$ rpki-client -vvvf rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft File: D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft (raw, json) Hash identifier: cIE5vrb0DdjvXLymPszTDCnFIu0IxYnKRRGOtL9Grvk= Subject key identifier: 54:67:C5:4E:17:63:CC:2E:BE:B7:FF:1A:D2:76:03:32:22:9F:9F:7E Authority key identifier: D0:C8:B4:3A:E8:5F:0F:09:D4:98:73:29:23:2B:EC:E8:BC:C7:4B:8E Certificate issuer: /CN=D0C8B43AE85F0F09D4987329232BECE8BCC74B8E Certificate serial: 4F6799DFF7408E8B1844B9EEE4517B8D446C4C4E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 20:14:11 +0000 Manifest this update: Wed 16 Sep 2026 20:09:11 +0000 Manifest next update: Thu 17 Sep 2026 23:37:11 +0000 Files and hashes: 1: 3130332e3135372e362e302f32342d3234203d3e20313431313036.roa (hash: yr/oT9BlQ/M4JMNvCd0w0W7t+J3wxH6iIKEMfOlwP+M=) 2: D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.crl (hash: FtMrdjcSnfiJ6gYXbCFemGo4KwznRsEVXvy2AT8F+sU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.crl rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:37:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:67:99:df:f7:40:8e:8b:18:44:b9:ee:e4:51:7b:8d:44:6c:4c:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C8B43AE85F0F09D4987329232BECE8BCC74B8E Validity Not Before: Sep 16 20:09:11 2026 GMT Not After : Sep 17 23:37:11 2026 GMT Subject: CN=5467C54E1763CC2EBEB7FF1AD2760332229F9F7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:91:1c:41:8b:e6:5b:34:7d:32:44:c3:fa:24: 66:ef:b0:91:49:4a:c4:33:ba:23:19:3e:30:a3:96: 30:4b:10:bf:3b:f3:0c:34:48:6d:e3:ce:5e:3a:a9: 47:e4:f9:79:fc:64:3d:b7:d7:06:4a:fb:92:1e:be: bd:fa:09:a2:ca:75:c6:b4:60:24:dd:c8:2f:e4:f2: 77:7d:7b:b2:c7:ce:78:7f:ee:77:24:b4:91:23:d8: f2:41:84:5e:5b:d7:9b:cc:1c:61:3a:63:f2:5b:05: 46:e5:e8:2a:a5:9a:92:da:ac:26:9e:38:d1:06:04: f7:dc:79:91:a8:0f:49:11:34:14:fe:70:b1:34:46: c7:33:c1:e4:36:18:4f:89:ef:44:c1:8f:f0:4a:51: b1:af:6f:0a:f2:98:56:f8:f6:6a:27:fc:c8:8c:ca: b2:61:66:0a:8b:65:b9:76:e6:77:1e:99:c4:2f:ff: c0:5b:72:c8:4d:5a:54:dc:77:60:90:7e:a5:03:9a: 9b:68:f1:a0:87:ba:ba:64:f3:4e:0d:c9:85:a8:9a: 4c:0b:8b:5b:33:2f:6e:b9:da:10:90:7f:48:30:1f: 22:fc:db:06:0c:72:4d:89:70:de:98:9e:36:ae:4b: 3d:35:24:8b:d1:c9:08:11:9e:1b:a4:77:63:37:81: 8e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:67:C5:4E:17:63:CC:2E:BE:B7:FF:1A:D2:76:03:32:22:9F:9F:7E X509v3 Authority Key Identifier: keyid:D0:C8:B4:3A:E8:5F:0F:09:D4:98:73:29:23:2B:EC:E8:BC:C7:4B:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a5:fd:d9:51:72:24:7c:ee:66:ac:7c:a2:38:1c:bf:89:83: d6:73:ac:28:6e:b1:92:05:16:ce:d4:7d:6a:b2:79:48:dc:97: 07:da:17:99:87:f8:f7:18:1f:e5:53:ec:76:65:9e:34:39:cb: 7b:d7:7b:9b:0a:9f:80:28:ba:e0:d8:1f:de:f0:ab:e9:f2:c0: 92:68:74:ff:c4:af:ff:a0:4d:0f:e3:fe:35:d3:a4:cc:ac:51: 61:70:78:de:7b:44:a4:21:d3:94:96:09:36:6c:a2:e6:fd:79: 34:1f:83:4f:a6:34:ac:34:e5:1c:b3:67:8b:e0:62:cb:be:07: 73:ab:40:11:20:38:07:47:de:57:78:46:ed:81:76:36:a1:da: 16:ff:ec:d6:c5:67:70:0d:01:07:65:61:66:25:61:67:55:14: 68:f2:32:22:80:a8:c1:f7:f4:19:72:19:f3:74:21:15:1e:98: 89:96:66:4f:d1:95:12:c5:b7:8e:cf:44:29:0e:99:da:0c:80: 16:5a:f7:6e:af:28:d4:5b:47:cc:d3:d3:0b:ea:3d:8b:5e:cf: 27:02:51:45:29:d4:9d:67:d1:90:8b:d8:f3:ed:8d:61:34:1f: 95:f3:e7:9a:23:1f:16:38:c2:b5:61:05:61:eb:9a:aa:80:93: 3b:a8:f0:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT2eZ3/dAjosYRLnu5FF7jURsTE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOEI0M0FFODVGMEYwOUQ0OTg3MzI5MjMyQkVDRThC Q0M3NEI4RTAeFw0yNjA5MTYyMDA5MTFaFw0yNjA5MTcyMzM3MTFaMDMxMTAvBgNV BAMTKDU0NjdDNTRFMTc2M0NDMkVCRUI3RkYxQUQyNzYwMzMyMjI5RjlGN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBkRxBi+ZbNH0yRMP6JGbvsJFJ SsQzuiMZPjCjljBLEL878ww0SG3jzl46qUfk+Xn8ZD231wZK+5Ievr36CaLKdca0 YCTdyC/k8nd9e7LHznh/7ncktJEj2PJBhF5b15vMHGE6Y/JbBUbl6CqlmpLarCae ONEGBPfceZGoD0kRNBT+cLE0RsczweQ2GE+J70TBj/BKUbGvbwrymFb49mon/MiM yrJhZgqLZbl25ncemcQv/8BbcshNWlTcd2CQfqUDmpto8aCHurpk804NyYWomkwL i1szL2652hCQf0gwHyL82wYMck2JcN6YnjauSz01JIvRyQgRnhukd2M3gY4LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVGfFThdjzC6+t/8a0nYDMiKfn34wHwYDVR0j BBgwFoAU0Mi0OuhfDwnUmHMpIyvs6LzHS44wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVkZDRmMTYtNTcwZS00YzhjLWE5OTItZGI4OWVhM2JhZDM2LzAvRDBDOEI0M0FF ODVGMEYwOUQ0OTg3MzI5MjMyQkVDRThCQ0M3NEI4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMEM4QjQzQUU4NUYwRjA5RDQ5ODczMjkyMzJCRUNFOEJDQzc0 QjhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVkZDRmMTYtNTcwZS00YzhjLWE5 OTItZGI4OWVhM2JhZDM2LzAvRDBDOEI0M0FFODVGMEYwOUQ0OTg3MzI5MjMyQkVD RThCQ0M3NEI4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6l/dlRciR87masfKI4HL+Jg9ZzrChusZIF Fs7UfWqyeUjclwfaF5mH+PcYH+VT7HZlnjQ5y3vXe5sKn4AouuDYH97wq+nywJJo dP/Er/+gTQ/j/jXTpMysUWFweN57RKQh05SWCTZsoub9eTQfg0+mNKw05RyzZ4vg Ysu+B3OrQBEgOAdH3ld4Ru2Bdjah2hb/7NbFZ3ANAQdlYWYlYWdVFGjyMiKAqMH3 9BlyGfN0IRUemImWZk/RlRLFt47PRCkOmdoMgBZa926vKNRbR8zT0wvqPYtezycC UUUp1J1n0ZCL2PPtjWE0H5Xz55ojHxY4wrVhBWHrmqqAkzuo8Kc= -----END CERTIFICATE-----Generated at Thu Sep 17 10:03:31 2026 by rpki-client