$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft File: DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft (raw, json) Hash identifier: f98VTCwaJfsO1gohKNcNiKbHbP34IPksl/wrWlEdvtk= Subject key identifier: CF:FC:D5:F4:6E:B9:FC:65:98:35:69:70:E6:F7:44:84:F4:89:88:E1 Authority key identifier: DF:64:8D:B0:3E:C5:64:14:81:28:C7:0F:BB:6A:0C:C8:77:3A:EF:60 Certificate issuer: /CN=DF648DB03EC564148128C70FBB6A0CC8773AEF60 Certificate serial: 120681A18EEC25D6A151A68BB351B52675107F35 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF648DB03EC564148128C70FBB6A0CC8773AEF60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 14:23:55 +0000 Manifest this update: Wed 23 Sep 2026 14:18:55 +0000 Manifest next update: Thu 24 Sep 2026 15:56:55 +0000 Files and hashes: 1: DF648DB03EC564148128C70FBB6A0CC8773AEF60.crl (hash: WbwshBRpmMkdrDdYD+ypDRveSyGOq2iD9NKFM0wnlE0=) 2: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (hash: Sq/TPHjnHcU8BdlRhTUGNyaSgFRduqyHP60YOl+s/e4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.crl rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF648DB03EC564148128C70FBB6A0CC8773AEF60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 15:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:06:81:a1:8e:ec:25:d6:a1:51:a6:8b:b3:51:b5:26:75:10:7f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF648DB03EC564148128C70FBB6A0CC8773AEF60 Validity Not Before: Sep 23 14:18:55 2026 GMT Not After : Sep 24 15:56:55 2026 GMT Subject: CN=CFFCD5F46EB9FC6598356970E6F74484F48988E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:68:44:00:e3:19:04:ea:5c:21:7e:49:fa:f2: a5:28:7e:10:a0:91:05:05:62:88:7c:f5:30:65:af: 3e:e8:f2:6e:92:97:ba:f5:cd:23:1b:57:69:6e:72: 41:c2:be:72:a0:6c:94:d4:18:39:df:5a:b4:9e:48: f2:ea:48:e1:91:64:55:44:98:27:a4:77:ee:4c:ae: 48:59:41:f0:1d:da:fc:66:8d:b3:67:cc:76:ef:f2: 54:9b:3e:59:70:4a:99:8c:81:02:da:78:b6:2b:bc: 3a:2a:83:5e:c6:4a:b2:61:b4:08:81:d9:20:df:da: a9:de:d7:57:02:3a:d2:0b:4b:55:f2:af:98:3d:92: e8:f7:79:5e:5d:9d:8b:5d:bd:9b:dd:f6:b9:5f:46: 96:32:d2:80:22:ec:13:6f:9f:ef:94:f4:53:fe:4a: cb:9e:af:ff:60:eb:13:9f:7e:ca:b4:24:05:6c:4e: 87:f7:6a:8e:48:e6:53:5d:6d:06:bf:28:76:58:4c: db:bf:ba:1d:9d:7e:2a:eb:5f:2b:45:88:f5:84:a6: 78:31:ce:4d:5e:90:93:a2:3c:7e:c3:90:f6:3d:da: 8c:c8:67:94:a9:6e:f9:53:c8:eb:11:08:60:ef:f4: fc:6f:b4:e2:ba:51:c3:9a:75:89:52:99:5d:33:d5: 18:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:FC:D5:F4:6E:B9:FC:65:98:35:69:70:E6:F7:44:84:F4:89:88:E1 X509v3 Authority Key Identifier: keyid:DF:64:8D:B0:3E:C5:64:14:81:28:C7:0F:BB:6A:0C:C8:77:3A:EF:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF648DB03EC564148128C70FBB6A0CC8773AEF60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:28:c1:8a:77:da:57:9f:64:09:a0:45:c9:29:bd:11:03:92: 8b:ca:84:0e:e5:eb:62:2c:24:11:b9:e7:d9:a8:8c:33:b7:6c: 25:ac:bb:25:a6:59:60:84:5a:04:0c:dd:88:78:7f:72:d0:44: 87:b3:04:c2:4e:00:32:bc:5f:3f:8e:fb:d3:74:23:20:e6:32: 0e:74:3d:65:44:8c:a8:ad:fb:60:12:30:80:90:55:7c:e3:76: 04:6b:ab:b7:71:f2:13:5b:fa:16:71:c8:9f:96:e7:8a:f5:b2: 2d:a2:01:a9:8f:7c:95:f5:b0:01:1c:1b:5d:ec:3a:e6:83:d6: 80:98:47:ab:18:78:4a:12:98:b6:e0:b2:20:50:ba:d2:f7:3a: 34:f7:92:48:7c:ae:a8:ae:f6:ba:89:52:ca:6b:b0:78:f8:39: 8b:bf:90:3d:d1:c8:8e:b3:9e:24:52:ab:d8:67:7f:d4:a9:df: bb:0a:c7:85:36:fd:c5:10:e6:47:05:83:fd:50:d9:34:da:a5: bf:eb:e1:ea:32:ef:04:90:90:c4:6f:ad:49:d4:a4:c5:be:f4: 54:24:a5:d6:18:ea:f8:24:ec:74:34:9c:54:74:f8:b3:c3:d8: 0f:4b:67:7a:cd:63:68:fa:90:5a:4e:19:c5:2c:a2:5c:98:4f: dd:77:a4:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEgaBoY7sJdahUaaLs1G1JnUQfzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2NDhEQjAzRUM1NjQxNDgxMjhDNzBGQkI2QTBDQzg3 NzNBRUY2MDAeFw0yNjA5MjMxNDE4NTVaFw0yNjA5MjQxNTU2NTVaMDMxMTAvBgNV BAMTKENGRkNENUY0NkVCOUZDNjU5ODM1Njk3MEU2Rjc0NDg0RjQ4OTg4RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKaEQA4xkE6lwhfkn68qUofhCg kQUFYoh89TBlrz7o8m6Sl7r1zSMbV2luckHCvnKgbJTUGDnfWrSeSPLqSOGRZFVE mCekd+5MrkhZQfAd2vxmjbNnzHbv8lSbPllwSpmMgQLaeLYrvDoqg17GSrJhtAiB 2SDf2qne11cCOtILS1Xyr5g9kuj3eV5dnYtdvZvd9rlfRpYy0oAi7BNvn++U9FP+ Ssuer/9g6xOffsq0JAVsTof3ao5I5lNdbQa/KHZYTNu/uh2dfirrXytFiPWEpngx zk1ekJOiPH7DkPY92ozIZ5SpbvlTyOsRCGDv9PxvtOK6UcOadYlSmV0z1RjlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz/zV9G65/GWYNWlw5vdEhPSJiOEwHwYDVR0j BBgwFoAU32SNsD7FZBSBKMcPu2oMyHc672AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdkYjZjNGYtOWZkZi00N2Y2LWIyNGMtMDMzZmUzYTQ0ZDUwLzAvREY2NDhEQjAz RUM1NjQxNDgxMjhDNzBGQkI2QTBDQzg3NzNBRUY2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjY0OERCMDNFQzU2NDE0ODEyOEM3MEZCQjZBMENDODc3M0FF RjYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdkYjZjNGYtOWZkZi00N2Y2LWIy NGMtMDMzZmUzYTQ0ZDUwLzAvREY2NDhEQjAzRUM1NjQxNDgxMjhDNzBGQkI2QTBD Qzg3NzNBRUY2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkowYp32lefZAmgRckpvREDkovKhA7l62Is JBG559mojDO3bCWsuyWmWWCEWgQM3Yh4f3LQRIezBMJOADK8Xz+O+9N0IyDmMg50 PWVEjKit+2ASMICQVXzjdgRrq7dx8hNb+hZxyJ+W54r1si2iAamPfJX1sAEcG13s OuaD1oCYR6sYeEoSmLbgsiBQutL3OjT3kkh8rqiu9rqJUsprsHj4OYu/kD3RyI6z niRSq9hnf9Sp37sKx4U2/cUQ5kcFg/1Q2TTapb/r4eoy7wSQkMRvrUnUpMW+9FQk pdYY6vgk7HQ0nFR0+LPD2A9LZ3rNY2j6kFpOGcUsolyYT913pA4= -----END CERTIFICATE-----Generated at Wed Sep 23 23:46:47 2026 by rpki-client