$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft File: 08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft (raw, json) Hash identifier: G3VWHNPal0bjrYXXORHx+xWwFTA89Zk/z6i1s+Ts5dY= Subject key identifier: D7:81:91:F3:58:7C:05:D1:0B:A3:8A:CB:D6:02:29:FF:7B:5F:5F:9C Authority key identifier: 08:DB:1C:B4:76:90:F1:F6:71:9A:71:A0:6B:2E:AF:FC:19:B3:00:FB Certificate issuer: /CN=08DB1CB47690F1F6719A71A06B2EAFFC19B300FB Certificate serial: 2096E441F1655729B4FE19041EB5AC807CEFF3F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft Manifest number: C1 Signing time: Tue 22 Sep 2026 22:19:04 +0000 Manifest this update: Tue 22 Sep 2026 22:14:04 +0000 Manifest next update: Thu 24 Sep 2026 02:03:04 +0000 Files and hashes: 1: 3136302e32322e39302e302f32342d3234203d3e20313532383135.roa (hash: Mcg9nbFeFqcbrXtsnWz+m6gsNfmlAcJQ2rPda7V7VVk=) 2: 08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.crl (hash: TY1fEpIyGPgyB3WGXepG6/xAVd/a0u+yw4Eg3x/6XNw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.crl rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 02:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:96:e4:41:f1:65:57:29:b4:fe:19:04:1e:b5:ac:80:7c:ef:f3:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08DB1CB47690F1F6719A71A06B2EAFFC19B300FB Validity Not Before: Sep 22 22:14:04 2026 GMT Not After : Sep 24 02:03:04 2026 GMT Subject: CN=D78191F3587C05D10BA38ACBD60229FF7B5F5F9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:30:fd:6b:aa:29:88:fa:5d:44:37:06:fb:c5: 24:99:ab:90:96:7a:7a:79:e6:30:17:2a:10:1a:3c: bf:65:a4:72:62:5a:1a:fe:6e:3e:43:f3:6d:d8:97: 97:bb:b3:f4:2d:82:d2:3f:60:a8:40:8f:c7:23:5a: c5:b5:7a:99:85:3f:5f:6c:b2:c0:a2:d8:60:56:6e: 92:77:d2:d4:f7:1f:7e:dc:6c:ba:25:dd:39:c2:d2: 3e:13:46:c8:cb:4b:58:ad:54:48:30:1f:48:21:a4: d4:f9:17:32:cf:8c:22:f1:f5:f9:fe:14:1c:ee:0a: 1b:56:3e:71:44:11:9c:b0:1e:3a:24:ef:7f:62:4e: b5:c5:92:77:f8:f0:c3:30:f3:79:cd:b7:d4:b5:69: 8e:d8:17:0b:08:e2:2f:00:11:e4:92:1c:dd:50:8e: 28:19:f4:7f:e5:a5:41:96:7c:a2:b2:72:60:92:75: aa:54:66:50:b3:65:94:5c:af:f7:b7:87:a9:34:d6: 46:ae:f6:61:cf:df:bb:20:5d:36:40:9f:d5:78:ac: 15:2a:b0:1d:11:82:e6:4e:90:dc:34:82:ef:3a:9d: 32:89:51:c4:3e:5c:98:cb:df:25:2b:61:6b:8f:eb: 65:0c:08:b1:4b:cc:a6:2c:97:07:1e:e4:a0:c2:2e: f0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:81:91:F3:58:7C:05:D1:0B:A3:8A:CB:D6:02:29:FF:7B:5F:5F:9C X509v3 Authority Key Identifier: keyid:08:DB:1C:B4:76:90:F1:F6:71:9A:71:A0:6B:2E:AF:FC:19:B3:00:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:40:1c:d1:60:5a:9d:62:9e:d0:6c:02:52:2c:1f:aa:1e:9a: be:d1:63:29:6a:ba:91:cc:e6:cf:39:61:65:cd:0e:cf:31:9e: fe:3a:f9:e1:04:57:d5:0f:2c:41:bf:b4:7c:22:48:2e:0c:c7: 0b:a2:32:2e:e6:5f:eb:b9:32:dc:18:83:a9:db:db:c7:d8:ef: ee:b5:bb:de:d4:67:4c:cb:b2:93:5d:1e:09:4c:67:6d:19:ce: 8c:5d:91:ae:54:c0:ae:18:4a:35:2d:06:af:c0:3d:9e:1d:4d: a9:d5:6e:d9:a5:11:b3:4c:b6:34:61:ad:f1:f9:78:55:bb:10: d6:c8:32:a3:11:7d:44:f4:e3:b4:75:04:b7:b4:13:92:a7:90: df:ea:13:e6:b1:39:a6:06:db:c5:c5:99:24:15:d3:ce:60:f7: 22:f3:3e:03:49:34:04:07:32:74:a8:1a:24:46:98:d7:16:46: 8a:3e:05:33:c4:c8:ba:f4:02:da:51:07:72:c0:b6:d9:5a:23: 76:25:4e:8e:d7:8b:d0:61:80:96:ff:8d:3e:22:1c:07:76:e3: a1:f2:08:97:af:d2:9e:e9:9e:0c:a2:f5:42:ad:3c:32:da:40: cd:5e:c9:e3:b0:65:b2:44:7c:b3:73:59:56:2f:68:d2:77:c7: 49:80:fc:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIJbkQfFlVym0/hkEHrWsgHzv8/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEQjFDQjQ3NjkwRjFGNjcxOUE3MUEwNkIyRUFGRkMx OUIzMDBGQjAeFw0yNjA5MjIyMjE0MDRaFw0yNjA5MjQwMjAzMDRaMDMxMTAvBgNV BAMTKEQ3ODE5MUYzNTg3QzA1RDEwQkEzOEFDQkQ2MDIyOUZGN0I1RjVGOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfMP1rqimI+l1ENwb7xSSZq5CW enp55jAXKhAaPL9lpHJiWhr+bj5D823Yl5e7s/QtgtI/YKhAj8cjWsW1epmFP19s ssCi2GBWbpJ30tT3H37cbLol3TnC0j4TRsjLS1itVEgwH0ghpNT5FzLPjCLx9fn+ FBzuChtWPnFEEZywHjok739iTrXFknf48MMw83nNt9S1aY7YFwsI4i8AEeSSHN1Q jigZ9H/lpUGWfKKycmCSdapUZlCzZZRcr/e3h6k01kau9mHP37sgXTZAn9V4rBUq sB0RguZOkNw0gu86nTKJUcQ+XJjL3yUrYWuP62UMCLFLzKYslwce5KDCLvDLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU14GR81h8BdELo4rL1gIp/3tfX5wwHwYDVR0j BBgwFoAUCNsctHaQ8fZxmnGgay6v/BmzAPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjE3Zjc5YjAtYjllMy00YzNkLWExMTMtYjZjNmExOGFmNGQxLzAvMDhEQjFDQjQ3 NjkwRjFGNjcxOUE3MUEwNkIyRUFGRkMxOUIzMDBGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wOERCMUNCNDc2OTBGMUY2NzE5QTcxQTA2QjJFQUZGQzE5QjMw MEZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjE3Zjc5YjAtYjllMy00YzNkLWEx MTMtYjZjNmExOGFmNGQxLzAvMDhEQjFDQjQ3NjkwRjFGNjcxOUE3MUEwNkIyRUFG RkMxOUIzMDBGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVAHNFgWp1intBsAlIsH6oemr7RYylqupHM 5s85YWXNDs8xnv46+eEEV9UPLEG/tHwiSC4MxwuiMi7mX+u5MtwYg6nb28fY7+61 u97UZ0zLspNdHglMZ20Zzoxdka5UwK4YSjUtBq/APZ4dTanVbtmlEbNMtjRhrfH5 eFW7ENbIMqMRfUT047R1BLe0E5KnkN/qE+axOaYG28XFmSQV085g9yLzPgNJNAQH MnSoGiRGmNcWRoo+BTPEyLr0AtpRB3LAttlaI3YlTo7Xi9BhgJb/jT4iHAd246Hy CJev0p7pngyi9UKtPDLaQM1eyeOwZbJEfLNzWVYvaNJ3x0mA/Kk= -----END CERTIFICATE-----Generated at Wed Sep 23 19:08:17 2026 by rpki-client