$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft File: 08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft (raw, json) Hash identifier: oGecZOs3DePjZG2G7KJFKC8qcHRbQqo5etkCXdIUxXg= Subject key identifier: BC:72:65:D7:2C:84:BD:69:46:77:19:6A:94:A7:19:3B:CE:32:14:35 Authority key identifier: 08:15:1F:D6:2F:A1:8C:9E:C2:F5:B9:DB:5D:4A:03:11:DF:50:90:BB Certificate issuer: /CN=08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB Certificate serial: 487AD982F7EFC2DD96E01D6245AEA7408EA96274 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 02:49:35 +0000 Manifest this update: Wed 23 Sep 2026 02:44:35 +0000 Manifest next update: Thu 24 Sep 2026 03:53:35 +0000 Files and hashes: 1: 3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa (hash: tmjFjqEkGuahidtuLOdd3vjYKqdvzowGWZPOwb/+IMI=) 2: 08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl (hash: Ougvg7e21Dq7aiNKGvt927ghnKRrwbgpCKEpUrKiV5Y=) 3: 3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa (hash: jUIsiSJsjPDf0Krk/AfybK3xD1mWMXMOgk6ke4wG6/A=) 4: 3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa (hash: M2ft8YBsrZNHxT1qFC2d2ksNAchdYmEdnx+ruXyh3Bc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 03:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:7a:d9:82:f7:ef:c2:dd:96:e0:1d:62:45:ae:a7:40:8e:a9:62:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB Validity Not Before: Sep 23 02:44:35 2026 GMT Not After : Sep 24 03:53:35 2026 GMT Subject: CN=BC7265D72C84BD694677196A94A7193BCE321435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:49:8c:b5:80:fe:dd:31:52:7c:fe:e1:26:d8: 80:e5:d9:b8:ce:6e:56:91:9b:8a:d7:33:4d:33:2d: 1a:98:eb:2d:1e:e1:ad:28:3b:e5:90:5b:69:91:e8: 2d:00:73:2a:31:31:df:ac:66:fa:c4:20:d1:34:59: 1a:f1:8f:bb:bc:5b:90:60:be:9e:32:54:82:65:ee: f0:9b:76:3e:51:24:91:ba:e6:37:bb:39:85:a8:62: d3:b3:44:20:60:27:80:a7:ab:c2:25:12:06:63:97: fd:15:02:a5:8f:0d:63:c3:38:eb:60:f3:df:55:e2: fd:9b:f0:27:75:f2:0c:1e:55:57:78:dd:c9:f2:75: 88:91:d3:55:66:3d:03:f6:30:d2:bb:b3:1c:06:3a: 42:57:18:f5:88:2f:18:e2:4b:92:6a:fe:0b:c0:2e: 81:1c:b2:df:78:0d:8c:be:6a:df:72:27:91:32:d2: 2d:26:a7:a0:4a:3a:07:15:fe:c1:25:96:b6:3f:87: 33:91:a6:07:99:81:aa:43:00:66:d8:44:49:e6:76: 22:6d:05:df:45:11:ec:4d:76:bc:59:39:42:7a:48: 40:45:77:66:5f:b7:4b:98:1c:2c:f2:66:69:6b:21: 04:21:f1:e3:59:57:31:a4:ac:b8:04:74:45:cb:f1: 14:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:72:65:D7:2C:84:BD:69:46:77:19:6A:94:A7:19:3B:CE:32:14:35 X509v3 Authority Key Identifier: keyid:08:15:1F:D6:2F:A1:8C:9E:C2:F5:B9:DB:5D:4A:03:11:DF:50:90:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:0c:80:a9:ac:d3:70:1e:e3:5a:f9:e7:4e:61:6c:b7:62:c9: cd:2e:a3:8c:1b:c1:79:5b:7c:e9:85:8b:5c:0d:7d:0e:3e:1d: 3f:22:1d:7b:fb:63:81:4c:7c:5e:39:11:a2:82:4d:4e:a1:25: b2:bf:51:b6:45:7a:f5:44:1f:86:f1:33:f7:e0:46:c1:8c:02: c6:a4:38:c0:52:f4:36:ff:f5:18:81:20:3e:42:5d:49:b8:5b: b6:ed:75:2f:99:58:17:8e:93:a2:fb:31:3e:a5:22:69:cb:a5: ba:bc:9f:6e:26:a5:fc:17:80:da:3c:5b:cf:23:f6:75:7a:27: ce:79:be:e6:9a:46:b4:38:ae:26:27:19:9f:5b:8e:d7:86:a7: ac:53:74:e6:aa:d6:e6:a8:d5:0f:5c:aa:5c:f6:d3:b6:1f:90: 22:2a:16:8e:c2:3d:73:4f:21:51:18:8e:a5:49:87:aa:e5:67: 07:33:fc:77:0b:7f:f0:7f:85:d3:fa:4b:f2:3e:4f:ef:13:b4: d5:8c:66:c6:cd:29:a1:49:d2:ae:34:85:ac:75:90:e0:3f:21: d4:c4:72:4c:24:a7:c1:e5:64:fe:6c:ac:a4:0d:8e:5b:60:27: 5f:ba:6c:4e:b8:63:fb:6a:52:85:d2:6a:00:cb:91:1c:03:14: 6a:06:2a:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSHrZgvfvwt2W4B1iRa6nQI6pYnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDgxNTFGRDYyRkExOEM5RUMyRjVCOURCNUQ0QTAzMTFE RjUwOTBCQjAeFw0yNjA5MjMwMjQ0MzVaFw0yNjA5MjQwMzUzMzVaMDMxMTAvBgNV BAMTKEJDNzI2NUQ3MkM4NEJENjk0Njc3MTk2QTk0QTcxOTNCQ0UzMjE0MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3SYy1gP7dMVJ8/uEm2IDl2bjO blaRm4rXM00zLRqY6y0e4a0oO+WQW2mR6C0AcyoxMd+sZvrEINE0WRrxj7u8W5Bg vp4yVIJl7vCbdj5RJJG65je7OYWoYtOzRCBgJ4Cnq8IlEgZjl/0VAqWPDWPDOOtg 899V4v2b8Cd18gweVVd43cnydYiR01VmPQP2MNK7sxwGOkJXGPWILxjiS5Jq/gvA LoEcst94DYy+at9yJ5Ey0i0mp6BKOgcV/sEllrY/hzORpgeZgapDAGbYREnmdiJt Bd9FEexNdrxZOUJ6SEBFd2Zft0uYHCzyZmlrIQQh8eNZVzGkrLgEdEXL8RS3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvHJl1yyEvWlGdxlqlKcZO84yFDUwHwYDVR0j BBgwFoAUCBUf1i+hjJ7C9bnbXUoDEd9QkLswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdkZDI1MTktMzA3OC00N2QzLTllODYtNDhmZDNiZGU3NmM4LzAvMDgxNTFGRDYy RkExOEM5RUMyRjVCOURCNUQ0QTAzMTFERjUwOTBCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wODE1MUZENjJGQTE4QzlFQzJGNUI5REI1RDRBMDMxMURGNTA5 MEJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzAvMDgxNTFGRDYyRkExOEM5RUMyRjVCOURCNUQ0QTAz MTFERjUwOTBCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIMgKms03Ae41r5505hbLdiyc0uo4wbwXlb fOmFi1wNfQ4+HT8iHXv7Y4FMfF45EaKCTU6hJbK/UbZFevVEH4bxM/fgRsGMAsak OMBS9Db/9RiBID5CXUm4W7btdS+ZWBeOk6L7MT6lImnLpbq8n24mpfwXgNo8W88j 9nV6J855vuaaRrQ4riYnGZ9bjteGp6xTdOaq1uao1Q9cqlz207YfkCIqFo7CPXNP IVEYjqVJh6rlZwcz/HcLf/B/hdP6S/I+T+8TtNWMZsbNKaFJ0q40hax1kOA/IdTE ckwkp8HlZP5srKQNjltgJ1+6bE64Y/tqUoXSagDLkRwDFGoGKrk= -----END CERTIFICATE-----Generated at Wed Sep 23 08:31:43 2026 by rpki-client