$ rpki-client -vvvf rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.mft File: D5B392E916885394AA1C2B31FE082DC317BCE686.mft (raw, json) Hash identifier: I4mLfk9NJpqxqVHYSIFhM4NjJjceU0jRpGO4vKQbBQ8= Subject key identifier: 71:06:3C:0E:D2:0B:30:D8:12:19:BE:DE:FC:C9:A4:6C:4A:E1:D5:B8 Authority key identifier: D5:B3:92:E9:16:88:53:94:AA:1C:2B:31:FE:08:2D:C3:17:BC:E6:86 Certificate issuer: /CN=D5B392E916885394AA1C2B31FE082DC317BCE686 Certificate serial: 1DA5FB60FC41117A2F9896F97C7DAD99D6B7465B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B392E916885394AA1C2B31FE082DC317BCE686.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 01:04:59 +0000 Manifest this update: Thu 17 Sep 2026 00:59:59 +0000 Manifest next update: Fri 18 Sep 2026 03:17:59 +0000 Files and hashes: 1: 3130332e3134332e32332e302f32342d3234203d3e20313339343331.roa (hash: AcnbfkvX1w/c7v0ssG/zc+baC3z+ryz2Lyxv+skns7o=) 2: D5B392E916885394AA1C2B31FE082DC317BCE686.crl (hash: qltHxVdd2pNu+KKQZFlQoxg1peCIPgD4qJFlzGwUr44=) 3: 3130332e3134332e32322e302f32332d3233203d3e20313339343331.roa (hash: n/anw1j/p698bFcxqqm49V4G12x2QBboMMl4JYNKkrU=) 4: 3130332e3134332e32322e302f32342d3234203d3e20313339343331.roa (hash: Mij6gjlboJz168uvi1+veD3ghjYsq0hmKTYOHdpJFfc=) 5: 323430353a343663303a3a2f33322d3332203d3e20313339343331.roa (hash: 72ltkdAz77XwydUIwwc3kpnQIFXbCRX8QiK7JdJ6abI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.crl rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B392E916885394AA1C2B31FE082DC317BCE686.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:17:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a5:fb:60:fc:41:11:7a:2f:98:96:f9:7c:7d:ad:99:d6:b7:46:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5B392E916885394AA1C2B31FE082DC317BCE686 Validity Not Before: Sep 17 00:59:59 2026 GMT Not After : Sep 18 03:17:59 2026 GMT Subject: CN=71063C0ED20B30D81219BEDEFCC9A46C4AE1D5B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6b:a5:b8:43:89:f4:1d:d4:93:47:2f:3c:d0: d2:be:8f:3a:eb:d9:74:69:24:bc:e5:d8:ce:c0:f8: 3f:ab:73:c0:bd:96:7a:e0:ef:e1:ca:7a:48:24:61: 3c:3e:ea:b3:44:cc:b9:d1:8e:4d:4e:9b:59:9e:7c: 9f:0b:03:05:32:7c:b8:45:a1:06:32:16:71:4d:08: 4c:15:66:fc:89:ef:e1:8d:a1:b5:8b:f7:43:71:6d: fd:48:37:7a:29:79:f0:c1:ed:cd:cd:08:dc:09:67: 9f:ea:cd:fa:66:b0:c6:23:e7:cd:5b:e4:5c:f4:87: 1f:ee:ca:74:9e:f6:db:38:a7:07:af:d3:2e:b4:fd: d5:b1:73:d7:2e:de:d5:70:b8:99:a6:66:57:9d:ac: 54:fe:cf:0d:da:f8:9f:0e:a4:d2:90:88:ec:0e:8f: 3d:b0:2b:23:e8:81:b0:e5:a8:82:eb:e0:ea:e0:bc: a1:7b:df:21:ed:13:e8:7f:bc:80:e8:a9:8b:b4:dd: 8a:45:b9:c5:fe:c2:37:70:12:1a:00:47:96:ac:a5: 8f:b3:ab:11:71:94:93:48:7a:07:90:3e:22:fa:43: 40:d3:2d:22:29:35:e0:77:47:27:e3:60:ff:70:9f: 87:f0:fd:19:2f:d2:77:bc:c4:fb:9e:a5:ce:e3:c3: 69:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:06:3C:0E:D2:0B:30:D8:12:19:BE:DE:FC:C9:A4:6C:4A:E1:D5:B8 X509v3 Authority Key Identifier: keyid:D5:B3:92:E9:16:88:53:94:AA:1C:2B:31:FE:08:2D:C3:17:BC:E6:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B392E916885394AA1C2B31FE082DC317BCE686.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:08:21:3b:41:70:f6:98:71:74:bf:1d:2f:fb:3f:59:1c:3e: 06:e3:8c:a9:1c:73:62:ff:e5:78:dc:4a:95:c0:9b:5d:81:2a: c4:0f:55:8a:6c:08:d8:d3:05:17:4d:d7:48:8a:4a:8f:39:02: 3d:a6:e2:80:02:04:cc:d7:df:67:e1:16:7a:8e:06:db:3c:b7: ed:f6:ed:f1:c4:d3:d8:08:d4:24:84:2c:02:ec:5f:cc:a7:22: 0d:56:30:43:07:d4:fd:eb:77:62:ef:8c:ec:bf:a5:cb:8d:30: da:dd:ae:10:5b:88:a5:97:96:69:7c:10:1f:1d:c6:f8:78:19: 3e:d1:7b:45:d5:7a:a7:4c:e9:33:ba:21:09:e7:0d:39:f4:2e: cb:e8:a5:86:41:07:8c:5b:e1:a7:d1:bf:1e:c9:27:22:29:2d: e3:f3:6a:65:d0:e6:0c:83:68:2b:11:69:40:9d:80:a7:ad:4a: 92:dd:50:af:1f:ee:17:8a:16:53:00:5d:a9:2d:91:50:35:56: 2d:22:1a:18:0d:1c:61:c2:32:32:53:f4:b7:b0:65:b3:14:53: 94:3d:15:0b:03:88:fd:d3:4b:f9:53:6d:06:0e:b6:7b:02:8a: aa:8c:42:60:1f:3f:ed:f6:38:bc:dd:50:db:00:a5:66:e6:05: 13:b0:b3:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHaX7YPxBEXovmJb5fH2tmda3RlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVCMzkyRTkxNjg4NTM5NEFBMUMyQjMxRkUwODJEQzMx N0JDRTY4NjAeFw0yNjA5MTcwMDU5NTlaFw0yNjA5MTgwMzE3NTlaMDMxMTAvBgNV BAMTKDcxMDYzQzBFRDIwQjMwRDgxMjE5QkVERUZDQzlBNDZDNEFFMUQ1QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDa6W4Q4n0HdSTRy880NK+jzrr 2XRpJLzl2M7A+D+rc8C9lnrg7+HKekgkYTw+6rNEzLnRjk1Om1mefJ8LAwUyfLhF oQYyFnFNCEwVZvyJ7+GNobWL90Nxbf1IN3opefDB7c3NCNwJZ5/qzfpmsMYj581b 5Fz0hx/uynSe9ts4pwev0y60/dWxc9cu3tVwuJmmZledrFT+zw3a+J8OpNKQiOwO jz2wKyPogbDlqILr4OrgvKF73yHtE+h/vIDoqYu03YpFucX+wjdwEhoAR5aspY+z qxFxlJNIegeQPiL6Q0DTLSIpNeB3RyfjYP9wn4fw/Rkv0ne8xPuepc7jw2kHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcQY8DtILMNgSGb7e/MmkbErh1bgwHwYDVR0j BBgwFoAU1bOS6RaIU5SqHCsx/ggtwxe85oYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ2ZjMzZjItZjA2ZS00ZWI2LWFlNjEtNTUyOWJjYTFjZGNkLzAvRDVCMzkyRTkx Njg4NTM5NEFBMUMyQjMxRkUwODJEQzMxN0JDRTY4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENUIzOTJFOTE2ODg1Mzk0QUExQzJCMzFGRTA4MkRDMzE3QkNF Njg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ2ZjMzZjItZjA2ZS00ZWI2LWFl NjEtNTUyOWJjYTFjZGNkLzAvRDVCMzkyRTkxNjg4NTM5NEFBMUMyQjMxRkUwODJE QzMxN0JDRTY4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgIITtBcPaYcXS/HS/7P1kcPgbjjKkcc2L/ 5XjcSpXAm12BKsQPVYpsCNjTBRdN10iKSo85Aj2m4oACBMzX32fhFnqOBts8t+32 7fHE09gI1CSELALsX8ynIg1WMEMH1P3rd2LvjOy/pcuNMNrdrhBbiKWXlml8EB8d xvh4GT7Re0XVeqdM6TO6IQnnDTn0LsvopYZBB4xb4afRvx7JJyIpLePzamXQ5gyD aCsRaUCdgKetSpLdUK8f7heKFlMAXaktkVA1Vi0iGhgNHGHCMjJT9LewZbMUU5Q9 FQsDiP3TS/lTbQYOtnsCiqqMQmAfP+32OLzdUNsApWbmBROwswI= -----END CERTIFICATE-----Generated at Thu Sep 17 14:46:34 2026 by rpki-client