$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft File: D931809BED9AF438E358376B71B803D5CE61B2F5.mft (raw, json) Hash identifier: JlclsfsbSC9Us+Ho8eN/RFsD4Sb1y6+A2hh7jq5ZZho= Subject key identifier: C3:5D:3C:17:9B:4D:F1:D0:00:B6:C1:F8:EE:62:7B:7D:62:A7:23:A3 Authority key identifier: D9:31:80:9B:ED:9A:F4:38:E3:58:37:6B:71:B8:03:D5:CE:61:B2:F5 Certificate issuer: /CN=D931809BED9AF438E358376B71B803D5CE61B2F5 Certificate serial: 211D0310D4C2DD5FEEA1F55AED8D6C425D0FFC10 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D931809BED9AF438E358376B71B803D5CE61B2F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 21:27:38 +0000 Manifest this update: Wed 23 Sep 2026 21:22:38 +0000 Manifest next update: Thu 24 Sep 2026 21:56:38 +0000 Files and hashes: 1: 323030313a6466313a326430303a3a2f34382d3438203d3e20313336313132.roa (hash: RKwP+mZy2zIyOi9W+fTg2udU4bmegNaF/ZtZIeSMp7c=) 2: 3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa (hash: JqEBH5YvRn5xbIFqmvyQg68HK5OM9z3ELY7zjQkgJLI=) 3: D931809BED9AF438E358376B71B803D5CE61B2F5.crl (hash: K7CcyWFs2H+sjtGEIdZjaVZr11DCSOYnDYV8TguKySQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.crl rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D931809BED9AF438E358376B71B803D5CE61B2F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:1d:03:10:d4:c2:dd:5f:ee:a1:f5:5a:ed:8d:6c:42:5d:0f:fc:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D931809BED9AF438E358376B71B803D5CE61B2F5 Validity Not Before: Sep 23 21:22:38 2026 GMT Not After : Sep 24 21:56:38 2026 GMT Subject: CN=C35D3C179B4DF1D000B6C1F8EE627B7D62A723A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e1:c0:1a:f2:3f:f6:ba:98:5d:6e:ae:97:fe: b1:74:8f:2a:c6:25:57:b6:e6:b5:87:14:f3:da:f9: 07:1b:fb:e5:6f:50:c9:a7:2e:32:55:75:15:29:d6: 37:c3:42:3f:54:04:2a:78:f1:fa:b2:27:bc:28:7f: b8:45:be:da:16:05:bc:ef:24:92:43:77:58:e9:a6: 22:b4:35:39:44:ed:3e:5b:ca:a3:12:04:59:3e:93: e5:7e:7c:ce:34:97:31:eb:c5:3a:64:d8:80:74:4a: 58:12:49:34:15:63:84:fd:e4:9f:38:69:77:a2:dc: 0c:40:65:94:07:16:18:31:1c:ac:a1:ce:ea:e8:b6: 12:f0:3e:08:b1:93:0f:3d:88:79:82:70:24:2c:df: 11:d3:30:dc:42:ff:cd:1a:c9:1c:53:a0:68:10:7d: 44:6f:c2:08:e4:fa:55:d9:8d:89:4e:37:3e:bc:0b: 85:3a:a9:ab:00:7a:97:34:83:46:87:71:ac:95:24: c6:25:0a:e8:17:74:ed:eb:8b:a0:5b:f3:a5:9d:4c: 56:d7:2e:47:3a:dc:43:c4:89:d3:99:6e:2b:a0:6d: 90:75:84:c1:71:ba:73:66:34:90:e4:da:f2:d2:59: 26:92:1a:99:c0:41:bd:80:52:f9:67:f1:de:2f:ca: be:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5D:3C:17:9B:4D:F1:D0:00:B6:C1:F8:EE:62:7B:7D:62:A7:23:A3 X509v3 Authority Key Identifier: keyid:D9:31:80:9B:ED:9A:F4:38:E3:58:37:6B:71:B8:03:D5:CE:61:B2:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D931809BED9AF438E358376B71B803D5CE61B2F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:92:dd:88:ed:f2:fc:69:3e:b6:a7:00:b1:3d:d8:1c:58:f8: db:04:13:fd:50:ab:f8:1f:7c:1f:9d:57:7d:5d:a8:3e:51:9c: 38:29:c9:49:68:39:3c:ef:8f:43:18:07:51:0d:bc:71:6a:6c: e5:dd:a5:3d:f1:c3:16:23:29:b3:c4:09:1f:52:04:f1:91:b2: c1:0d:35:ac:02:8a:ca:98:27:c8:46:48:69:a5:14:3d:d5:47: 0a:f4:44:de:36:5e:fc:2e:e0:12:db:d0:ac:8e:93:d2:6e:a9: db:c4:95:e4:45:6c:4e:9a:85:5d:63:ee:88:8a:e1:39:9f:bc: 24:60:70:94:58:d1:93:55:f0:2d:a9:f6:4b:92:70:07:a3:ad: 66:af:62:bf:93:b2:9d:16:98:2e:65:ce:e7:8d:90:19:f4:01: e8:d8:33:b1:cf:57:fa:ec:1f:e3:ee:4e:2d:17:b1:ec:ac:98: f6:c7:2c:4c:f8:1d:21:de:4f:b3:bd:37:9a:69:43:bd:4b:a2: 3a:db:0c:75:ba:b4:14:cf:2f:3f:b8:a5:a6:5a:05:c3:0c:7d: 22:c3:59:a8:bc:dd:90:6e:e2:5c:10:14:15:6e:89:2e:92:32: 00:a7:c5:2d:7f:04:d9:c4:88:a4:7c:68:6d:b2:bc:c1:51:b0: 65:bd:4a:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIR0DENTC3V/uofVa7Y1sQl0P/BAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkzMTgwOUJFRDlBRjQzOEUzNTgzNzZCNzFCODAzRDVD RTYxQjJGNTAeFw0yNjA5MjMyMTIyMzhaFw0yNjA5MjQyMTU2MzhaMDMxMTAvBgNV BAMTKEMzNUQzQzE3OUI0REYxRDAwMEI2QzFGOEVFNjI3QjdENjJBNzIzQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA4cAa8j/2uphdbq6X/rF0jyrG JVe25rWHFPPa+Qcb++VvUMmnLjJVdRUp1jfDQj9UBCp48fqyJ7wof7hFvtoWBbzv JJJDd1jppiK0NTlE7T5byqMSBFk+k+V+fM40lzHrxTpk2IB0SlgSSTQVY4T95J84 aXei3AxAZZQHFhgxHKyhzurothLwPgixkw89iHmCcCQs3xHTMNxC/80ayRxToGgQ fURvwgjk+lXZjYlONz68C4U6qasAepc0g0aHcayVJMYlCugXdO3ri6Bb86WdTFbX Lkc63EPEidOZbiugbZB1hMFxunNmNJDk2vLSWSaSGpnAQb2AUvln8d4vyr45AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw108F5tN8dAAtsH47mJ7fWKnI6MwHwYDVR0j BBgwFoAU2TGAm+2a9DjjWDdrcbgD1c5hsvUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjBlMTFmZmMtZTc1YS00YmY0LTg0NDgtYzY4ZTIwMzM1ZWU4LzAvRDkzMTgwOUJF RDlBRjQzOEUzNTgzNzZCNzFCODAzRDVDRTYxQjJGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOTMxODA5QkVEOUFGNDM4RTM1ODM3NkI3MUI4MDNENUNFNjFC MkY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjBlMTFmZmMtZTc1YS00YmY0LTg0 NDgtYzY4ZTIwMzM1ZWU4LzAvRDkzMTgwOUJFRDlBRjQzOEUzNTgzNzZCNzFCODAz RDVDRTYxQjJGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHeS3Yjt8vxpPranALE92BxY+NsEE/1Qq/gf fB+dV31dqD5RnDgpyUloOTzvj0MYB1ENvHFqbOXdpT3xwxYjKbPECR9SBPGRssEN NawCisqYJ8hGSGmlFD3VRwr0RN42Xvwu4BLb0KyOk9JuqdvEleRFbE6ahV1j7oiK 4TmfvCRgcJRY0ZNV8C2p9kuScAejrWavYr+Tsp0WmC5lzueNkBn0AejYM7HPV/rs H+PuTi0XseysmPbHLEz4HSHeT7O9N5ppQ71LojrbDHW6tBTPLz+4paZaBcMMfSLD Wai83ZBu4lwQFBVuiS6SMgCnxS1/BNnEiKR8aG2yvMFRsGW9Sjg= -----END CERTIFICATE-----Generated at Thu Sep 24 05:52:05 2026 by rpki-client