$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft File: DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft (raw, json) Hash identifier: Us9l93OapsKyVD5ApnTfphlQpStQ/+JElkXEe08IBa0= Subject key identifier: B0:66:ED:21:8E:DA:D9:E3:63:93:E7:7B:55:83:33:29:D6:2E:2E:3A Authority key identifier: DF:34:17:50:0C:E0:95:64:B4:A4:CE:AF:ED:E4:A7:6C:DF:A5:A4:25 Certificate issuer: /CN=DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425 Certificate serial: 1ED21A45BB57D11AFFFCAC03E313AAB83BC94B57 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 02:46:19 +0000 Manifest this update: Thu 03 Sep 2026 02:41:19 +0000 Manifest next update: Fri 04 Sep 2026 06:21:19 +0000 Files and hashes: 1: 323030313a6466333a623938303a3a2f34382d3438203d3e203137353338.roa (hash: Bl/k50LueSgJjg8VDKjdeOLA5vAz35PavygXYOL9fXU=) 2: DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.crl (hash: pYsp2n3IYPdEYxIvcFdDcLj/H01bkL2CFjggeYff2IM=) 3: 3130332e3135312e39382e302f32342d3234203d3e203137353338.roa (hash: SGuts0/+uyJce0bHFyKC5/STYlo5gf3uXrTdV1Kngrs=) 4: 3130332e3135312e39392e302f32342d3234203d3e203137353338.roa (hash: cHi+wDASSXBvEYUwne4ghJo+D7FzU4toHGViW0cqxos=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.crl rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:d2:1a:45:bb:57:d1:1a:ff:fc:ac:03:e3:13:aa:b8:3b:c9:4b:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425 Validity Not Before: Sep 3 02:41:19 2026 GMT Not After : Sep 4 06:21:19 2026 GMT Subject: CN=B066ED218EDAD9E36393E77B55833329D62E2E3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:34:cb:e7:09:d2:a1:cf:0b:02:07:46:95:6d: f0:c9:da:93:dd:9c:6a:94:2b:a2:49:37:8f:fb:0c: 9c:e5:13:c7:78:8e:a7:c2:6f:ed:85:7f:87:1a:dc: b0:3e:33:f9:ca:cd:d0:80:36:44:30:40:6d:52:8e: c8:2c:20:f3:99:4c:4b:61:a7:5b:6b:6e:d2:01:1c: 9c:03:74:6f:39:a7:04:4c:38:30:3d:e4:73:57:ea: 6f:4c:df:9e:4f:ce:05:70:09:0f:f3:be:35:c2:32: 54:35:5a:a4:c0:e9:4e:ea:92:12:3a:ec:a7:92:87: 72:f8:0f:1e:7f:f3:14:bf:97:da:ce:a6:b5:55:8d: b8:4a:2f:12:59:74:54:b5:a2:16:ee:e3:98:9a:e9: 2f:85:3d:38:63:2b:54:16:de:a5:40:ab:be:53:3d: 7e:ae:f8:eb:1e:8c:71:1d:fa:41:ad:03:49:e3:fa: 1b:da:a1:8c:50:07:58:36:7d:ef:e9:f3:41:93:d6: a3:42:c9:62:a9:30:51:43:c1:57:1d:e8:f5:e2:92: 65:52:26:2c:ce:56:0d:a9:e5:ae:db:b8:79:7a:43: 4f:d1:08:b7:ae:e1:3f:2b:d0:d6:dd:9a:df:0e:4d: a5:00:60:ca:0d:37:b4:e0:fb:a0:c6:a9:3c:fb:a6: 39:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:66:ED:21:8E:DA:D9:E3:63:93:E7:7B:55:83:33:29:D6:2E:2E:3A X509v3 Authority Key Identifier: keyid:DF:34:17:50:0C:E0:95:64:B4:A4:CE:AF:ED:E4:A7:6C:DF:A5:A4:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:22:25:3f:a5:2f:62:04:4e:d7:a6:96:ec:fe:eb:1e:a3:34: 0b:77:eb:79:44:23:d5:5a:57:e8:94:ff:9f:c7:05:88:fc:3b: fd:7f:63:48:3b:10:44:54:8f:19:27:9c:db:e5:de:1b:52:0e: ed:fa:92:6c:6a:27:59:16:57:31:c6:8c:32:a5:49:c9:88:a8: 42:f2:ca:0d:11:b3:6e:65:97:96:80:e0:80:3e:8a:df:40:3f: eb:20:0a:10:a1:a8:71:3e:f7:13:a0:4f:13:95:2e:d6:af:18: 64:72:39:1b:71:4d:a3:fb:d3:a2:8c:2c:1c:d4:03:05:36:aa: 91:a3:f5:47:06:19:f1:5e:68:f3:06:4c:80:e5:20:54:e8:93: a3:72:8a:99:4f:da:b0:2b:4f:f9:93:00:18:1e:d0:81:d4:d7: e1:02:02:94:9b:45:ec:62:05:ba:74:c1:d9:60:3a:10:e9:27: 37:2e:dc:3d:33:18:b2:b6:68:80:7c:19:53:37:e3:bf:69:3c: 40:c0:90:c1:00:42:50:91:c1:0e:90:5b:cd:57:50:5a:ea:e5: 6c:35:00:e7:5f:76:94:06:80:97:d9:76:a0:08:b7:1c:99:9e: f5:63:43:31:8f:38:da:d0:34:55:30:3b:33:aa:71:13:e3:3a: a0:9d:32:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHtIaRbtX0Rr//KwD4xOquDvJS1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNDE3NTAwQ0UwOTU2NEI0QTRDRUFGRURFNEE3NkNE RkE1QTQyNTAeFw0yNjA5MDMwMjQxMTlaFw0yNjA5MDQwNjIxMTlaMDMxMTAvBgNV BAMTKEIwNjZFRDIxOEVEQUQ5RTM2MzkzRTc3QjU1ODMzMzI5RDYyRTJFM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRNMvnCdKhzwsCB0aVbfDJ2pPd nGqUK6JJN4/7DJzlE8d4jqfCb+2Ff4ca3LA+M/nKzdCANkQwQG1SjsgsIPOZTEth p1trbtIBHJwDdG85pwRMODA95HNX6m9M355PzgVwCQ/zvjXCMlQ1WqTA6U7qkhI6 7KeSh3L4Dx5/8xS/l9rOprVVjbhKLxJZdFS1ohbu45ia6S+FPThjK1QW3qVAq75T PX6u+OsejHEd+kGtA0nj+hvaoYxQB1g2fe/p80GT1qNCyWKpMFFDwVcd6PXikmVS JizOVg2p5a7buHl6Q0/RCLeu4T8r0Nbdmt8OTaUAYMoNN7Tg+6DGqTz7pjlTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsGbtIY7a2eNjk+d7VYMzKdYuLjowHwYDVR0j BBgwFoAU3zQXUAzglWS0pM6v7eSnbN+lpCUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjM3ODVlNjUtNTFlMi00YjFiLTgyZjktZTc1M2FkNGIyNDBmLzAvREYzNDE3NTAw Q0UwOTU2NEI0QTRDRUFGRURFNEE3NkNERkE1QTQyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjM0MTc1MDBDRTA5NTY0QjRBNENFQUZFREU0QTc2Q0RGQTVB NDI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjM3ODVlNjUtNTFlMi00YjFiLTgy ZjktZTc1M2FkNGIyNDBmLzAvREYzNDE3NTAwQ0UwOTU2NEI0QTRDRUFGRURFNEE3 NkNERkE1QTQyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4iJT+lL2IETtemluz+6x6jNAt363lEI9Va V+iU/5/HBYj8O/1/Y0g7EERUjxknnNvl3htSDu36kmxqJ1kWVzHGjDKlScmIqELy yg0Rs25ll5aA4IA+it9AP+sgChChqHE+9xOgTxOVLtavGGRyORtxTaP706KMLBzU AwU2qpGj9UcGGfFeaPMGTIDlIFTok6NyiplP2rArT/mTABge0IHU1+ECApSbRexi Bbp0wdlgOhDpJzcu3D0zGLK2aIB8GVM3479pPEDAkMEAQlCRwQ6QW81XUFrq5Ww1 AOdfdpQGgJfZdqAItxyZnvVjQzGPONrQNFUwOzOqcRPjOqCdMi0= -----END CERTIFICATE-----Generated at Thu Sep 3 05:06:03 2026 by rpki-client