$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft File: D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft (raw, json) Hash identifier: WZ8IyAdHdVIcrYcQU2svWzmnLtAZ+IbwwPSZDk2HhsI= Subject key identifier: 2F:5B:54:89:F7:10:09:C7:A8:8A:53:FF:6A:D9:FC:3D:51:5E:5F:38 Authority key identifier: D0:F0:C8:D1:50:FE:AE:B3:B2:62:AE:26:0E:ED:6E:FA:46:C4:C6:25 Certificate issuer: /CN=D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625 Certificate serial: 55BA1075C703F07D379CCC8DDC58F5AF898C55AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 06:23:41 +0000 Manifest this update: Thu 24 Sep 2026 06:18:41 +0000 Manifest next update: Fri 25 Sep 2026 08:05:41 +0000 Files and hashes: 1: 3130332e3138302e3139362e302f32342d3234203d3e20313439333639.roa (hash: VU4Fqm4q9lM1qlbwtCDfQfln3xy8Zkz6BXFC8JhBhSw=) 2: D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.crl (hash: yOGwDaB5NjVN29701HFErKERBzoEluYPaLwKOQloDJw=) 3: 3130332e3138302e3139372e302f32342d3234203d3e20313439333639.roa (hash: 6zRlVB+7VhU+EM3gEBCiqmflsWcB74DY3jlrVLYDaZ8=) 4: 323030313a6466303a363063303a3a2f34382d3438203d3e20313439333639.roa (hash: 4KthRL11gBmJfq1X/84ocL39dco9wY9VllXbFEY9aPQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.crl rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 08:05:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:ba:10:75:c7:03:f0:7d:37:9c:cc:8d:dc:58:f5:af:89:8c:55:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625 Validity Not Before: Sep 24 06:18:41 2026 GMT Not After : Sep 25 08:05:41 2026 GMT Subject: CN=2F5B5489F71009C7A88A53FF6AD9FC3D515E5F38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:00:50:a5:a2:74:d7:dd:c5:87:fb:e9:bf:96: e5:99:ad:59:28:b1:45:a9:d3:b2:86:ca:a2:9b:f6: 05:05:c6:26:95:ca:34:28:14:06:8b:ef:4f:3a:2f: bb:70:ec:23:af:f0:3b:5b:55:58:58:cb:0a:53:c1: 31:36:33:62:cb:13:b4:17:52:67:20:ca:6d:5b:41: ce:72:02:04:60:40:fd:f3:ba:a5:db:54:ee:94:07: 97:0a:cc:65:37:a6:2d:26:d3:c9:a5:71:25:c8:81: 52:cc:3f:c0:25:9b:87:76:3d:33:d1:32:21:5f:b9: 13:0c:99:7b:fe:e1:8d:56:10:51:1d:64:da:ab:93: a0:79:c8:b3:c1:bd:a8:c0:22:a6:94:35:84:3a:06: a2:2a:3a:33:c7:06:a5:68:e3:c4:da:b0:7a:da:22: 2c:ea:9d:d6:ee:4c:62:dd:3d:9f:21:5c:4d:2f:a0: 9d:4c:23:ab:28:2b:c7:5a:02:43:bb:85:3c:a1:e2: 88:0f:2f:33:90:80:9f:c8:ac:0b:fa:ea:ba:13:71: dd:0f:d1:09:54:1b:67:c2:9e:48:69:28:53:b6:77: 63:60:ab:f0:a2:02:b7:56:fb:88:38:36:80:5f:11: db:a1:98:d4:e5:bf:34:d7:c4:a4:1f:df:96:e1:dd: 17:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:5B:54:89:F7:10:09:C7:A8:8A:53:FF:6A:D9:FC:3D:51:5E:5F:38 X509v3 Authority Key Identifier: keyid:D0:F0:C8:D1:50:FE:AE:B3:B2:62:AE:26:0E:ED:6E:FA:46:C4:C6:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:43:c6:6e:e9:43:4d:e1:34:64:81:57:5d:1f:17:a5:c8:ae: 88:10:d6:b5:61:80:aa:8c:6c:3f:96:14:29:5d:da:60:b5:54: f2:90:7b:1c:8d:3c:04:1e:99:d0:ca:b7:7b:74:5c:c3:29:ce: c8:eb:8e:fd:e3:88:e6:39:c1:d7:94:1e:de:f8:9f:c4:fc:ab: 3f:ac:41:06:92:f9:b0:92:61:a5:ea:58:e1:18:41:b9:fb:3a: 88:4a:b7:d6:97:95:c4:69:47:91:03:b8:89:15:65:51:ec:f0: d0:e8:04:be:e6:3f:8a:7f:95:8c:8d:b6:47:cb:59:6f:31:f8: 92:c9:7a:0e:eb:11:e4:33:6b:34:32:a0:c9:d5:06:0a:d3:e4: 25:cd:59:92:db:55:79:a7:52:2c:5b:4c:db:3d:ab:cb:46:18: 86:2e:4e:9a:29:d8:a0:1e:60:ab:3d:f2:c0:55:66:a4:10:e2: 6f:44:c7:89:7d:c2:13:1e:62:a0:2d:ba:74:77:f9:da:7a:92: 1c:12:74:a9:35:dd:74:6a:58:9d:2a:fa:c4:0e:01:50:d4:e2: 6a:be:5f:6d:27:c4:af:e1:ab:1f:b7:1b:3f:13:b4:03:b1:a4: b5:b3:64:6a:ce:95:90:f5:c6:d5:69:de:e6:24:90:7c:3b:ee: 12:fa:f1:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVboQdccD8H03nMyN3Fj1r4mMVaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGMEM4RDE1MEZFQUVCM0IyNjJBRTI2MEVFRDZFRkE0 NkM0QzYyNTAeFw0yNjA5MjQwNjE4NDFaFw0yNjA5MjUwODA1NDFaMDMxMTAvBgNV BAMTKDJGNUI1NDg5RjcxMDA5QzdBODhBNTNGRjZBRDlGQzNENTE1RTVGMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJAFClonTX3cWH++m/luWZrVko sUWp07KGyqKb9gUFxiaVyjQoFAaL7086L7tw7COv8DtbVVhYywpTwTE2M2LLE7QX Umcgym1bQc5yAgRgQP3zuqXbVO6UB5cKzGU3pi0m08mlcSXIgVLMP8Alm4d2PTPR MiFfuRMMmXv+4Y1WEFEdZNqrk6B5yLPBvajAIqaUNYQ6BqIqOjPHBqVo48TasHra IizqndbuTGLdPZ8hXE0voJ1MI6soK8daAkO7hTyh4ogPLzOQgJ/IrAv66roTcd0P 0QlUG2fCnkhpKFO2d2Ngq/CiArdW+4g4NoBfEduhmNTlvzTXxKQf35bh3RcJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL1tUifcQCceoilP/atn8PVFeXzgwHwYDVR0j BBgwFoAU0PDI0VD+rrOyYq4mDu1u+kbExiUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjUxZDZjOWMtZWFkNy00NWZlLWExOWEtNDIyMzVmYzUzNzgwLzAvRDBGMEM4RDE1 MEZFQUVCM0IyNjJBRTI2MEVFRDZFRkE0NkM0QzYyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMEYwQzhEMTUwRkVBRUIzQjI2MkFFMjYwRUVENkVGQTQ2QzRD NjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjUxZDZjOWMtZWFkNy00NWZlLWEx OWEtNDIyMzVmYzUzNzgwLzAvRDBGMEM4RDE1MEZFQUVCM0IyNjJBRTI2MEVFRDZF RkE0NkM0QzYyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNDxm7pQ03hNGSBV10fF6XIrogQ1rVhgKqM bD+WFCld2mC1VPKQexyNPAQemdDKt3t0XMMpzsjrjv3jiOY5wdeUHt74n8T8qz+s QQaS+bCSYaXqWOEYQbn7OohKt9aXlcRpR5EDuIkVZVHs8NDoBL7mP4p/lYyNtkfL WW8x+JLJeg7rEeQzazQyoMnVBgrT5CXNWZLbVXmnUixbTNs9q8tGGIYuTpop2KAe YKs98sBVZqQQ4m9Ex4l9whMeYqAtunR3+dp6khwSdKk13XRqWJ0q+sQOAVDU4mq+ X20nxK/hqx+3Gz8TtAOxpLWzZGrOlZD1xtVp3uYkkHw77hL68SY= -----END CERTIFICATE-----Generated at Thu Sep 24 13:48:49 2026 by rpki-client