$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft File: DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft (raw, json) Hash identifier: NaXfBGPQHGDD1ThgXcgwcSYFhb+9w01Cabfja4j9msk= Subject key identifier: B3:8E:8A:CF:98:81:D3:65:73:ED:65:A6:84:BA:FF:AD:9D:6D:3C:6C Authority key identifier: DF:62:39:B1:00:BB:5F:8B:75:72:DB:ED:CD:AA:F0:85:E9:6B:8B:C6 Certificate issuer: /CN=DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6 Certificate serial: 5DFE92E072715627C5DF183BFE6880EFD25AA4FA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 23:01:33 +0000 Manifest this update: Wed 02 Sep 2026 22:56:33 +0000 Manifest next update: Fri 04 Sep 2026 00:48:33 +0000 Files and hashes: 1: 3130332e332e34362e302f32342d3234203d3e203536323337.roa (hash: RognJZgFxoaYfZ3q8iAEXmaMxQXncM9YyfOgmfWAQ3o=) 2: DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.crl (hash: 7yKR7UgdBsY58qCMqQ0m9ZMXuZ8BBf9cjaE4isJNQVE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.crl rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 00:48:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:fe:92:e0:72:71:56:27:c5:df:18:3b:fe:68:80:ef:d2:5a:a4:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6 Validity Not Before: Sep 2 22:56:33 2026 GMT Not After : Sep 4 00:48:33 2026 GMT Subject: CN=B38E8ACF9881D36573ED65A684BAFFAD9D6D3C6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4a:ac:06:6c:ad:80:3b:eb:83:60:56:69:5d: 2a:95:0c:31:8d:ad:1c:c7:6b:dd:f6:3f:87:1c:a0: 86:28:5f:c8:cb:91:13:79:c8:81:22:0a:4c:fa:1b: 47:04:56:34:95:29:ed:a2:1a:31:70:aa:bf:55:fc: 29:52:bb:9d:55:68:87:c8:92:e1:a2:e7:e9:d2:b9: bc:89:6b:d6:83:82:8a:8d:75:78:1c:7f:5c:50:bf: 59:20:fc:9d:9e:cf:95:e7:2a:19:61:7b:a2:01:eb: 1e:da:f9:ef:84:eb:80:d4:9d:b9:42:bc:4c:2f:58: eb:c1:13:0e:40:12:7b:07:b2:70:64:43:5b:47:28: c4:88:4c:4d:24:1c:55:cc:db:36:a6:94:4d:55:5f: 5b:10:a5:0a:63:fc:e6:d7:c3:b6:0a:a1:99:de:1c: de:d8:8d:10:fa:3a:2b:43:d2:e5:7b:da:f9:ca:bd: c9:60:56:1a:17:31:be:60:6a:8e:dd:20:92:03:92: f5:b0:34:a0:5f:f8:7a:bd:52:4b:02:23:97:1f:a9: 0e:bf:1e:cf:b3:b9:97:b0:8c:17:31:4b:49:b2:18: cc:e7:1c:b2:30:ce:e2:49:a6:f9:a7:e0:a0:9b:63: be:3d:e0:a9:23:2c:1b:39:f6:9f:a6:5c:32:d8:05: 95:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:8E:8A:CF:98:81:D3:65:73:ED:65:A6:84:BA:FF:AD:9D:6D:3C:6C X509v3 Authority Key Identifier: keyid:DF:62:39:B1:00:BB:5F:8B:75:72:DB:ED:CD:AA:F0:85:E9:6B:8B:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:a7:31:2e:c2:c9:b2:50:7d:33:63:38:1c:fc:59:2b:19:9e: 04:22:5b:a2:88:c8:cc:a0:6b:f9:a6:5b:76:34:dd:be:0f:74: 00:e0:ed:9d:89:ed:fa:06:b9:22:6f:30:8a:6e:cc:c2:a4:a0: 47:28:6d:be:0f:ba:f9:c0:c3:47:06:4f:ed:71:60:fc:f0:2c: e9:94:e8:6c:3b:53:0e:26:44:c6:5a:d5:25:a9:b8:4b:59:e2: c0:eb:07:79:a2:29:94:1f:e1:e8:fb:28:cb:28:0e:44:5c:53: da:95:8c:4c:5d:52:fa:27:2e:d4:20:98:2a:71:27:eb:85:19: 8b:75:65:48:8c:39:9e:a1:03:a6:2d:21:b2:35:4a:50:7b:85: 71:86:4b:7a:fd:0c:3e:59:07:86:92:39:32:38:11:a2:53:d5: 13:61:3f:02:cd:1e:ba:0f:07:e0:38:6c:ad:e7:32:ed:ef:6d: a4:8b:cf:0f:99:78:75:6a:02:62:10:5d:87:c9:7d:1c:b8:34: eb:62:46:e1:60:7a:25:f0:62:60:4b:2c:7f:74:15:aa:7f:db: 1b:8f:02:0e:2e:c5:ea:af:19:ab:7c:38:50:ab:9c:01:75:80: 28:b1:b3:f0:2e:07:ad:b1:b7:9a:69:22:f0:37:ae:3b:f1:b4: 67:e0:9d:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXf6S4HJxVifF3xg7/miA79JapPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2MjM5QjEwMEJCNUY4Qjc1NzJEQkVEQ0RBQUYwODVF OTZCOEJDNjAeFw0yNjA5MDIyMjU2MzNaFw0yNjA5MDQwMDQ4MzNaMDMxMTAvBgNV BAMTKEIzOEU4QUNGOTg4MUQzNjU3M0VENjVBNjg0QkFGRkFEOUQ2RDNDNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqSqwGbK2AO+uDYFZpXSqVDDGN rRzHa932P4ccoIYoX8jLkRN5yIEiCkz6G0cEVjSVKe2iGjFwqr9V/ClSu51VaIfI kuGi5+nSubyJa9aDgoqNdXgcf1xQv1kg/J2ez5XnKhlhe6IB6x7a+e+E64DUnblC vEwvWOvBEw5AEnsHsnBkQ1tHKMSITE0kHFXM2zamlE1VX1sQpQpj/ObXw7YKoZne HN7YjRD6OitD0uV72vnKvclgVhoXMb5gao7dIJIDkvWwNKBf+Hq9UksCI5cfqQ6/ Hs+zuZewjBcxS0myGMznHLIwzuJJpvmn4KCbY7494KkjLBs59p+mXDLYBZVfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs46Kz5iB02Vz7WWmhLr/rZ1tPGwwHwYDVR0j BBgwFoAU32I5sQC7X4t1ctvtzarwhelri8YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWZiZTEwZDEtZmU2NC00MzNmLWI1ZTgtMDllOGM3MDRlYzkxLzAvREY2MjM5QjEw MEJCNUY4Qjc1NzJEQkVEQ0RBQUYwODVFOTZCOEJDNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjYyMzlCMTAwQkI1RjhCNzU3MkRCRURDREFBRjA4NUU5NkI4 QkM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWZiZTEwZDEtZmU2NC00MzNmLWI1 ZTgtMDllOGM3MDRlYzkxLzAvREY2MjM5QjEwMEJCNUY4Qjc1NzJEQkVEQ0RBQUYw ODVFOTZCOEJDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOnMS7CybJQfTNjOBz8WSsZngQiW6KIyMyg a/mmW3Y03b4PdADg7Z2J7foGuSJvMIpuzMKkoEcobb4PuvnAw0cGT+1xYPzwLOmU 6Gw7Uw4mRMZa1SWpuEtZ4sDrB3miKZQf4ej7KMsoDkRcU9qVjExdUvonLtQgmCpx J+uFGYt1ZUiMOZ6hA6YtIbI1SlB7hXGGS3r9DD5ZB4aSOTI4EaJT1RNhPwLNHroP B+A4bK3nMu3vbaSLzw+ZeHVqAmIQXYfJfRy4NOtiRuFgeiXwYmBLLH90Fap/2xuP Ag4uxeqvGat8OFCrnAF1gCixs/AuB62xt5ppIvA3rjvxtGfgnSo= -----END CERTIFICATE-----Generated at Thu Sep 3 16:19:19 2026 by rpki-client