$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft File: DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft (raw, json) Hash identifier: 7ZecVkQqz+TDjaNjT2tbGx0lJPRpcTw0l9t94dUv048= Subject key identifier: 41:BB:3F:75:CB:8B:52:E9:D0:5B:53:0B:6E:66:4A:24:9B:55:DD:A3 Authority key identifier: DB:9A:40:F2:EA:DC:88:1D:0D:A3:EE:A0:05:7E:81:00:29:94:C3:FC Certificate issuer: /CN=DB9A40F2EADC881D0DA3EEA0057E81002994C3FC Certificate serial: 49928ECA726A86FB4DBB491754EE7142DE3732DD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 02:21:27 +0000 Manifest this update: Thu 17 Sep 2026 02:16:27 +0000 Manifest next update: Fri 18 Sep 2026 05:22:27 +0000 Files and hashes: 1: 323030313a6466333a643934303a3a2f34382d3438203d3e20313532373732.roa (hash: gnONcz3sXVxJxBOxBVij9AaOro25JvPxAm2egbKmGvk=) 2: DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.crl (hash: CcKKGrI1rCcw8q3DPzMyL2nT6T8ARTmH110jZvWZ154=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.crl rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:92:8e:ca:72:6a:86:fb:4d:bb:49:17:54:ee:71:42:de:37:32:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB9A40F2EADC881D0DA3EEA0057E81002994C3FC Validity Not Before: Sep 17 02:16:27 2026 GMT Not After : Sep 18 05:22:27 2026 GMT Subject: CN=41BB3F75CB8B52E9D05B530B6E664A249B55DDA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:60:7c:6e:0c:94:f4:0c:31:f9:7b:ce:d1:7b: 4c:05:31:ad:4f:7a:9b:b4:c3:79:fe:95:25:88:65: 9b:1d:d0:d0:17:c8:cd:ff:ac:38:a6:5c:6a:c7:56: 39:ab:7d:72:d0:e7:41:54:d7:d8:84:8f:6f:57:0e: c6:b6:79:1c:e3:3d:87:a3:cf:66:34:a2:3f:69:76: 8d:91:ae:0f:6d:e1:71:c7:02:aa:f5:fa:36:26:09: 28:51:df:0c:c9:2a:47:45:7a:45:77:18:97:07:7c: 50:2a:da:50:78:a4:28:a4:85:52:b5:1e:83:ce:c9: 0a:ee:3e:22:88:8b:c9:b0:fd:4f:69:14:45:04:51: 36:9b:c2:0c:6b:d6:49:28:35:a1:d5:8c:b5:c7:e6: 0d:01:d7:39:4e:18:21:8f:cd:99:b8:42:04:b7:b1: a2:17:7f:e3:93:ef:fe:78:40:c6:b9:9f:38:ab:7a: 52:4c:cb:44:c2:63:6a:47:c5:d4:05:14:06:18:84: ea:76:c7:21:28:e5:67:0a:3a:8a:c1:b9:ee:1a:f6: a4:f7:00:dd:d8:06:c2:5b:99:81:c1:7d:7f:69:5e: 4e:f1:9a:e9:7c:c7:53:a2:5a:00:f6:08:e2:af:aa: 46:f9:a0:d7:7f:16:73:38:8d:98:4d:f4:63:1b:73: 19:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BB:3F:75:CB:8B:52:E9:D0:5B:53:0B:6E:66:4A:24:9B:55:DD:A3 X509v3 Authority Key Identifier: keyid:DB:9A:40:F2:EA:DC:88:1D:0D:A3:EE:A0:05:7E:81:00:29:94:C3:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/DB9A40F2EADC881D0DA3EEA0057E81002994C3FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:97:a9:b9:34:40:46:43:f3:15:ac:39:a4:d5:99:0c:32:86: 5d:49:54:4a:c5:7c:87:9d:dc:ee:30:02:bb:7d:fd:37:bb:16: a8:fd:82:98:9a:3c:79:f8:c9:e8:48:de:e0:5f:86:78:b6:03: b2:ee:5e:29:f0:f6:c1:4d:94:52:6b:ec:ac:51:74:13:dc:c5: cc:9a:54:2c:5a:23:06:58:51:68:c9:49:43:c2:7d:86:1b:f9: d6:a9:a9:f0:b0:c4:10:2b:0b:c4:54:79:99:d2:6d:ed:d8:57: 00:af:ea:79:e0:e6:2d:96:28:85:6b:05:54:51:72:9f:6c:25: db:7f:77:9c:23:4d:56:71:b8:9c:6b:7b:3d:b2:1d:98:fb:af: b5:b0:b5:64:22:b6:38:39:68:dc:36:bc:2f:ec:7c:56:f6:da: e1:a1:90:d7:18:b1:9e:68:fb:28:3f:c7:1d:48:f8:28:be:66: e2:c1:43:73:95:3c:71:20:59:22:1c:e0:44:fc:31:6d:8a:42: 8f:cc:02:98:7f:ab:34:9e:81:f7:2a:9f:32:09:19:23:45:db: 79:b3:06:41:8d:19:8f:83:e2:ed:29:1f:a6:e5:d5:67:a8:4e: 7b:4d:96:b0:64:c4:9d:86:ee:82:64:b0:03:dc:ea:c7:ff:34: 7e:5b:fd:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSZKOynJqhvtNu0kXVO5xQt43Mt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI5QTQwRjJFQURDODgxRDBEQTNFRUEwMDU3RTgxMDAy OTk0QzNGQzAeFw0yNjA5MTcwMjE2MjdaFw0yNjA5MTgwNTIyMjdaMDMxMTAvBgNV BAMTKDQxQkIzRjc1Q0I4QjUyRTlEMDVCNTMwQjZFNjY0QTI0OUI1NUREQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/YHxuDJT0DDH5e87Re0wFMa1P epu0w3n+lSWIZZsd0NAXyM3/rDimXGrHVjmrfXLQ50FU19iEj29XDsa2eRzjPYej z2Y0oj9pdo2Rrg9t4XHHAqr1+jYmCShR3wzJKkdFekV3GJcHfFAq2lB4pCikhVK1 HoPOyQruPiKIi8mw/U9pFEUEUTabwgxr1kkoNaHVjLXH5g0B1zlOGCGPzZm4QgS3 saIXf+OT7/54QMa5nzirelJMy0TCY2pHxdQFFAYYhOp2xyEo5WcKOorBue4a9qT3 AN3YBsJbmYHBfX9pXk7xmul8x1OiWgD2COKvqkb5oNd/FnM4jZhN9GMbcxlvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQbs/dcuLUunQW1MLbmZKJJtV3aMwHwYDVR0j BBgwFoAU25pA8urciB0No+6gBX6BACmUw/wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2NmMDFlYzYtOGU4OS00MDJhLTkwYzctNTBjNmYxNGNkMjQyLzEvREI5QTQwRjJF QURDODgxRDBEQTNFRUEwMDU3RTgxMDAyOTk0QzNGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQjlBNDBGMkVBREM4ODFEMERBM0VFQTAwNTdFODEwMDI5OTRD M0ZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzEvREI5QTQwRjJFQURDODgxRDBEQTNFRUEwMDU3RTgx MDAyOTk0QzNGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaXqbk0QEZD8xWsOaTVmQwyhl1JVErFfIed 3O4wArt9/Te7Fqj9gpiaPHn4yehI3uBfhni2A7LuXinw9sFNlFJr7KxRdBPcxcya VCxaIwZYUWjJSUPCfYYb+dapqfCwxBArC8RUeZnSbe3YVwCv6nng5i2WKIVrBVRR cp9sJdt/d5wjTVZxuJxrez2yHZj7r7WwtWQitjg5aNw2vC/sfFb22uGhkNcYsZ5o +yg/xx1I+Ci+ZuLBQ3OVPHEgWSIc4ET8MW2KQo/MAph/qzSegfcqnzIJGSNF23mz BkGNGY+D4u0pH6bl1WeoTntNlrBkxJ2G7oJksAPc6sf/NH5b/c4= -----END CERTIFICATE-----Generated at Thu Sep 17 09:19:51 2026 by rpki-client