$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft File: D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft (raw, json) Hash identifier: 5M4Ff13v+5HF0WpjGAwNEwLatLNe2CSLLuc6b5rHoDI= Subject key identifier: B5:E8:C1:14:2E:54:C5:7C:EA:86:D9:10:79:88:DC:00:68:0F:6A:16 Authority key identifier: D5:78:16:B8:6A:BF:0E:6E:25:D8:4D:1D:5E:B3:7F:57:67:20:82:E2 Certificate issuer: /CN=D57816B86ABF0E6E25D84D1D5EB37F57672082E2 Certificate serial: 44D19A9D61B1ED2DDFCBC47184E6925DD42E05AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 17:35:56 +0000 Manifest this update: Wed 16 Sep 2026 17:30:56 +0000 Manifest next update: Thu 17 Sep 2026 18:38:56 +0000 Files and hashes: 1: 323030313a6466373a353430303a3a2f34382d3438203d3e20313334363332.roa (hash: rH/HlzNj8EN1t4rBBnxlIYgmTwkrb8JdSMLp5n/vbuw=) 2: D57816B86ABF0E6E25D84D1D5EB37F57672082E2.crl (hash: xL9wkgI26/y9njz6YVf/vLEnSCgqpHAkUaPVKte5va0=) 3: 3130332e31342e37352e302f32342d3234203d3e20313334363332.roa (hash: peOff/bMaPRVFv7RqgmuHQIO5KzTIHkBdGVMuXkb3Y0=) 4: 3130332e31342e37342e302f32342d3234203d3e20313334363332.roa (hash: ut81wNpcxfZaRtfYOIEu10o1O6sE5PD51eUSrS4eL90=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.crl rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:d1:9a:9d:61:b1:ed:2d:df:cb:c4:71:84:e6:92:5d:d4:2e:05:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D57816B86ABF0E6E25D84D1D5EB37F57672082E2 Validity Not Before: Sep 16 17:30:56 2026 GMT Not After : Sep 17 18:38:56 2026 GMT Subject: CN=B5E8C1142E54C57CEA86D9107988DC00680F6A16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:04:6e:59:4f:f4:0e:f4:5c:2e:0c:0b:2c:1f: 90:37:70:11:b9:2b:54:41:fe:ce:aa:bc:6c:5e:f8: 0d:df:ac:ff:97:d1:40:76:72:32:2c:13:fe:db:8a: c4:dd:c9:a5:9f:d7:56:5d:eb:c6:b9:7c:53:71:21: 35:a4:40:05:b4:9f:62:8e:d4:70:60:7c:c0:b6:61: 33:8a:83:b8:ef:9d:ea:77:8c:9b:e7:f2:c8:2c:67: 83:92:cb:ee:15:5e:41:37:6b:9b:62:a3:26:d0:75: 8f:53:36:e2:d6:d2:b0:f1:76:88:e1:d6:67:dd:a4: 40:1c:b0:1d:b8:0b:ec:af:7b:08:75:6d:9c:69:7b: 7a:55:73:52:70:c6:c9:e5:6e:42:64:b4:a9:93:d6: af:35:26:76:f1:41:bc:8b:bb:ba:f4:70:cc:32:3a: 81:bc:5e:1b:cb:7d:c0:16:a4:73:8b:48:07:03:0f: f9:07:66:da:00:2e:78:ae:19:a3:70:1a:55:9b:50: bc:00:83:3e:74:04:f8:3f:6d:6e:c1:5d:2d:fe:d4: 20:6c:1f:e7:e2:a1:d2:49:ee:7f:4a:cf:7d:6e:3e: 8c:9b:dc:e6:8d:21:54:3f:5c:3e:9c:11:db:d7:1d: 6d:ad:47:8a:d2:78:a4:5a:c1:c3:a2:73:ce:4a:ca: 90:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E8:C1:14:2E:54:C5:7C:EA:86:D9:10:79:88:DC:00:68:0F:6A:16 X509v3 Authority Key Identifier: keyid:D5:78:16:B8:6A:BF:0E:6E:25:D8:4D:1D:5E:B3:7F:57:67:20:82:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:18:f6:41:8c:c1:74:5f:12:dc:b4:8e:25:d7:7f:a0:29:93: b5:94:76:5d:d2:5f:b5:8f:71:8d:d0:d0:c7:83:86:c8:67:a8: ef:94:34:1e:da:90:2c:a5:1e:33:38:b6:6c:a1:ba:4d:ba:e5: c7:cd:04:c5:b2:68:98:2b:97:18:6e:fa:af:00:63:85:d7:4d: c0:3e:72:bc:c5:63:92:1d:97:ce:fc:16:6f:18:9c:44:3d:c9: 9b:b3:81:9d:b5:37:cb:a3:fa:75:35:1f:5e:f9:ed:5e:7e:79: a3:9d:ab:7c:6a:c3:ec:6c:65:09:71:f3:9d:09:87:82:02:39: 64:01:94:2b:32:51:f9:c0:2a:a6:a8:cc:35:88:b6:f6:f3:ae: 91:f3:23:8c:ab:eb:67:1a:6f:92:48:63:96:52:49:1f:b4:04: b1:77:30:e8:d8:a3:71:77:c2:b6:1d:a3:c8:24:99:d5:3a:75: ac:16:67:19:04:f4:9b:6d:db:cb:47:90:46:d6:65:a7:a2:01: 6a:d0:c0:b4:9b:af:41:30:f0:26:a4:67:e6:e7:8e:f7:5d:59: d8:84:e7:1f:1e:52:a4:0b:2d:a4:56:61:02:bb:58:6f:06:ec: 22:4f:ef:52:04:ea:39:48:51:c0:2d:35:fe:e8:c7:5b:db:c2: a4:fd:6c:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURNGanWGx7S3fy8RxhOaSXdQuBaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU3ODE2Qjg2QUJGMEU2RTI1RDg0RDFENUVCMzdGNTc2 NzIwODJFMjAeFw0yNjA5MTYxNzMwNTZaFw0yNjA5MTcxODM4NTZaMDMxMTAvBgNV BAMTKEI1RThDMTE0MkU1NEM1N0NFQTg2RDkxMDc5ODhEQzAwNjgwRjZBMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpBG5ZT/QO9FwuDAssH5A3cBG5 K1RB/s6qvGxe+A3frP+X0UB2cjIsE/7bisTdyaWf11Zd68a5fFNxITWkQAW0n2KO 1HBgfMC2YTOKg7jvnep3jJvn8sgsZ4OSy+4VXkE3a5tioybQdY9TNuLW0rDxdojh 1mfdpEAcsB24C+yvewh1bZxpe3pVc1JwxsnlbkJktKmT1q81JnbxQbyLu7r0cMwy OoG8XhvLfcAWpHOLSAcDD/kHZtoALniuGaNwGlWbULwAgz50BPg/bW7BXS3+1CBs H+fiodJJ7n9Kz31uPoyb3OaNIVQ/XD6cEdvXHW2tR4rSeKRawcOic85KypD7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtejBFC5UxXzqhtkQeYjcAGgPahYwHwYDVR0j BBgwFoAU1XgWuGq/Dm4l2E0dXrN/V2cgguIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTAwMGUyM2UtZjQ0YS00Y2ZjLWJmNTYtZDk5YTA5MmQ3MzE0LzAvRDU3ODE2Qjg2 QUJGMEU2RTI1RDg0RDFENUVCMzdGNTc2NzIwODJFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTc4MTZCODZBQkYwRTZFMjVEODREMUQ1RUIzN0Y1NzY3MjA4 MkUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTAwMGUyM2UtZjQ0YS00Y2ZjLWJm NTYtZDk5YTA5MmQ3MzE0LzAvRDU3ODE2Qjg2QUJGMEU2RTI1RDg0RDFENUVCMzdG NTc2NzIwODJFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcY9kGMwXRfEty0jiXXf6Apk7WUdl3SX7WP cY3Q0MeDhshnqO+UNB7akCylHjM4tmyhuk265cfNBMWyaJgrlxhu+q8AY4XXTcA+ crzFY5Idl878Fm8YnEQ9yZuzgZ21N8uj+nU1H1757V5+eaOdq3xqw+xsZQlx850J h4ICOWQBlCsyUfnAKqaozDWItvbzrpHzI4yr62cab5JIY5ZSSR+0BLF3MOjYo3F3 wrYdo8gkmdU6dawWZxkE9Jtt28tHkEbWZaeiAWrQwLSbr0Ew8CakZ+bnjvddWdiE 5x8eUqQLLaRWYQK7WG8G7CJP71IE6jlIUcAtNf7ox1vbwqT9bHY= -----END CERTIFICATE-----Generated at Thu Sep 17 10:51:49 2026 by rpki-client