$ rpki-client -vvf rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft File: D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft (raw, json) Hash identifier: 3FzsvKFwBSCIxE3TUEo3LqU0X+dGg3WZOZOMi2Vx3To= Subject key identifier: 8A:58:B7:73:48:EB:57:15:F2:DC:67:90:2A:70:18:AC:88:9E:F7:06 Authority key identifier: D3:EC:32:7D:56:69:BC:0B:0F:B2:A4:24:56:17:E4:4E:36:DC:44:73 Certificate issuer: /CN=D3EC327D5669BC0B0FB2A4245617E44E36DC4473 Certificate serial: 0CB57DB5089ABDEB69DE5AF7AE19877B28C2D25A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft Manifest number: 92 Signing time: Wed 19 Aug 2026 11:53:17 +0000 Manifest this update: Wed 19 Aug 2026 11:48:17 +0000 Manifest next update: Thu 20 Aug 2026 12:32:17 +0000 Files and hashes: 1: D3EC327D5669BC0B0FB2A4245617E44E36DC4473.crl (hash: 0EPGHtQaI9UL88DwqXnpi4OSHshtsWRlnUhAWVeyr6Q=) 2: 3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (hash: EtsVHdeAuCEUKToYyc1AboiXRpshf+Ge4ld5y69utbM=) 3: 3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (hash: 7YRFkgWqBTb6xXfqMpSxUz7NK51JToKbqOBLvR25NTc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.crl rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Aug 2026 11:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:b5:7d:b5:08:9a:bd:eb:69:de:5a:f7:ae:19:87:7b:28:c2:d2:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3EC327D5669BC0B0FB2A4245617E44E36DC4473 Validity Not Before: Aug 19 11:48:17 2026 GMT Not After : Aug 20 12:32:17 2026 GMT Subject: CN=8A58B77348EB5715F2DC67902A7018AC889EF706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:57:3d:b2:24:ad:c4:bb:8c:92:54:6d:ba:41: 5e:28:27:38:58:19:25:47:b8:15:25:03:b1:bb:38: a3:7f:0e:11:ee:6f:b0:cc:8e:a4:6b:42:16:ba:83: 9e:a1:07:a9:13:f3:63:6d:16:c6:d3:b6:94:0c:d3: 1b:02:de:c4:41:6d:2d:37:e0:ce:91:0a:6b:11:00: ea:12:5c:5a:7d:4c:be:30:7f:ab:81:99:66:c8:97: f6:ef:a2:c4:03:c7:73:56:9b:3a:4a:a1:44:9c:ef: c1:ca:54:ae:64:58:39:f9:8a:5d:12:b7:bf:38:b4: 71:7a:60:03:a7:27:ba:c8:f9:78:3d:6f:de:65:7c: 98:3e:cb:4a:fd:44:f9:d3:7a:30:7e:cd:9f:53:d0: 8d:05:ba:bc:0e:de:02:24:21:cf:aa:b6:75:61:b0: 00:79:9f:26:09:e2:5c:cc:de:f4:ce:00:73:23:88: 83:79:23:03:1d:2b:59:47:4a:a0:cf:eb:7c:5b:a2: ac:d7:f8:31:df:d0:62:95:42:29:13:33:a2:13:8a: da:46:39:3d:91:25:df:1f:63:49:64:e8:59:97:9a: cd:8c:71:e3:0e:fe:12:45:8f:b2:b0:4d:2a:e8:e4: dc:93:f4:49:fc:4c:d7:7c:f4:a7:96:05:d1:f6:aa: 0d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:58:B7:73:48:EB:57:15:F2:DC:67:90:2A:70:18:AC:88:9E:F7:06 X509v3 Authority Key Identifier: keyid:D3:EC:32:7D:56:69:BC:0B:0F:B2:A4:24:56:17:E4:4E:36:DC:44:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:7c:f9:0d:07:9e:dc:1b:96:4f:e8:60:a6:78:f3:14:4a:ff: f7:ad:55:f2:f3:4c:9d:af:8d:20:3a:7c:e8:49:d4:93:20:15: 48:72:b2:24:30:6e:35:f6:36:23:c0:b9:e9:86:72:f0:d8:56: a0:9a:c3:5f:dd:b4:49:f5:26:b8:ae:ab:e2:ab:bb:63:8c:ea: f9:da:c1:05:bd:a8:92:ba:14:3e:34:d8:8a:4c:06:d5:51:13: fb:d1:50:f4:29:ca:fc:12:82:bf:0c:24:25:5a:4d:fa:eb:d4: a5:24:17:84:ec:36:c7:d0:1e:d7:ef:25:b2:f8:99:12:3d:3a: d9:db:40:9e:14:4e:88:07:25:d3:87:85:95:5e:03:f1:47:50: 2b:81:b7:9e:90:c1:a6:f3:75:32:80:70:54:cf:37:c3:d5:4f: df:a5:1b:bb:e9:09:95:45:49:b0:09:14:c2:82:c0:81:0d:09: 05:71:6c:db:6f:5d:be:d1:cb:ef:ec:73:21:a6:50:d3:c7:b1: 2a:1b:54:15:c5:0c:06:27:11:e7:8b:de:2d:d3:c0:1b:d7:32: 00:8d:6a:ab:b8:1f:f1:f4:6e:56:2c:95:87:46:b3:bb:1f:ff: 0d:87:ea:76:32:a5:d9:bb:45:c5:65:89:8d:1b:5e:5a:74:a2: 33:66:dd:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDLV9tQiavetp3lr3rhmHeyjC0lowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNFQzMyN0Q1NjY5QkMwQjBGQjJBNDI0NTYxN0U0NEUz NkRDNDQ3MzAeFw0yNjA4MTkxMTQ4MTdaFw0yNjA4MjAxMjMyMTdaMDMxMTAvBgNV BAMTKDhBNThCNzczNDhFQjU3MTVGMkRDNjc5MDJBNzAxOEFDODg5RUY3MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxVz2yJK3Eu4ySVG26QV4oJzhY GSVHuBUlA7G7OKN/DhHub7DMjqRrQha6g56hB6kT82NtFsbTtpQM0xsC3sRBbS03 4M6RCmsRAOoSXFp9TL4wf6uBmWbIl/bvosQDx3NWmzpKoUSc78HKVK5kWDn5il0S t784tHF6YAOnJ7rI+Xg9b95lfJg+y0r9RPnTejB+zZ9T0I0FurwO3gIkIc+qtnVh sAB5nyYJ4lzM3vTOAHMjiIN5IwMdK1lHSqDP63xboqzX+DHf0GKVQikTM6ITitpG OT2RJd8fY0lk6FmXms2MceMO/hJFj7KwTSro5NyT9En8TNd89KeWBdH2qg0LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUili3c0jrVxXy3GeQKnAYrIie9wYwHwYDVR0j BBgwFoAU0+wyfVZpvAsPsqQkVhfkTjbcRHMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTIzMDczOTAtNmVmMy00NDc2LWE2YWEtZDBjNTc4M2UxZjM3LzAvRDNFQzMyN0Q1 NjY5QkMwQjBGQjJBNDI0NTYxN0U0NEUzNkRDNDQ3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EM0VDMzI3RDU2NjlCQzBCMEZCMkE0MjQ1NjE3RTQ0RTM2REM0 NDczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTIzMDczOTAtNmVmMy00NDc2LWE2 YWEtZDBjNTc4M2UxZjM3LzAvRDNFQzMyN0Q1NjY5QkMwQjBGQjJBNDI0NTYxN0U0 NEUzNkRDNDQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEN8+Q0Hntwblk/oYKZ48xRK//etVfLzTJ2v jSA6fOhJ1JMgFUhysiQwbjX2NiPAuemGcvDYVqCaw1/dtEn1Jriuq+Kru2OM6vna wQW9qJK6FD402IpMBtVRE/vRUPQpyvwSgr8MJCVaTfrr1KUkF4TsNsfQHtfvJbL4 mRI9OtnbQJ4UTogHJdOHhZVeA/FHUCuBt56QwabzdTKAcFTPN8PVT9+lG7vpCZVF SbAJFMKCwIENCQVxbNtvXb7Ry+/scyGmUNPHsSobVBXFDAYnEeeL3i3TwBvXMgCN aqu4H/H0blYslYdGs7sf/w2H6nYypdm7RcVliY0bXlp0ojNm3eA= -----END CERTIFICATE-----Generated at Wed Aug 19 16:20:34 2026 by rpki-client