$ rpki-client -vvvf rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft File: D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft (raw, json) Hash identifier: J29Zv2Cigu0EUG3tEHb0eaO59d9P8thXc0R6py8/ZOM= Subject key identifier: 62:3D:ED:66:59:8D:D1:25:F2:EE:1E:16:B3:E1:12:9D:82:12:B3:2D Authority key identifier: D3:B0:B1:2C:00:ED:A4:8B:D2:7B:03:AE:46:20:E5:1B:4D:5B:35:B9 Certificate issuer: /CN=D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9 Certificate serial: 37C85B2E5573ADF513D4F9456B010C819C152236 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 15:28:16 +0000 Manifest this update: Wed 16 Sep 2026 15:23:16 +0000 Manifest next update: Thu 17 Sep 2026 19:08:16 +0000 Files and hashes: 1: 3130332e3134382e32342e302f32332d3234203d3e20313339393831.roa (hash: ppvRL+0RoVt7WTK9nlYvDd18NTyRBb+RqG5BAHWS1Ig=) 2: D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.crl (hash: WYfAtMb6Iec0FG7jXjGN4JH67VjcSPVEr+FOx/rRDyI=) 3: 323430353a633863303a3a2f33322d3332203d3e20313339393831.roa (hash: UG7HopHAsWszm3vKCwbdEPyJLKZk5ZAofsZVkykHgJs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.crl rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:08:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:c8:5b:2e:55:73:ad:f5:13:d4:f9:45:6b:01:0c:81:9c:15:22:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9 Validity Not Before: Sep 16 15:23:16 2026 GMT Not After : Sep 17 19:08:16 2026 GMT Subject: CN=623DED66598DD125F2EE1E16B3E1129D8212B32D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3a:41:aa:b0:1f:fa:75:09:00:dc:d6:02:8d: a0:f4:10:f0:d4:89:30:3f:13:c4:09:8f:f2:9e:29: ef:f3:f4:90:fa:14:0a:e3:ee:d0:a7:fd:2d:a3:0e: 10:ca:4d:8e:4c:a9:9f:59:8f:9d:20:8a:cd:f1:f3: 1a:d3:15:26:f6:f2:54:8a:72:94:ca:99:3d:4d:6c: 8f:23:13:72:d7:22:fc:17:9a:eb:d1:26:67:e2:f9: 49:d9:20:94:0a:ce:15:d0:69:e5:eb:18:11:3c:56: 78:ab:b6:74:54:c3:73:86:a2:3c:64:2e:1c:a1:a8: 1c:73:d0:95:df:e7:64:3c:69:40:07:2d:f8:ab:b9: d1:e4:d4:5b:ca:8f:fe:59:06:80:27:0a:73:39:39: da:61:92:c5:8d:9b:37:17:a2:82:54:60:41:e7:3f: 6d:97:44:57:78:4a:6e:ce:32:5d:ea:92:e5:59:bb: a9:6f:16:7a:f5:6b:fd:2a:bd:31:37:14:5a:99:46: 82:19:45:cd:fd:e1:bb:b8:cc:2f:7e:1e:37:60:3f: 2c:bb:da:52:d3:65:e5:a1:ed:c0:fe:7a:4f:25:a9: b5:44:26:b4:d6:f0:95:89:ad:45:5d:4d:d9:b0:3f: 4f:20:ee:42:d2:44:ba:a9:4d:0c:fc:dd:3a:3b:b3: e8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3D:ED:66:59:8D:D1:25:F2:EE:1E:16:B3:E1:12:9D:82:12:B3:2D X509v3 Authority Key Identifier: keyid:D3:B0:B1:2C:00:ED:A4:8B:D2:7B:03:AE:46:20:E5:1B:4D:5B:35:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:56:2d:23:10:1c:3a:21:51:ae:41:57:45:b8:c1:20:ea:f8: 3e:1f:df:59:8f:a1:19:a0:2f:65:4e:9a:eb:15:50:50:9b:58: 4d:3d:80:a2:10:df:d4:6b:99:fc:9c:4e:ca:92:7f:02:e9:3f: 6c:fd:d8:ea:ad:98:0c:e4:32:1d:75:77:3c:3b:49:72:4e:a3: ef:0f:05:b7:0b:96:17:90:3e:ec:89:38:6a:89:b8:1c:a9:64: d4:b4:df:47:61:c8:1b:f3:9d:56:40:35:6d:15:da:30:67:da: 0a:6a:9c:8d:91:5d:3b:97:59:4c:ff:58:43:e5:ae:6d:ae:fa: 63:2c:18:8f:b9:dd:6c:a3:5c:d8:f1:5c:60:86:22:82:00:9d: d3:d5:97:a6:77:4a:ea:f3:37:fa:3e:8b:66:58:a6:c5:62:95: 9c:bd:84:c9:2c:9a:8e:17:c7:c3:82:22:a6:67:a5:41:25:68: 24:7e:d0:17:55:1e:29:03:60:f0:09:5f:c3:80:dc:fa:38:a7: 44:1f:08:2d:64:42:3f:dc:16:c8:5c:9a:b9:de:58:67:d1:95: 24:2c:8d:90:8a:42:ab:fc:da:81:e3:20:ff:5f:51:e4:17:f2: 7b:b7:57:aa:ff:18:2f:7e:d9:45:b5:a9:01:50:46:ba:a9:59: ff:9e:4d:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN8hbLlVzrfUT1PlFawEMgZwVIjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCMEIxMkMwMEVEQTQ4QkQyN0IwM0FFNDYyMEU1MUI0 RDVCMzVCOTAeFw0yNjA5MTYxNTIzMTZaFw0yNjA5MTcxOTA4MTZaMDMxMTAvBgNV BAMTKDYyM0RFRDY2NTk4REQxMjVGMkVFMUUxNkIzRTExMjlEODIxMkIzMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPOkGqsB/6dQkA3NYCjaD0EPDU iTA/E8QJj/KeKe/z9JD6FArj7tCn/S2jDhDKTY5MqZ9Zj50gis3x8xrTFSb28lSK cpTKmT1NbI8jE3LXIvwXmuvRJmfi+UnZIJQKzhXQaeXrGBE8VnirtnRUw3OGojxk LhyhqBxz0JXf52Q8aUAHLfirudHk1FvKj/5ZBoAnCnM5OdphksWNmzcXooJUYEHn P22XRFd4Sm7OMl3qkuVZu6lvFnr1a/0qvTE3FFqZRoIZRc394bu4zC9+HjdgPyy7 2lLTZeWh7cD+ek8lqbVEJrTW8JWJrUVdTdmwP08g7kLSRLqpTQz83To7s+jjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYj3tZlmN0SXy7h4Ws+ESnYISsy0wHwYDVR0j BBgwFoAU07CxLADtpIvSewOuRiDlG01bNbkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTkyZTA3ZjgtMWE0OC00MzkxLWE2YTUtOGU0ZTM5Yzg1ODhhLzAvRDNCMEIxMkMw MEVEQTQ4QkQyN0IwM0FFNDYyMEU1MUI0RDVCMzVCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EM0IwQjEyQzAwRURBNDhCRDI3QjAzQUU0NjIwRTUxQjRENUIz NUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTkyZTA3ZjgtMWE0OC00MzkxLWE2 YTUtOGU0ZTM5Yzg1ODhhLzAvRDNCMEIxMkMwMEVEQTQ4QkQyN0IwM0FFNDYyMEU1 MUI0RDVCMzVCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL5WLSMQHDohUa5BV0W4wSDq+D4f31mPoRmg L2VOmusVUFCbWE09gKIQ39RrmfycTsqSfwLpP2z92OqtmAzkMh11dzw7SXJOo+8P BbcLlheQPuyJOGqJuBypZNS030dhyBvznVZANW0V2jBn2gpqnI2RXTuXWUz/WEPl rm2u+mMsGI+53WyjXNjxXGCGIoIAndPVl6Z3SurzN/o+i2ZYpsVilZy9hMksmo4X x8OCIqZnpUElaCR+0BdVHikDYPAJX8OA3Po4p0QfCC1kQj/cFshcmrneWGfRlSQs jZCKQqv82oHjIP9fUeQX8nu3V6r/GC9+2UW1qQFQRrqpWf+eTX8= -----END CERTIFICATE-----Generated at Thu Sep 17 09:28:28 2026 by rpki-client