$ rpki-client -vvvf rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft File: DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft (raw, json) Hash identifier: 6cJ1GALYxDk5kNSDbZztEpZqZQE9ee8c1jrQwlxJcQY= Subject key identifier: 13:42:D8:94:E2:D1:DA:0C:EB:88:80:CF:84:EE:31:EC:87:7A:29:CC Authority key identifier: DF:6A:98:7E:2F:9B:F1:04:B9:93:89:11:E8:F8:3F:4C:51:C5:A7:4D Certificate issuer: /CN=DF6A987E2F9BF104B9938911E8F83F4C51C5A74D Certificate serial: 43056A49A72CC31175907CB1ADE9764A7663EB7C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft Manifest number: A2 Signing time: Mon 31 Aug 2026 19:13:38 +0000 Manifest this update: Mon 31 Aug 2026 19:08:38 +0000 Manifest next update: Tue 01 Sep 2026 22:25:38 +0000 Files and hashes: 1: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: WjZRwtvJki8cX6/hev6SY7XFmEOdsbw7GQ4iNASnaI0=) 2: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: fD3NLzLgoJ82TLwu7Dwyse03F0V8LT4TWwHSpMtUfEc=) 3: DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl (hash: ODTB0FLNuGWpF4c9XxCDnkdUjR1+Jg9e0E5kb+YWDvY=) 4: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: TkbyXPHwp6Kb69rQYjb4QN3MOoOzWNnMDZFwGXZxRRA=) 5: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: TTk5uxdYgabM/1XXzBbZ8h3cHs3Ef7zAmOsq9InOKKA=) 6: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: E89xRti4PVG0HV9DRFC+eJJ1GWYmvwIqGtNqlTsJLNs=) 7: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: pUwBvJ0FIKqMG3YypxwtIACCh9fdPkCe3slROTdlAFQ=) 8: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: 97HN/1c+8Hrc2pb/g0tPOiNTWcjkEdKOrzmx5piyFis=) 9: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: d1/YZ4nLn+eOZOqPz/6uDnp+bGReiCL4D5xWg3VSU5w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 22:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:05:6a:49:a7:2c:c3:11:75:90:7c:b1:ad:e9:76:4a:76:63:eb:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF6A987E2F9BF104B9938911E8F83F4C51C5A74D Validity Not Before: Aug 31 19:08:38 2026 GMT Not After : Sep 1 22:25:38 2026 GMT Subject: CN=1342D894E2D1DA0CEB8880CF84EE31EC877A29CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:95:67:cd:ff:80:6e:5c:21:d7:be:60:01:b0: 6f:fa:88:fb:5e:1c:97:bf:1a:b5:8a:f6:6c:db:10: 37:0d:3e:2a:18:8a:0c:fa:9c:c1:7e:48:06:36:f7: 73:e6:48:02:ec:4a:d5:40:e8:d7:b2:ce:0d:f1:f5: 10:a5:ca:e9:39:22:71:3d:aa:73:a9:2a:a4:ec:fc: 68:37:dc:93:f6:be:ba:58:3c:41:4a:15:96:3c:a9: 2f:dc:ba:a0:62:f4:8e:92:cc:7c:8b:34:90:3d:72: ff:a1:76:a6:fd:61:78:be:cd:cc:ee:bc:0a:80:be: 7f:de:17:96:86:52:9c:ed:28:40:76:cc:6a:a6:41: 57:af:4e:64:a3:e9:70:c2:89:f1:89:44:a6:d4:5f: 78:0e:cb:2b:4a:73:2b:38:44:56:4f:ed:32:bc:55: 1a:ad:4e:ed:b5:cb:82:be:5a:b6:bf:4f:17:2c:6b: 2e:22:3d:2d:b9:89:b2:ae:4e:70:ba:5f:f8:5c:42: 95:f9:e0:1e:7d:ae:3f:53:c7:b9:cc:09:db:5f:ca: db:f9:5b:98:d4:59:8c:f0:a4:53:58:6a:b1:20:4d: db:35:73:95:94:d2:27:df:d6:5e:1e:be:5e:0b:cc: 77:d2:cc:5e:ee:a7:71:5d:ca:26:b9:d2:59:02:ad: b8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:42:D8:94:E2:D1:DA:0C:EB:88:80:CF:84:EE:31:EC:87:7A:29:CC X509v3 Authority Key Identifier: keyid:DF:6A:98:7E:2F:9B:F1:04:B9:93:89:11:E8:F8:3F:4C:51:C5:A7:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:7b:5b:a7:e5:c9:bb:67:a6:a8:4f:aa:47:51:74:64:85:26: 0a:22:0a:b3:49:a6:84:a7:64:db:f9:75:7b:bc:21:93:c9:93: 47:b6:10:cb:1a:3f:54:00:ef:27:b8:73:87:d9:b2:72:d0:ce: dc:be:89:82:47:05:9b:fe:60:72:82:67:d8:0c:59:f2:7a:4a: b8:ef:4e:26:f7:66:24:4f:3f:88:fc:aa:7f:46:f9:4c:35:45: c7:1e:b6:9a:4f:c1:11:1f:19:d0:25:7a:4d:5e:ef:d3:2d:8d: 4f:5e:8c:bf:85:af:bb:32:fb:5f:c3:3a:e9:d9:89:46:7d:64: 94:c3:5d:90:cb:cb:86:bc:e8:8b:d3:3b:4c:06:fd:7f:67:4f: 29:44:5c:76:f2:77:bb:f4:21:d6:15:c4:f9:49:c1:56:dd:db: f9:b4:c9:58:08:f7:f7:bd:cf:09:7e:58:90:6f:45:f3:f5:22: 4c:06:b4:4d:0c:1b:49:0a:4d:3b:2e:fb:ef:6b:e7:f3:dc:97: ce:0a:30:c6:ec:00:5a:d1:c7:e3:44:4d:1b:95:c8:7c:ea:9a: a7:f6:32:8f:57:45:5d:b5:d2:61:72:3f:dc:05:ff:3d:18:a5: 6e:46:ca:9f:0c:86:d9:41:89:b0:91:d1:4e:6f:12:38:69:89: 65:9d:24:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQwVqSacswxF1kHyxrel2SnZj63wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2QTk4N0UyRjlCRjEwNEI5OTM4OTExRThGODNGNEM1 MUM1QTc0RDAeFw0yNjA4MzExOTA4MzhaFw0yNjA5MDEyMjI1MzhaMDMxMTAvBgNV BAMTKDEzNDJEODk0RTJEMURBMENFQjg4ODBDRjg0RUUzMUVDODc3QTI5Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCclWfN/4BuXCHXvmABsG/6iPte HJe/GrWK9mzbEDcNPioYigz6nMF+SAY293PmSALsStVA6Neyzg3x9RClyuk5InE9 qnOpKqTs/Gg33JP2vrpYPEFKFZY8qS/cuqBi9I6SzHyLNJA9cv+hdqb9YXi+zczu vAqAvn/eF5aGUpztKEB2zGqmQVevTmSj6XDCifGJRKbUX3gOyytKcys4RFZP7TK8 VRqtTu21y4K+Wra/Txcsay4iPS25ibKuTnC6X/hcQpX54B59rj9Tx7nMCdtfytv5 W5jUWYzwpFNYarEgTds1c5WU0iff1l4evl4LzHfSzF7up3Fdyia50lkCrbh/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE0LYlOLR2gzriIDPhO4x7Id6KcwwHwYDVR0j BBgwFoAU32qYfi+b8QS5k4kR6Pg/TFHFp00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzBjMmExM2ItMWY0MC00YzAzLWJjMzUtZjY5NjE1MTZkNGQ5LzAvREY2QTk4N0Uy RjlCRjEwNEI5OTM4OTExRThGODNGNEM1MUM1QTc0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjZBOTg3RTJGOUJGMTA0Qjk5Mzg5MTFFOEY4M0Y0QzUxQzVB NzRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzBjMmExM2ItMWY0MC00YzAzLWJj MzUtZjY5NjE1MTZkNGQ5LzAvREY2QTk4N0UyRjlCRjEwNEI5OTM4OTExRThGODNG NEM1MUM1QTc0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGt7W6flybtnpqhPqkdRdGSFJgoiCrNJpoSn ZNv5dXu8IZPJk0e2EMsaP1QA7ye4c4fZsnLQzty+iYJHBZv+YHKCZ9gMWfJ6Srjv Tib3ZiRPP4j8qn9G+Uw1RccetppPwREfGdAlek1e79MtjU9ejL+Fr7sy+1/DOunZ iUZ9ZJTDXZDLy4a86IvTO0wG/X9nTylEXHbyd7v0IdYVxPlJwVbd2/m0yVgI9/e9 zwl+WJBvRfP1IkwGtE0MG0kKTTsu++9r5/Pcl84KMMbsAFrRx+NETRuVyHzqmqf2 Mo9XRV210mFyP9wF/z0YpW5Gyp8MhtlBibCR0U5vEjhpiWWdJDY= -----END CERTIFICATE-----Generated at Tue Sep 1 05:44:45 2026 by rpki-client