$ rpki-client -vvvf rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft File: D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft (raw, json) Hash identifier: uzjiMn6HFIUQtue2k3ZcTdfiop/1mpfNguosoKdtMDc= Subject key identifier: E5:91:D0:31:08:F4:3B:29:1A:D9:4B:A2:A1:9F:BF:B8:60:28:A6:00 Authority key identifier: D8:3D:6E:3A:34:49:60:D9:1E:10:88:4A:A1:CE:E3:A3:46:1E:1B:F9 Certificate issuer: /CN=D83D6E3A344960D91E10884AA1CEE3A3461E1BF9 Certificate serial: 0346CE2C23F3857E28E6A7F6F10FDE7608A91B20 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 04:39:12 +0000 Manifest this update: Thu 17 Sep 2026 04:34:12 +0000 Manifest next update: Fri 18 Sep 2026 05:24:12 +0000 Files and hashes: 1: 323430373a396538303a3a2f33322d3332203d3e203634323937.roa (hash: E6tR5JFlnt4a2SDzp1URSec/UvlgqLYhcsF8yth51R4=) 2: 3130332e37372e3230342e302f32332d3233203d3e203634323937.roa (hash: UDtR/bmcoGQ4Qjq+Iq2hw3T7b2QXxyjMcOZO/xAMlNY=) 3: 3130332e37372e3230372e302f32342d3234203d3e203634323937.roa (hash: dQq3t9CHCoAGrdXvawfKbXrrABW3jl6jI9yPO4Api+E=) 4: 3130332e37372e3230342e302f32342d3234203d3e203634323937.roa (hash: P8+4V5z096Waggp484U08aSEWnvYMzfn2QuEGNZcw6k=) 5: 3130332e37372e3230352e302f32342d3234203d3e203634323937.roa (hash: AqPDvu5wMH9hSXVjD2VnKUqfXyX3eZeH2kklyZn/LgU=) 6: 3130332e37372e3230362e302f32342d3234203d3e203634323937.roa (hash: jPAnnqmUSZKCOHdAErpqklofojiM1qCv7SQs+xi8fCw=) 7: D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.crl (hash: 6cYLT2B1CS/fIdgq5yzXDu/GLLoMdQwZXNggrMBnsLo=) 8: 3130332e37372e3230342e302f32322d3232203d3e203634323937.roa (hash: JR5WOntI+i6T1zRjrN8zT02s0LTFAvw0fmSCSLj0TTI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.crl rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:46:ce:2c:23:f3:85:7e:28:e6:a7:f6:f1:0f:de:76:08:a9:1b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D83D6E3A344960D91E10884AA1CEE3A3461E1BF9 Validity Not Before: Sep 17 04:34:12 2026 GMT Not After : Sep 18 05:24:12 2026 GMT Subject: CN=E591D03108F43B291AD94BA2A19FBFB86028A600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d4:05:d3:76:8d:2e:f4:23:8c:17:b8:e3:b7: 72:a0:13:8b:35:90:7e:9a:5c:09:13:00:65:e4:48: 97:b0:72:f3:cf:e5:b1:a8:7c:7f:5c:5c:cd:b5:1a: 21:fb:7b:64:d2:ef:aa:f3:e1:3a:1d:77:a8:7b:76: 53:94:9c:09:ac:3c:78:a9:b3:1d:7e:05:b5:d9:50: f5:ae:96:48:09:3a:13:cd:1a:27:3f:04:5e:83:f6: a8:ca:c4:42:08:4e:11:02:d8:68:04:98:e7:ff:2c: 35:99:23:66:f9:38:e7:46:64:eb:e4:dd:18:36:9e: 10:99:e6:df:99:81:e9:92:77:6e:1b:85:be:3e:76: 5a:c0:aa:ec:1d:a2:84:39:c1:96:bf:c1:b6:0b:13: fd:55:aa:96:70:1c:a6:e9:fb:93:c6:6d:db:35:18: 9d:12:be:6d:84:16:f5:f7:39:e6:27:44:f9:11:e9: 62:24:71:ec:e6:c6:52:2e:8b:3e:a7:97:d8:41:36: 0c:04:a4:39:94:2f:8f:a3:02:88:c1:14:74:71:df: a3:83:14:4c:ce:61:d3:77:f4:31:b8:65:3d:f7:10: 29:df:c0:07:cb:cf:d0:66:7c:59:0e:10:69:bd:5e: 56:84:47:83:bb:af:9c:b5:37:24:21:0f:24:f3:99: d0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:91:D0:31:08:F4:3B:29:1A:D9:4B:A2:A1:9F:BF:B8:60:28:A6:00 X509v3 Authority Key Identifier: keyid:D8:3D:6E:3A:34:49:60:D9:1E:10:88:4A:A1:CE:E3:A3:46:1E:1B:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:3c:6e:f5:32:dd:e5:0d:01:c9:5f:3c:e5:9f:ed:25:68:55: db:d3:d1:58:6c:11:a3:53:81:68:d5:53:4e:eb:57:7d:23:ca: 18:72:7a:f6:d7:24:fa:e5:2c:77:5b:84:8b:12:47:bb:a6:49: f3:43:e1:b0:ea:2f:37:f2:8f:34:2c:bf:d8:21:e0:fc:20:b9: 14:a5:84:89:85:07:52:80:54:32:5b:38:13:b2:12:29:91:d9: 14:67:56:50:5a:7f:7e:b2:6f:0d:3a:27:73:cf:f3:7e:ef:26: d3:c4:4e:fd:1d:a1:76:16:47:8a:73:d4:0a:4b:95:bc:01:1c: 66:8c:e9:d0:06:c3:f2:7b:6a:57:1d:78:c4:e0:3b:ca:68:65: ca:9f:76:0c:6e:91:92:21:07:52:8d:93:25:ee:7c:ad:7b:7b: cf:14:3d:60:41:14:a7:56:a2:7f:ef:af:a2:2a:69:52:07:9b: 43:56:bd:0d:33:d4:a9:c6:36:6f:7f:ef:fd:f0:ab:ad:be:cf: 8c:2b:10:a2:3d:e5:25:a5:99:90:bb:ea:b3:e4:f0:5b:b3:41: bd:05:1a:49:4d:99:4f:02:fa:ea:7e:25:5e:75:4b:32:e8:b5: 68:c6:51:09:4e:87:20:89:0f:6a:5c:0b:e9:2b:ec:f3:78:04: 4e:26:2f:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA0bOLCPzhX4o5qf28Q/edgipGyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDgzRDZFM0EzNDQ5NjBEOTFFMTA4ODRBQTFDRUUzQTM0 NjFFMUJGOTAeFw0yNjA5MTcwNDM0MTJaFw0yNjA5MTgwNTI0MTJaMDMxMTAvBgNV BAMTKEU1OTFEMDMxMDhGNDNCMjkxQUQ5NEJBMkExOUZCRkI4NjAyOEE2MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN1AXTdo0u9COMF7jjt3KgE4s1 kH6aXAkTAGXkSJewcvPP5bGofH9cXM21GiH7e2TS76rz4Todd6h7dlOUnAmsPHip sx1+BbXZUPWulkgJOhPNGic/BF6D9qjKxEIIThEC2GgEmOf/LDWZI2b5OOdGZOvk 3Rg2nhCZ5t+ZgemSd24bhb4+dlrAquwdooQ5wZa/wbYLE/1VqpZwHKbp+5PGbds1 GJ0Svm2EFvX3OeYnRPkR6WIkcezmxlIuiz6nl9hBNgwEpDmUL4+jAojBFHRx36OD FEzOYdN39DG4ZT33ECnfwAfLz9BmfFkOEGm9XlaER4O7r5y1NyQhDyTzmdCrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5ZHQMQj0Oyka2UuioZ+/uGAopgAwHwYDVR0j BBgwFoAU2D1uOjRJYNkeEIhKoc7jo0YeG/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDlkYTdiNmEtNGUxYS00MWZmLWI4ZWItOGMzNjRjZDI2NGIxLzAvRDgzRDZFM0Ez NDQ5NjBEOTFFMTA4ODRBQTFDRUUzQTM0NjFFMUJGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODNENkUzQTM0NDk2MEQ5MUUxMDg4NEFBMUNFRTNBMzQ2MUUx QkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDlkYTdiNmEtNGUxYS00MWZmLWI4 ZWItOGMzNjRjZDI2NGIxLzAvRDgzRDZFM0EzNDQ5NjBEOTFFMTA4ODRBQTFDRUUz QTM0NjFFMUJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA08bvUy3eUNAclfPOWf7SVoVdvT0VhsEaNT gWjVU07rV30jyhhyevbXJPrlLHdbhIsSR7umSfND4bDqLzfyjzQsv9gh4PwguRSl hImFB1KAVDJbOBOyEimR2RRnVlBaf36ybw06J3PP837vJtPETv0doXYWR4pz1ApL lbwBHGaM6dAGw/J7alcdeMTgO8poZcqfdgxukZIhB1KNkyXufK17e88UPWBBFKdW on/vr6IqaVIHm0NWvQ0z1KnGNm9/7/3wq62+z4wrEKI95SWlmZC76rPk8FuzQb0F GklNmU8C+up+JV51SzLotWjGUQlOhyCJD2pcC+kr7PN4BE4mL2g= -----END CERTIFICATE-----Generated at Thu Sep 17 13:57:05 2026 by rpki-client