$ rpki-client -vvvf rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft File: DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft (raw, json) Hash identifier: Xu1l3Rwx1KEXj7w0VjqlXQVhief4eUkNkmPO/ANaaJQ= Subject key identifier: 60:8A:F0:CF:84:0D:EF:AD:C4:86:B2:CE:FF:B7:BF:A8:66:80:95:C1 Authority key identifier: DB:F8:29:0B:AC:F2:AD:96:DB:B0:24:36:48:CC:6A:C6:D6:A7:76:18 Certificate issuer: /CN=DBF8290BACF2AD96DBB0243648CC6AC6D6A77618 Certificate serial: 14ECF6E010D21B30B2B5E0C40CE935023D5DFABA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 17:53:04 +0000 Manifest this update: Wed 23 Sep 2026 17:48:04 +0000 Manifest next update: Thu 24 Sep 2026 21:03:04 +0000 Files and hashes: 1: 3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa (hash: MrbeRL/3NlCVWGAvenapRPN6GCB6X5UzgLlN8P6C5B4=) 2: 3130332e3137322e3132322e302f32342d3234203d3e20313431353935.roa (hash: J7DIB6hfPPTu3E2KzBH8yAsIGJFne3bOrj0Y9GAdcDc=) 3: DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl (hash: sy+PdUGyiXr3nEGZe/1tKnAD6CZ9NPc4ZLnA6jpXQG0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ec:f6:e0:10:d2:1b:30:b2:b5:e0:c4:0c:e9:35:02:3d:5d:fa:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF8290BACF2AD96DBB0243648CC6AC6D6A77618 Validity Not Before: Sep 23 17:48:04 2026 GMT Not After : Sep 24 21:03:04 2026 GMT Subject: CN=608AF0CF840DEFADC486B2CEFFB7BFA8668095C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:39:f3:00:04:28:53:09:57:a8:58:fb:61:d9: 5e:ca:ec:7d:f3:43:94:31:9b:e9:9e:92:c0:28:c3: 50:43:d8:63:5b:68:fd:de:05:5e:94:e3:2b:7d:31: 51:53:70:28:47:98:68:06:28:28:b0:65:fb:49:a5: f2:19:21:fb:8b:7e:a7:28:9b:fb:76:a4:2d:37:5c: 0d:8f:a0:ab:9f:47:3f:f2:8c:86:21:32:1f:8f:b0: 57:3f:21:69:e3:82:d0:42:d6:e1:29:f8:fe:e6:2c: 5a:94:19:32:b2:ef:52:93:65:fa:dd:03:58:a8:d9: 6c:4f:b5:60:d3:56:47:37:16:6c:ff:44:00:0c:fc: 87:56:f5:b8:33:c3:19:b7:f2:40:cb:3d:51:d7:61: 6e:83:6d:b9:eb:0f:e1:ab:f6:f7:8f:db:92:54:33: 93:c1:77:a2:cc:c2:e9:4b:ea:35:bc:15:1d:22:74: 2e:16:a7:a9:fd:1d:e9:47:b4:8b:83:e7:2a:fd:02: 15:cb:4f:8c:48:a2:3f:e3:17:3e:47:9f:e4:86:e1: d8:e6:a0:f4:96:c1:88:c1:dd:80:e9:0f:4c:80:cc: b4:52:60:a1:f6:98:7a:fc:36:f9:4a:ad:bc:9c:b5: b7:bc:76:56:17:f7:9e:55:0c:56:fb:5b:07:7c:0b: 3a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8A:F0:CF:84:0D:EF:AD:C4:86:B2:CE:FF:B7:BF:A8:66:80:95:C1 X509v3 Authority Key Identifier: keyid:DB:F8:29:0B:AC:F2:AD:96:DB:B0:24:36:48:CC:6A:C6:D6:A7:76:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:40:e6:2c:1b:58:6d:82:3a:6e:58:1a:fd:4c:7b:6f:fa:27: 1d:b0:79:7c:48:b1:ab:a4:ae:29:d6:4a:94:f2:c3:30:ca:6c: 11:5c:5a:16:13:d4:6e:96:8d:e5:a2:b1:05:c1:5d:26:09:df: fd:5a:d5:11:ee:ea:c6:38:7d:73:dc:72:cf:41:a2:4d:8d:f9: bb:3d:77:84:7a:2b:2e:14:76:89:75:3e:b1:82:53:11:1b:a5: 9d:f1:31:9c:0d:61:60:be:17:8b:c1:81:56:83:12:4f:ca:df: eb:b8:d0:6b:97:1e:b5:29:6a:0b:76:93:fd:e5:1b:70:5b:8d: 25:a0:a1:7d:55:1e:eb:6a:0b:6c:61:30:ab:05:40:b0:d6:12: 67:02:64:8d:30:39:8a:35:df:39:58:e3:39:e2:39:8d:62:a7: 45:20:b4:c7:8e:0f:bc:a3:ab:af:a0:3c:f6:5b:ca:a7:82:7e: a6:04:8e:ff:20:06:de:e8:8f:4f:d7:a6:ec:bc:36:c5:20:e2: 4a:c0:1a:08:6f:34:43:fb:08:0a:a5:8d:e6:d7:01:85:12:55: 89:a5:8d:6d:8d:e4:0b:80:6a:89:5e:34:c0:6e:5f:34:33:4c: d7:a1:40:14:e5:02:a8:df:e2:1b:3d:9c:19:ac:b4:92:30:84: fb:81:90:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFOz24BDSGzCyteDEDOk1Aj1d+rowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGODI5MEJBQ0YyQUQ5NkRCQjAyNDM2NDhDQzZBQzZE NkE3NzYxODAeFw0yNjA5MjMxNzQ4MDRaFw0yNjA5MjQyMTAzMDRaMDMxMTAvBgNV BAMTKDYwOEFGMENGODQwREVGQURDNDg2QjJDRUZGQjdCRkE4NjY4MDk1QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyOfMABChTCVeoWPth2V7K7H3z Q5Qxm+meksAow1BD2GNbaP3eBV6U4yt9MVFTcChHmGgGKCiwZftJpfIZIfuLfqco m/t2pC03XA2PoKufRz/yjIYhMh+PsFc/IWnjgtBC1uEp+P7mLFqUGTKy71KTZfrd A1io2WxPtWDTVkc3Fmz/RAAM/IdW9bgzwxm38kDLPVHXYW6DbbnrD+Gr9veP25JU M5PBd6LMwulL6jW8FR0idC4Wp6n9HelHtIuD5yr9AhXLT4xIoj/jFz5Hn+SG4djm oPSWwYjB3YDpD0yAzLRSYKH2mHr8NvlKrbyctbe8dlYX955VDFb7Wwd8CzqBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYIrwz4QN763EhrLO/7e/qGaAlcEwHwYDVR0j BBgwFoAU2/gpC6zyrZbbsCQ2SMxqxtandhgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU2MDA0ODYtOTc4MC00M2VlLWJiMmQtYjgxMTA5NGExNDQ1LzAvREJGODI5MEJB Q0YyQUQ5NkRCQjAyNDM2NDhDQzZBQzZENkE3NzYxOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQkY4MjkwQkFDRjJBRDk2REJCMDI0MzY0OENDNkFDNkQ2QTc3 NjE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU2MDA0ODYtOTc4MC00M2VlLWJi MmQtYjgxMTA5NGExNDQ1LzAvREJGODI5MEJBQ0YyQUQ5NkRCQjAyNDM2NDhDQzZB QzZENkE3NzYxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5A5iwbWG2COm5YGv1Me2/6Jx2weXxIsauk rinWSpTywzDKbBFcWhYT1G6WjeWisQXBXSYJ3/1a1RHu6sY4fXPccs9Bok2N+bs9 d4R6Ky4Udol1PrGCUxEbpZ3xMZwNYWC+F4vBgVaDEk/K3+u40GuXHrUpagt2k/3l G3BbjSWgoX1VHutqC2xhMKsFQLDWEmcCZI0wOYo13zlY4zniOY1ip0UgtMeOD7yj q6+gPPZbyqeCfqYEjv8gBt7oj0/Xpuy8NsUg4krAGghvNEP7CAqljebXAYUSVYml jW2N5AuAaoleNMBuXzQzTNehQBTlAqjf4hs9nBmstJIwhPuBkME= -----END CERTIFICATE-----Generated at Thu Sep 24 08:37:02 2026 by rpki-client