$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft File: 801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft (raw, json) Hash identifier: DVmeUpQtw6Qi2di6w4G/wSSAXg/ARzUJaS+oGPRVYEM= Subject key identifier: D6:53:57:A7:68:37:EB:A6:0C:AD:C2:3F:5A:59:EB:0B:81:17:C7:19 Authority key identifier: 80:1D:1B:4E:E6:BB:69:D3:F7:DA:2D:A9:DF:BD:AE:FB:29:78:37:24 Certificate issuer: /CN=801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724 Certificate serial: 4FE678415A66307BE55E2F1FEA878D7E1C6E7E28 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 03:35:05 +0000 Manifest this update: Thu 24 Sep 2026 03:30:05 +0000 Manifest next update: Fri 25 Sep 2026 04:15:05 +0000 Files and hashes: 1: 3130332e3138302e3139392e302f32342d3234203d3e20313439333638.roa (hash: PF2pFQ8Y4MjWEElnBJwyA+RuYK7yYkD7ChXjYqS9lpw=) 2: 801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.crl (hash: 0EmV9JQK2GI5lvDKoq5D6eaFVA11jT+vBN/BquqJMzE=) 3: 3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa (hash: 5qu3egPdBZlEVTvgirw7pWXgCRudPnC+xEwHD5lFYU8=) 4: 3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa (hash: 4a9og07u0srQecoyb+IpBZCUaRdvfCWkjUR0wkeGFvU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.crl rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 04:15:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:e6:78:41:5a:66:30:7b:e5:5e:2f:1f:ea:87:8d:7e:1c:6e:7e:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724 Validity Not Before: Sep 24 03:30:05 2026 GMT Not After : Sep 25 04:15:05 2026 GMT Subject: CN=D65357A76837EBA60CADC23F5A59EB0B8117C719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:87:5f:c8:76:40:76:15:30:35:4c:e3:44:d1: a9:fc:80:b6:a9:74:05:9a:7e:65:88:cf:2d:9b:ff: e2:63:d6:e7:43:dd:a1:51:eb:02:9f:08:4f:14:c4: 54:a6:5d:85:c8:4b:05:00:b2:45:62:34:fd:f7:fd: fb:f8:81:70:f8:e3:48:0d:1c:37:c9:de:eb:0a:87: e5:40:e8:a9:7c:ba:92:8b:ac:96:d4:50:91:c4:d6: 81:f3:26:d4:89:c3:da:b5:29:e4:2c:22:b1:12:ab: c6:c5:ea:d5:e6:0a:15:45:49:8b:ff:12:e7:96:0e: 8d:e1:01:d6:34:7b:99:c4:84:d3:4a:6b:d4:6b:b3: a5:30:fb:8f:6b:ec:72:0e:dd:53:ba:aa:56:a6:e4: 22:c3:1b:b2:c6:d4:bc:6a:13:16:59:84:54:14:55: f4:85:3d:25:b0:d1:b6:ba:17:21:ec:bb:ca:7e:79: d9:ba:56:63:78:91:86:10:b5:34:cb:5c:0e:09:f0: 3d:62:69:60:cc:2e:18:ac:a9:d2:83:28:b5:d8:6a: 30:25:3c:80:de:74:d5:a5:36:51:93:24:3a:45:1c: bc:ab:34:c5:e4:cd:e0:31:80:c3:3e:5e:31:ad:91: e9:64:c9:16:e6:d2:20:5a:d1:1b:47:d6:84:88:99: 4d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:53:57:A7:68:37:EB:A6:0C:AD:C2:3F:5A:59:EB:0B:81:17:C7:19 X509v3 Authority Key Identifier: keyid:80:1D:1B:4E:E6:BB:69:D3:F7:DA:2D:A9:DF:BD:AE:FB:29:78:37:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4d:09:58:1d:1c:f4:13:57:40:07:64:78:fe:2a:e2:da:53: 9d:f2:da:7b:55:96:cd:e6:a5:cf:8b:df:f5:62:ba:5d:53:63: 67:4d:e0:ad:a5:17:45:06:72:9f:c4:88:6d:dc:67:10:14:d9: c4:7e:9a:d2:86:c5:9f:75:6c:1f:15:09:57:44:55:c5:a9:f8: 2a:f7:0b:2a:71:cb:a6:9a:7a:04:7f:04:bc:f3:0d:87:98:f2: 52:b3:6a:f3:d7:00:56:b4:ae:c8:6c:e6:63:b8:c1:4f:92:5e: e0:64:c4:03:0d:a5:8c:34:8f:2e:dd:b0:07:7a:91:4f:5c:26: e8:88:91:3a:bf:a9:4d:ce:b6:dc:3f:be:a3:7f:8c:7c:02:59: 21:f6:51:4b:e5:bf:c8:aa:ea:02:16:4c:30:b3:9b:e7:13:43: 29:49:34:46:71:bc:5e:d6:b0:42:a8:e9:c7:a9:af:e8:4d:d4: c7:8e:9b:fe:40:60:2c:86:cd:38:82:9a:50:3c:ae:69:a9:74: 53:dd:37:67:f7:fd:f7:dd:e8:ef:6c:13:a2:6f:5c:9e:c0:32: f9:c4:78:ca:3e:14:4c:c0:a5:c1:ba:4f:1d:81:9d:ac:ff:21: b2:1b:f3:98:d3:8b:0f:54:fb:04:e1:c2:53:4c:ff:51:d9:d5: 4e:cd:89:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT+Z4QVpmMHvlXi8f6oeNfhxufigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAxRDFCNEVFNkJCNjlEM0Y3REEyREE5REZCREFFRkIy OTc4MzcyNDAeFw0yNjA5MjQwMzMwMDVaFw0yNjA5MjUwNDE1MDVaMDMxMTAvBgNV BAMTKEQ2NTM1N0E3NjgzN0VCQTYwQ0FEQzIzRjVBNTlFQjBCODExN0M3MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjh1/IdkB2FTA1TONE0an8gLap dAWafmWIzy2b/+Jj1udD3aFR6wKfCE8UxFSmXYXISwUAskViNP33/fv4gXD440gN HDfJ3usKh+VA6Kl8upKLrJbUUJHE1oHzJtSJw9q1KeQsIrESq8bF6tXmChVFSYv/ EueWDo3hAdY0e5nEhNNKa9Rrs6Uw+49r7HIO3VO6qlam5CLDG7LG1LxqExZZhFQU VfSFPSWw0ba6FyHsu8p+edm6VmN4kYYQtTTLXA4J8D1iaWDMLhisqdKDKLXYajAl PIDedNWlNlGTJDpFHLyrNMXkzeAxgMM+XjGtkelkyRbm0iBa0RtH1oSImU2ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1lNXp2g366YMrcI/WlnrC4EXxxkwHwYDVR0j BBgwFoAUgB0bTua7adP32i2p372u+yl4NyQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFjODAxYTAtNzkxMi00YjAxLWEyODEtODgwMjQ2MjRhMmQ0LzAvODAxRDFCNEVF NkJCNjlEM0Y3REEyREE5REZCREFFRkIyOTc4MzcyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MDFEMUI0RUU2QkI2OUQzRjdEQTJEQTlERkJEQUVGQjI5Nzgz NzI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFjODAxYTAtNzkxMi00YjAxLWEy ODEtODgwMjQ2MjRhMmQ0LzAvODAxRDFCNEVFNkJCNjlEM0Y3REEyREE5REZCREFF RkIyOTc4MzcyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtNCVgdHPQTV0AHZHj+KuLaU53y2ntVls3m pc+L3/Viul1TY2dN4K2lF0UGcp/EiG3cZxAU2cR+mtKGxZ91bB8VCVdEVcWp+Cr3 Cypxy6aaegR/BLzzDYeY8lKzavPXAFa0rshs5mO4wU+SXuBkxAMNpYw0jy7dsAd6 kU9cJuiIkTq/qU3Ottw/vqN/jHwCWSH2UUvlv8iq6gIWTDCzm+cTQylJNEZxvF7W sEKo6cepr+hN1MeOm/5AYCyGzTiCmlA8rmmpdFPdN2f3/ffd6O9sE6JvXJ7AMvnE eMo+FEzApcG6Tx2Bnaz/IbIb85jTiw9U+wThwlNM/1HZ1U7Niek= -----END CERTIFICATE-----Generated at Thu Sep 24 12:58:09 2026 by rpki-client