$ rpki-client -vvvf rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft File: DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft (raw, json) Hash identifier: mOxdrjtDWMjKBmkymwyuvyRUDq0okdl+J3EDe2olJIc= Subject key identifier: 75:C0:2A:9A:A2:CA:8B:FE:E8:28:DC:AA:EC:C7:39:8C:D7:39:0E:B6 Authority key identifier: DE:17:2F:4C:F0:CE:42:30:A5:10:6C:D6:AC:0C:25:A6:3A:72:C4:A5 Certificate issuer: /CN=DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5 Certificate serial: 125A962C165AE7D98356D0288E8BC41BD9270918 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft Manifest number: BA Signing time: Thu 17 Sep 2026 05:09:52 +0000 Manifest this update: Thu 17 Sep 2026 05:04:52 +0000 Manifest next update: Fri 18 Sep 2026 06:15:52 +0000 Files and hashes: 1: 3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa (hash: FP5pxHLBZtIDduyXGtgh7O/QJiYCmUVEXRSY7J06kQM=) 2: DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.crl (hash: nNDhifYg0GbUcoZGBSeC5iKxjfaxjZGvVBc108J3z8Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.crl rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:15:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:5a:96:2c:16:5a:e7:d9:83:56:d0:28:8e:8b:c4:1b:d9:27:09:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5 Validity Not Before: Sep 17 05:04:52 2026 GMT Not After : Sep 18 06:15:52 2026 GMT Subject: CN=75C02A9AA2CA8BFEE828DCAAECC7398CD7390EB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fb:0b:dd:a8:6b:f8:16:4c:cd:50:74:c8:0a: 64:89:ec:fe:e6:76:d8:ad:ec:49:f9:20:75:fa:e9: b7:70:d9:54:a4:2c:6d:45:8f:3d:6e:ed:29:76:40: 1a:47:1b:fd:2e:f4:e8:18:a5:ab:3d:48:35:3b:56: 67:06:fe:e5:52:7f:75:58:52:dc:8a:b7:cc:63:2a: 49:96:ae:66:d5:1f:20:e2:e1:f7:1f:e4:d5:2a:5c: 68:21:0f:bb:7a:38:78:3e:e7:89:b6:de:e9:d9:89: 01:75:0a:64:98:ac:9b:6f:e2:a1:2e:bd:e7:d5:68: 35:e3:13:3b:2a:62:ac:96:a6:c2:b0:8d:a2:86:19: 58:d1:97:1f:2d:f3:03:33:c2:58:44:9f:e2:0e:fe: 37:8b:35:48:8f:6e:a9:ca:5d:eb:0e:07:43:07:9b: ce:61:d2:44:04:e8:88:0b:a9:37:6b:4a:ca:f1:2b: 09:b4:54:3c:f9:3c:a7:5c:63:f8:85:1a:46:df:71: c3:8c:b4:a0:aa:6d:e8:47:54:e7:3e:6d:bc:a7:ec: db:1b:30:8a:46:1c:47:aa:32:91:34:31:d6:7f:20: b9:50:c7:61:cf:7b:35:ae:34:f4:70:16:db:ec:97: a0:4a:8b:69:63:16:d9:68:2f:6f:77:27:6e:40:6d: c4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C0:2A:9A:A2:CA:8B:FE:E8:28:DC:AA:EC:C7:39:8C:D7:39:0E:B6 X509v3 Authority Key Identifier: keyid:DE:17:2F:4C:F0:CE:42:30:A5:10:6C:D6:AC:0C:25:A6:3A:72:C4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:eb:65:c7:c9:51:96:62:3c:26:03:99:ae:2a:ab:50:1c:81: 27:50:29:2a:dd:f5:19:e8:84:08:99:53:ad:4e:04:c9:49:1e: f3:0d:97:d4:1e:39:f4:88:ab:74:a3:7e:81:79:c2:54:94:2f: 52:28:e7:58:00:e4:84:7f:31:74:d4:f9:f0:58:41:af:94:55: 06:14:2e:91:78:6e:f1:a1:1c:b8:18:a9:1e:73:ca:19:c3:c1: 77:ab:8b:38:9c:3b:33:99:b3:52:88:74:b8:a4:5b:3c:d9:0a: 6e:44:f2:14:59:f4:72:01:7c:49:ba:9c:09:a8:72:8c:f7:e9: 77:df:ff:50:bb:2f:55:ab:30:eb:5f:c0:3a:7b:95:2a:55:b5: 17:9e:ea:85:3b:55:6d:d5:25:b8:f5:92:7d:c3:d2:62:aa:2f: 15:58:bc:c4:9f:10:dd:aa:29:8f:23:6d:9a:59:72:80:9b:39: 99:86:ee:f8:42:ce:cb:1d:a4:5a:63:00:a1:bb:e2:c3:9d:b1: 57:5b:14:60:bf:ec:2e:2c:73:4a:ab:81:e2:76:3d:92:5f:42: d3:b5:6c:b2:a8:99:94:4a:a6:9c:ee:77:bb:c9:56:7d:f2:67: 7b:f6:f5:45:7c:79:e7:dc:c1:26:67:a7:ba:53:01:5f:96:d3: a2:74:f3:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUElqWLBZa59mDVtAojovEG9knCRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxNzJGNENGMENFNDIzMEE1MTA2Q0Q2QUMwQzI1QTYz QTcyQzRBNTAeFw0yNjA5MTcwNTA0NTJaFw0yNjA5MTgwNjE1NTJaMDMxMTAvBgNV BAMTKDc1QzAyQTlBQTJDQThCRkVFODI4RENBQUVDQzczOThDRDczOTBFQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC+wvdqGv4FkzNUHTICmSJ7P7m dtit7En5IHX66bdw2VSkLG1Fjz1u7Sl2QBpHG/0u9OgYpas9SDU7VmcG/uVSf3VY UtyKt8xjKkmWrmbVHyDi4fcf5NUqXGghD7t6OHg+54m23unZiQF1CmSYrJtv4qEu vefVaDXjEzsqYqyWpsKwjaKGGVjRlx8t8wMzwlhEn+IO/jeLNUiPbqnKXesOB0MH m85h0kQE6IgLqTdrSsrxKwm0VDz5PKdcY/iFGkbfccOMtKCqbehHVOc+bbyn7Nsb MIpGHEeqMpE0MdZ/ILlQx2HPezWuNPRwFtvsl6BKi2ljFtloL293J25AbcQVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdcAqmqLKi/7oKNyq7Mc5jNc5DrYwHwYDVR0j BBgwFoAU3hcvTPDOQjClEGzWrAwlpjpyxKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQyYzFmMzItODFhYy00MTE4LWJlMmYtNTc0Y2E1YjU0MWVhLzAvREUxNzJGNENG MENFNDIzMEE1MTA2Q0Q2QUMwQzI1QTYzQTcyQzRBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERTE3MkY0Q0YwQ0U0MjMwQTUxMDZDRDZBQzBDMjVBNjNBNzJD NEE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQyYzFmMzItODFhYy00MTE4LWJl MmYtNTc0Y2E1YjU0MWVhLzAvREUxNzJGNENGMENFNDIzMEE1MTA2Q0Q2QUMwQzI1 QTYzQTcyQzRBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABvrZcfJUZZiPCYDma4qq1AcgSdQKSrd9Rno hAiZU61OBMlJHvMNl9QeOfSIq3SjfoF5wlSUL1Io51gA5IR/MXTU+fBYQa+UVQYU LpF4bvGhHLgYqR5zyhnDwXerizicOzOZs1KIdLikWzzZCm5E8hRZ9HIBfEm6nAmo coz36Xff/1C7L1WrMOtfwDp7lSpVtRee6oU7VW3VJbj1kn3D0mKqLxVYvMSfEN2q KY8jbZpZcoCbOZmG7vhCzssdpFpjAKG74sOdsVdbFGC/7C4sc0qrgeJ2PZJfQtO1 bLKomZRKppzud7vJVn3yZ3v29UV8eefcwSZnp7pTAV+W06J08+4= -----END CERTIFICATE-----Generated at Thu Sep 17 13:57:23 2026 by rpki-client