$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft File: D626CC25972BF9948C6B3BDE4E354C71F2570880.mft (raw, json) Hash identifier: cMlaGFrW7JSeLlW+73MyfgEjfs7xRq0Fgv5HtFZez0Y= Subject key identifier: D6:81:BD:1E:B4:97:1C:02:E2:97:1A:F3:4B:AE:3A:CB:BE:B0:B6:16 Authority key identifier: D6:26:CC:25:97:2B:F9:94:8C:6B:3B:DE:4E:35:4C:71:F2:57:08:80 Certificate issuer: /CN=D626CC25972BF9948C6B3BDE4E354C71F2570880 Certificate serial: 125A82C04474640CFA8FFA8B3D896FF6FA42BD2E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 14:38:55 +0000 Manifest this update: Thu 24 Sep 2026 14:33:55 +0000 Manifest next update: Fri 25 Sep 2026 15:34:55 +0000 Files and hashes: 1: 3130332e3130342e3230342e302f32342d3234203d3e20313336383639.roa (hash: 0aDHxXMr4KUimzxt4JkDC404Ezku76mxRU40fEJqQUU=) 2: 323430323a316134303a3a2f33322d3332203d3e20313336383639.roa (hash: nb8z2N9rnH96t5B0H624NhPlR7I0KYPMhvCR0O/fhs4=) 3: 3130332e3130342e3230362e302f32342d3234203d3e20313336383639.roa (hash: yo9Rg0RIu4bi5AvFSf1HgeoEO2ptRcGKCjbNNgnoU1A=) 4: 3130332e3130342e3230352e302f32342d3234203d3e20313336383639.roa (hash: +bc1aSBLcX6ZQm4jECmlMCivSavxhqXkBTLrz820pWg=) 5: 3130332e3130342e3230372e302f32342d3234203d3e20313336383639.roa (hash: jRI7u+pgcEtmrDDRmjulrcR4SRRZM/aGtsQfGUXuJ24=) 6: D626CC25972BF9948C6B3BDE4E354C71F2570880.crl (hash: lDn0s7LNaiAtS5J89dgpuSrxyq2vJqQ8PUJVltKWtuw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.crl rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:5a:82:c0:44:74:64:0c:fa:8f:fa:8b:3d:89:6f:f6:fa:42:bd:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D626CC25972BF9948C6B3BDE4E354C71F2570880 Validity Not Before: Sep 24 14:33:55 2026 GMT Not After : Sep 25 15:34:55 2026 GMT Subject: CN=D681BD1EB4971C02E2971AF34BAE3ACBBEB0B616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6b:7f:a9:81:f3:a1:c9:4c:91:3b:c2:2d:91: be:da:65:20:a8:39:a8:7c:91:38:12:df:3d:cc:de: 07:9d:8d:43:01:73:73:e2:5e:ee:3c:e9:58:cc:3d: 2b:34:05:65:98:c7:77:6f:29:92:80:f0:fd:b8:80: 9a:23:7f:2d:3c:51:c0:2b:b2:43:e3:3e:d3:52:34: c9:0b:d2:08:d7:17:1d:0e:12:7b:52:0a:df:8e:ea: 08:b2:2c:75:f4:89:f8:79:72:52:ef:e2:64:d4:5e: 2b:eb:f9:3e:4a:63:d6:75:44:f2:39:de:30:16:19: eb:c7:07:37:1e:1d:85:75:d8:d9:5b:1b:09:22:f7: 03:8d:7c:4b:a4:10:8d:67:e7:90:cc:52:1d:82:75: 5e:ef:65:45:f1:16:b7:65:85:53:d9:c3:e5:95:9f: 6a:29:07:1a:f4:dc:b2:cd:40:63:a1:7c:1b:3e:2e: 0e:cf:82:c1:10:f8:1e:f9:68:65:2b:0c:ea:9c:7b: b4:77:2d:98:78:6b:6b:62:aa:a2:5f:9d:4d:37:2a: 95:f1:94:66:8b:c3:f3:eb:1c:c3:75:f7:ff:21:a2: a4:5d:2c:06:59:6b:77:22:c8:3c:f8:2c:d2:f3:a3: 8b:14:f6:50:b2:3a:f3:4c:4f:0c:17:07:0d:14:ac: 31:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:81:BD:1E:B4:97:1C:02:E2:97:1A:F3:4B:AE:3A:CB:BE:B0:B6:16 X509v3 Authority Key Identifier: keyid:D6:26:CC:25:97:2B:F9:94:8C:6B:3B:DE:4E:35:4C:71:F2:57:08:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:f0:da:2f:9a:1b:0d:08:61:db:32:67:3f:82:37:e2:f6:75: 6f:29:78:09:99:e2:2e:54:6a:5b:6f:30:ec:e1:42:bd:07:a3: 55:92:05:89:1f:24:b6:c8:7e:8b:c5:7d:02:89:86:c6:2d:eb: fc:2d:6c:1a:39:b1:f9:9f:31:ec:2c:b0:4d:b3:7b:5a:19:09: 66:c8:92:be:56:b1:81:86:c7:69:43:0a:62:a9:d6:0c:02:1f: 8b:18:42:a5:7f:76:e1:51:70:d2:fb:6e:c9:ce:1b:af:b8:82: 94:22:11:5a:bc:14:09:23:63:3b:89:d8:22:57:46:66:4c:93: c5:8a:e6:45:9e:a5:31:35:01:3c:ab:36:5d:e6:32:c4:bc:d2: 15:36:84:55:6e:19:a5:99:9a:a6:2e:a3:97:a8:ad:95:a2:bf: aa:de:15:95:99:1d:6d:2c:09:d6:58:a6:6a:ca:54:c6:7f:8f: 66:dd:c1:16:24:36:12:6d:5d:e1:a8:fa:e6:f2:ca:3a:91:15: 83:ea:59:e0:39:02:38:ab:08:c4:af:75:b2:1f:6c:2f:18:1a: 2d:ce:df:d8:23:51:5a:63:7a:99:83:cc:c4:69:9a:60:36:d8: 9a:83:78:4e:71:b7:8f:7c:54:07:e6:bd:89:55:a1:e7:e9:9b: 5e:70:6f:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUElqCwER0ZAz6j/qLPYlv9vpCvS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYyNkNDMjU5NzJCRjk5NDhDNkIzQkRFNEUzNTRDNzFG MjU3MDg4MDAeFw0yNjA5MjQxNDMzNTVaFw0yNjA5MjUxNTM0NTVaMDMxMTAvBgNV BAMTKEQ2ODFCRDFFQjQ5NzFDMDJFMjk3MUFGMzRCQUUzQUNCQkVCMEI2MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXa3+pgfOhyUyRO8Itkb7aZSCo Oah8kTgS3z3M3gedjUMBc3PiXu486VjMPSs0BWWYx3dvKZKA8P24gJojfy08UcAr skPjPtNSNMkL0gjXFx0OEntSCt+O6giyLHX0ifh5clLv4mTUXivr+T5KY9Z1RPI5 3jAWGevHBzceHYV12NlbGwki9wONfEukEI1n55DMUh2CdV7vZUXxFrdlhVPZw+WV n2opBxr03LLNQGOhfBs+Lg7PgsEQ+B75aGUrDOqce7R3LZh4a2tiqqJfnU03KpXx lGaLw/PrHMN19/8hoqRdLAZZa3ciyDz4LNLzo4sU9lCyOvNMTwwXBw0UrDE3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1oG9HrSXHALilxrzS646y76wthYwHwYDVR0j BBgwFoAU1ibMJZcr+ZSMazveTjVMcfJXCIAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDIzMWU2YjEtMTg0MS00NzZkLWI0NmItYjQ0YjljYjk2OGIwLzAvRDYyNkNDMjU5 NzJCRjk5NDhDNkIzQkRFNEUzNTRDNzFGMjU3MDg4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjI2Q0MyNTk3MkJGOTk0OEM2QjNCREU0RTM1NEM3MUYyNTcw ODgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDIzMWU2YjEtMTg0MS00NzZkLWI0 NmItYjQ0YjljYjk2OGIwLzAvRDYyNkNDMjU5NzJCRjk5NDhDNkIzQkRFNEUzNTRD NzFGMjU3MDg4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPw2i+aGw0IYdsyZz+CN+L2dW8peAmZ4i5U altvMOzhQr0Ho1WSBYkfJLbIfovFfQKJhsYt6/wtbBo5sfmfMewssE2ze1oZCWbI kr5WsYGGx2lDCmKp1gwCH4sYQqV/duFRcNL7bsnOG6+4gpQiEVq8FAkjYzuJ2CJX RmZMk8WK5kWepTE1ATyrNl3mMsS80hU2hFVuGaWZmqYuo5eorZWiv6reFZWZHW0s CdZYpmrKVMZ/j2bdwRYkNhJtXeGo+ubyyjqRFYPqWeA5AjirCMSvdbIfbC8YGi3O 39gjUVpjepmDzMRpmmA22JqDeE5xt498VAfmvYlVoefpm15wb6w= -----END CERTIFICATE-----Generated at Thu Sep 24 20:21:40 2026 by rpki-client