$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft File: DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft (raw, json) Hash identifier: lsEumqt1/sxm8fUdidLNOMh7wgsO9TFUeCjNYbAjmF0= Subject key identifier: 60:DA:90:34:69:CD:56:26:3D:4F:F1:F1:96:77:7F:C2:27:2E:C2:B3 Authority key identifier: DC:AA:50:0E:56:DF:59:B6:81:7A:DE:1D:51:B5:60:5F:52:26:4D:76 Certificate issuer: /CN=DCAA500E56DF59B6817ADE1D51B5605F52264D76 Certificate serial: 7E3DC1740ADA5920FB9EF92933B2B57DE90773AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCAA500E56DF59B6817ADE1D51B5605F52264D76.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 00:51:52 +0000 Manifest this update: Thu 24 Sep 2026 00:46:52 +0000 Manifest next update: Fri 25 Sep 2026 03:14:52 +0000 Files and hashes: 1: DCAA500E56DF59B6817ADE1D51B5605F52264D76.crl (hash: sZr1v5mUeeTxnw+iLvP+6sqp6A5W2u+KbQRjVc2ubJc=) 2: 3130332e3138362e38392e302f32342d3234203d3e20313439373137.roa (hash: CdzPgARwHWVAiNVpWfYHHcwq4khjb1oCYEqwBbuFJZI=) 3: 3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa (hash: hgyoReewnJKW4nr6+Jg49Hdij/Yxck5vrTJyyAU/fpU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.crl rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCAA500E56DF59B6817ADE1D51B5605F52264D76.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:14:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:3d:c1:74:0a:da:59:20:fb:9e:f9:29:33:b2:b5:7d:e9:07:73:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCAA500E56DF59B6817ADE1D51B5605F52264D76 Validity Not Before: Sep 24 00:46:52 2026 GMT Not After : Sep 25 03:14:52 2026 GMT Subject: CN=60DA903469CD56263D4FF1F196777FC2272EC2B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:26:bc:7e:1e:66:80:88:84:90:f1:aa:05:2e: 97:33:81:0d:59:8c:8f:40:24:31:b5:b4:a7:1c:df: b3:9b:fd:27:d1:a4:c9:2d:a8:0c:ea:5a:e8:7f:d3: 00:0a:f3:06:91:c2:df:17:4d:1e:5a:0c:54:80:de: b1:72:18:1d:8d:25:36:28:22:91:8b:da:a9:ea:ef: fc:99:11:65:4c:4e:45:fe:e3:1a:89:ed:65:1c:39: 6e:0b:95:c6:d7:77:62:3c:e3:40:a9:ce:4e:05:09: 7e:b2:91:01:cc:d1:25:ea:09:e0:e9:01:9f:8e:0f: ad:41:cb:6b:c3:2b:c3:d4:98:1e:ad:bd:5c:eb:5b: 0a:59:0d:ad:b3:03:fa:a5:4d:bb:0d:23:75:23:7a: da:9a:24:9e:f4:14:b9:bd:e8:2a:bc:56:de:65:fc: 67:6b:10:85:70:3c:88:89:bf:e3:58:4f:82:73:08: a6:2d:e8:f8:27:17:64:9a:c3:71:7f:4e:a3:b5:a0: 58:9d:54:87:9f:97:84:72:5b:78:1e:ee:27:90:36: 62:4b:1e:e7:5c:27:27:a7:64:df:eb:2d:40:ac:98: cc:21:90:31:02:6a:f4:39:67:33:51:58:2e:99:0d: 09:dd:a3:56:ac:79:0a:58:73:6b:48:4d:3e:db:0e: 98:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:DA:90:34:69:CD:56:26:3D:4F:F1:F1:96:77:7F:C2:27:2E:C2:B3 X509v3 Authority Key Identifier: keyid:DC:AA:50:0E:56:DF:59:B6:81:7A:DE:1D:51:B5:60:5F:52:26:4D:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCAA500E56DF59B6817ADE1D51B5605F52264D76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:35:ed:c2:56:11:fd:bf:60:9a:40:2e:f9:4b:09:55:1a:8d: f7:7a:a7:86:25:4b:86:9b:62:1c:97:2c:2e:47:b5:2f:5f:0e: f4:69:6a:81:b6:26:58:3a:ec:68:b6:69:8c:88:3d:ea:2c:1b: 09:9f:21:53:40:48:7d:df:9a:f1:16:93:a8:4c:3b:56:8a:f0: 28:75:da:5c:ea:57:89:e0:6a:26:99:b6:76:f6:71:12:65:b5: b2:92:ae:6a:1d:b3:da:f8:b6:9f:dc:4c:99:41:1f:96:d3:58: 9c:4e:3d:a3:1d:bf:f4:64:76:03:72:97:46:d6:d9:15:23:75: 4b:63:e6:c8:e2:47:80:45:7c:46:8f:42:ce:b0:e1:29:61:3e: 5c:ae:df:15:7e:0f:23:91:08:3d:24:b0:e6:5c:bb:62:a8:31: 4a:31:84:a3:bc:05:51:49:f6:2b:4f:64:6d:c9:c8:f9:6b:48: 09:45:be:0d:62:e7:4a:41:0b:13:48:cc:90:c4:32:0e:69:73: cf:c6:19:32:fc:76:09:22:07:1d:51:1d:66:3e:46:96:0f:c6: 8d:a7:37:7c:d4:55:b8:3d:33:9b:54:6c:9f:2a:04:4b:5a:ae: 57:1e:ae:9c:64:de:2f:02:06:aa:66:f7:a2:32:f5:7b:66:8a: e3:9e:2f:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfj3BdAraWSD7nvkpM7K1fekHc6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENBQTUwMEU1NkRGNTlCNjgxN0FERTFENTFCNTYwNUY1 MjI2NEQ3NjAeFw0yNjA5MjQwMDQ2NTJaFw0yNjA5MjUwMzE0NTJaMDMxMTAvBgNV BAMTKDYwREE5MDM0NjlDRDU2MjYzRDRGRjFGMTk2Nzc3RkMyMjcyRUMyQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvJrx+HmaAiISQ8aoFLpczgQ1Z jI9AJDG1tKcc37Ob/SfRpMktqAzqWuh/0wAK8waRwt8XTR5aDFSA3rFyGB2NJTYo IpGL2qnq7/yZEWVMTkX+4xqJ7WUcOW4LlcbXd2I840Cpzk4FCX6ykQHM0SXqCeDp AZ+OD61By2vDK8PUmB6tvVzrWwpZDa2zA/qlTbsNI3UjetqaJJ70FLm96Cq8Vt5l /GdrEIVwPIiJv+NYT4JzCKYt6PgnF2Saw3F/TqO1oFidVIefl4RyW3ge7ieQNmJL HudcJyenZN/rLUCsmMwhkDECavQ5ZzNRWC6ZDQndo1aseQpYc2tITT7bDpgbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYNqQNGnNViY9T/Hxlnd/wicuwrMwHwYDVR0j BBgwFoAU3KpQDlbfWbaBet4dUbVgX1ImTXYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTMyOTVkZTYtMjA1OC00NmE3LTkzNmItMDUyY2YyZmE5MjBkLzAvRENBQTUwMEU1 NkRGNTlCNjgxN0FERTFENTFCNTYwNUY1MjI2NEQ3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0FBNTAwRTU2REY1OUI2ODE3QURFMUQ1MUI1NjA1RjUyMjY0 RDc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTMyOTVkZTYtMjA1OC00NmE3LTkz NmItMDUyY2YyZmE5MjBkLzAvRENBQTUwMEU1NkRGNTlCNjgxN0FERTFENTFCNTYw NUY1MjI2NEQ3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA817cJWEf2/YJpALvlLCVUajfd6p4YlS4ab YhyXLC5HtS9fDvRpaoG2Jlg67Gi2aYyIPeosGwmfIVNASH3fmvEWk6hMO1aK8Ch1 2lzqV4ngaiaZtnb2cRJltbKSrmods9r4tp/cTJlBH5bTWJxOPaMdv/RkdgNyl0bW 2RUjdUtj5sjiR4BFfEaPQs6w4SlhPlyu3xV+DyORCD0ksOZcu2KoMUoxhKO8BVFJ 9itPZG3JyPlrSAlFvg1i50pBCxNIzJDEMg5pc8/GGTL8dgkiBx1RHWY+RpYPxo2n N3zUVbg9M5tUbJ8qBEtarlcerpxk3i8CBqpm96Iy9XtmiuOeL1U= -----END CERTIFICATE-----Generated at Thu Sep 24 21:19:08 2026 by rpki-client