$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft File: D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft (raw, json) Hash identifier: +dNxGP7dkLOWKY5EqfDqElAk3grwEICL8oLPm8HYGW0= Subject key identifier: BA:01:1B:2B:29:1A:47:7D:A5:36:6B:C1:CE:34:BF:E7:FD:F9:68:9D Authority key identifier: D7:10:E4:74:38:E0:99:E6:B0:ED:24:56:74:ED:22:33:E1:D2:B2:C0 Certificate issuer: /CN=D710E47438E099E6B0ED245674ED2233E1D2B2C0 Certificate serial: 12A97684CA19143E20C99AF2FDC73F6CEE4DE6D2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 09:42:37 +0000 Manifest this update: Thu 24 Sep 2026 09:37:37 +0000 Manifest next update: Fri 25 Sep 2026 10:19:37 +0000 Files and hashes: 1: 3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa (hash: tYzh/ONrnE/vB4p4w+wsr7jUrg+O1DSqJcNbYqdE1O4=) 2: 3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa (hash: nih8Qs0LKBkZCWGMFeuGnh3q/46VGBkvPVPuLWWc1eE=) 3: D710E47438E099E6B0ED245674ED2233E1D2B2C0.crl (hash: RzhznkrI+CHt0hkNEAvoMQl+NLzU0+NtPC16BibAiEM=) 4: 3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa (hash: Mz/HLsc5z0NW9is9cK/jPV/c2edacNGieAld99v6XRg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.crl rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a9:76:84:ca:19:14:3e:20:c9:9a:f2:fd:c7:3f:6c:ee:4d:e6:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D710E47438E099E6B0ED245674ED2233E1D2B2C0 Validity Not Before: Sep 24 09:37:37 2026 GMT Not After : Sep 25 10:19:37 2026 GMT Subject: CN=BA011B2B291A477DA5366BC1CE34BFE7FDF9689D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:11:4d:39:b5:8a:ef:98:4d:3b:ce:8b:21:fa: ca:70:a8:96:ab:3d:4b:ef:58:da:a3:6f:30:79:99: 06:be:59:f7:f3:72:4d:af:cb:9e:b6:0f:9d:3d:6d: fb:dc:5c:71:50:8c:f8:46:95:a6:68:7a:22:4d:3a: d3:0a:0c:8d:f1:04:66:d3:e8:63:9f:7f:b8:e9:2c: 51:e8:53:5e:e2:bc:70:94:e2:89:c3:6f:c6:fe:51: d3:ef:3d:49:60:ca:1b:39:6c:34:de:40:6c:62:8c: 4d:96:ea:9c:f2:d0:48:45:5f:05:7e:a1:1c:b7:70: b1:f0:5e:2d:a9:d9:15:33:5e:9a:e2:a3:30:ff:6a: 20:73:3e:54:7a:e4:34:d2:f0:03:0f:41:17:7d:28: e8:bc:13:a9:8f:e7:55:63:41:85:d3:70:a2:1b:90: 41:26:b6:b0:2d:b3:59:f1:09:c9:b9:49:45:e9:57: 94:76:d4:f0:28:90:64:2c:47:92:b3:9f:32:6b:73: c9:c8:0d:67:17:64:42:76:a5:5c:04:5f:4b:ac:f7: 56:0e:4c:b5:cb:5f:91:7d:54:7f:fc:65:c0:70:eb: 54:f6:ca:76:49:af:49:2f:8e:60:bf:ca:02:b9:45: a2:bc:85:46:f0:56:3b:7c:0b:bc:85:98:99:af:3c: ac:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:01:1B:2B:29:1A:47:7D:A5:36:6B:C1:CE:34:BF:E7:FD:F9:68:9D X509v3 Authority Key Identifier: keyid:D7:10:E4:74:38:E0:99:E6:B0:ED:24:56:74:ED:22:33:E1:D2:B2:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:3f:ca:1b:b4:e6:c2:11:9d:2c:d7:b0:95:74:8f:1c:e7:c9: db:3e:da:50:6b:7b:f0:26:3d:dc:ff:6a:04:4f:a4:e7:5b:6f: 2b:43:11:39:b2:b3:0d:f0:db:d4:36:37:cf:a9:e3:38:c1:8c: 9a:ae:8b:95:7f:11:95:f3:f4:66:01:bc:57:25:18:32:1b:af: 7b:b7:a6:4d:5a:9b:77:88:c9:b5:f0:09:ae:a3:b0:22:f9:ff: 4d:2e:be:a7:ae:fc:a3:1f:5b:f6:46:cd:f9:e8:7a:3a:c2:b1: eb:4f:f8:e1:f7:8c:3d:c7:b7:d2:9d:2f:10:84:2f:a4:1b:32: 9d:7a:54:40:67:70:ce:10:67:26:85:78:a6:3d:81:19:3d:6d: 8f:3b:15:de:70:00:23:bc:54:b7:62:23:ba:ce:c5:07:7c:de: 51:56:9f:27:06:2f:43:44:d7:3a:58:53:ff:da:6a:be:98:68: 70:b4:a1:1d:ae:c1:e8:9d:91:2e:34:fb:f8:ae:5d:a2:12:5b: 2e:e9:6d:85:19:c1:35:10:3f:9a:93:81:01:bf:90:f6:c5:14: 44:81:7c:1f:82:4a:24:a3:a3:b7:ba:99:ff:52:d0:5e:80:ed: fb:50:9a:75:22:4d:2e:b8:33:3a:59:e1:e0:dc:8d:18:01:06: 6d:24:35:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEql2hMoZFD4gyZry/cc/bO5N5tIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcxMEU0NzQzOEUwOTlFNkIwRUQyNDU2NzRFRDIyMzNF MUQyQjJDMDAeFw0yNjA5MjQwOTM3MzdaFw0yNjA5MjUxMDE5MzdaMDMxMTAvBgNV BAMTKEJBMDExQjJCMjkxQTQ3N0RBNTM2NkJDMUNFMzRCRkU3RkRGOTY4OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAEU05tYrvmE07zosh+spwqJar PUvvWNqjbzB5mQa+Wffzck2vy562D509bfvcXHFQjPhGlaZoeiJNOtMKDI3xBGbT 6GOff7jpLFHoU17ivHCU4onDb8b+UdPvPUlgyhs5bDTeQGxijE2W6pzy0EhFXwV+ oRy3cLHwXi2p2RUzXpriozD/aiBzPlR65DTS8AMPQRd9KOi8E6mP51VjQYXTcKIb kEEmtrAts1nxCcm5SUXpV5R21PAokGQsR5KznzJrc8nIDWcXZEJ2pVwEX0us91YO TLXLX5F9VH/8ZcBw61T2ynZJr0kvjmC/ygK5RaK8hUbwVjt8C7yFmJmvPKyzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUugEbKykaR32lNmvBzjS/5/35aJ0wHwYDVR0j BBgwFoAU1xDkdDjgmeaw7SRWdO0iM+HSssAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDU0ZTQ1NmQtZGJlMi00NjBjLTg2ZDQtZWJjMmQxMTU2MTc2LzAvRDcxMEU0NzQz OEUwOTlFNkIwRUQyNDU2NzRFRDIyMzNFMUQyQjJDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzEwRTQ3NDM4RTA5OUU2QjBFRDI0NTY3NEVEMjIzM0UxRDJC MkMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDU0ZTQ1NmQtZGJlMi00NjBjLTg2 ZDQtZWJjMmQxMTU2MTc2LzAvRDcxMEU0NzQzOEUwOTlFNkIwRUQyNDU2NzRFRDIy MzNFMUQyQjJDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABI/yhu05sIRnSzXsJV0jxznyds+2lBre/Am Pdz/agRPpOdbbytDETmysw3w29Q2N8+p4zjBjJqui5V/EZXz9GYBvFclGDIbr3u3 pk1am3eIybXwCa6jsCL5/00uvqeu/KMfW/ZGzfnoejrCsetP+OH3jD3Ht9KdLxCE L6QbMp16VEBncM4QZyaFeKY9gRk9bY87Fd5wACO8VLdiI7rOxQd83lFWnycGL0NE 1zpYU//aar6YaHC0oR2uweidkS40+/iuXaISWy7pbYUZwTUQP5qTgQG/kPbFFESB fB+CSiSjo7e6mf9S0F6A7ftQmnUiTS64MzpZ4eDcjRgBBm0kNUY= -----END CERTIFICATE-----Generated at Thu Sep 24 19:50:06 2026 by rpki-client