$ rpki-client -vvvf rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft File: DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft (raw, json) Hash identifier: TSXWQoffCvKeYdoA3IM8Mu61MVym2SSTrVgCN5nOuxU= Subject key identifier: E0:0F:42:01:B4:92:1C:A0:D8:7E:A2:E2:CA:E5:8B:CA:D6:02:D2:AB Authority key identifier: DF:23:04:42:9B:18:F8:08:9F:AE:1F:C9:38:67:4F:36:A0:FD:77:B2 Certificate issuer: /CN=DF2304429B18F8089FAE1FC938674F36A0FD77B2 Certificate serial: 5E9111541AB14F558469F6AB80FFFDDA20349806 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 03:02:11 +0000 Manifest this update: Thu 17 Sep 2026 02:57:11 +0000 Manifest next update: Fri 18 Sep 2026 04:46:11 +0000 Files and hashes: 1: DF2304429B18F8089FAE1FC938674F36A0FD77B2.crl (hash: r8IDx43eD9OtARH+EumC3o0mAEsPXg/2LbYsGyAPn0o=) 2: 3135372e31352e36362e302f32342d3234203d3e20313532333737.roa (hash: ftQeDYyrz6hB+RbX5fKWVbWWuQdAQyxBYb3VQF1+q6g=) 3: 3135372e31352e36372e302f32342d3234203d3e20313532333737.roa (hash: CpW+8vhTW86R4U0S/gqyxxfPZJCtlWIdT+jTSx+66zc=) 4: 3135372e31352e36362e302f32332d3233203d3e20313532333737.roa (hash: N6yMW5HjzqSkSXTxh8LYBYq0zgZeaS0wE1WlogwqRwM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.crl rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:46:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:91:11:54:1a:b1:4f:55:84:69:f6:ab:80:ff:fd:da:20:34:98:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF2304429B18F8089FAE1FC938674F36A0FD77B2 Validity Not Before: Sep 17 02:57:11 2026 GMT Not After : Sep 18 04:46:11 2026 GMT Subject: CN=E00F4201B4921CA0D87EA2E2CAE58BCAD602D2AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2b:90:27:e0:ca:60:b0:55:28:d0:2e:38:f3: 45:00:e5:7d:ad:13:3a:cc:bd:77:00:47:ae:fd:ed: f7:f9:da:cc:87:7c:e8:c6:e8:df:b2:9e:6b:d9:86: f3:a5:f4:da:33:89:c0:d7:2a:a6:be:dc:2b:d5:11: ad:16:fa:1e:70:64:dc:53:de:05:fd:31:0b:a5:d4: a1:42:28:92:64:96:8c:3a:7c:c0:23:93:e1:02:03: d8:90:eb:c3:27:52:5f:0e:85:47:43:99:1a:98:d5: f5:09:8c:31:c1:78:03:14:b1:6f:e5:81:c4:7f:a1: ed:83:a1:07:6e:4d:68:e5:c6:44:67:1b:7b:6d:03: 7a:3f:e7:ae:1f:b6:04:1d:ce:f3:39:61:38:8c:e5: 01:49:d5:e7:92:c7:79:9a:1b:85:ca:13:dd:09:e0: c2:3e:52:79:39:77:79:68:47:ff:8d:fb:4f:bf:3a: a2:d0:41:81:17:7b:48:af:d4:09:d0:a1:ed:35:19: 26:c7:b2:9b:c3:ea:e0:02:d3:44:c1:e6:8b:88:f0: 54:8b:e6:6b:29:3a:b6:0d:ed:1e:86:12:d8:9b:b0: 42:3e:36:81:3f:b2:4f:fd:4b:c8:59:c8:24:6a:5b: f0:08:4b:f0:08:34:73:d1:e9:3d:7a:1d:62:34:00: bb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0F:42:01:B4:92:1C:A0:D8:7E:A2:E2:CA:E5:8B:CA:D6:02:D2:AB X509v3 Authority Key Identifier: keyid:DF:23:04:42:9B:18:F8:08:9F:AE:1F:C9:38:67:4F:36:A0:FD:77:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:53:f3:9e:bd:05:f9:72:74:a7:f7:b8:62:07:ae:c6:02:02: a3:bb:af:80:f1:42:94:3d:2a:99:eb:82:bf:36:3d:ae:4a:07: 5e:3b:bb:47:bf:7f:b4:0d:45:69:2b:66:02:95:e0:0c:a7:08: a1:6a:11:5d:e1:3c:57:b1:f1:d5:af:c5:a1:b3:20:e3:5b:0b: 29:02:76:47:74:59:6f:75:4d:4b:33:44:4a:9b:9e:a1:d8:dc: 68:ff:bd:48:cc:f2:a7:0d:58:78:1f:24:96:db:f3:4a:5b:de: f0:e7:55:35:d1:21:86:34:49:8d:9d:3e:41:ae:6f:21:d7:93: 4a:99:ef:85:1f:0a:24:9b:83:89:f9:86:bf:de:83:14:c1:73: b5:2b:54:06:3f:3a:94:bc:b4:06:cd:5d:d0:5e:e8:b1:bd:e0: 0a:2a:65:4d:6e:cc:bd:46:f5:76:61:85:18:7e:41:79:fd:da: 38:23:71:d5:1d:94:95:54:b7:68:63:69:1c:e6:71:d5:95:11: 0c:96:26:a3:f8:b7:c6:83:ec:ae:2b:a8:5d:c5:8a:03:ad:8b: fe:cc:69:2b:e1:3b:0f:90:3b:75:a0:b4:22:53:40:a5:57:f5: 31:35:7e:09:77:ca:05:b8:97:10:6a:33:28:af:59:bc:23:24: d2:11:1e:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXpERVBqxT1WEafargP/92iA0mAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYyMzA0NDI5QjE4RjgwODlGQUUxRkM5Mzg2NzRGMzZB MEZENzdCMjAeFw0yNjA5MTcwMjU3MTFaFw0yNjA5MTgwNDQ2MTFaMDMxMTAvBgNV BAMTKEUwMEY0MjAxQjQ5MjFDQTBEODdFQTJFMkNBRTU4QkNBRDYwMkQyQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSK5An4MpgsFUo0C4480UA5X2t EzrMvXcAR6797ff52syHfOjG6N+ynmvZhvOl9NozicDXKqa+3CvVEa0W+h5wZNxT 3gX9MQul1KFCKJJklow6fMAjk+ECA9iQ68MnUl8OhUdDmRqY1fUJjDHBeAMUsW/l gcR/oe2DoQduTWjlxkRnG3ttA3o/564ftgQdzvM5YTiM5QFJ1eeSx3maG4XKE90J 4MI+Unk5d3loR/+N+0+/OqLQQYEXe0iv1AnQoe01GSbHspvD6uAC00TB5ouI8FSL 5mspOrYN7R6GEtibsEI+NoE/sk/9S8hZyCRqW/AIS/AINHPR6T16HWI0ALsrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4A9CAbSSHKDYfqLiyuWLytYC0qswHwYDVR0j BBgwFoAU3yMEQpsY+Aifrh/JOGdPNqD9d7IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDg0ZTg3OWYtM2E1Ni00ZDhkLTgzZTgtMGU5Y2M2NTc3MGVhLzAvREYyMzA0NDI5 QjE4RjgwODlGQUUxRkM5Mzg2NzRGMzZBMEZENzdCMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ERjIzMDQ0MjlCMThGODA4OUZBRTFGQzkzODY3NEYzNkEwRkQ3 N0IyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDg0ZTg3OWYtM2E1Ni00ZDhkLTgz ZTgtMGU5Y2M2NTc3MGVhLzAvREYyMzA0NDI5QjE4RjgwODlGQUUxRkM5Mzg2NzRG MzZBMEZENzdCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpT8569BflydKf3uGIHrsYCAqO7r4DxQpQ9 Kpnrgr82Pa5KB147u0e/f7QNRWkrZgKV4AynCKFqEV3hPFex8dWvxaGzIONbCykC dkd0WW91TUszREqbnqHY3Gj/vUjM8qcNWHgfJJbb80pb3vDnVTXRIYY0SY2dPkGu byHXk0qZ74UfCiSbg4n5hr/egxTBc7UrVAY/OpS8tAbNXdBe6LG94AoqZU1uzL1G 9XZhhRh+QXn92jgjcdUdlJVUt2hjaRzmcdWVEQyWJqP4t8aD7K4rqF3FigOti/7M aSvhOw+QO3WgtCJTQKVX9TE1fgl3ygW4lxBqMyivWbwjJNIRHi8= -----END CERTIFICATE-----Generated at Thu Sep 17 10:47:45 2026 by rpki-client