$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft File: D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft (raw, json) Hash identifier: mSeqlK9Ulg2UGjJE75IiRV4OsLJz/XUJZSPIx41cfNA= Subject key identifier: D8:05:79:39:26:EA:A8:9F:94:4E:A4:34:53:71:D3:19:90:AA:B1:A1 Authority key identifier: D2:86:1B:66:14:2D:51:B5:DE:4E:39:CD:C5:E1:64:41:59:BC:7B:BC Certificate issuer: /CN=D2861B66142D51B5DE4E39CDC5E1644159BC7BBC Certificate serial: 47F104E2F5E92ED6B6AABD84137EF69B7C27F6D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 01:11:28 +0000 Manifest this update: Fri 25 Sep 2026 01:06:28 +0000 Manifest next update: Sat 26 Sep 2026 04:27:28 +0000 Files and hashes: 1: D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.crl (hash: Mj0qPbtUXI0zGuXORv0f7jOYXI6bdnfj9yC3S7vnSVY=) 2: 323030313a6466333a643163303a3a2f34382d3438203d3e20313532373538.roa (hash: KLJKltDFBgSRycUEiUgW7XKQBHKRYM0bmiK8DEJJdYA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.crl rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 03:53:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f1:04:e2:f5:e9:2e:d6:b6:aa:bd:84:13:7e:f6:9b:7c:27:f6:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2861B66142D51B5DE4E39CDC5E1644159BC7BBC Validity Not Before: Sep 25 01:06:28 2026 GMT Not After : Sep 26 04:27:28 2026 GMT Subject: CN=D805793926EAA89F944EA4345371D31990AAB1A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3c:28:ad:85:47:56:32:02:ec:21:9d:2a:21: c3:f6:be:0e:95:2a:37:fe:55:cc:74:22:a4:65:91: 66:d3:72:dd:8a:87:28:95:73:77:e8:61:33:25:c0: d6:f2:ad:d8:0b:36:e4:6a:cc:fc:0b:55:c5:5e:0a: b9:49:2e:50:34:48:db:7a:c4:f0:d0:b9:35:51:c0: 0b:96:5f:cb:c6:c4:51:4d:d9:f6:0a:76:1e:7d:48: 42:ec:45:d2:23:0e:03:52:a4:6b:55:8e:4e:51:50: 71:64:13:f0:a1:80:37:9d:98:1c:cd:fd:1e:bc:23: dd:6e:5d:fa:dc:1c:aa:d5:62:10:df:e1:0f:e5:c7: 20:d1:5a:f7:75:e2:26:7c:4d:fe:1b:10:ff:9c:f7: 02:8f:24:59:61:0d:6f:46:f2:a2:ae:e9:9e:fc:86: 0e:57:68:11:a4:3e:d3:c4:eb:d4:07:79:c9:2e:3e: 27:24:1c:22:81:91:0d:0c:a0:d8:20:3d:b6:df:a9: 5f:3e:eb:c5:9c:a4:fe:21:4e:85:cb:d5:5a:52:80: 3b:fb:22:a5:22:39:b1:f3:67:dd:a1:57:62:dc:0e: bd:c1:46:69:e9:db:76:c2:be:33:10:84:c1:45:f0: b7:0c:6f:4c:f7:c1:21:81:1e:f0:fc:5b:5d:9b:f3: 6a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:05:79:39:26:EA:A8:9F:94:4E:A4:34:53:71:D3:19:90:AA:B1:A1 X509v3 Authority Key Identifier: keyid:D2:86:1B:66:14:2D:51:B5:DE:4E:39:CD:C5:E1:64:41:59:BC:7B:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:c5:1e:b7:e0:ad:75:23:c1:59:85:41:ef:81:81:3d:6d:1f: 1e:1f:2c:e7:e9:7b:d4:56:3a:ad:bb:a2:c3:78:6b:1d:f0:bb: 1f:21:d6:3d:c8:2f:cb:5a:44:23:bd:9b:8b:de:57:76:5e:ee: 84:24:82:0a:8d:58:19:fb:c6:88:cb:44:12:80:20:15:c8:18: 28:80:2a:22:1f:dd:78:13:d5:46:75:9a:fc:11:51:e9:d0:23: 3c:2f:d0:b6:ac:fd:85:d4:c8:85:ca:b8:54:ea:b6:52:ec:e8: 27:d9:fc:ef:2c:8b:75:6f:29:64:b3:01:7d:73:ce:41:b1:8b: b1:9c:14:cc:a0:b6:c0:60:c1:38:33:2b:f0:7b:d7:3e:95:3d: 74:cb:4a:3e:10:79:06:22:a6:8d:01:d3:61:2e:a4:33:f7:f9: 36:0c:2b:60:23:de:0b:33:49:03:4f:3a:bf:e3:d4:c0:63:9d: b5:dd:9f:ac:7a:0a:ad:32:be:14:d0:bf:7b:45:1a:7e:df:61: 10:c7:15:45:92:d0:8e:e5:62:0d:ce:2a:c6:88:e8:d3:d6:01: d3:db:66:a7:3e:f3:e1:5e:35:29:8a:a2:76:bb:87:15:c7:5e: 00:76:8d:47:f8:6a:2d:a3:4f:f7:82:99:aa:07:8c:25:d2:6e: 4b:96:07:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR/EE4vXpLta2qr2EE372m3wn9tcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4NjFCNjYxNDJENTFCNURFNEUzOUNEQzVFMTY0NDE1 OUJDN0JCQzAeFw0yNjA5MjUwMTA2MjhaFw0yNjA5MjYwNDI3MjhaMDMxMTAvBgNV BAMTKEQ4MDU3OTM5MjZFQUE4OUY5NDRFQTQzNDUzNzFEMzE5OTBBQUIxQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnPCithUdWMgLsIZ0qIcP2vg6V Kjf+Vcx0IqRlkWbTct2KhyiVc3foYTMlwNbyrdgLNuRqzPwLVcVeCrlJLlA0SNt6 xPDQuTVRwAuWX8vGxFFN2fYKdh59SELsRdIjDgNSpGtVjk5RUHFkE/ChgDedmBzN /R68I91uXfrcHKrVYhDf4Q/lxyDRWvd14iZ8Tf4bEP+c9wKPJFlhDW9G8qKu6Z78 hg5XaBGkPtPE69QHeckuPickHCKBkQ0MoNggPbbfqV8+68WcpP4hToXL1VpSgDv7 IqUiObHzZ92hV2LcDr3BRmnp23bCvjMQhMFF8LcMb0z3wSGBHvD8W12b82pLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2AV5OSbqqJ+UTqQ0U3HTGZCqsaEwHwYDVR0j BBgwFoAU0oYbZhQtUbXeTjnNxeFkQVm8e7wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdkZDI1MTktMzA3OC00N2QzLTllODYtNDhmZDNiZGU3NmM4LzEvRDI4NjFCNjYx NDJENTFCNURFNEUzOUNEQzVFMTY0NDE1OUJDN0JCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjg2MUI2NjE0MkQ1MUI1REU0RTM5Q0RDNUUxNjQ0MTU5QkM3 QkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzEvRDI4NjFCNjYxNDJENTFCNURFNEUzOUNEQzVFMTY0 NDE1OUJDN0JCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJjFHrfgrXUjwVmFQe+BgT1tHx4fLOfpe9RW Oq27osN4ax3wux8h1j3IL8taRCO9m4veV3Ze7oQkggqNWBn7xojLRBKAIBXIGCiA KiIf3XgT1UZ1mvwRUenQIzwv0Las/YXUyIXKuFTqtlLs6CfZ/O8si3VvKWSzAX1z zkGxi7GcFMygtsBgwTgzK/B71z6VPXTLSj4QeQYipo0B02EupDP3+TYMK2Aj3gsz SQNPOr/j1MBjnbXdn6x6Cq0yvhTQv3tFGn7fYRDHFUWS0I7lYg3OKsaI6NPWAdPb Zqc+8+FeNSmKona7hxXHXgB2jUf4ai2jT/eCmaoHjCXSbkuWB54= -----END CERTIFICATE-----Generated at Fri Sep 25 05:42:26 2026 by rpki-client