$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft File: D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft (raw, json) Hash identifier: 2bMMa4XzMuO+NmG95xsfgrLYM3HHy8SE1vgsX9d1UQA= Subject key identifier: C2:E0:37:30:F7:9B:05:5A:C4:3F:B9:9E:B9:D8:57:4C:7B:3E:91:7F Authority key identifier: D8:CB:7F:8B:56:66:E0:7E:57:CB:EF:C0:23:C6:F6:03:46:F2:9D:7F Certificate issuer: /CN=D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F Certificate serial: 6C8C17C6D5A029E8874BDEA71262DC216B50A1BD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 07:04:22 +0000 Manifest this update: Fri 25 Sep 2026 06:59:22 +0000 Manifest next update: Sat 26 Sep 2026 10:05:22 +0000 Files and hashes: 1: D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl (hash: hgL42KCE1w0OutKhjEbrstccMG1f7Q4738/6lCotLYQ=) 2: 3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa (hash: aqo6iqJhHng8SceS0GB2zDkvhHekA+jqXPQYRYjWZBA=) 3: 3130332e3130372e3137362e302f32332d3233203d3e20313530393434.roa (hash: BSuw1whkNZvJE4R4/j402PtZbyO7u4uvse4a8U9c4JA=) 4: 3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa (hash: 4zjQiDOO1u6032UYBIQ3bbHO8yvV/zbc51HnTLw1PKM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 10:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:8c:17:c6:d5:a0:29:e8:87:4b:de:a7:12:62:dc:21:6b:50:a1:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F Validity Not Before: Sep 25 06:59:22 2026 GMT Not After : Sep 26 10:05:22 2026 GMT Subject: CN=C2E03730F79B055AC43FB99EB9D8574C7B3E917F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:77:ca:96:fa:e3:7c:b2:2a:f1:b3:f9:4d:db: 59:cb:63:9d:50:32:9c:3e:7c:ca:96:cc:63:94:83: f1:0b:4d:d3:e0:23:1a:54:d6:cf:87:57:cc:bb:28: f7:23:71:b6:77:57:e6:e2:15:d2:68:bc:e9:b6:f4: 76:ad:48:74:e8:9c:59:c4:16:b6:90:c4:01:21:a8: f8:48:0b:33:92:b6:58:32:1a:6a:8a:65:97:ae:dd: f8:b1:32:22:a1:b3:95:16:a7:a1:86:78:68:64:8a: 55:09:bf:02:43:bd:85:2d:6a:5c:a0:cc:b6:61:d4: 6f:22:e2:08:32:c1:e5:28:42:e5:61:04:2c:78:db: c3:f7:64:e7:7f:8d:d4:b5:e4:e3:f1:ef:c0:2f:74: cd:2d:6a:93:0d:27:b2:4a:3a:36:c7:73:32:2d:ca: c5:e3:be:b0:d3:e4:8f:21:37:c6:76:ce:ec:ea:13: 45:04:c6:fb:01:58:0a:2d:41:a8:93:75:cb:49:31: 34:c5:8f:dc:03:b8:b5:1e:dd:ed:a9:58:08:73:19: f5:5d:d2:35:ef:1a:37:17:ab:2e:86:8e:8a:26:66: d3:14:2f:d8:db:e9:4e:17:25:f9:b6:49:42:93:9f: 0c:b1:75:97:78:44:d1:10:ad:ab:a1:ac:29:13:21: e5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E0:37:30:F7:9B:05:5A:C4:3F:B9:9E:B9:D8:57:4C:7B:3E:91:7F X509v3 Authority Key Identifier: keyid:D8:CB:7F:8B:56:66:E0:7E:57:CB:EF:C0:23:C6:F6:03:46:F2:9D:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:97:e6:a0:08:e1:1e:dc:3f:64:87:54:8e:82:d6:cf:70:99: e7:f8:ae:ba:b9:ee:33:47:ea:81:c9:20:24:74:3c:11:50:72: e7:40:52:c9:32:28:29:53:98:c0:8a:cf:4d:e2:32:27:80:41: 30:fe:1e:a4:58:d4:55:56:d5:fe:a3:16:f4:3c:df:19:01:94: 3c:bd:b1:7c:00:01:d7:c9:88:b4:f0:c9:7e:02:e2:01:7d:a3: 90:8d:05:0f:53:a7:0b:09:77:90:fa:f8:3e:40:69:28:af:ba: de:0d:eb:f0:12:00:20:2b:90:cf:ad:ee:24:74:56:f1:06:f4: 3a:8a:1a:75:50:ef:08:e1:42:12:f5:78:56:81:47:74:dc:de: 57:00:5f:cb:cd:fa:f4:35:06:28:16:4f:ae:58:1d:ee:b4:6a: ea:ad:af:a0:3f:e2:2d:0e:b7:3a:21:4f:4a:d7:c9:06:fa:43: 8e:ad:46:69:b8:d2:ce:1c:c3:e8:cc:d0:f7:5a:f2:45:af:c9: 43:cf:d0:05:77:0b:30:61:e9:b8:f6:82:13:c8:b8:47:fa:05: f6:ba:05:5a:3b:a0:4e:a8:32:dd:17:d3:05:18:a4:59:0b:8a: aa:9e:04:b5:df:47:22:c6:5a:97:53:40:c8:9c:a1:72:31:f7: cc:49:ea:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbIwXxtWgKeiHS96nEmLcIWtQob0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhDQjdGOEI1NjY2RTA3RTU3Q0JFRkMwMjNDNkY2MDM0 NkYyOUQ3RjAeFw0yNjA5MjUwNjU5MjJaFw0yNjA5MjYxMDA1MjJaMDMxMTAvBgNV BAMTKEMyRTAzNzMwRjc5QjA1NUFDNDNGQjk5RUI5RDg1NzRDN0IzRTkxN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHd8qW+uN8sirxs/lN21nLY51Q Mpw+fMqWzGOUg/ELTdPgIxpU1s+HV8y7KPcjcbZ3V+biFdJovOm29HatSHTonFnE FraQxAEhqPhICzOStlgyGmqKZZeu3fixMiKhs5UWp6GGeGhkilUJvwJDvYUtalyg zLZh1G8i4ggyweUoQuVhBCx428P3ZOd/jdS15OPx78AvdM0tapMNJ7JKOjbHczIt ysXjvrDT5I8hN8Z2zuzqE0UExvsBWAotQaiTdctJMTTFj9wDuLUe3e2pWAhzGfVd 0jXvGjcXqy6GjoomZtMUL9jb6U4XJfm2SUKTnwyxdZd4RNEQrauhrCkTIeUBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwuA3MPebBVrEP7meudhXTHs+kX8wHwYDVR0j BBgwFoAU2Mt/i1Zm4H5Xy+/AI8b2A0bynX8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM2YWIwNGQtNjhjNy00MjQ5LWIxMDktNDZiMjhjZjgwM2YzLzAvRDhDQjdGOEI1 NjY2RTA3RTU3Q0JFRkMwMjNDNkY2MDM0NkYyOUQ3Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOENCN0Y4QjU2NjZFMDdFNTdDQkVGQzAyM0M2RjYwMzQ2RjI5 RDdGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM2YWIwNGQtNjhjNy00MjQ5LWIx MDktNDZiMjhjZjgwM2YzLzAvRDhDQjdGOEI1NjY2RTA3RTU3Q0JFRkMwMjNDNkY2 MDM0NkYyOUQ3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOX5qAI4R7cP2SHVI6C1s9wmef4rrq57jNH 6oHJICR0PBFQcudAUskyKClTmMCKz03iMieAQTD+HqRY1FVW1f6jFvQ83xkBlDy9 sXwAAdfJiLTwyX4C4gF9o5CNBQ9TpwsJd5D6+D5AaSivut4N6/ASACArkM+t7iR0 VvEG9DqKGnVQ7wjhQhL1eFaBR3Tc3lcAX8vN+vQ1BigWT65YHe60auqtr6A/4i0O tzohT0rXyQb6Q46tRmm40s4cw+jM0Pda8kWvyUPP0AV3CzBh6bj2ghPIuEf6Bfa6 BVo7oE6oMt0X0wUYpFkLiqqeBLXfRyLGWpdTQMicoXIx98xJ6qw= -----END CERTIFICATE-----Generated at Fri Sep 25 19:07:43 2026 by rpki-client