$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft File: D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft (raw, json) Hash identifier: B4tGJxeigLrJbVQqP7lumoB2YrC8KTdnUjnI+ZtebrI= Subject key identifier: 87:DA:0E:79:9E:00:10:DB:9F:51:3E:3E:91:A0:B7:F9:61:BC:2B:3E Authority key identifier: D3:98:21:43:FC:BA:44:20:C0:7A:A5:CE:EB:50:ED:B2:84:87:CF:2C Certificate issuer: /CN=D3982143FCBA4420C07AA5CEEB50EDB28487CF2C Certificate serial: 4F166048CEC79AB0BCE35503A4D82712613FC7C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 07:29:55 +0000 Manifest this update: Thu 24 Sep 2026 07:24:55 +0000 Manifest next update: Fri 25 Sep 2026 08:51:55 +0000 Files and hashes: 1: 3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa (hash: n33ojlZr3PPZOfsVvz1esHOzCxGjqSWfrz4yQc92lmw=) 2: 3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa (hash: ecWkSgSwkV2u+u82kb3iMyEyHidsVg9ktP1OUEc0RVY=) 3: D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.crl (hash: r9j1LVSJDFErKvsn9/GRi+Z9xVRjyZ55JZlZ97SmVXw=) 4: 3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa (hash: mtrDV4mqgTGdX3FIVkCoXVE0ERKQErVYoLX9nuzS4rw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.crl rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 08:51:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:16:60:48:ce:c7:9a:b0:bc:e3:55:03:a4:d8:27:12:61:3f:c7:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3982143FCBA4420C07AA5CEEB50EDB28487CF2C Validity Not Before: Sep 24 07:24:55 2026 GMT Not After : Sep 25 08:51:55 2026 GMT Subject: CN=87DA0E799E0010DB9F513E3E91A0B7F961BC2B3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bc:8a:a1:6b:45:d7:04:24:05:e1:ff:e4:bc: b9:9d:69:b2:75:5c:99:c3:14:2c:10:79:3a:29:62: 7b:49:18:4d:2f:de:65:fc:3e:e3:1e:bc:24:fb:30: 33:76:08:d2:3f:2c:b3:3b:35:97:a4:f6:ce:d0:aa: fc:7c:54:41:91:46:4c:49:5b:9f:fe:d0:8a:fc:76: 9d:d9:f7:10:bf:de:a9:d4:8d:46:77:04:22:9c:5b: e2:93:6a:e4:cf:bb:59:90:61:36:aa:c3:95:90:f8: 7f:f7:82:90:09:07:b3:d8:3e:19:cd:a9:64:53:a3: 37:a3:28:d8:a4:2a:f9:9d:a9:a3:34:ff:7e:48:37: 21:13:bb:b4:8e:45:e3:be:40:1d:a5:ab:5b:75:98: f3:e7:81:db:78:b0:48:2e:ce:0d:f4:49:b7:73:77: 81:ab:e2:e7:84:1c:c9:0f:0c:3d:8a:96:3b:f7:a0: be:38:4b:87:3b:9c:67:c4:50:b2:06:c7:34:f7:a5: c4:56:7c:e2:0d:b3:79:2f:f6:12:9c:8e:0b:92:35: bb:c4:de:d3:08:93:25:67:a4:70:95:3d:c3:a4:07: 77:5e:06:85:59:08:48:88:18:b0:32:41:df:22:3f: d7:d8:f7:dd:4e:52:ef:9c:da:3a:ed:cf:77:36:c5: fb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DA:0E:79:9E:00:10:DB:9F:51:3E:3E:91:A0:B7:F9:61:BC:2B:3E X509v3 Authority Key Identifier: keyid:D3:98:21:43:FC:BA:44:20:C0:7A:A5:CE:EB:50:ED:B2:84:87:CF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:9a:a5:19:19:3c:dc:97:4a:97:ad:19:08:73:0d:05:aa:d1: f5:ba:9d:db:fb:d7:39:78:5c:78:d7:0f:b4:77:fc:30:32:fb: ca:d0:f2:13:fc:bd:c7:b2:38:95:29:04:1b:9f:32:c5:05:52: 54:fe:5a:b0:3b:cb:a0:4a:84:19:34:3a:7b:2f:fe:ca:57:55: b0:c1:33:6b:8b:bd:1f:e0:d2:96:94:8c:c4:ed:af:d4:d8:a9: 6e:17:8d:72:3a:1b:42:e2:71:f4:1e:16:3b:bb:55:68:d5:a9: 74:d7:cc:c5:51:29:4d:88:c2:bc:76:e8:f6:bd:69:35:53:c6: 22:7c:93:91:ad:10:86:6e:d2:91:12:88:8e:5e:57:fa:17:b6: 85:79:6d:43:0e:08:ef:3e:e7:09:53:6b:8f:cd:24:d6:b3:71: ae:5f:96:a4:0d:3e:f2:a9:25:3e:dd:5e:6f:a7:a0:43:b4:d6: 13:62:33:04:76:37:db:1b:3c:7e:22:81:ee:7d:16:4c:6c:54: 9d:e3:10:40:d5:ab:77:87:fd:be:f3:51:c9:cd:98:ef:ea:32: 6d:c6:40:2d:4c:ae:7a:55:55:12:a0:e5:58:af:be:43:fd:3a: c2:89:fd:b5:ca:64:1e:3a:ce:8f:96:81:4e:a8:58:68:05:1b: 2d:ca:0f:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTxZgSM7HmrC841UDpNgnEmE/x8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM5ODIxNDNGQ0JBNDQyMEMwN0FBNUNFRUI1MEVEQjI4 NDg3Q0YyQzAeFw0yNjA5MjQwNzI0NTVaFw0yNjA5MjUwODUxNTVaMDMxMTAvBgNV BAMTKDg3REEwRTc5OUUwMDEwREI5RjUxM0UzRTkxQTBCN0Y5NjFCQzJCM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbvIqha0XXBCQF4f/kvLmdabJ1 XJnDFCwQeTopYntJGE0v3mX8PuMevCT7MDN2CNI/LLM7NZek9s7Qqvx8VEGRRkxJ W5/+0Ir8dp3Z9xC/3qnUjUZ3BCKcW+KTauTPu1mQYTaqw5WQ+H/3gpAJB7PYPhnN qWRTozejKNikKvmdqaM0/35INyETu7SOReO+QB2lq1t1mPPngdt4sEguzg30Sbdz d4Gr4ueEHMkPDD2Kljv3oL44S4c7nGfEULIGxzT3pcRWfOINs3kv9hKcjguSNbvE 3tMIkyVnpHCVPcOkB3deBoVZCEiIGLAyQd8iP9fY991OUu+c2jrtz3c2xfvbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh9oOeZ4AENufUT4+kaC3+WG8Kz4wHwYDVR0j BBgwFoAU05ghQ/y6RCDAeqXO61DtsoSHzywwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZlZTgyYjctYzE4Mi00ZTgzLTg5N2MtZTAwZjNjZTFiMGQyLzAvRDM5ODIxNDNG Q0JBNDQyMEMwN0FBNUNFRUI1MEVEQjI4NDg3Q0YyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzk4MjE0M0ZDQkE0NDIwQzA3QUE1Q0VFQjUwRURCMjg0ODdD RjJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZlZTgyYjctYzE4Mi00ZTgzLTg5 N2MtZTAwZjNjZTFiMGQyLzAvRDM5ODIxNDNGQ0JBNDQyMEMwN0FBNUNFRUI1MEVE QjI4NDg3Q0YyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGapRkZPNyXSpetGQhzDQWq0fW6ndv71zl4 XHjXD7R3/DAy+8rQ8hP8vceyOJUpBBufMsUFUlT+WrA7y6BKhBk0Onsv/spXVbDB M2uLvR/g0paUjMTtr9TYqW4XjXI6G0LicfQeFju7VWjVqXTXzMVRKU2Iwrx26Pa9 aTVTxiJ8k5GtEIZu0pESiI5eV/oXtoV5bUMOCO8+5wlTa4/NJNazca5flqQNPvKp JT7dXm+noEO01hNiMwR2N9sbPH4ige59FkxsVJ3jEEDVq3eH/b7zUcnNmO/qMm3G QC1MrnpVVRKg5VivvkP9OsKJ/bXKZB46zo+WgU6oWGgFGy3KDzE= -----END CERTIFICATE-----Generated at Thu Sep 24 16:57:43 2026 by rpki-client