$ rpki-client -vvvf rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.mft File: 202D68B92C393694107A2F9B59DF1822383F0A40.mft (raw, json) Hash identifier: riWaEdYvdwpGhLfIGxfLl8ahefJFO2TGpQK5mt2vp9E= Subject key identifier: 8A:5C:64:36:79:77:32:11:8D:AF:90:AD:6E:69:81:58:4E:51:C9:A7 Authority key identifier: 20:2D:68:B9:2C:39:36:94:10:7A:2F:9B:59:DF:18:22:38:3F:0A:40 Certificate issuer: /CN=202D68B92C393694107A2F9B59DF1822383F0A40 Certificate serial: 23EF921C198B6117A4EC0C71E84AB395487E50D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202D68B92C393694107A2F9B59DF1822383F0A40.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.mft Manifest number: D6 Signing time: Fri 09 Oct 2026 04:28:16 +0000 Manifest this update: Fri 09 Oct 2026 04:23:16 +0000 Manifest next update: Sat 10 Oct 2026 06:16:16 +0000 Files and hashes: 1: 3130332e3232302e34342e302f32342d3234203d3e20313530313939.roa (hash: JJn7HIlfA2u7cKl1pj836AvFJgvd06b+L9BxXbXGPiQ=) 2: 3130332e3232302e34342e302f32342d3234203d3e203438343635.roa (hash: 59w4gZXVO0UF24xOSJ6tHWLfwtyek7qt4pTN2C7JT58=) 3: 3130332e3232302e34352e302f32342d3234203d3e203438343635.roa (hash: s1JJ4qxqnX+/x2wRLTL/vn6XvEiBu3g0RUuaHJFKCfY=) 4: 202D68B92C393694107A2F9B59DF1822383F0A40.crl (hash: ulBDFENw6/O/5LdRilCtD7EZODpwNMr0eS+jQEA53RU=) 5: 3130332e3232302e34352e302f32342d3234203d3e20313530313939.roa (hash: sVkX/3BAqlUnIX3vPMQ13bPbeRbhUsec2KXwzV7qXyg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.crl rsync://rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202D68B92C393694107A2F9B59DF1822383F0A40.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 06:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ef:92:1c:19:8b:61:17:a4:ec:0c:71:e8:4a:b3:95:48:7e:50:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202D68B92C393694107A2F9B59DF1822383F0A40 Validity Not Before: Oct 9 04:23:16 2026 GMT Not After : Oct 10 06:16:16 2026 GMT Subject: CN=8A5C6436797732118DAF90AD6E6981584E51C9A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:35:e9:42:77:fb:07:71:5a:6e:00:05:f9:3b: c9:d6:3e:9b:31:de:87:f0:72:c0:42:ad:4c:01:ba: 3c:c5:03:dd:59:61:ab:01:0d:d9:e9:c6:88:a7:07: e8:b7:46:4c:03:17:21:30:b9:26:fe:d5:9a:fc:67: d4:07:3d:6f:60:11:fc:32:ff:d3:2f:47:c0:e4:72: 61:24:0c:99:32:2b:03:12:08:66:e6:0f:10:b9:b2: 97:08:e7:37:00:2e:9f:67:52:fe:e7:ad:61:49:6b: 9b:68:74:05:be:36:7b:5c:ed:e1:aa:d0:46:2d:c9: cd:e7:36:a8:29:66:6c:52:4c:fc:8a:db:1f:07:e9: f2:cd:37:ef:50:e3:7c:98:91:bf:b0:cc:19:bc:72: 8e:a0:bd:2e:db:c7:af:d9:50:21:06:a1:6f:d3:81: 6e:6a:62:1f:10:ba:f0:6d:c3:24:64:35:79:0a:e4: e2:e5:3e:19:38:94:61:26:f6:ba:6c:fa:1b:45:a1: ab:b0:ce:a2:40:b6:c1:82:02:af:9f:e5:21:2e:b4: 21:f8:5c:90:b6:3e:dc:35:80:68:98:f6:30:f2:0c: fd:48:41:32:d7:ca:29:4b:ac:05:04:b5:0b:4b:1f: 88:f5:38:91:8c:2b:d6:72:37:16:9c:da:ae:e8:4d: a8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5C:64:36:79:77:32:11:8D:AF:90:AD:6E:69:81:58:4E:51:C9:A7 X509v3 Authority Key Identifier: keyid:20:2D:68:B9:2C:39:36:94:10:7A:2F:9B:59:DF:18:22:38:3F:0A:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202D68B92C393694107A2F9B59DF1822383F0A40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:d4:3f:77:bf:1d:73:2c:ff:13:92:8a:fe:14:ae:99:1f:59: a7:63:df:f0:7a:d3:2b:46:69:9d:3f:cc:76:ac:22:bf:43:80: fd:c3:68:07:8d:07:fa:0c:c2:4e:96:94:51:ac:4b:54:58:c3: ee:9c:68:51:eb:4c:a2:5c:b3:dc:a6:83:41:31:d1:2d:8c:5a: 12:64:9c:e6:87:f9:6a:67:ae:f8:25:6e:26:d9:d7:40:ab:68: dd:86:0b:57:d1:2e:44:66:b7:d7:1d:78:ee:a4:1d:7d:73:a1: 41:ef:9b:77:77:13:0d:59:01:ba:1b:74:a9:a0:2c:7e:6c:e8: 61:bb:b6:38:f3:23:ae:65:e9:96:f9:07:d4:4c:2f:cd:fe:d8: 7b:7b:ae:ee:7c:80:06:e0:e2:0b:be:e7:52:8a:fd:92:f7:48: 86:4c:e6:94:43:fe:99:c3:14:14:33:16:13:54:eb:e3:82:1c: 32:3b:f9:9d:cd:b4:a1:e9:71:d7:0e:4e:12:30:c9:76:c3:a8: 82:a1:7b:1e:57:12:ce:b3:cd:2e:a2:f1:7c:57:07:ab:0e:cf: 46:9e:78:b5:f7:44:d3:ef:e2:b6:9c:a1:d5:50:54:ce:0b:17: 04:6f:73:89:61:01:fd:50:79:e9:c8:b4:15:5f:12:59:41:b3: 23:a8:97:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI++SHBmLYRek7Axx6EqzlUh+UNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyRDY4QjkyQzM5MzY5NDEwN0EyRjlCNTlERjE4MjIz ODNGMEE0MDAeFw0yNjEwMDkwNDIzMTZaFw0yNjEwMTAwNjE2MTZaMDMxMTAvBgNV BAMTKDhBNUM2NDM2Nzk3NzMyMTE4REFGOTBBRDZFNjk4MTU4NEU1MUM5QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRNelCd/sHcVpuAAX5O8nWPpsx 3ofwcsBCrUwBujzFA91ZYasBDdnpxoinB+i3RkwDFyEwuSb+1Zr8Z9QHPW9gEfwy /9MvR8DkcmEkDJkyKwMSCGbmDxC5spcI5zcALp9nUv7nrWFJa5todAW+Nntc7eGq 0EYtyc3nNqgpZmxSTPyK2x8H6fLNN+9Q43yYkb+wzBm8co6gvS7bx6/ZUCEGoW/T gW5qYh8QuvBtwyRkNXkK5OLlPhk4lGEm9rps+htFoauwzqJAtsGCAq+f5SEutCH4 XJC2Ptw1gGiY9jDyDP1IQTLXyilLrAUEtQtLH4j1OJGMK9ZyNxac2q7oTajrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUilxkNnl3MhGNr5CtbmmBWE5RyacwHwYDVR0j BBgwFoAUIC1ouSw5NpQQei+bWd8YIjg/CkAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU3MjkyOTEtYTFhNy00YjE5LTkzZjYtMWQ4NDU3NGE2N2FlLzAvMjAyRDY4Qjky QzM5MzY5NDEwN0EyRjlCNTlERjE4MjIzODNGMEE0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDJENjhCOTJDMzkzNjk0MTA3QTJGOUI1OURGMTgyMjM4M0Yw QTQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU3MjkyOTEtYTFhNy00YjE5LTkz ZjYtMWQ4NDU3NGE2N2FlLzAvMjAyRDY4QjkyQzM5MzY5NDEwN0EyRjlCNTlERjE4 MjIzODNGMEE0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTUP3e/HXMs/xOSiv4UrpkfWadj3/B60ytG aZ0/zHasIr9DgP3DaAeNB/oMwk6WlFGsS1RYw+6caFHrTKJcs9ymg0Ex0S2MWhJk nOaH+WpnrvglbibZ10CraN2GC1fRLkRmt9cdeO6kHX1zoUHvm3d3Ew1ZAbobdKmg LH5s6GG7tjjzI65l6Zb5B9RML83+2Ht7ru58gAbg4gu+51KK/ZL3SIZM5pRD/pnD FBQzFhNU6+OCHDI7+Z3NtKHpcdcOThIwyXbDqIKhex5XEs6zzS6i8XxXB6sOz0ae eLX3RNPv4racodVQVM4LFwRvc4lhAf1QeenItBVfEllBsyOolz8= -----END CERTIFICATE-----Generated at Fri Oct 9 10:06:15 2026 by rpki-client