$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft File: DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft (raw, json) Hash identifier: xptr+AmycgKM0BVby9pdPwqrIUtaeSe2byUmKq2oRSc= Subject key identifier: ED:68:B3:AF:18:B7:59:40:86:3A:22:E6:8A:02:E6:41:DC:0F:47:B2 Authority key identifier: DC:C1:42:E4:BC:0A:93:D2:22:74:4D:76:4B:A3:1B:31:C5:F7:21:F4 Certificate issuer: /CN=DCC142E4BC0A93D222744D764BA31B31C5F721F4 Certificate serial: 4EEFBA2A0ECB04F3FE6CEC07E37D6C9306E30F62 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 23:09:16 +0000 Manifest this update: Thu 24 Sep 2026 23:04:16 +0000 Manifest next update: Sat 26 Sep 2026 02:42:16 +0000 Files and hashes: 1: DCC142E4BC0A93D222744D764BA31B31C5F721F4.crl (hash: nNz+MMLoshSZWFOQemKTRvK2e9afx2iEdPTqFx4qE38=) 2: 3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa (hash: 8pY7CX5C+z8Wdb/RykV2FDaB/r21Vc0UIOUPAUQlFnI=) 3: 3130332e3136362e32362e302f32332d3233203d3e20313431393334.roa (hash: KOwZSGqnrtZ75etXMGQpPSN15jiljiF6C7JF8Icyb+k=) 4: 3130332e3136362e32362e302f32342d3234203d3e20313431393334.roa (hash: kO0czL3TN60s3A1dU0vSyh5gDjSRSVnVJULPxG64o8c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.crl rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 02:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:ef:ba:2a:0e:cb:04:f3:fe:6c:ec:07:e3:7d:6c:93:06:e3:0f:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCC142E4BC0A93D222744D764BA31B31C5F721F4 Validity Not Before: Sep 24 23:04:16 2026 GMT Not After : Sep 26 02:42:16 2026 GMT Subject: CN=ED68B3AF18B75940863A22E68A02E641DC0F47B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:95:c0:ec:30:6d:45:4d:6b:43:af:fb:86:04: bb:21:15:3c:e7:bf:b1:7c:96:23:86:31:2b:e3:81: 37:e4:ad:4e:37:2c:86:cb:35:4a:a3:76:e0:16:18: ca:65:ae:62:64:89:d2:e3:7e:e1:09:a6:1e:f2:b2: 01:94:b0:84:23:a3:f2:b9:41:0f:13:e5:1f:37:9e: c5:e5:4b:c9:b6:7b:85:f8:c9:32:55:3c:7b:34:5f: 5e:db:07:e6:90:c1:38:ac:9b:b3:3b:51:fb:eb:eb: 35:85:55:49:70:8f:0f:0f:4a:19:ac:6e:f7:87:f3: d9:d9:99:0c:d4:38:fd:70:02:8b:19:9e:59:a9:38: f2:b4:aa:20:0c:61:fb:d4:ee:ca:5d:e8:fe:b8:99: c2:fb:7e:9e:f2:f9:cb:e6:20:b7:fe:89:87:f8:1b: a6:67:8a:dc:fb:76:b4:12:94:2f:3a:d1:af:c9:4e: 2c:cf:52:8f:df:a7:f8:18:e3:a9:fd:66:4f:f2:41: 0f:c6:e1:f4:2b:37:9a:6b:ca:86:9c:e2:96:48:2d: e3:16:65:d4:89:3d:cc:40:4b:1f:05:7f:40:01:31: 83:8d:80:ae:86:d0:88:37:7f:45:3c:46:88:57:93: 0f:a8:1f:35:bf:af:33:06:78:42:f9:01:e7:d5:78: f6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:68:B3:AF:18:B7:59:40:86:3A:22:E6:8A:02:E6:41:DC:0F:47:B2 X509v3 Authority Key Identifier: keyid:DC:C1:42:E4:BC:0A:93:D2:22:74:4D:76:4B:A3:1B:31:C5:F7:21:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:dc:68:b9:63:2e:e0:99:05:c4:6e:94:03:c1:e5:12:4a:cd: 00:91:39:7e:c6:7d:c9:28:2e:d8:6f:82:15:32:de:a3:c3:73: 1a:86:fc:2b:6c:4c:c4:48:2c:bc:62:06:80:8a:6c:03:b2:46: 55:4b:7d:54:54:2d:64:dc:10:e3:16:fc:e3:3d:a1:9d:0d:a5: 14:18:6e:cb:87:83:f3:47:34:dd:d5:bf:b4:be:64:35:9b:76: aa:a7:82:39:da:c4:69:9c:0a:7c:f7:f5:7a:8e:03:23:84:ad: 8b:51:ba:06:4e:12:4f:62:72:78:c5:35:05:35:1d:f6:7b:ca: 3e:76:3c:9c:3d:a1:76:8b:42:18:58:77:99:be:0b:7b:9a:4d: 00:23:a7:e3:02:3c:e9:3b:50:23:46:fa:48:1f:84:65:4c:56: f2:be:7e:38:b5:4b:23:35:13:46:7d:b9:57:19:70:d9:90:26: c2:cd:36:e6:d2:9c:4d:b5:e7:76:3f:bf:20:1c:a9:84:59:c3: 0c:28:a5:71:c8:90:94:93:d8:fa:27:2e:57:94:56:55:d7:81: 6a:97:e4:52:b8:dd:24:69:b8:56:2e:ec:d7:1d:a1:26:fe:d3: 12:3e:b7:17:6e:bc:c0:b6:05:dc:c1:26:e9:b6:75:7b:4e:e4: 48:bf:a2:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTu+6Kg7LBPP+bOwH431skwbjD2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENDMTQyRTRCQzBBOTNEMjIyNzQ0RDc2NEJBMzFCMzFD NUY3MjFGNDAeFw0yNjA5MjQyMzA0MTZaFw0yNjA5MjYwMjQyMTZaMDMxMTAvBgNV BAMTKEVENjhCM0FGMThCNzU5NDA4NjNBMjJFNjhBMDJFNjQxREMwRjQ3QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCylcDsMG1FTWtDr/uGBLshFTzn v7F8liOGMSvjgTfkrU43LIbLNUqjduAWGMplrmJkidLjfuEJph7ysgGUsIQjo/K5 QQ8T5R83nsXlS8m2e4X4yTJVPHs0X17bB+aQwTism7M7Ufvr6zWFVUlwjw8PShms bveH89nZmQzUOP1wAosZnlmpOPK0qiAMYfvU7spd6P64mcL7fp7y+cvmILf+iYf4 G6Znitz7drQSlC860a/JTizPUo/fp/gY46n9Zk/yQQ/G4fQrN5pryoac4pZILeMW ZdSJPcxASx8Ff0ABMYONgK6G0Ig3f0U8RohXkw+oHzW/rzMGeEL5AefVePbFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Wizrxi3WUCGOiLmigLmQdwPR7IwHwYDVR0j BBgwFoAU3MFC5LwKk9IidE12S6MbMcX3IfQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmE0MTU0MzgtYWQwMS00MmRjLThjOTItMTUxYmM4YzI3MjFmLzAvRENDMTQyRTRC QzBBOTNEMjIyNzQ0RDc2NEJBMzFCMzFDNUY3MjFGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0MxNDJFNEJDMEE5M0QyMjI3NDRENzY0QkEzMUIzMUM1Rjcy MUY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmE0MTU0MzgtYWQwMS00MmRjLThj OTItMTUxYmM4YzI3MjFmLzAvRENDMTQyRTRCQzBBOTNEMjIyNzQ0RDc2NEJBMzFC MzFDNUY3MjFGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFXcaLljLuCZBcRulAPB5RJKzQCROX7Gfcko LthvghUy3qPDcxqG/CtsTMRILLxiBoCKbAOyRlVLfVRULWTcEOMW/OM9oZ0NpRQY bsuHg/NHNN3Vv7S+ZDWbdqqngjnaxGmcCnz39XqOAyOErYtRugZOEk9icnjFNQU1 HfZ7yj52PJw9oXaLQhhYd5m+C3uaTQAjp+MCPOk7UCNG+kgfhGVMVvK+fji1SyM1 E0Z9uVcZcNmQJsLNNubSnE2153Y/vyAcqYRZwwwopXHIkJST2PonLleUVlXXgWqX 5FK43SRpuFYu7NcdoSb+0xI+txduvMC2BdzBJum2dXtO5Ei/ouo= -----END CERTIFICATE-----Generated at Fri Sep 25 20:41:15 2026 by rpki-client