$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft File: D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft (raw, json) Hash identifier: csstuIrvbfRifI73fAXOdf8RBNSrsDxqtEiDPDtC0pc= Subject key identifier: DA:0F:15:77:B1:F1:23:28:AF:60:F2:FD:1F:A5:34:36:E8:23:0C:7E Authority key identifier: D0:CF:CA:6A:1F:D2:34:38:03:3F:81:7E:FD:3B:2A:18:0D:32:C0:C3 Certificate issuer: /CN=D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3 Certificate serial: 023B79622DBEFB0DA1CD175D226FA6F807CE958B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft Manifest number: 9D Signing time: Wed 26 Aug 2026 07:56:01 +0000 Manifest this update: Wed 26 Aug 2026 07:51:01 +0000 Manifest next update: Thu 27 Aug 2026 09:09:01 +0000 Files and hashes: 1: D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.crl (hash: gLhsxdaQXwyHiH4LjgSa8wCBAx6ydvD8bIBSiTD90LM=) 2: 3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa (hash: pd6OjyzAAcK8uT6naV7NfTNnsjqGHMwbU9/DgsoTtzo=) 3: 3130332e3134302e3130392e302f32342d3234203d3e203538333639.roa (hash: APyKoi1ZG2HKYN+LmPQKEKUBYkJq8d16Zc9c2T01Unc=) 4: 3130332e3134302e3130382e302f32342d3234203d3e203538333639.roa (hash: W9kmi6fSD3hfpz6c4ipA4kZ2ayaTmTarwmo8qVkL32c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.crl rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 09:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:3b:79:62:2d:be:fb:0d:a1:cd:17:5d:22:6f:a6:f8:07:ce:95:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3 Validity Not Before: Aug 26 07:51:01 2026 GMT Not After : Aug 27 09:09:01 2026 GMT Subject: CN=DA0F1577B1F12328AF60F2FD1FA53436E8230C7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a9:fb:58:e6:33:ef:63:24:95:78:bf:9d:6e: a3:bc:ef:8e:81:e5:89:66:69:a7:5c:6d:dd:c7:49: 7f:de:2e:25:88:05:ea:0e:39:03:dc:40:9b:1b:16: 99:9e:0f:bb:56:fc:44:ba:08:c1:71:07:15:44:b9: b1:bd:31:04:c3:f1:f5:0e:03:f8:80:c6:71:ea:ea: f3:24:3f:34:f4:85:f9:b3:d4:99:7f:c2:3a:00:4b: da:a2:e7:59:89:ed:9b:b6:39:29:fe:ed:e2:74:51: 94:b6:4f:2d:8c:ab:03:bc:25:02:d1:39:f9:40:65: 69:86:fe:87:75:62:eb:f3:23:df:53:9c:79:3e:ac: f7:c7:f5:f7:5f:af:33:d3:64:2a:57:d4:85:06:26: a8:cb:7f:32:c4:4f:4c:48:0d:f4:4e:ae:bc:e3:85: af:4d:82:27:d0:4f:7a:35:e3:b6:de:e2:4b:b9:24: 18:62:93:f2:b7:29:de:83:e8:c5:60:a9:fa:5b:05: d5:24:82:c0:b8:31:07:3f:b6:2b:f2:fd:5a:91:15: e6:a9:1a:ca:59:44:b5:e7:31:c2:84:48:9c:24:20: 18:4a:72:d6:5d:51:0a:b2:f5:f7:64:54:a0:0d:55: 29:19:28:36:31:bf:fd:f3:54:7c:04:20:ae:88:d4: 73:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:0F:15:77:B1:F1:23:28:AF:60:F2:FD:1F:A5:34:36:E8:23:0C:7E X509v3 Authority Key Identifier: keyid:D0:CF:CA:6A:1F:D2:34:38:03:3F:81:7E:FD:3B:2A:18:0D:32:C0:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:2a:2a:f4:56:5d:78:15:7d:1b:e8:0b:6b:83:24:6d:4b:e0: df:9e:04:1f:63:47:d4:9f:68:0f:3d:ef:66:1f:2a:3e:84:14: d1:12:f9:a4:83:7b:42:e9:0d:2a:1d:51:d3:84:b5:4f:9d:99: 64:4d:34:ce:1f:b8:0b:79:d6:44:5c:bd:ad:a1:24:87:17:2b: f9:c1:df:91:6a:94:a2:74:b6:be:78:01:c9:e1:16:12:e2:66: 45:b0:30:f8:38:e2:ec:ff:0b:6e:0a:2f:9d:60:cd:98:36:b2: 8f:98:23:ec:45:a3:81:20:f8:01:3c:03:f4:58:94:40:32:43: 91:0f:80:99:b2:fb:3b:d1:73:a5:32:0b:b7:c0:1d:3b:ba:9c: 93:c7:df:a8:6a:65:f2:69:49:ff:2b:68:3a:7b:06:c5:3e:be: 6e:a9:9d:38:93:dd:c6:99:4c:0a:82:4a:48:56:80:9b:c5:75: 0a:43:2d:e7:fe:c8:c0:b2:52:70:20:54:33:0a:52:71:aa:b1: 5c:54:48:80:ff:3d:ec:98:40:b0:f9:cd:98:a8:19:d5:2e:a5: ec:87:e6:dc:96:47:fb:70:30:58:48:24:52:74:79:ea:f5:42: 3b:15:6c:20:bb:b6:77:b3:24:79:94:82:33:74:61:21:31:30: 84:ec:0c:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAjt5Yi2++w2hzRddIm+m+AfOlYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDRkNBNkExRkQyMzQzODAzM0Y4MTdFRkQzQjJBMTgw RDMyQzBDMzAeFw0yNjA4MjYwNzUxMDFaFw0yNjA4MjcwOTA5MDFaMDMxMTAvBgNV BAMTKERBMEYxNTc3QjFGMTIzMjhBRjYwRjJGRDFGQTUzNDM2RTgyMzBDN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzqftY5jPvYySVeL+dbqO8746B 5Ylmaadcbd3HSX/eLiWIBeoOOQPcQJsbFpmeD7tW/ES6CMFxBxVEubG9MQTD8fUO A/iAxnHq6vMkPzT0hfmz1Jl/wjoAS9qi51mJ7Zu2OSn+7eJ0UZS2Ty2MqwO8JQLR OflAZWmG/od1YuvzI99TnHk+rPfH9fdfrzPTZCpX1IUGJqjLfzLET0xIDfROrrzj ha9NgifQT3o147be4ku5JBhik/K3Kd6D6MVgqfpbBdUkgsC4MQc/tivy/VqRFeap GspZRLXnMcKESJwkIBhKctZdUQqy9fdkVKANVSkZKDYxv/3zVHwEIK6I1HN/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2g8Vd7HxIyivYPL9H6U0NugjDH4wHwYDVR0j BBgwFoAU0M/Kah/SNDgDP4F+/TsqGA0ywMMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE0YTIxYjktZjkxMi00MWYzLWI2MmMtMTIxNzU4MWM5NDhhLzAvRDBDRkNBNkEx RkQyMzQzODAzM0Y4MTdFRkQzQjJBMTgwRDMyQzBDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMENGQ0E2QTFGRDIzNDM4MDMzRjgxN0VGRDNCMkExODBEMzJD MEMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE0YTIxYjktZjkxMi00MWYzLWI2 MmMtMTIxNzU4MWM5NDhhLzAvRDBDRkNBNkExRkQyMzQzODAzM0Y4MTdFRkQzQjJB MTgwRDMyQzBDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJUqKvRWXXgVfRvoC2uDJG1L4N+eBB9jR9Sf aA8972YfKj6EFNES+aSDe0LpDSodUdOEtU+dmWRNNM4fuAt51kRcva2hJIcXK/nB 35FqlKJ0tr54AcnhFhLiZkWwMPg44uz/C24KL51gzZg2so+YI+xFo4Eg+AE8A/RY lEAyQ5EPgJmy+zvRc6UyC7fAHTu6nJPH36hqZfJpSf8raDp7BsU+vm6pnTiT3caZ TAqCSkhWgJvFdQpDLef+yMCyUnAgVDMKUnGqsVxUSID/PeyYQLD5zZioGdUupeyH 5tyWR/twMFhIJFJ0eer1QjsVbCC7tnezJHmUgjN0YSExMITsDJE= -----END CERTIFICATE-----Generated at Wed Aug 26 11:37:43 2026 by rpki-client