$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft File: DB23849BCF63AE719E7BE4FE89385D166773A883.mft (raw, json) Hash identifier: Doqx2q7zbYwHXMXA921t18Zf6SG4eDuKskaR/YBsKrY= Subject key identifier: 62:7F:06:6E:78:81:10:18:50:6E:2D:62:14:21:C0:8D:3A:C5:B0:76 Authority key identifier: DB:23:84:9B:CF:63:AE:71:9E:7B:E4:FE:89:38:5D:16:67:73:A8:83 Certificate issuer: /CN=DB23849BCF63AE719E7BE4FE89385D166773A883 Certificate serial: 2069532A98BBC04A3AB3CFE8FFA749E8B42163F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 19:46:55 +0000 Manifest this update: Thu 03 Sep 2026 19:41:55 +0000 Manifest next update: Fri 04 Sep 2026 21:57:55 +0000 Files and hashes: 1: 3130332e3135372e32342e302f32342d3234203d3e20313431313035.roa (hash: g3WbWI1q18vac55oq8gdpUXBjsp4Aidv1FzJgM9YpdM=) 2: DB23849BCF63AE719E7BE4FE89385D166773A883.crl (hash: dV39dOMQHyhUsesuYvd1wZt1EEup+ED4hKrrYYHCzlA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.crl rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:69:53:2a:98:bb:c0:4a:3a:b3:cf:e8:ff:a7:49:e8:b4:21:63:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB23849BCF63AE719E7BE4FE89385D166773A883 Validity Not Before: Sep 3 19:41:55 2026 GMT Not After : Sep 4 21:57:55 2026 GMT Subject: CN=627F066E78811018506E2D621421C08D3AC5B076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:29:1d:f3:46:ce:b1:be:6f:3a:8b:0f:25:8e: 31:aa:df:cb:e8:2b:9d:8a:ce:ca:02:55:fd:80:73: 78:4e:7b:d5:42:68:93:a3:d7:f3:10:5d:59:ab:82: f0:0b:e8:44:89:a8:2e:e6:90:40:93:5a:dd:22:7e: 4f:64:7a:ba:1c:bb:d4:35:78:2b:de:27:32:f0:43: 46:55:51:87:f6:ca:bc:61:76:71:cc:b1:99:c6:e6: 78:69:5a:4f:77:46:0f:82:04:ee:81:d7:a8:f7:af: ad:07:1d:7e:76:65:4d:21:6b:6d:36:67:aa:43:37: 20:c2:5d:f1:80:46:37:72:2a:90:f6:7c:d7:d5:8b: cd:9f:fb:17:2c:02:b8:dc:e7:34:ea:6c:cc:1f:51: 2d:d3:8d:3e:2f:81:90:0c:37:7b:69:06:a6:79:e4: 0b:ae:44:1c:ad:1f:4e:14:f9:9f:4e:25:cb:38:5a: cc:8f:f2:3f:73:14:6e:f2:1b:c6:59:f5:51:a8:e7: e8:7e:c1:7b:57:79:24:79:6c:05:01:63:3c:8c:19: 2e:32:a8:d7:9e:01:ad:b9:57:2f:87:3a:b5:b6:cf: 81:31:fb:9c:ff:43:17:8a:65:fd:88:c5:e7:b8:f3: 45:1d:fa:59:3c:35:76:5a:ee:f0:28:f3:4a:f2:61: 8b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:7F:06:6E:78:81:10:18:50:6E:2D:62:14:21:C0:8D:3A:C5:B0:76 X509v3 Authority Key Identifier: keyid:DB:23:84:9B:CF:63:AE:71:9E:7B:E4:FE:89:38:5D:16:67:73:A8:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:08:c0:fb:86:e1:cb:e1:de:6c:90:b1:e0:b0:db:70:9d:b0: da:fb:4c:e2:bc:8b:c5:f7:68:7c:28:b4:98:33:19:cb:2e:72: db:95:37:c8:19:dd:c1:d5:78:37:ff:2b:39:e9:14:2e:d1:8f: 0c:d7:70:f4:68:c0:43:6e:e4:0b:6c:f8:37:49:dd:e4:35:d0: ad:ca:69:eb:91:5f:db:c5:8f:f9:63:74:6c:ca:f7:cd:29:1f: 09:5c:8d:4d:60:d9:74:cc:5d:b4:9f:a1:49:a0:85:17:b6:0c: a7:f1:12:b8:94:0d:6b:52:37:04:d8:53:a6:f0:cc:b1:a8:8d: 1c:67:14:60:45:b0:f1:cf:e4:f4:e2:8e:20:62:3a:fe:33:b9: ea:04:3c:3e:80:08:c4:a5:c2:fb:f2:7d:05:9a:78:4f:f5:f8: 13:95:0e:7d:07:c0:42:24:ef:5a:c1:84:82:5a:77:07:71:4c: c0:b7:d4:06:e3:4f:7d:9b:d6:c4:91:26:05:3c:f8:21:95:b7: 17:35:1a:ce:b7:29:85:ce:47:61:8c:c5:fa:c9:20:2d:8a:7f: 19:d4:b7:33:ed:98:7f:6a:4a:3c:ab:51:50:e3:87:df:23:eb: 50:a4:71:b2:d7:ae:db:3d:fa:3b:e5:42:9c:21:97:e3:24:e6: d9:f8:73:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIGlTKpi7wEo6s8/o/6dJ6LQhY/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIyMzg0OUJDRjYzQUU3MTlFN0JFNEZFODkzODVEMTY2 NzczQTg4MzAeFw0yNjA5MDMxOTQxNTVaFw0yNjA5MDQyMTU3NTVaMDMxMTAvBgNV BAMTKDYyN0YwNjZFNzg4MTEwMTg1MDZFMkQ2MjE0MjFDMDhEM0FDNUIwNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvKR3zRs6xvm86iw8ljjGq38vo K52KzsoCVf2Ac3hOe9VCaJOj1/MQXVmrgvAL6ESJqC7mkECTWt0ifk9kerocu9Q1 eCveJzLwQ0ZVUYf2yrxhdnHMsZnG5nhpWk93Rg+CBO6B16j3r60HHX52ZU0ha202 Z6pDNyDCXfGARjdyKpD2fNfVi82f+xcsArjc5zTqbMwfUS3TjT4vgZAMN3tpBqZ5 5AuuRBytH04U+Z9OJcs4WsyP8j9zFG7yG8ZZ9VGo5+h+wXtXeSR5bAUBYzyMGS4y qNeeAa25Vy+HOrW2z4Ex+5z/QxeKZf2Ixee480Ud+lk8NXZa7vAo80ryYYtRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYn8GbniBEBhQbi1iFCHAjTrFsHYwHwYDVR0j BBgwFoAU2yOEm89jrnGee+T+iThdFmdzqIMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJjNjViOGMtMzllOS00NzhkLTg3NDItYzUzNWI2MWJhZTU5LzAvREIyMzg0OUJD RjYzQUU3MTlFN0JFNEZFODkzODVEMTY2NzczQTg4My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQjIzODQ5QkNGNjNBRTcxOUU3QkU0RkU4OTM4NUQxNjY3NzNB ODgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJjNjViOGMtMzllOS00NzhkLTg3 NDItYzUzNWI2MWJhZTU5LzAvREIyMzg0OUJDRjYzQUU3MTlFN0JFNEZFODkzODVE MTY2NzczQTg4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGIIwPuG4cvh3myQseCw23CdsNr7TOK8i8X3 aHwotJgzGcsuctuVN8gZ3cHVeDf/KznpFC7RjwzXcPRowENu5Ats+DdJ3eQ10K3K aeuRX9vFj/ljdGzK980pHwlcjU1g2XTMXbSfoUmghRe2DKfxEriUDWtSNwTYU6bw zLGojRxnFGBFsPHP5PTijiBiOv4zueoEPD6ACMSlwvvyfQWaeE/1+BOVDn0HwEIk 71rBhIJadwdxTMC31AbjT32b1sSRJgU8+CGVtxc1Gs63KYXOR2GMxfrJIC2KfxnU tzPtmH9qSjyrUVDjh98j61CkcbLXrts9+jvlQpwhl+Mk5tn4cwI= -----END CERTIFICATE-----Generated at Fri Sep 4 01:48:27 2026 by rpki-client