$ rpki-client -vvvf rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft File: DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft (raw, json) Hash identifier: w6bThCU+VUJZnHk8BipgrOaNuu3p7fT3zllsz2jLHgQ= Subject key identifier: 24:29:08:4F:6F:CE:AB:1A:56:B3:BC:81:24:BA:E6:49:C9:64:93:41 Authority key identifier: DC:A3:C8:F8:E8:2C:D4:F9:E2:F8:F9:AE:C8:90:BC:1D:B0:98:A8:87 Certificate issuer: /CN=DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887 Certificate serial: 6A82ED27122A134840A2FA963BEBAB55191E709C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 22:06:12 +0000 Manifest this update: Wed 16 Sep 2026 22:01:12 +0000 Manifest next update: Fri 18 Sep 2026 01:33:12 +0000 Files and hashes: 1: 3130332e31392e3138302e302f32342d3234203d3e20313332363432.roa (hash: 7vL8y9qGcwGlBHTlp7W2DDNh7nh9ZG6pUOsZTFcC5m8=) 2: 323430353a336463303a3a2f33322d3438203d3e20313332363432.roa (hash: BbljfPMaDaoCXmfqlX766e2gOwStRy9KRMwBeVYrNRA=) 3: 3130332e31392e3138332e302f32342d3234203d3e20313332363432.roa (hash: b9ucf82rqvNvVvSo4KylGCCzRBHVOTbyEMd9uIlhwkk=) 4: DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.crl (hash: V9NiRzaSoWXYEtn6+SCfO22hXsAN6nAYmtgpFShTr9Y=) 5: 3130332e31392e3138312e302f32342d3234203d3e20313332363432.roa (hash: 2hrlUfalWGLJAAgURvT2UIB10iFx48ljh0wmwwAeiOQ=) 6: 3130332e31392e3138302e302f32322d3232203d3e20313332363432.roa (hash: swMIglkDWca6bTykcQAlBI8mPZmObmBmI7XJvNSgNmI=) 7: 3130332e31392e3138322e302f32342d3234203d3e20313332363432.roa (hash: ogZJ6AIvbYZ3rfPWkAwkD+wUu9pRc9HcU7kgCnHTVek=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.crl rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:82:ed:27:12:2a:13:48:40:a2:fa:96:3b:eb:ab:55:19:1e:70:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887 Validity Not Before: Sep 16 22:01:12 2026 GMT Not After : Sep 18 01:33:12 2026 GMT Subject: CN=2429084F6FCEAB1A56B3BC8124BAE649C9649341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:82:cf:a9:bd:66:54:a5:3c:cb:7a:e8:17:ab: 85:36:39:87:17:9f:51:7f:6f:d3:aa:6e:85:63:8e: 24:aa:ab:b1:c8:ab:4e:ae:a3:95:7a:00:c2:0a:4a: a7:91:70:99:b8:9b:26:d9:18:94:59:d9:e9:5a:27: dd:2f:50:ba:46:f7:5d:db:3b:58:a3:68:9f:d0:ee: 78:d6:fe:4e:46:df:95:a4:1f:45:87:dd:bb:2d:02: aa:9a:5f:e8:13:57:54:a6:41:e3:14:89:43:64:9e: e5:a5:a2:84:ee:3d:63:18:a6:05:c0:78:7f:f6:9d: d5:90:16:73:f3:58:97:ad:fe:ad:4b:05:ec:e8:15: ac:0d:d8:fe:9b:b7:e5:94:81:e8:ac:6a:2d:f6:29: d4:9e:bf:ae:2a:b0:3a:08:7c:54:70:d0:6f:25:6f: d2:70:d5:fc:62:7f:23:84:c1:e1:61:09:e0:81:a1: 78:28:97:a9:2e:aa:3a:eb:a9:38:c9:05:0a:5f:b5: 7b:2c:cf:5d:47:37:a0:83:ca:be:02:4f:a9:2d:13: 67:19:c8:78:9f:ab:3b:6a:44:54:26:ee:24:6a:b8: fe:22:d6:10:9f:6d:08:70:f0:33:ef:30:e5:32:8a: cc:68:2e:7a:c2:9c:00:e3:a7:f0:88:46:f0:94:f7: e9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:29:08:4F:6F:CE:AB:1A:56:B3:BC:81:24:BA:E6:49:C9:64:93:41 X509v3 Authority Key Identifier: keyid:DC:A3:C8:F8:E8:2C:D4:F9:E2:F8:F9:AE:C8:90:BC:1D:B0:98:A8:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:b2:8e:2a:90:6e:20:a3:45:9b:56:61:3d:33:64:d2:0a:ee: 67:c2:ee:b3:c9:07:76:ee:b7:60:a1:ef:c2:97:db:04:d6:99: 60:96:b3:e5:c8:9d:de:71:92:ce:c0:bd:d1:fc:e9:5b:9b:61: 3f:21:49:b4:71:8e:c7:c4:d2:d1:7b:2a:06:b4:dc:79:15:7b: 92:45:0c:30:93:eb:b9:69:99:38:22:44:77:f9:25:20:20:c9: 79:2c:cc:07:12:47:00:91:3d:a1:4f:66:96:61:2e:de:46:84: 04:7a:5d:d6:64:7d:d2:24:d2:a5:df:8a:5d:7e:af:6d:8c:81: db:d1:37:14:3d:21:90:c9:d9:49:ee:a9:db:6c:90:99:b5:09: 03:c5:57:da:2d:46:2c:be:5b:5a:24:ff:b5:22:e7:9b:45:09: ce:51:83:10:2c:b4:a3:19:c5:be:1e:82:41:68:83:b1:40:4a: ba:55:6e:3e:b2:2d:80:f9:9c:42:04:67:de:c9:b3:04:21:16: b9:2c:65:79:d4:73:5d:d0:85:a7:7a:af:e8:23:e0:bd:7c:7e: 13:8b:ac:4e:45:38:d2:c5:5c:02:4b:86:51:93:f2:93:ec:8d: 68:7c:b9:59:3d:e3:ef:fa:dd:d7:72:7a:06:f9:33:e1:00:2f: 64:10:f0:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaoLtJxIqE0hAovqWO+urVRkecJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENBM0M4RjhFODJDRDRGOUUyRjhGOUFFQzg5MEJDMURC MDk4QTg4NzAeFw0yNjA5MTYyMjAxMTJaFw0yNjA5MTgwMTMzMTJaMDMxMTAvBgNV BAMTKDI0MjkwODRGNkZDRUFCMUE1NkIzQkM4MTI0QkFFNjQ5Qzk2NDkzNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6gs+pvWZUpTzLeugXq4U2OYcX n1F/b9OqboVjjiSqq7HIq06uo5V6AMIKSqeRcJm4mybZGJRZ2elaJ90vULpG913b O1ijaJ/Q7njW/k5G35WkH0WH3bstAqqaX+gTV1SmQeMUiUNknuWlooTuPWMYpgXA eH/2ndWQFnPzWJet/q1LBezoFawN2P6bt+WUgeisai32KdSev64qsDoIfFRw0G8l b9Jw1fxifyOEweFhCeCBoXgol6kuqjrrqTjJBQpftXssz11HN6CDyr4CT6ktE2cZ yHifqztqRFQm7iRquP4i1hCfbQhw8DPvMOUyisxoLnrCnADjp/CIRvCU9+mRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJCkIT2/OqxpWs7yBJLrmSclkk0EwHwYDVR0j BBgwFoAU3KPI+Ogs1Pni+PmuyJC8HbCYqIcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTBjNzczYzgtZmI1Ni00NDlmLTg2NDktMTEyZDZlMTY4NmIzLzAvRENBM0M4RjhF ODJDRDRGOUUyRjhGOUFFQzg5MEJDMURCMDk4QTg4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0EzQzhGOEU4MkNENEY5RTJGOEY5QUVDODkwQkMxREIwOThB ODg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTBjNzczYzgtZmI1Ni00NDlmLTg2 NDktMTEyZDZlMTY4NmIzLzAvRENBM0M4RjhFODJDRDRGOUUyRjhGOUFFQzg5MEJD MURCMDk4QTg4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICyjiqQbiCjRZtWYT0zZNIK7mfC7rPJB3bu t2Ch78KX2wTWmWCWs+XInd5xks7AvdH86VubYT8hSbRxjsfE0tF7Kga03HkVe5JF DDCT67lpmTgiRHf5JSAgyXkszAcSRwCRPaFPZpZhLt5GhAR6XdZkfdIk0qXfil1+ r22MgdvRNxQ9IZDJ2UnuqdtskJm1CQPFV9otRiy+W1ok/7Ui55tFCc5RgxAstKMZ xb4egkFog7FASrpVbj6yLYD5nEIEZ97JswQhFrksZXnUc13Qhad6r+gj4L18fhOL rE5FONLFXAJLhlGT8pPsjWh8uVk94+/63ddyegb5M+EAL2QQ8IE= -----END CERTIFICATE-----Generated at Thu Sep 17 13:47:52 2026 by rpki-client