$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft File: D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft (raw, json) Hash identifier: Qyp6qk2XW4d46WvVVgBuCHo6BYSgNndOIKJYJpDvbww= Subject key identifier: 07:99:B5:D8:6E:D2:CD:70:E8:C8:A3:9F:64:21:F8:E9:AD:48:BA:70 Authority key identifier: D6:0F:BD:2B:1B:51:51:C3:F4:07:34:AE:4A:95:27:7F:C9:BD:8C:BF Certificate issuer: /CN=D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF Certificate serial: 37B7A5A16E74BBF1E297185A1786F69D7BFE0FF5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 09:58:33 +0000 Manifest this update: Wed 23 Sep 2026 09:53:33 +0000 Manifest next update: Thu 24 Sep 2026 10:53:33 +0000 Files and hashes: 1: D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl (hash: EkDbaiMvdOdsI4kEv5FPFuZtZTR6xivewsXMSgo2XIg=) 2: 3135372e36362e32312e302f32342d3234203d3e20313431353932.roa (hash: g/M/W8nBgP5S2ayXN1SiAqh0ligQCCsMJq/IueYk4OY=) 3: 3135372e36362e32302e302f32342d3234203d3e20313337333439.roa (hash: hKC4O+Dbys8awahI6Y0F2x8aosLXlC3tFEHhosWplhc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:53:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:b7:a5:a1:6e:74:bb:f1:e2:97:18:5a:17:86:f6:9d:7b:fe:0f:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF Validity Not Before: Sep 23 09:53:33 2026 GMT Not After : Sep 24 10:53:33 2026 GMT Subject: CN=0799B5D86ED2CD70E8C8A39F6421F8E9AD48BA70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a3:d1:9c:50:62:14:1f:f1:42:49:b8:c7:a4: e9:20:18:91:35:19:e2:8f:0d:66:64:c8:5f:ae:c2: 88:30:64:b5:27:76:ed:2d:fb:a4:e6:06:0a:63:fa: ec:d0:cd:16:71:45:a1:f3:5b:88:27:53:7b:b2:7f: 21:11:dd:71:78:55:b8:d4:b2:50:97:69:45:12:48: c1:2e:51:5f:17:54:a1:06:bc:25:ff:65:04:86:17: 70:25:dd:4a:01:49:b1:7a:be:45:40:18:b5:22:59: 00:23:9c:dc:15:2a:7a:da:5d:a0:c0:b2:09:c2:c6: 48:4f:a2:db:fc:c5:77:fa:bb:94:cd:ad:d0:ed:2d: 67:0f:06:60:50:b0:44:cc:a1:42:51:dc:5a:98:14: 0f:d3:c1:cd:ac:e5:43:0a:a9:a1:be:ed:b2:6f:e9: 72:35:04:d2:03:6a:5b:9b:44:70:eb:5f:a3:be:68: b0:95:5a:25:7d:cf:99:b0:db:0a:50:42:f3:0c:5f: f9:f3:26:03:ea:3e:50:ea:c4:95:74:b9:a5:3c:70: 8a:f5:e9:dd:3e:c2:7f:5a:d1:6b:21:a4:ae:a1:93: c0:e1:aa:ce:a5:4a:01:d9:37:20:09:f1:d5:17:82: b9:6f:b6:31:d9:e6:05:03:7f:05:df:20:ba:d8:63: 63:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:99:B5:D8:6E:D2:CD:70:E8:C8:A3:9F:64:21:F8:E9:AD:48:BA:70 X509v3 Authority Key Identifier: keyid:D6:0F:BD:2B:1B:51:51:C3:F4:07:34:AE:4A:95:27:7F:C9:BD:8C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e7:7d:1b:14:95:64:1c:b2:e1:c9:70:d1:a0:ad:d8:9a:6d:d2: d0:69:cf:0d:52:2f:fb:c8:cf:31:a0:89:5f:1e:37:42:8c:5d: d5:6a:66:1c:3e:39:38:6e:6a:81:6b:98:0c:0e:63:5a:c4:05: 29:c7:ef:88:14:63:64:b4:06:73:a1:e8:34:12:27:0f:46:7b: 82:da:3d:5e:f3:6c:04:73:f5:da:ed:2e:ba:0e:b5:29:67:9d: 5c:14:c6:48:37:0a:6c:07:21:b0:4a:0b:c6:1c:fb:28:d7:47: 79:76:43:29:46:57:70:ae:6f:56:03:ed:fc:24:85:18:6a:fb: b6:1d:e5:84:19:85:a7:8d:6f:d1:0c:60:c4:fa:dc:78:1d:40: 4e:2e:d8:80:3f:b5:2f:43:2a:59:06:2e:14:ce:df:b6:02:36: cc:d5:94:f1:51:ea:9f:cf:a6:54:01:4f:d0:2c:74:1f:1a:6c: 26:32:6a:c6:9c:51:36:88:48:32:8d:22:0d:49:31:03:43:38: f5:6e:f6:1c:2e:3d:fc:e7:90:90:98:d6:a4:80:3e:35:0f:4e: 12:45:1c:36:c0:45:de:ca:77:d9:72:24:0a:d1:ae:c8:d7:5e: 95:74:d1:b5:ad:a4:5a:dc:7c:40:07:62:b2:67:3b:fd:95:60: 86:78:76:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN7eloW50u/HilxhaF4b2nXv+D/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYwRkJEMkIxQjUxNTFDM0Y0MDczNEFFNEE5NTI3N0ZD OUJEOENCRjAeFw0yNjA5MjMwOTUzMzNaFw0yNjA5MjQxMDUzMzNaMDMxMTAvBgNV BAMTKDA3OTlCNUQ4NkVEMkNENzBFOEM4QTM5RjY0MjFGOEU5QUQ0OEJBNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1o9GcUGIUH/FCSbjHpOkgGJE1 GeKPDWZkyF+uwogwZLUndu0t+6TmBgpj+uzQzRZxRaHzW4gnU3uyfyER3XF4VbjU slCXaUUSSMEuUV8XVKEGvCX/ZQSGF3Al3UoBSbF6vkVAGLUiWQAjnNwVKnraXaDA sgnCxkhPotv8xXf6u5TNrdDtLWcPBmBQsETMoUJR3FqYFA/Twc2s5UMKqaG+7bJv 6XI1BNIDalubRHDrX6O+aLCVWiV9z5mw2wpQQvMMX/nzJgPqPlDqxJV0uaU8cIr1 6d0+wn9a0WshpK6hk8Dhqs6lSgHZNyAJ8dUXgrlvtjHZ5gUDfwXfILrYY2OZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB5m12G7SzXDoyKOfZCH46a1IunAwHwYDVR0j BBgwFoAU1g+9KxtRUcP0BzSuSpUnf8m9jL8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjVmNWVmMTgtNmZmYS00ZDY5LThjMGMtMzUxOGNmYTg3NThlLzAvRDYwRkJEMkIx QjUxNTFDM0Y0MDczNEFFNEE5NTI3N0ZDOUJEOENCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENjBGQkQyQjFCNTE1MUMzRjQwNzM0QUU0QTk1Mjc3RkM5QkQ4 Q0JGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjVmNWVmMTgtNmZmYS00ZDY5LThj MGMtMzUxOGNmYTg3NThlLzAvRDYwRkJEMkIxQjUxNTFDM0Y0MDczNEFFNEE5NTI3 N0ZDOUJEOENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOd9GxSVZByy4clw0aCt2Jpt0tBpzw1SL/vI zzGgiV8eN0KMXdVqZhw+OThuaoFrmAwOY1rEBSnH74gUY2S0BnOh6DQSJw9Ge4La PV7zbARz9drtLroOtSlnnVwUxkg3CmwHIbBKC8Yc+yjXR3l2QylGV3Cub1YD7fwk hRhq+7Yd5YQZhaeNb9EMYMT63HgdQE4u2IA/tS9DKlkGLhTO37YCNszVlPFR6p/P plQBT9AsdB8abCYyasacUTaISDKNIg1JMQNDOPVu9hwuPfznkJCY1qSAPjUPThJF HDbARd7Kd9lyJArRrsjXXpV00bWtpFrcfEAHYrJnO/2VYIZ4dts= -----END CERTIFICATE-----Generated at Wed Sep 23 22:26:53 2026 by rpki-client