$ rpki-client -vvvf rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft File: D8435659F33EE1F7005A21C1387F49D353431808.mft (raw, json) Hash identifier: o9agEKjhm4Rg3f3GqB4lkQg+mI13BKToXqNVbuiIpvg= Subject key identifier: 66:97:0E:5C:72:67:BF:E4:B6:A3:1F:49:BF:5A:C0:E3:FA:DC:B5:7D Authority key identifier: D8:43:56:59:F3:3E:E1:F7:00:5A:21:C1:38:7F:49:D3:53:43:18:08 Certificate issuer: /CN=D8435659F33EE1F7005A21C1387F49D353431808 Certificate serial: 5BA64BB8877F3641930A483A942C5F92FC4D78F4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft Manifest number: AF Signing time: Thu 10 Sep 2026 10:24:56 +0000 Manifest this update: Thu 10 Sep 2026 10:19:56 +0000 Manifest next update: Fri 11 Sep 2026 13:31:56 +0000 Files and hashes: 1: D8435659F33EE1F7005A21C1387F49D353431808.crl (hash: lHOBiHy45DZqMMubpzPTDn6DFhcRxB2lsv8w+T2Dquo=) 2: 3130332e3234372e31342e302f32332d3234203d3e20313331373036.roa (hash: blqaAQUh+/Ci23PSpz6kWjhOXoOQ7V7lhdmAJgQyDKE=) 3: 3130332e3234372e31322e302f32342d3234203d3e203535363935.roa (hash: ATVTOuHtUSrfebW1xU18JBrcd7qLtJdgSsLLVk33uGM=) 4: 3130332e3234372e31332e302f32342d3234203d3e20313331373036.roa (hash: z4cKVwkKHopCzCusKw3/HTDbOMxbEcb0WxL0/PEi5qo=) 5: 323430323a653330303a3a2f33322d3438203d3e20313331373036.roa (hash: nwbiSYQUIY7u5484W08oCWpHX2RPW6F76Z3A6cL7rsY=) 6: 3132312e3130312e3132382e302f32312d3234203d3e20313331373036.roa (hash: DR008bVSYXJm82RMo+BhRQvkIWKNDedVtmRpjzWrQic=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.crl rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 11:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:a6:4b:b8:87:7f:36:41:93:0a:48:3a:94:2c:5f:92:fc:4d:78:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8435659F33EE1F7005A21C1387F49D353431808 Validity Not Before: Sep 10 10:19:56 2026 GMT Not After : Sep 11 13:31:56 2026 GMT Subject: CN=66970E5C7267BFE4B6A31F49BF5AC0E3FADCB57D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6e:6d:eb:75:b3:a8:8c:7d:72:d7:c2:95:a8: 8a:1d:d9:76:4e:99:57:61:2e:a1:48:c3:ad:b4:1c: fe:ab:77:77:63:6e:b3:a7:f5:56:74:ec:88:4d:55: a5:5b:53:af:f4:b4:28:12:d1:2d:99:67:e0:aa:d4: 2d:69:ee:12:cb:e2:40:93:8c:a8:60:60:9e:da:58: 62:a3:43:2a:c0:11:7c:cb:06:c8:d0:f0:69:03:70: 0c:c9:a2:94:b3:18:08:33:32:c0:a3:47:f6:82:f5: 33:a1:f9:23:9b:67:bc:b7:5b:41:2f:e8:a2:f8:cc: ad:13:68:95:6e:8e:92:ff:ca:4c:6f:49:0e:6a:f5: 6e:ac:3f:37:36:64:87:63:0c:63:e8:4a:bd:2d:9c: a6:86:98:2a:f1:b3:54:ca:ae:a8:e4:01:bb:1a:cf: 10:66:01:0f:0e:54:e8:59:2d:12:af:9d:13:53:f4: 99:f8:db:fb:75:1c:a2:98:83:a3:b7:1f:0c:11:3e: 32:ea:9e:3c:52:ff:c9:c8:88:fd:d8:16:2c:f4:24: 70:03:a3:c8:9b:5e:1e:88:03:7d:3d:2c:b4:1b:a7: d1:9a:81:44:0e:28:4d:af:7f:dd:68:01:08:82:01: 04:4a:bb:d2:99:5c:dc:4e:ca:b8:8d:fa:a0:17:9f: ae:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:97:0E:5C:72:67:BF:E4:B6:A3:1F:49:BF:5A:C0:E3:FA:DC:B5:7D X509v3 Authority Key Identifier: keyid:D8:43:56:59:F3:3E:E1:F7:00:5A:21:C1:38:7F:49:D3:53:43:18:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:96:b7:58:0f:45:3d:06:65:31:b1:c5:0c:3e:97:09:e6:40: 84:73:c7:0d:0b:b6:37:14:ed:d5:15:f9:d1:9d:5e:a4:17:50: 71:d8:bc:c8:75:45:89:05:94:05:48:d1:ea:91:38:8e:91:e1: fa:34:62:df:0e:f1:65:46:83:06:10:bd:57:13:54:e9:39:ab: 6f:e0:53:f4:7e:d5:89:05:c8:c2:80:70:97:4d:52:58:43:ad: b6:3a:96:a7:36:e6:02:e8:81:6e:b7:a0:bf:6b:58:40:e9:1b: 2a:52:06:8b:c0:13:36:00:dc:c5:1c:04:e6:6e:c7:2a:7f:3b: b3:c2:75:c8:e7:33:55:43:35:e3:93:96:3a:02:67:a9:38:aa: 21:3f:20:9e:11:91:83:b8:79:63:d9:7c:10:f7:8d:8b:d7:7d: 66:d2:8d:06:7c:5b:97:34:61:31:61:86:60:27:4e:59:4e:2b: 86:84:c3:ff:30:88:61:71:aa:93:12:df:40:e4:d4:87:37:f3: 07:05:22:93:ca:0a:f9:ac:90:f8:98:bc:8b:77:e1:7e:dc:7b: 37:3a:7f:a0:90:fb:de:f5:4b:11:60:a1:8d:fe:62:fb:7a:c6: e9:05:5c:d5:0b:2e:89:6d:e5:7d:4b:2d:16:9e:79:36:a8:23: 5e:ca:c2:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW6ZLuId/NkGTCkg6lCxfkvxNePQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg0MzU2NTlGMzNFRTFGNzAwNUEyMUMxMzg3RjQ5RDM1 MzQzMTgwODAeFw0yNjA5MTAxMDE5NTZaFw0yNjA5MTExMzMxNTZaMDMxMTAvBgNV BAMTKDY2OTcwRTVDNzI2N0JGRTRCNkEzMUY0OUJGNUFDMEUzRkFEQ0I1N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqbm3rdbOojH1y18KVqIod2XZO mVdhLqFIw620HP6rd3djbrOn9VZ07IhNVaVbU6/0tCgS0S2ZZ+Cq1C1p7hLL4kCT jKhgYJ7aWGKjQyrAEXzLBsjQ8GkDcAzJopSzGAgzMsCjR/aC9TOh+SObZ7y3W0Ev 6KL4zK0TaJVujpL/ykxvSQ5q9W6sPzc2ZIdjDGPoSr0tnKaGmCrxs1TKrqjkAbsa zxBmAQ8OVOhZLRKvnRNT9Jn42/t1HKKYg6O3HwwRPjLqnjxS/8nIiP3YFiz0JHAD o8ibXh6IA309LLQbp9GagUQOKE2vf91oAQiCAQRKu9KZXNxOyriN+qAXn667AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZpcOXHJnv+S2ox9Jv1rA4/rctX0wHwYDVR0j BBgwFoAU2ENWWfM+4fcAWiHBOH9J01NDGAgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTI3YTZmMzQtMWI2ZS00ZTkyLWIyZDItMGI5MzAxYTY2NmE1LzAvRDg0MzU2NTlG MzNFRTFGNzAwNUEyMUMxMzg3RjQ5RDM1MzQzMTgwOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODQzNTY1OUYzM0VFMUY3MDA1QTIxQzEzODdGNDlEMzUzNDMx ODA4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTI3YTZmMzQtMWI2ZS00ZTkyLWIy ZDItMGI5MzAxYTY2NmE1LzAvRDg0MzU2NTlGMzNFRTFGNzAwNUEyMUMxMzg3RjQ5 RDM1MzQzMTgwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmWt1gPRT0GZTGxxQw+lwnmQIRzxw0LtjcU 7dUV+dGdXqQXUHHYvMh1RYkFlAVI0eqROI6R4fo0Yt8O8WVGgwYQvVcTVOk5q2/g U/R+1YkFyMKAcJdNUlhDrbY6lqc25gLogW63oL9rWEDpGypSBovAEzYA3MUcBOZu xyp/O7PCdcjnM1VDNeOTljoCZ6k4qiE/IJ4RkYO4eWPZfBD3jYvXfWbSjQZ8W5c0 YTFhhmAnTllOK4aEw/8wiGFxqpMS30Dk1Ic38wcFIpPKCvmskPiYvIt34X7cezc6 f6CQ+971SxFgoY3+Yvt6xukFXNULLolt5X1LLRaeeTaoI17Kwvw= -----END CERTIFICATE-----Generated at Fri Sep 11 02:06:03 2026 by rpki-client