNV BAMTKDc0QjgxODU5QjcyM0VBRTQzOUM3MjI3QkU1MjBEQ0JBNkJDNUEwM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkOtte7XaGFW8g5Z3utqmPKq6G KE4L1jF5NURzeLFxfFwZoGO7eyLL6ZAzGqu+mvLAWNzF+ttEPx/tak4p/M0oX6rf OXUsu8o/WggOl5/mwKE60lBQgPwsTo2rdvmgCUb7k5wPNgatjQ/TZtnhn29kU4+o y8duzRSBDCSjiqhkkXvV7SzwlLjWHPVwwSTQoheSeSgFw63wkkZr5arQlpweSuTw GEzfOWpZbZFAOsUhYlNas2Cv+Lne39rrOsbyD2GOstDf0Nme9TkbJO/mXjDoZSTY PvoVRm6YSKUOl7XsGEMkjX021fhvoQlQYCVxEolsdwsJyYDYFmHteGF0EN1FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdLgYWbcj6uQ5xyJ75SDcumvFoDwwHwYDVR0j BBgwFoAU083LNW+UxRskEYhlPHrcLHnXlCQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2FmY2JmYmItYmEzZi00ZDUzLWEwNGYtMTRkNmY0YmUwY2IxLzAvRDNDRENCMzU2 Rjk0QzUxQjI0MTE4ODY1M0M3QURDMkM3OUQ3OTQyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EM0NEQ0IzNTZGOTRDNTFCMjQxMTg4NjUzQzdBREMyQzc5RDc5 NDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzAvRDNDRENCMzU2Rjk0QzUxQjI0MTE4ODY1M0M3QURD MkM3OUQ3OTQyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMWHWnZ+YcmPQ4BgTOW5KoEFhDeu1sNVVaGS y3jkaDdbXBg73trVKYN6lJqTP5L28rrotCxLwQZi/hdIq57NOdS8QGQ8fQqxUYIn d0CrA7tVIYIoahd+6mEKf2e+spkUpBHWY8xkwLWqw2Lp64T03gj9HYCJoDVgIHUC LeBmImBoJTBi8oTkclHSw4ffg91W/9hRQGZ6+tm1Po147baZD56cMu/LvIv8HTmp k76WYGCMWFZaKFbfaWRUgwVABwokpCIPPYEtIZWkSBolkXL4jD0oSWJXiQ3Tr/ij lqCplQtxP4FNoYJbNFql9gRFCn55FF8visifzhRz9Vdop5UuJNY= -----END CERTIFICATE-----Generated at Wed Sep 23 15:53:22 2026 by rpki-client