$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft File: D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft (raw, json) Hash identifier: TAEJVbYfU11V6BjqGZp9+csPaSBw5VtFCnxO7v2geYg= Subject key identifier: DE:1A:C4:7E:8B:A9:8B:B5:7E:A4:46:2A:46:A8:FA:D2:E8:EC:86:58 Authority key identifier: D8:8E:00:6D:21:97:30:C5:2D:DD:CB:D6:EB:05:C0:9A:2F:81:5C:03 Certificate issuer: /CN=D88E006D219730C52DDDCBD6EB05C09A2F815C03 Certificate serial: 76FCE45A8990C3CF3DAAC2A11B2D7F776EBE963E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 01:45:40 +0000 Manifest this update: Thu 17 Sep 2026 01:40:40 +0000 Manifest next update: Fri 18 Sep 2026 03:50:40 +0000 Files and hashes: 1: 3136302e32322e3139322e302f32342d3234203d3e20313532383330.roa (hash: xFfth544qMvDawFqjY1oWbMZQMZwR8ATU9ANAJM8pNM=) 2: 3136302e32322e3139332e302f32342d3234203d3e20313532383330.roa (hash: IaAf1+vjln5sceJpZ1s3ScYLsPQRM51r/bqMTajLuUs=) 3: 3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa (hash: mldeFV7Jf6QOev5E++VL/jRK/PuO8nW0ShYwDv/SkQ8=) 4: D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl (hash: +Uz4Ir5pGZMxroIvKVtgDdF7OE2WC7wVf6vzro7i8Xk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:fc:e4:5a:89:90:c3:cf:3d:aa:c2:a1:1b:2d:7f:77:6e:be:96:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D88E006D219730C52DDDCBD6EB05C09A2F815C03 Validity Not Before: Sep 17 01:40:40 2026 GMT Not After : Sep 18 03:50:40 2026 GMT Subject: CN=DE1AC47E8BA98BB57EA4462A46A8FAD2E8EC8658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:46:c7:40:ad:ce:5a:ba:19:9f:02:29:83:da: 8d:5e:5c:ad:b7:af:32:c1:ef:6a:d4:d1:b2:4e:b0: 10:41:20:ac:f5:70:1e:b1:15:90:99:fc:63:90:68: 15:f4:50:26:2c:a4:a6:1e:df:20:a7:5e:bd:88:0a: 2a:b3:4e:cc:bd:7b:91:3d:99:e5:40:d1:3e:ac:5f: c3:0e:6f:1d:ab:e4:fc:67:87:53:f8:c5:01:88:45: 08:50:1a:60:dc:a9:db:b4:96:8a:35:0b:7c:65:95: da:6a:42:40:95:f0:80:de:86:b1:00:26:63:bd:dc: 1e:da:5d:6c:00:ea:e6:46:20:18:78:9f:ed:68:ac: 6f:5e:32:00:36:1b:99:74:aa:61:b8:94:54:6c:53: 5b:28:0c:1c:b7:17:06:ae:3c:a9:17:7a:88:c8:ad: b4:0a:2b:ae:74:5a:68:4e:38:e9:5e:85:cb:a0:37: 8c:2f:f7:d6:24:b9:80:3e:0d:a3:60:52:b7:90:8a: de:b8:56:cc:e9:39:2d:8e:45:50:04:4a:b6:92:f8: 14:fe:0f:7b:af:82:b0:53:91:04:87:40:5c:df:b6: e6:65:79:d1:72:b6:ab:57:3c:fa:e8:18:2a:8e:40: 43:c2:d5:0c:0b:be:d2:59:2b:c3:5b:2e:6c:90:02: 30:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1A:C4:7E:8B:A9:8B:B5:7E:A4:46:2A:46:A8:FA:D2:E8:EC:86:58 X509v3 Authority Key Identifier: keyid:D8:8E:00:6D:21:97:30:C5:2D:DD:CB:D6:EB:05:C0:9A:2F:81:5C:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:59:12:64:de:b4:81:8d:44:8a:76:d9:6c:2f:fc:48:75:8f: b7:16:b3:69:9d:c1:6a:6d:10:56:3d:57:29:b5:a7:dd:9e:ea: d8:4f:ed:63:d8:07:69:dd:ee:a2:85:5b:8a:c8:2b:fa:c9:c9: 67:0a:a8:a0:ac:e3:16:16:f4:3a:22:ab:07:fb:00:0c:c0:98: 36:14:0c:20:94:16:31:0f:8c:77:0a:b0:c5:66:15:2e:83:5a: c2:ee:76:d0:c5:53:7b:1a:af:28:82:06:1f:74:96:5e:4a:9b: 31:79:88:5d:39:ef:86:89:c5:13:02:f3:22:63:48:bc:28:73: 2e:d1:97:3b:e6:6f:65:c3:0e:3a:16:06:74:dd:0d:11:76:c7: da:da:27:47:19:88:15:37:70:86:ae:ee:45:96:64:7c:f5:50: 27:ab:91:2b:34:6e:be:9d:b5:9f:48:73:02:c4:a5:63:a8:4d: ed:05:61:99:b5:36:a0:fe:e9:9f:4b:66:32:eb:42:f9:f1:ce: a2:e9:59:ad:aa:ab:dd:29:4d:a4:1d:1a:1e:83:19:cf:d7:39: ef:21:7b:59:37:5f:df:a2:1a:e5:e1:d4:ed:7f:f5:2e:28:b6: 05:a2:9b:2a:34:66:d0:b7:af:43:db:af:e5:ef:e4:dc:6b:33: 29:77:95:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdvzkWomQw889qsKhGy1/d26+lj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg4RTAwNkQyMTk3MzBDNTJERERDQkQ2RUIwNUMwOUEy RjgxNUMwMzAeFw0yNjA5MTcwMTQwNDBaFw0yNjA5MTgwMzUwNDBaMDMxMTAvBgNV BAMTKERFMUFDNDdFOEJBOThCQjU3RUE0NDYyQTQ2QThGQUQyRThFQzg2NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoRsdArc5auhmfAimD2o1eXK23 rzLB72rU0bJOsBBBIKz1cB6xFZCZ/GOQaBX0UCYspKYe3yCnXr2ICiqzTsy9e5E9 meVA0T6sX8MObx2r5Pxnh1P4xQGIRQhQGmDcqdu0loo1C3xlldpqQkCV8IDehrEA JmO93B7aXWwA6uZGIBh4n+1orG9eMgA2G5l0qmG4lFRsU1soDBy3FwauPKkXeojI rbQKK650WmhOOOlehcugN4wv99YkuYA+DaNgUreQit64VszpOS2ORVAESraS+BT+ D3uvgrBTkQSHQFzftuZledFytqtXPProGCqOQEPC1QwLvtJZK8NbLmyQAjBzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3hrEfoupi7V+pEYqRqj60ujshlgwHwYDVR0j BBgwFoAU2I4AbSGXMMUt3cvW6wXAmi+BXAMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2EwMjEwYjMtY2NhMi00M2M1LTg5ZjktNWE5MDg2YTYwNzAzLzAvRDg4RTAwNkQy MTk3MzBDNTJERERDQkQ2RUIwNUMwOUEyRjgxNUMwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EODhFMDA2RDIxOTczMEM1MkRERENCRDZFQjA1QzA5QTJGODE1 QzAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzAvRDg4RTAwNkQyMTk3MzBDNTJERERDQkQ2RUIwNUMw OUEyRjgxNUMwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9ZEmTetIGNRIp22Wwv/Eh1j7cWs2mdwWpt EFY9Vym1p92e6thP7WPYB2nd7qKFW4rIK/rJyWcKqKCs4xYW9Doiqwf7AAzAmDYU DCCUFjEPjHcKsMVmFS6DWsLudtDFU3saryiCBh90ll5KmzF5iF0574aJxRMC8yJj SLwocy7Rlzvmb2XDDjoWBnTdDRF2x9raJ0cZiBU3cIau7kWWZHz1UCerkSs0br6d tZ9IcwLEpWOoTe0FYZm1NqD+6Z9LZjLrQvnxzqLpWa2qq90pTaQdGh6DGc/XOe8h e1k3X9+iGuXh1O1/9S4otgWimyo0ZtC3r0Pbr+Xv5NxrMyl3lZw= -----END CERTIFICATE-----Generated at Thu Sep 17 13:22:15 2026 by rpki-client