$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft File: D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft (raw, json) Hash identifier: FeHOlyMHO6Cvo23IlirN+AG4PrjdJFVaX0DP7R5uSUA= Subject key identifier: 11:2A:01:A4:AF:28:05:DE:78:36:23:41:8B:F2:43:4E:32:B6:D9:42 Authority key identifier: D3:D1:A4:AA:48:52:5A:5C:83:52:5E:AA:53:7E:49:FE:2A:F4:DF:FA Certificate issuer: /CN=D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA Certificate serial: 640AB68D538C61AB34C405055C37B4E5FFC6B563 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 00:21:02 +0000 Manifest this update: Thu 24 Sep 2026 00:16:02 +0000 Manifest next update: Fri 25 Sep 2026 02:07:02 +0000 Files and hashes: 1: 3130332e3136392e3133362e302f32332d3234203d3e203538383231.roa (hash: d3+XsStuI4V6Oj2xnH0hFfx5wuWKXEgPdu/mNqcOqsI=) 2: D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.crl (hash: wuxSGunXLmlSYIKCAne4Hle/fl32E5fB5uLSVHwTUJI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.crl rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:0a:b6:8d:53:8c:61:ab:34:c4:05:05:5c:37:b4:e5:ff:c6:b5:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA Validity Not Before: Sep 24 00:16:02 2026 GMT Not After : Sep 25 02:07:02 2026 GMT Subject: CN=112A01A4AF2805DE783623418BF2434E32B6D942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:55:76:b7:72:94:4a:96:11:3e:76:62:9a:6e: 2b:54:24:6a:79:3a:b1:94:20:0c:e9:4e:89:aa:8d: 23:f6:56:f1:bb:86:59:57:c1:9e:db:71:f5:37:87: 00:34:56:b0:8c:ef:8c:72:b7:e8:9c:29:ca:6f:25: ae:0f:e2:73:b7:90:9b:22:e0:03:f3:24:a1:ee:c6: 58:98:40:f3:7f:57:94:19:48:97:6f:3e:40:93:aa: b5:b3:ba:e4:72:b8:14:48:5d:e1:73:f1:43:32:ff: ad:3d:67:05:ce:e4:84:28:9c:2d:3d:e1:62:8a:68: c5:98:dd:61:b2:a0:24:d6:14:c4:04:64:2e:fc:43: e3:5f:8d:c6:20:40:23:53:00:95:1a:db:5c:e1:97: cd:63:9c:4f:05:77:82:61:59:01:93:c7:e0:23:37: 96:43:55:38:46:84:4e:25:9a:9c:5e:0a:12:85:91: b1:81:53:f1:4e:65:64:51:a5:de:d5:74:2f:67:d0: a2:fd:0f:0d:a8:90:9d:92:45:7c:82:5b:f2:99:4c: fc:7c:59:3a:7c:de:0b:61:70:c9:17:59:25:e9:2e: 4f:dd:fe:91:5a:a5:8a:49:ec:39:d2:cf:8f:6e:5c: f2:a0:5e:56:bd:a6:67:84:7e:cf:01:f5:67:cc:3b: e7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:2A:01:A4:AF:28:05:DE:78:36:23:41:8B:F2:43:4E:32:B6:D9:42 X509v3 Authority Key Identifier: keyid:D3:D1:A4:AA:48:52:5A:5C:83:52:5E:AA:53:7E:49:FE:2A:F4:DF:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:ba:1b:3b:91:7d:ea:ee:0c:fe:36:6c:2e:28:82:19:04:41: 22:1d:20:16:03:57:ca:a7:93:f4:23:79:02:0b:d5:76:49:f0: e3:64:14:31:fe:34:48:7e:89:ed:e9:c1:a3:27:12:d4:15:f0: 96:b1:83:25:17:ab:13:34:21:e0:c0:b3:18:0f:e4:be:5b:2e: cd:58:1f:91:56:3a:e2:31:5a:75:88:0d:31:f2:95:ad:03:a5: 25:ca:9a:01:54:c3:63:5a:45:81:fd:45:04:28:c0:fe:af:5d: d3:7a:cc:f8:b0:85:54:7a:a3:c3:69:96:da:04:2d:a2:96:23: 92:27:ea:f6:54:a9:30:ff:08:fe:48:aa:ac:e7:67:50:e9:0a: cc:3d:5b:13:82:c1:f3:a7:a7:a1:50:75:57:fa:c9:dc:42:6f: 84:ff:67:79:7a:86:c9:58:be:d3:d0:d2:b9:c0:c5:3a:a1:08: 98:bb:c0:bb:d6:ed:aa:66:54:fa:49:ed:8d:ac:18:40:78:87: fb:0f:94:ac:81:e8:01:5d:1c:2a:82:a3:83:33:1a:9a:a7:ed: 76:d5:27:55:51:f0:da:ac:1b:c8:e2:c2:fb:d6:99:0e:f6:20: 3d:0b:5b:f2:f6:4a:92:50:a6:67:d3:69:9c:9a:fe:93:a4:d8: eb:a1:13:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZAq2jVOMYas0xAUFXDe05f/GtWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNEMUE0QUE0ODUyNUE1QzgzNTI1RUFBNTM3RTQ5RkUy QUY0REZGQTAeFw0yNjA5MjQwMDE2MDJaFw0yNjA5MjUwMjA3MDJaMDMxMTAvBgNV BAMTKDExMkEwMUE0QUYyODA1REU3ODM2MjM0MThCRjI0MzRFMzJCNkQ5NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOVXa3cpRKlhE+dmKabitUJGp5 OrGUIAzpTomqjSP2VvG7hllXwZ7bcfU3hwA0VrCM74xyt+icKcpvJa4P4nO3kJsi 4APzJKHuxliYQPN/V5QZSJdvPkCTqrWzuuRyuBRIXeFz8UMy/609ZwXO5IQonC09 4WKKaMWY3WGyoCTWFMQEZC78Q+NfjcYgQCNTAJUa21zhl81jnE8Fd4JhWQGTx+Aj N5ZDVThGhE4lmpxeChKFkbGBU/FOZWRRpd7VdC9n0KL9Dw2okJ2SRXyCW/KZTPx8 WTp83gthcMkXWSXpLk/d/pFapYpJ7DnSz49uXPKgXla9pmeEfs8B9WfMO+cRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUESoBpK8oBd54NiNBi/JDTjK22UIwHwYDVR0j BBgwFoAU09GkqkhSWlyDUl6qU35J/ir03/owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFjYjJlOGUtYTFhMi00Y2EwLTgwYjAtMjI1NTE4ZmZhZTE0LzAvRDNEMUE0QUE0 ODUyNUE1QzgzNTI1RUFBNTM3RTQ5RkUyQUY0REZGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EM0QxQTRBQTQ4NTI1QTVDODM1MjVFQUE1MzdFNDlGRTJBRjRE RkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFjYjJlOGUtYTFhMi00Y2EwLTgw YjAtMjI1NTE4ZmZhZTE0LzAvRDNEMUE0QUE0ODUyNUE1QzgzNTI1RUFBNTM3RTQ5 RkUyQUY0REZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFC6GzuRferuDP42bC4oghkEQSIdIBYDV8qn k/QjeQIL1XZJ8ONkFDH+NEh+ie3pwaMnEtQV8JaxgyUXqxM0IeDAsxgP5L5bLs1Y H5FWOuIxWnWIDTHyla0DpSXKmgFUw2NaRYH9RQQowP6vXdN6zPiwhVR6o8NpltoE LaKWI5In6vZUqTD/CP5IqqznZ1DpCsw9WxOCwfOnp6FQdVf6ydxCb4T/Z3l6hslY vtPQ0rnAxTqhCJi7wLvW7apmVPpJ7Y2sGEB4h/sPlKyB6AFdHCqCo4MzGpqn7XbV J1VR8NqsG8jiwvvWmQ72ID0LW/L2SpJQpmfTaZya/pOk2OuhE1s= -----END CERTIFICATE-----Generated at Thu Sep 24 06:04:41 2026 by rpki-client