$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft File: D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft (raw, json) Hash identifier: 14bfhKM24OVuY4lBOfNIFZauhngN4t7wg1ItxDZFphA= Subject key identifier: 8D:2E:62:45:B0:32:77:2C:44:29:59:41:DB:7D:03:5B:1F:8E:F1:16 Authority key identifier: D0:FF:50:D2:21:71:54:9D:8F:FA:9A:AB:3E:81:F8:76:6C:7F:7E:15 Certificate issuer: /CN=D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15 Certificate serial: 3C034D214B0AF5FFA5D28B09D5DD6CF06AA268A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft Manifest number: AA Signing time: Thu 03 Sep 2026 19:21:24 +0000 Manifest this update: Thu 03 Sep 2026 19:16:24 +0000 Manifest next update: Fri 04 Sep 2026 21:13:24 +0000 Files and hashes: 1: D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl (hash: 2Hu2M3w40RuflR+EO2Nz+gChOkfKyCJ7yWdswH4HDCw=) 2: 3130332e3138352e33392e302f32342d3234203d3e20313339343536.roa (hash: uW+IVxfV8f87IsoKQJA75zmndKbl8xC3CzJnrp9BN1Q=) 3: 3130332e3138352e33382e302f32342d3234203d3e20313339343536.roa (hash: IjalSDTSc8HchZQeF3J6Ob4TnTBMrEoHkiCdaMu5BeQ=) 4: 3130332e3138352e33382e302f32332d3233203d3e203538383230.roa (hash: 96CDSdZcSo+UEQAQF3sCpQRuZ8lYkqGXZBprM0AA1aw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:03:4d:21:4b:0a:f5:ff:a5:d2:8b:09:d5:dd:6c:f0:6a:a2:68:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15 Validity Not Before: Sep 3 19:16:24 2026 GMT Not After : Sep 4 21:13:24 2026 GMT Subject: CN=8D2E6245B032772C44295941DB7D035B1F8EF116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d9:a5:1d:3c:61:da:96:b1:c1:2a:f9:93:e7: b6:fc:eb:83:5d:9e:b1:ba:9d:07:f0:69:e4:64:2a: 41:c3:31:63:1e:16:e2:c7:3a:48:fb:f4:ce:2d:33: 12:83:9d:32:a4:52:0c:bb:05:0e:5e:35:fb:44:fd: e6:e6:18:10:bd:94:34:db:80:db:e4:ac:da:7a:1c: 52:81:f0:fb:ef:0d:11:a0:d2:82:d2:26:c1:8b:6e: b7:62:bb:be:57:73:12:ba:f8:46:fd:72:91:bf:1a: d3:32:dd:25:51:07:27:5c:e0:94:c5:53:fb:ee:b6: 4e:ff:f4:94:e2:06:ba:1e:fa:9f:ca:bf:28:9e:9e: d5:fd:19:08:89:81:1e:c7:63:e3:ae:8d:0c:b9:71: 39:6b:da:39:da:54:e9:6e:3f:dc:0a:4b:b6:f0:10: 84:c1:1c:67:05:17:80:8b:bd:f6:62:1d:e3:db:46: 11:e9:1c:ee:94:8a:ab:9c:5f:8a:f3:21:e5:96:83: 62:99:f0:6d:a8:c5:3a:3e:43:23:e0:ef:9f:e9:4d: f4:c7:94:96:6b:e4:15:a4:9c:78:9c:fd:51:82:c6: a8:ec:c6:d6:9d:b7:e9:0a:cc:eb:26:c5:28:5c:3e: f4:80:48:2c:86:63:a4:51:d8:c3:ea:94:87:5d:05: 77:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2E:62:45:B0:32:77:2C:44:29:59:41:DB:7D:03:5B:1F:8E:F1:16 X509v3 Authority Key Identifier: keyid:D0:FF:50:D2:21:71:54:9D:8F:FA:9A:AB:3E:81:F8:76:6C:7F:7E:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:fb:44:8d:d2:53:67:24:39:a0:13:6e:0c:be:01:9e:c9:9b: 0e:63:97:4a:e1:f5:97:42:f7:a0:27:83:1c:42:a3:66:fc:13: 59:a9:82:06:9e:8b:0b:50:b6:57:b8:85:2e:9e:a8:36:c1:4a: 10:5a:79:f8:f0:2d:02:a8:d5:26:0d:5a:fc:a7:6b:2f:0d:fb: 5c:c5:99:e5:26:ba:e8:21:34:06:8b:60:1d:e5:eb:4c:c4:da: 26:2d:dd:90:f3:9f:82:0a:c2:98:26:27:24:25:3e:1b:40:8d: 6f:8d:e7:f7:94:c6:a7:f1:31:ee:51:92:6a:64:e1:ff:9e:1c: 21:56:ca:a0:4d:d7:d4:1b:fa:4c:06:ad:74:b7:4e:eb:d0:52: 50:df:67:e1:99:29:4b:d9:e0:02:74:4b:aa:46:64:53:4b:87: 7e:98:67:d1:39:d4:8e:12:85:c8:87:f1:f1:4b:ee:84:e9:af: fe:69:7e:6a:37:b9:fb:83:52:cb:21:44:7a:68:27:99:7c:1d: dc:a6:f2:a7:5d:6c:42:fc:c0:03:68:01:14:94:b1:87:de:79: 4f:2e:45:68:d4:40:2c:ce:5f:69:1f:b5:a0:aa:94:ee:96:c4: 5e:ce:f0:ce:fe:7b:62:98:1b:c2:2d:18:fe:ba:6d:05:83:c0: 80:72:6d:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPANNIUsK9f+l0osJ1d1s8GqiaKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGRjUwRDIyMTcxNTQ5RDhGRkE5QUFCM0U4MUY4NzY2 QzdGN0UxNTAeFw0yNjA5MDMxOTE2MjRaFw0yNjA5MDQyMTEzMjRaMDMxMTAvBgNV BAMTKDhEMkU2MjQ1QjAzMjc3MkM0NDI5NTk0MURCN0QwMzVCMUY4RUYxMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq2aUdPGHalrHBKvmT57b864Nd nrG6nQfwaeRkKkHDMWMeFuLHOkj79M4tMxKDnTKkUgy7BQ5eNftE/ebmGBC9lDTb gNvkrNp6HFKB8PvvDRGg0oLSJsGLbrdiu75XcxK6+Eb9cpG/GtMy3SVRBydc4JTF U/vutk7/9JTiBroe+p/KvyientX9GQiJgR7HY+OujQy5cTlr2jnaVOluP9wKS7bw EITBHGcFF4CLvfZiHePbRhHpHO6UiqucX4rzIeWWg2KZ8G2oxTo+QyPg75/pTfTH lJZr5BWknHic/VGCxqjsxtadt+kKzOsmxShcPvSASCyGY6RR2MPqlIddBXdNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjS5iRbAydyxEKVlB230DWx+O8RYwHwYDVR0j BBgwFoAU0P9Q0iFxVJ2P+pqrPoH4dmx/fhUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmUwNWFiNjYtNjZhZi00MGE0LTg5YTUtODA2OTQwMjgzOWE5LzAvRDBGRjUwRDIy MTcxNTQ5RDhGRkE5QUFCM0U4MUY4NzY2QzdGN0UxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMEZGNTBEMjIxNzE1NDlEOEZGQTlBQUIzRTgxRjg3NjZDN0Y3 RTE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmUwNWFiNjYtNjZhZi00MGE0LTg5 YTUtODA2OTQwMjgzOWE5LzAvRDBGRjUwRDIyMTcxNTQ5RDhGRkE5QUFCM0U4MUY4 NzY2QzdGN0UxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGX7RI3SU2ckOaATbgy+AZ7Jmw5jl0rh9ZdC 96AngxxCo2b8E1mpggaeiwtQtle4hS6eqDbBShBaefjwLQKo1SYNWvynay8N+1zF meUmuughNAaLYB3l60zE2iYt3ZDzn4IKwpgmJyQlPhtAjW+N5/eUxqfxMe5Rkmpk 4f+eHCFWyqBN19Qb+kwGrXS3TuvQUlDfZ+GZKUvZ4AJ0S6pGZFNLh36YZ9E51I4S hciH8fFL7oTpr/5pfmo3ufuDUsshRHpoJ5l8Hdym8qddbEL8wANoARSUsYfeeU8u RWjUQCzOX2kftaCqlO6WxF7O8M7+e2KYG8ItGP66bQWDwIBybWc= -----END CERTIFICATE-----Generated at Thu Sep 3 23:30:07 2026 by rpki-client