$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft File: D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft (raw, json) Hash identifier: ClVkTpB8+fekIjYiUKa7AU5ztJoRBbqkrzHHcCZx76A= Subject key identifier: CD:32:41:02:61:F1:84:84:9D:A0:8D:C4:09:22:12:27:59:1C:DC:2E Authority key identifier: D5:51:D5:8F:28:76:BB:DA:9C:36:67:8E:FF:8D:27:1A:14:EA:D8:A3 Certificate issuer: /CN=D551D58F2876BBDA9C36678EFF8D271A14EAD8A3 Certificate serial: 12F363282A0E9BDE1C7C50A17FA9A55A4B817C84 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft Manifest number: C0 Signing time: Thu 24 Sep 2026 14:08:26 +0000 Manifest this update: Thu 24 Sep 2026 14:03:26 +0000 Manifest next update: Fri 25 Sep 2026 17:34:26 +0000 Files and hashes: 1: D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.crl (hash: QVFvc3qxLy0AlYZZyREXAiL5s4sPqRVGzcJqd99Tmlw=) 2: 3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa (hash: yiKtjyaJg+/4RrQVJVpsjcN53nYqA/23WnoDn5hFEmM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.crl rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 17:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:f3:63:28:2a:0e:9b:de:1c:7c:50:a1:7f:a9:a5:5a:4b:81:7c:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D551D58F2876BBDA9C36678EFF8D271A14EAD8A3 Validity Not Before: Sep 24 14:03:26 2026 GMT Not After : Sep 25 17:34:26 2026 GMT Subject: CN=CD32410261F184849DA08DC409221227591CDC2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:48:c3:5a:c4:7b:79:9f:c0:27:22:15:3b:6f: 05:9a:bc:be:9d:a1:af:b0:2c:96:0f:88:46:64:6a: a5:1e:3d:d0:34:40:49:4b:db:d8:39:e1:4a:9a:55: 40:0e:0c:26:7a:e9:18:fa:ac:63:2d:af:8b:72:e0: 00:49:a8:40:17:e9:ae:66:5f:7e:8c:e1:77:e8:44: 47:ed:e6:5b:11:c2:72:69:87:bb:65:82:4f:46:46: 06:6a:b5:ee:5d:2f:0a:0c:e1:59:b6:fd:69:67:80: c2:70:40:b1:81:08:14:bf:95:13:00:5d:b7:7f:7f: 2d:33:73:d4:7f:6a:71:57:a6:de:e8:a2:9f:8e:25: d9:83:18:63:40:ed:49:5b:98:32:85:51:d2:05:85: f2:f0:c4:89:8b:2e:40:39:16:fc:14:1e:1c:b5:c0: 8d:9f:25:fa:6f:a9:16:35:0f:44:fd:ab:dc:b7:c0: d9:41:dd:26:c0:20:17:60:4f:05:18:98:ff:ed:cd: 49:c2:72:b2:6d:c8:12:1e:ea:63:c0:fd:95:34:a8: c4:16:13:56:95:73:eb:9e:93:29:2a:42:ea:3f:d8: 81:9a:75:be:1f:db:a2:16:c5:d5:25:29:65:25:a5: 58:b1:3b:75:d1:ff:2e:03:2a:9e:a6:44:07:d4:69: f4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:32:41:02:61:F1:84:84:9D:A0:8D:C4:09:22:12:27:59:1C:DC:2E X509v3 Authority Key Identifier: keyid:D5:51:D5:8F:28:76:BB:DA:9C:36:67:8E:FF:8D:27:1A:14:EA:D8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:12:a2:b9:07:67:36:f7:c1:d3:1b:1a:01:f9:31:e2:6e:b6: 63:24:b7:49:89:2a:89:55:12:b6:f1:92:be:b7:8f:7e:40:b6: 7d:61:f9:8c:75:de:8b:67:0c:50:5d:8b:74:f9:50:5d:fa:19: 93:94:19:5c:60:8b:89:d1:09:61:f7:0b:76:00:02:0e:89:8a: 80:37:3a:1c:52:a1:b3:53:8d:8e:5e:4f:cb:aa:c9:39:e4:a6: a1:b4:b7:38:2e:3a:c4:e7:dc:1f:58:63:73:f1:9e:be:ed:3b: bf:b0:a4:6e:36:f5:98:42:da:e5:be:81:5c:93:20:9d:a4:23: 7f:d7:5b:1c:f0:de:e8:27:31:31:83:b6:03:5e:d3:97:de:b3: eb:29:04:c6:c9:05:e9:19:0c:74:cd:3b:8a:84:01:6e:25:89: 51:40:db:51:67:ad:3d:f2:b1:29:95:98:fc:d3:3f:26:7b:b0: b7:96:d2:3b:9a:14:fb:e8:f2:bd:2e:39:15:14:fb:21:cc:cb: 82:9a:36:29:af:6f:86:fe:7c:24:3f:8d:d5:dc:f2:d2:dd:aa: 41:79:be:0e:c1:4e:d4:d0:e1:26:61:24:79:e6:ee:0d:0d:b7: 21:ce:a4:17:df:21:2f:2b:af:15:32:21:cf:b7:eb:4d:bc:4f: b4:dd:f6:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEvNjKCoOm94cfFChf6mlWkuBfIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1MUQ1OEYyODc2QkJEQTlDMzY2NzhFRkY4RDI3MUEx NEVBRDhBMzAeFw0yNjA5MjQxNDAzMjZaFw0yNjA5MjUxNzM0MjZaMDMxMTAvBgNV BAMTKENEMzI0MTAyNjFGMTg0ODQ5REEwOERDNDA5MjIxMjI3NTkxQ0RDMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3SMNaxHt5n8AnIhU7bwWavL6d oa+wLJYPiEZkaqUePdA0QElL29g54UqaVUAODCZ66Rj6rGMtr4ty4ABJqEAX6a5m X36M4XfoREft5lsRwnJph7tlgk9GRgZqte5dLwoM4Vm2/WlngMJwQLGBCBS/lRMA Xbd/fy0zc9R/anFXpt7oop+OJdmDGGNA7UlbmDKFUdIFhfLwxImLLkA5FvwUHhy1 wI2fJfpvqRY1D0T9q9y3wNlB3SbAIBdgTwUYmP/tzUnCcrJtyBIe6mPA/ZU0qMQW E1aVc+uekykqQuo/2IGadb4f26IWxdUlKWUlpVixO3XR/y4DKp6mRAfUafT9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzTJBAmHxhISdoI3ECSISJ1kc3C4wHwYDVR0j BBgwFoAU1VHVjyh2u9qcNmeO/40nGhTq2KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDQwYmQ2ZTQtYjRmYi00ZjQ4LWI4M2EtYWNiOGYyZDc0NTgzLzAvRDU1MUQ1OEYy ODc2QkJEQTlDMzY2NzhFRkY4RDI3MUExNEVBRDhBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENTUxRDU4RjI4NzZCQkRBOUMzNjY3OEVGRjhEMjcxQTE0RUFE OEEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDQwYmQ2ZTQtYjRmYi00ZjQ4LWI4 M2EtYWNiOGYyZDc0NTgzLzAvRDU1MUQ1OEYyODc2QkJEQTlDMzY2NzhFRkY4RDI3 MUExNEVBRDhBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoSorkHZzb3wdMbGgH5MeJutmMkt0mJKolV Erbxkr63j35Atn1h+Yx13otnDFBdi3T5UF36GZOUGVxgi4nRCWH3C3YAAg6JioA3 OhxSobNTjY5eT8uqyTnkpqG0tzguOsTn3B9YY3Pxnr7tO7+wpG429ZhC2uW+gVyT IJ2kI3/XWxzw3ugnMTGDtgNe05fes+spBMbJBekZDHTNO4qEAW4liVFA21FnrT3y sSmVmPzTPyZ7sLeW0juaFPvo8r0uORUU+yHMy4KaNimvb4b+fCQ/jdXc8tLdqkF5 vg7BTtTQ4SZhJHnm7g0NtyHOpBffIS8rrxUyIc+36028T7Td9kk= -----END CERTIFICATE-----Generated at Fri Sep 25 06:59:13 2026 by rpki-client