$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft File: 602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft (raw, json) Hash identifier: G5Fa8fsa7TwUv3TPEQI3hK8jFX7tMqKZAe4e+TSe2fI= Subject key identifier: DE:7D:16:76:3A:CA:C0:C3:E2:95:36:DA:55:48:5A:CB:12:69:F0:B5 Authority key identifier: 60:2D:C3:C0:42:45:09:89:50:9B:4B:AE:FD:B4:AA:29:1E:B6:F8:F6 Certificate issuer: /CN=602DC3C042450989509B4BAEFDB4AA291EB6F8F6 Certificate serial: 1456A9953F2210E0022B6DE3DD86C497BA24EE74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 18:12:55 +0000 Manifest this update: Fri 25 Sep 2026 18:07:55 +0000 Manifest next update: Sat 26 Sep 2026 20:46:55 +0000 Files and hashes: 1: 3136302e32302e33382e302f32342d3234203d3e20313532373637.roa (hash: hlIEpb1QvuixIbQLzMUMoA0W+7btuV0cgzPbAs+Iw5M=) 2: 3136302e32302e33392e302f32342d3234203d3e20313532373637.roa (hash: 7YQRPlXdULMyA1HYWK14T5iCJHvbhMELTTePtHF2CN4=) 3: 602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl (hash: 3O4jTy3mzNfVVKz9UjNi9fRBv+BwZlfhORk153RAbhQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:56:a9:95:3f:22:10:e0:02:2b:6d:e3:dd:86:c4:97:ba:24:ee:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=602DC3C042450989509B4BAEFDB4AA291EB6F8F6 Validity Not Before: Sep 25 18:07:55 2026 GMT Not After : Sep 26 20:46:55 2026 GMT Subject: CN=DE7D16763ACAC0C3E29536DA55485ACB1269F0B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:03:96:ba:05:ad:ca:f1:78:b8:73:42:c0:aa: 8a:d0:0b:b8:b6:22:9c:d0:8c:b0:d3:4e:6f:22:59: ff:ff:ef:be:90:33:f7:b7:77:08:68:ca:04:94:9c: 30:d1:83:c9:73:f9:26:3e:7b:3d:03:63:3e:17:47: cd:b8:35:3f:89:5b:5b:55:69:77:06:4b:b2:93:a8: ff:21:4e:eb:ee:10:bf:17:2c:93:17:ad:bd:26:80: ad:af:bc:cb:60:d9:dc:55:33:d1:c9:68:ad:58:bc: 3d:cd:ea:12:80:37:89:67:79:3f:09:dd:15:3d:d4: 3f:8e:53:0f:1f:2b:05:35:f2:19:23:00:0e:44:49: 57:21:d2:95:cb:9b:c5:75:af:ce:ca:f2:fa:64:7f: 3b:65:35:0c:6b:24:14:7b:f4:26:a1:21:0a:cc:f0: 00:3a:75:bf:19:da:01:27:5c:18:81:32:ff:4c:c8: 39:a0:37:70:d9:88:0f:fd:2a:22:ef:64:d7:e9:18: ec:dd:d8:28:0b:b0:9f:cc:7a:ee:fc:cf:d4:2c:c3: e2:a1:97:20:5a:06:54:64:03:48:58:1a:09:79:ca: a5:b9:39:0d:23:25:2b:a0:28:4d:cf:0e:4a:f4:9a: 89:42:d0:4d:1d:63:1b:76:f0:0f:18:5e:22:01:77: c6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7D:16:76:3A:CA:C0:C3:E2:95:36:DA:55:48:5A:CB:12:69:F0:B5 X509v3 Authority Key Identifier: keyid:60:2D:C3:C0:42:45:09:89:50:9B:4B:AE:FD:B4:AA:29:1E:B6:F8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:e5:4c:c2:5b:ef:b2:a0:ee:bc:d3:ea:67:67:64:0b:3f:e0: d2:7c:19:ae:62:85:70:97:cb:b9:8d:dc:e5:95:f3:c0:4a:50: 38:db:69:33:e8:23:a7:87:c5:b6:2d:8b:0b:ca:c1:51:36:df: 48:f9:b3:5b:23:15:4e:90:e2:b4:ef:03:e4:37:5d:8b:65:1c: 6e:01:a1:24:39:b4:21:8f:7e:a8:7e:c5:25:c7:3d:bb:43:49: 7e:6e:78:c3:57:18:5c:f3:12:63:a7:19:af:5d:ea:28:4c:40: 77:53:bc:38:dd:aa:e4:ba:60:a8:04:e1:61:42:3c:cb:41:cd: 84:7d:9a:d1:25:ba:26:f1:68:6c:97:47:44:49:e9:ee:52:41: a0:f4:57:70:4a:6d:f7:96:ae:13:01:45:5b:14:7d:0c:e2:e9: 24:09:56:f4:df:9d:dc:3b:4c:0e:a5:17:4d:73:51:81:dc:66: 53:aa:8d:ac:9e:49:06:0c:e7:dc:33:46:26:7c:d8:df:dc:4e: 01:3b:da:81:3b:69:a6:a9:84:95:f5:4c:85:09:c2:8b:9c:af: 32:61:97:33:ac:44:d5:93:53:79:b4:c2:e3:62:f5:c5:91:fd: df:53:1c:f4:96:36:4d:df:19:df:de:43:b0:4d:fb:41:2f:4b: 54:05:9e:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFFaplT8iEOACK23j3YbEl7ok7nQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAyREMzQzA0MjQ1MDk4OTUwOUI0QkFFRkRCNEFBMjkx RUI2RjhGNjAeFw0yNjA5MjUxODA3NTVaFw0yNjA5MjYyMDQ2NTVaMDMxMTAvBgNV BAMTKERFN0QxNjc2M0FDQUMwQzNFMjk1MzZEQTU1NDg1QUNCMTI2OUYwQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9A5a6Ba3K8Xi4c0LAqorQC7i2 IpzQjLDTTm8iWf//776QM/e3dwhoygSUnDDRg8lz+SY+ez0DYz4XR824NT+JW1tV aXcGS7KTqP8hTuvuEL8XLJMXrb0mgK2vvMtg2dxVM9HJaK1YvD3N6hKAN4lneT8J 3RU91D+OUw8fKwU18hkjAA5ESVch0pXLm8V1r87K8vpkfztlNQxrJBR79CahIQrM 8AA6db8Z2gEnXBiBMv9MyDmgN3DZiA/9KiLvZNfpGOzd2CgLsJ/Meu78z9Qsw+Kh lyBaBlRkA0hYGgl5yqW5OQ0jJSugKE3PDkr0molC0E0dYxt28A8YXiIBd8ZbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3n0WdjrKwMPilTbaVUhayxJp8LUwHwYDVR0j BBgwFoAUYC3DwEJFCYlQm0uu/bSqKR62+PYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZlN2RhY2MtMmI0NS00MTQxLTk3NzUtZjFiYjlmMDUyMzk2LzAvNjAyREMzQzA0 MjQ1MDk4OTUwOUI0QkFFRkRCNEFBMjkxRUI2RjhGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82MDJEQzNDMDQyNDUwOTg5NTA5QjRCQUVGREI0QUEyOTFFQjZG OEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZlN2RhY2MtMmI0NS00MTQxLTk3 NzUtZjFiYjlmMDUyMzk2LzAvNjAyREMzQzA0MjQ1MDk4OTUwOUI0QkFFRkRCNEFB MjkxRUI2RjhGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABblTMJb77Kg7rzT6mdnZAs/4NJ8Ga5ihXCX y7mN3OWV88BKUDjbaTPoI6eHxbYtiwvKwVE230j5s1sjFU6Q4rTvA+Q3XYtlHG4B oSQ5tCGPfqh+xSXHPbtDSX5ueMNXGFzzEmOnGa9d6ihMQHdTvDjdquS6YKgE4WFC PMtBzYR9mtEluibxaGyXR0RJ6e5SQaD0V3BKbfeWrhMBRVsUfQzi6SQJVvTfndw7 TA6lF01zUYHcZlOqjayeSQYM59wzRiZ82N/cTgE72oE7aaaphJX1TIUJwoucrzJh lzOsRNWTU3m0wuNi9cWR/d9THPSWNk3fGd/eQ7BN+0EvS1QFnk4= -----END CERTIFICATE-----Generated at Fri Sep 25 23:02:24 2026 by rpki-client