$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft File: DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft (raw, json) Hash identifier: E6nbBpUEZgWsB2pARLETnxtQVS2jYsFji7kKn8ib8JM= Subject key identifier: B1:6A:D7:C0:01:4D:D0:68:9B:AB:81:36:54:A7:73:E9:61:00:58:CA Authority key identifier: DF:EB:E2:63:0C:C0:A4:45:30:A5:44:21:24:4D:4B:8C:ED:2C:8A:C4 Certificate issuer: /CN=DFEBE2630CC0A44530A54421244D4B8CED2C8AC4 Certificate serial: 212492DCC622C134957FA4AD333715C043C5256C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 20:44:37 +0000 Manifest this update: Wed 16 Sep 2026 20:39:37 +0000 Manifest next update: Thu 17 Sep 2026 23:39:37 +0000 Files and hashes: 1: 3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa (hash: e4+bi848oD/+O01Mx0cjiGiYFl4mEZMFhTrqMTZt/js=) 2: DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.crl (hash: G1+ttFdJl8YC/QoAFY7nI6LIbyDucPGsxnDKSLyLlJM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.crl rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:24:92:dc:c6:22:c1:34:95:7f:a4:ad:33:37:15:c0:43:c5:25:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFEBE2630CC0A44530A54421244D4B8CED2C8AC4 Validity Not Before: Sep 16 20:39:37 2026 GMT Not After : Sep 17 23:39:37 2026 GMT Subject: CN=B16AD7C0014DD0689BAB813654A773E9610058CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c9:2d:2c:8e:c1:51:40:86:5e:57:0b:c6:98: 8c:6a:e2:e4:d4:89:4c:ac:83:2a:f4:25:a8:52:c3: 7e:de:e0:ba:5d:69:5a:d9:14:c5:e5:5e:d1:90:65: d9:9a:fc:65:a3:26:5d:e6:d5:16:90:7e:b2:d6:ed: af:d1:35:c0:57:7e:95:fc:49:eb:a3:5d:bc:e4:85: 7e:c8:b9:6a:7b:c0:54:7f:c6:1a:3d:22:c7:cc:6d: 64:c7:d2:6b:bf:ea:f2:01:2e:f9:09:d0:85:57:bc: 4d:be:9d:5e:9b:86:90:82:00:90:87:6f:af:d9:91: 7c:f5:99:78:a8:41:4d:1f:96:c6:58:0a:b5:5f:cc: 6e:65:c2:ba:60:ff:10:15:60:00:d2:0d:7d:64:7f: bb:fa:e6:80:50:fb:05:4a:80:8d:ee:f2:a0:f1:26: 8a:55:05:1e:41:dd:62:40:b4:d8:7a:37:0a:dc:cf: a8:9f:d6:ce:58:f3:95:80:9a:08:66:71:ec:9b:30: 2b:3e:5d:c3:93:06:70:3f:3b:99:ef:f3:aa:49:5d: 91:5c:25:31:82:a0:34:49:ab:82:b2:c3:a0:ee:38: 87:73:22:fc:81:bd:a1:cd:7e:e7:01:c8:74:c8:65: f3:1d:35:30:0a:1b:41:71:12:24:fd:03:3d:69:bc: 84:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6A:D7:C0:01:4D:D0:68:9B:AB:81:36:54:A7:73:E9:61:00:58:CA X509v3 Authority Key Identifier: keyid:DF:EB:E2:63:0C:C0:A4:45:30:A5:44:21:24:4D:4B:8C:ED:2C:8A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:5e:57:c4:93:34:83:b3:bb:9d:db:00:24:ec:9d:7b:39:71: 69:83:1e:a1:2d:10:e7:aa:b5:11:b3:db:78:7e:bb:5c:d3:06: 7a:5a:c4:94:5a:f1:d0:8c:d3:8d:15:72:af:ae:a0:d8:cd:08: 30:21:a7:57:7e:e2:34:3d:cb:a5:1a:92:59:4b:5f:2d:8f:ce: a4:fd:a6:3a:e5:d4:b3:88:93:ec:b6:b0:c7:df:97:8f:97:ae: 67:6a:11:19:95:a0:99:14:4a:86:74:3e:35:eb:e8:44:1d:82: 54:59:eb:fe:af:45:e1:c8:85:32:68:06:b8:52:fc:f9:f7:65: 4c:3b:24:f9:07:73:95:bf:13:4e:e1:17:fc:5f:ba:30:8b:73: 6e:0e:0a:66:1a:fa:a6:2a:67:2a:2b:9d:62:5a:59:2b:ed:3d: 11:1b:e3:47:38:cf:e8:f4:46:bd:35:18:29:3b:c9:8a:76:4c: aa:4c:c5:74:6e:16:9d:62:24:de:f1:eb:b5:0d:9f:08:b1:fd: 9c:4e:9c:06:f3:07:c3:01:f9:81:6b:ab:53:75:db:d3:30:3d: aa:80:c6:7e:c8:b5:c5:f6:2c:c5:e8:c3:2a:12:e5:e0:31:23: 3a:37:de:c9:d1:3d:df:4e:a6:ca:64:72:be:12:9c:3b:04:ae: 4e:d0:40:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUISSS3MYiwTSVf6StMzcVwEPFJWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZFQkUyNjMwQ0MwQTQ0NTMwQTU0NDIxMjQ0RDRCOENF RDJDOEFDNDAeFw0yNjA5MTYyMDM5MzdaFw0yNjA5MTcyMzM5MzdaMDMxMTAvBgNV BAMTKEIxNkFEN0MwMDE0REQwNjg5QkFCODEzNjU0QTc3M0U5NjEwMDU4Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1yS0sjsFRQIZeVwvGmIxq4uTU iUysgyr0JahSw37e4LpdaVrZFMXlXtGQZdma/GWjJl3m1RaQfrLW7a/RNcBXfpX8 SeujXbzkhX7IuWp7wFR/xho9IsfMbWTH0mu/6vIBLvkJ0IVXvE2+nV6bhpCCAJCH b6/ZkXz1mXioQU0flsZYCrVfzG5lwrpg/xAVYADSDX1kf7v65oBQ+wVKgI3u8qDx JopVBR5B3WJAtNh6Nwrcz6if1s5Y85WAmghmceybMCs+XcOTBnA/O5nv86pJXZFc JTGCoDRJq4Kyw6DuOIdzIvyBvaHNfucByHTIZfMdNTAKG0FxEiT9Az1pvISLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsWrXwAFN0Gibq4E2VKdz6WEAWMowHwYDVR0j BBgwFoAU3+viYwzApEUwpUQhJE1LjO0sisQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmJmYTQyNjUtYmI1OC00NmUyLTgzMDktM2FkMzk4MWEzNTE2LzAvREZFQkUyNjMw Q0MwQTQ0NTMwQTU0NDIxMjQ0RDRCOENFRDJDOEFDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERkVCRTI2MzBDQzBBNDQ1MzBBNTQ0MjEyNDRENEI4Q0VEMkM4 QUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmJmYTQyNjUtYmI1OC00NmUyLTgz MDktM2FkMzk4MWEzNTE2LzAvREZFQkUyNjMwQ0MwQTQ0NTMwQTU0NDIxMjQ0RDRC OENFRDJDOEFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1eV8STNIOzu53bACTsnXs5cWmDHqEtEOeq tRGz23h+u1zTBnpaxJRa8dCM040Vcq+uoNjNCDAhp1d+4jQ9y6UakllLXy2PzqT9 pjrl1LOIk+y2sMffl4+XrmdqERmVoJkUSoZ0PjXr6EQdglRZ6/6vReHIhTJoBrhS /Pn3ZUw7JPkHc5W/E07hF/xfujCLc24OCmYa+qYqZyornWJaWSvtPREb40c4z+j0 Rr01GCk7yYp2TKpMxXRuFp1iJN7x67UNnwix/ZxOnAbzB8MB+YFrq1N129MwPaqA xn7ItcX2LMXowyoS5eAxIzo33snRPd9Opspkcr4SnDsErk7QQKo= -----END CERTIFICATE-----Generated at Thu Sep 17 10:58:18 2026 by rpki-client