$ rpki-client -vvvf rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft File: D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft (raw, json) Hash identifier: 9YQLSiqf34el7g0gyMesZx+NhrjdqOlgBchfVVMe7Rk= Subject key identifier: 6C:B8:34:CC:0F:72:44:BF:2F:D8:5E:64:76:EE:FF:AC:FE:70:7D:61 Authority key identifier: D3:EC:32:7D:56:69:BC:0B:0F:B2:A4:24:56:17:E4:4E:36:DC:44:73 Certificate issuer: /CN=D3EC327D5669BC0B0FB2A4245617E44E36DC4473 Certificate serial: 1C2C72259B1F1CDF9AE9172B13D125E96F999005 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft Manifest number: D4 Signing time: Wed 07 Oct 2026 19:17:13 +0000 Manifest this update: Wed 07 Oct 2026 19:12:13 +0000 Manifest next update: Thu 08 Oct 2026 20:54:13 +0000 Files and hashes: 1: 3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (hash: EtsVHdeAuCEUKToYyc1AboiXRpshf+Ge4ld5y69utbM=) 2: 3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (hash: 7YRFkgWqBTb6xXfqMpSxUz7NK51JToKbqOBLvR25NTc=) 3: D3EC327D5669BC0B0FB2A4245617E44E36DC4473.crl (hash: SEEYOFd4UIlwrwiC4ZgUMGqsIXqb1BzAZ+AVNFV4Tk4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.crl rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 12:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:2c:72:25:9b:1f:1c:df:9a:e9:17:2b:13:d1:25:e9:6f:99:90:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3EC327D5669BC0B0FB2A4245617E44E36DC4473 Validity Not Before: Oct 7 19:12:13 2026 GMT Not After : Oct 8 20:54:13 2026 GMT Subject: CN=6CB834CC0F7244BF2FD85E6476EEFFACFE707D61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ac:ea:ce:4c:5c:76:1e:3e:69:ac:03:d3:fc: 74:fa:34:12:d1:fc:3b:83:f0:c8:87:6f:1f:7d:cd: 47:fe:2d:2a:ed:91:6d:dc:4b:ed:de:8f:3e:e9:c8: 21:94:77:5a:df:65:a6:22:ef:e1:ff:79:3f:0c:5a: 9f:35:03:07:49:04:3d:1e:1f:c2:b1:35:83:2e:74: 54:20:db:e8:6f:b3:71:4d:b1:86:f1:bb:d6:0c:04: d9:96:2a:3e:a2:30:6c:65:3a:2e:d4:d8:3f:e0:02: d8:0b:fa:aa:76:e4:6c:ed:ef:2c:1a:d6:42:28:49: 02:5c:f8:b5:29:2d:b6:16:91:94:34:1e:dd:97:66: cc:9c:19:cb:73:0e:84:5f:ee:1a:9b:29:00:d2:e2: 93:5d:69:a1:08:22:7e:90:fe:44:10:ef:0c:9e:ff: 3e:9a:46:b1:a4:96:a6:4f:87:e8:c7:ff:e1:9f:e4: c3:52:e1:b4:07:62:b8:17:c1:af:af:0d:94:96:22: 51:c6:6c:c6:72:9c:72:df:47:b7:24:80:88:66:28: 99:a4:d6:f5:b0:8f:a1:f5:e2:cd:a3:34:16:e1:00: 8d:9a:ff:7d:13:64:3e:98:15:25:fa:d1:36:ff:fc: 79:20:85:cd:ef:d7:fe:d1:37:d2:ca:02:cc:9c:70: 54:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B8:34:CC:0F:72:44:BF:2F:D8:5E:64:76:EE:FF:AC:FE:70:7D:61 X509v3 Authority Key Identifier: keyid:D3:EC:32:7D:56:69:BC:0B:0F:B2:A4:24:56:17:E4:4E:36:DC:44:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:48:89:62:69:33:4d:03:70:03:9e:56:fd:e5:2c:f4:f7:81: 20:e7:9f:25:99:0a:89:7d:33:f3:06:c9:4d:7a:94:76:63:e0: cb:5f:f5:e1:c8:f4:4e:30:6f:c1:8a:28:5e:1e:32:31:30:a5: 9a:3e:20:da:d2:fc:09:96:b8:46:63:1e:98:1c:1a:e5:eb:a1: 20:e0:73:89:a9:44:19:bb:3b:21:4c:e4:70:c2:21:51:96:e1: cc:f5:a2:46:2c:ce:e3:11:27:6b:65:1f:a4:fd:40:07:b2:ac: 19:f5:94:79:6f:f7:76:0c:a7:7c:46:88:b4:17:21:47:62:cc: a5:49:4b:ad:7c:50:f0:a1:c3:7f:03:71:d6:39:c9:66:81:b4: fb:c4:19:fc:46:1a:78:53:24:91:91:56:3d:39:0f:f7:9f:da: 59:95:6b:50:06:ec:1d:6d:29:73:70:74:5b:ab:70:bf:1c:25: bb:7a:ec:b7:3b:21:34:4c:4d:67:19:41:2c:5f:69:ef:7c:56: 63:f9:0d:b0:21:8b:18:f6:7b:eb:3f:d2:7d:66:1f:15:fe:4b: 6f:ca:d5:3f:94:8a:ba:c1:1f:ac:a1:02:0a:7b:22:25:97:0b: 24:38:a9:d0:8e:89:c0:2c:60:b1:bc:05:a5:e5:9d:bb:74:3f: c0:65:fd:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHCxyJZsfHN+a6RcrE9El6W+ZkAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNFQzMyN0Q1NjY5QkMwQjBGQjJBNDI0NTYxN0U0NEUz NkRDNDQ3MzAeFw0yNjEwMDcxOTEyMTNaFw0yNjEwMDgyMDU0MTNaMDMxMTAvBgNV BAMTKDZDQjgzNENDMEY3MjQ0QkYyRkQ4NUU2NDc2RUVGRkFDRkU3MDdENjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCirOrOTFx2Hj5prAPT/HT6NBLR /DuD8MiHbx99zUf+LSrtkW3cS+3ejz7pyCGUd1rfZaYi7+H/eT8MWp81AwdJBD0e H8KxNYMudFQg2+hvs3FNsYbxu9YMBNmWKj6iMGxlOi7U2D/gAtgL+qp25Gzt7ywa 1kIoSQJc+LUpLbYWkZQ0Ht2XZsycGctzDoRf7hqbKQDS4pNdaaEIIn6Q/kQQ7wye /z6aRrGklqZPh+jH/+Gf5MNS4bQHYrgXwa+vDZSWIlHGbMZynHLfR7ckgIhmKJmk 1vWwj6H14s2jNBbhAI2a/30TZD6YFSX60Tb//Hkghc3v1/7RN9LKAsyccFStAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbLg0zA9yRL8v2F5kdu7/rP5wfWEwHwYDVR0j BBgwFoAU0+wyfVZpvAsPsqQkVhfkTjbcRHMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTIzMDczOTAtNmVmMy00NDc2LWE2YWEtZDBjNTc4M2UxZjM3LzAvRDNFQzMyN0Q1 NjY5QkMwQjBGQjJBNDI0NTYxN0U0NEUzNkRDNDQ3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EM0VDMzI3RDU2NjlCQzBCMEZCMkE0MjQ1NjE3RTQ0RTM2REM0 NDczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTIzMDczOTAtNmVmMy00NDc2LWE2 YWEtZDBjNTc4M2UxZjM3LzAvRDNFQzMyN0Q1NjY5QkMwQjBGQjJBNDI0NTYxN0U0 NEUzNkRDNDQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1IiWJpM00DcAOeVv3lLPT3gSDnnyWZCol9 M/MGyU16lHZj4Mtf9eHI9E4wb8GKKF4eMjEwpZo+INrS/AmWuEZjHpgcGuXroSDg c4mpRBm7OyFM5HDCIVGW4cz1okYszuMRJ2tlH6T9QAeyrBn1lHlv93YMp3xGiLQX IUdizKVJS618UPChw38DcdY5yWaBtPvEGfxGGnhTJJGRVj05D/ef2lmVa1AG7B1t KXNwdFurcL8cJbt67Lc7ITRMTWcZQSxfae98VmP5DbAhixj2e+s/0n1mHxX+S2/K 1T+UirrBH6yhAgp7IiWXCyQ4qdCOicAsYLG8BaXlnbt0P8Bl/fk= -----END CERTIFICATE-----Generated at Thu Oct 8 02:24:40 2026 by rpki-client