$ rpki-client -vvvf rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft File: DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft (raw, json) Hash identifier: PIqMLif67vnSUiH+uDZ8uwGosNR/H7ln7buRG3Lz47I= Subject key identifier: E3:A2:B4:21:BC:E7:81:47:B0:82:11:E4:2C:9F:96:86:CA:17:49:FB Authority key identifier: DC:DF:EB:9B:30:70:53:1B:D7:F0:16:67:76:A9:BD:79:0D:81:56:F3 Certificate issuer: /CN=DCDFEB9B3070531BD7F0166776A9BD790D8156F3 Certificate serial: 63DDC3F3F61E9FF0B2E7BFAE675FC2B37DA49BB3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 23:14:52 +0000 Manifest this update: Wed 23 Sep 2026 23:09:52 +0000 Manifest next update: Fri 25 Sep 2026 00:32:52 +0000 Files and hashes: 1: 3230322e382e32382e302f32342d3234203d3e203435373234.roa (hash: WosTloIyziln5PL7ehnM5NRi5lB1Tbc4uPNxmDzbd8Y=) 2: DCDFEB9B3070531BD7F0166776A9BD790D8156F3.crl (hash: As/CGgYFpUAI9sH1DS8QL3vBk97M6t9/n6JGTOHUwAU=) 3: 3130332e3233312e3131322e302f32322d3234203d3e203435373234.roa (hash: xTYeiw6tD9ub4a6qX/XD5duOKCOoUSMBMj8/IYpDd/U=) 4: 3230322e382e32392e302f32342d3234203d3e203435373234.roa (hash: Yc1lRGNv0/ivQZsDhjeb4Ll2thmzxFFCqYVkWRBmzS0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.crl rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:dd:c3:f3:f6:1e:9f:f0:b2:e7:bf:ae:67:5f:c2:b3:7d:a4:9b:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCDFEB9B3070531BD7F0166776A9BD790D8156F3 Validity Not Before: Sep 23 23:09:52 2026 GMT Not After : Sep 25 00:32:52 2026 GMT Subject: CN=E3A2B421BCE78147B08211E42C9F9686CA1749FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:de:f0:cb:42:e8:df:6d:06:3b:bc:1d:b4:86: 79:6c:3e:65:01:47:4d:e7:fb:7c:72:dd:52:76:5a: 16:f0:b6:e4:5a:df:d2:db:c0:09:3c:07:9d:85:fc: 3c:c1:bb:3d:3b:3c:d9:97:64:0e:cf:28:33:ff:52: 7d:d4:77:55:1a:54:77:1b:1c:e7:da:8a:c0:45:2e: 7a:11:f8:1b:c9:9f:3b:60:0f:14:c7:66:f5:01:30: 2d:b2:d6:ea:59:5f:8e:9a:3a:a1:74:2b:ca:6b:da: 41:28:9d:08:ae:5c:f1:fa:d9:03:f6:b8:7c:c6:60: cf:60:43:70:96:d3:10:7c:a2:9c:3a:8c:43:a3:6f: e0:cb:78:b0:af:0d:23:8d:ce:4e:14:ff:35:0d:1d: 67:e5:0e:6f:2a:53:73:96:28:5c:a2:c3:92:61:a6: ca:06:3a:c5:56:05:59:60:f8:8d:6b:31:c8:f5:f6: b7:a3:cf:75:87:fc:dd:86:c6:39:f7:57:b5:16:55: 10:f2:d1:33:88:a8:84:d6:b4:f4:81:49:3c:71:15: 77:de:38:88:8e:48:e4:47:d3:e7:32:5f:1d:ca:ca: 32:dc:be:1e:b2:69:65:6a:58:b0:e0:50:3f:1d:d8: b1:d6:49:2d:42:45:0c:32:8a:8d:e7:f5:c3:ea:a8: 2f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A2:B4:21:BC:E7:81:47:B0:82:11:E4:2C:9F:96:86:CA:17:49:FB X509v3 Authority Key Identifier: keyid:DC:DF:EB:9B:30:70:53:1B:D7:F0:16:67:76:A9:BD:79:0D:81:56:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:c0:46:bc:90:b3:9a:63:e6:d0:a0:f1:3f:8d:e8:c7:08:dc: eb:ed:88:eb:04:c5:63:79:27:89:60:30:6a:eb:92:5b:4d:b9: 1d:e6:e2:0a:01:4b:f9:d3:35:33:f4:71:c5:c6:eb:3f:43:b9: 86:8b:25:fa:43:1c:24:79:22:ed:d0:61:c1:ae:c3:49:9f:f5: a6:22:ec:48:22:df:5d:f8:d0:b6:d3:a3:70:ac:45:cc:d1:2a: d6:e8:e5:99:51:35:10:4a:a4:4a:96:31:f5:67:65:6f:ba:14: 1f:90:f8:2a:de:e7:18:27:b1:6a:6c:85:5b:72:2c:e0:72:4b: 72:4f:cc:03:14:34:13:31:8f:11:16:8a:65:51:24:5b:62:f7: b7:f0:bc:89:f8:ed:b1:44:91:13:e9:db:b7:26:88:81:e3:c3: a7:ea:df:0c:e1:2a:2d:1a:3b:29:83:b3:c6:06:01:4f:4e:11: 4c:a2:b7:d8:f7:d2:ef:1e:f3:00:7a:f5:4a:2c:15:b3:f4:b7: f6:bc:6c:5b:23:43:ca:cc:94:23:3a:86:dc:fd:23:ea:c8:d0: 80:f6:16:62:2e:04:bb:2e:9c:5c:de:98:75:18:01:ef:3c:91: ab:a0:cc:dd:b0:db:f0:17:a6:bb:d0:c5:5e:f9:f3:85:b5:58: 47:3c:8f:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY93D8/Yen/Cy57+uZ1/Cs32km7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENERkVCOUIzMDcwNTMxQkQ3RjAxNjY3NzZBOUJENzkw RDgxNTZGMzAeFw0yNjA5MjMyMzA5NTJaFw0yNjA5MjUwMDMyNTJaMDMxMTAvBgNV BAMTKEUzQTJCNDIxQkNFNzgxNDdCMDgyMTFFNDJDOUY5Njg2Q0ExNzQ5RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp3vDLQujfbQY7vB20hnlsPmUB R03n+3xy3VJ2WhbwtuRa39LbwAk8B52F/DzBuz07PNmXZA7PKDP/Un3Ud1UaVHcb HOfaisBFLnoR+BvJnztgDxTHZvUBMC2y1upZX46aOqF0K8pr2kEonQiuXPH62QP2 uHzGYM9gQ3CW0xB8opw6jEOjb+DLeLCvDSONzk4U/zUNHWflDm8qU3OWKFyiw5Jh psoGOsVWBVlg+I1rMcj19rejz3WH/N2Gxjn3V7UWVRDy0TOIqITWtPSBSTxxFXfe OIiOSORH0+cyXx3KyjLcvh6yaWVqWLDgUD8d2LHWSS1CRQwyio3n9cPqqC9PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU46K0IbzngUewghHkLJ+WhsoXSfswHwYDVR0j BBgwFoAU3N/rmzBwUxvX8BZndqm9eQ2BVvMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGViOGI4ODktM2IzZC00ZWY1LWFkNzAtNWIxMDQ1ZWZmMzkzLzAvRENERkVCOUIz MDcwNTMxQkQ3RjAxNjY3NzZBOUJENzkwRDgxNTZGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0RGRUI5QjMwNzA1MzFCRDdGMDE2Njc3NkE5QkQ3OTBEODE1 NkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGViOGI4ODktM2IzZC00ZWY1LWFk NzAtNWIxMDQ1ZWZmMzkzLzAvRENERkVCOUIzMDcwNTMxQkQ3RjAxNjY3NzZBOUJE NzkwRDgxNTZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLARryQs5pj5tCg8T+N6McI3OvtiOsExWN5 J4lgMGrrkltNuR3m4goBS/nTNTP0ccXG6z9DuYaLJfpDHCR5Iu3QYcGuw0mf9aYi 7Egi31340LbTo3CsRczRKtbo5ZlRNRBKpEqWMfVnZW+6FB+Q+Cre5xgnsWpshVty LOByS3JPzAMUNBMxjxEWimVRJFti97fwvIn47bFEkRPp27cmiIHjw6fq3wzhKi0a OymDs8YGAU9OEUyit9j30u8e8wB69UosFbP0t/a8bFsjQ8rMlCM6htz9I+rI0ID2 FmIuBLsunFzemHUYAe88kaugzN2w2/AXprvQxV7584W1WEc8j9s= -----END CERTIFICATE-----Generated at Thu Sep 24 02:42:43 2026 by rpki-client