$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/DFBD8473BE5516B109B5A1791D9DCBDF67230456.mft File: DFBD8473BE5516B109B5A1791D9DCBDF67230456.mft (raw, json) Hash identifier: JFLoHEKPyu/lXqtMos55vYel5Yo5qgf0bdXmPus9ljs= Subject key identifier: F8:CF:38:B1:61:22:5F:B9:7B:F3:74:8B:60:7A:F4:7F:80:5C:64:A9 Authority key identifier: DF:BD:84:73:BE:55:16:B1:09:B5:A1:79:1D:9D:CB:DF:67:23:04:56 Certificate issuer: /CN=DFBD8473BE5516B109B5A1791D9DCBDF67230456 Certificate serial: 256FD33165298070B13BCF39CFFBEAB23975C690 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFBD8473BE5516B109B5A1791D9DCBDF67230456.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/DFBD8473BE5516B109B5A1791D9DCBDF67230456.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 18:27:02 +0000 Manifest this update: Wed 16 Sep 2026 18:22:02 +0000 Manifest next update: Thu 17 Sep 2026 22:16:02 +0000 Files and hashes: 1: DFBD8473BE5516B109B5A1791D9DCBDF67230456.crl (hash: 4gBZjtFThb6QSVQ0S79nAv2SwITABsTLzJgTPcvPXBw=) 2: 3130332e37382e3234302e302f32342d3234203d3e20313530343836.roa (hash: /NpblNWeDyruUPm/IDhGAws5AddnYBZqkNeH/J3r+Ao=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/DFBD8473BE5516B109B5A1791D9DCBDF67230456.crl rsync://rpki-rsync.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/DFBD8473BE5516B109B5A1791D9DCBDF67230456.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFBD8473BE5516B109B5A1791D9DCBDF67230456.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:6f:d3:31:65:29:80:70:b1:3b:cf:39:cf:fb:ea:b2:39:75:c6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFBD8473BE5516B109B5A1791D9DCBDF67230456 Validity Not Before: Sep 16 18:22:02 2026 GMT Not After : Sep 17 22:16:02 2026 GMT Subject: CN=F8CF38B161225FB97BF3748B607AF47F805C64A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:00:2c:5f:03:24:fc:ba:e4:05:d8:02:f5:49: 80:d1:6a:14:93:5a:d2:11:5c:01:42:6d:a6:31:65: 84:6e:e1:2c:84:bd:1d:9a:06:79:e4:51:7e:d2:ad: e2:3f:a6:5d:1a:32:c7:a8:d9:9d:aa:80:05:77:ca: 6a:eb:6d:12:d1:41:a9:50:e5:6f:e7:4e:c3:51:42: 6c:3a:94:0c:c7:a9:83:3b:90:92:68:19:ce:ce:db: 4c:46:77:83:9c:1e:d8:5f:22:fe:9d:b3:f2:37:0d: 66:87:00:02:a2:eb:19:40:0f:38:13:d8:b8:f5:4a: fe:46:90:8c:69:30:85:bc:45:e5:bc:16:6f:75:29: 48:64:c8:eb:74:72:03:80:bd:27:2c:26:a1:08:71: 8e:11:5f:20:1b:a1:78:7b:3e:be:2b:16:26:72:dc: e3:a2:fc:c6:59:1c:59:d0:5d:4f:57:06:7d:2c:63: 53:fb:a8:b6:87:20:82:91:aa:57:c1:87:b5:0c:32: fd:82:48:e9:93:f2:8c:9a:7e:fc:16:59:34:e7:3e: 81:9e:6f:22:15:b9:d0:7a:64:04:bb:4e:69:a5:7a: 0f:78:38:71:58:9e:bc:da:58:4f:72:95:96:89:43: 8b:64:a3:45:1d:e1:db:35:d2:43:f0:97:fc:a3:a9: bc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CF:38:B1:61:22:5F:B9:7B:F3:74:8B:60:7A:F4:7F:80:5C:64:A9 X509v3 Authority Key Identifier: keyid:DF:BD:84:73:BE:55:16:B1:09:B5:A1:79:1D:9D:CB:DF:67:23:04:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/DFBD8473BE5516B109B5A1791D9DCBDF67230456.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFBD8473BE5516B109B5A1791D9DCBDF67230456.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/DFBD8473BE5516B109B5A1791D9DCBDF67230456.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:75:69:e6:2e:fb:81:33:c8:30:23:ed:02:70:a7:ff:7d:3c: 5f:87:cb:3c:e4:f6:1c:70:fe:ac:de:d8:19:a8:c9:9f:52:c1: c9:6f:fb:3c:3d:d1:93:66:ec:3c:41:f0:ff:93:07:15:b4:49: 8d:27:24:28:b9:d0:c4:27:f3:21:33:92:84:3e:56:d5:e7:45: 2c:c1:06:89:19:0a:4e:63:b4:c6:31:60:af:01:eb:2d:f2:65: 16:c1:54:10:fd:26:e4:7f:00:a5:98:59:8d:9a:46:a8:ed:3a: 45:cf:55:46:b2:72:08:a7:97:91:2a:eb:f8:90:89:e9:65:d8: cc:b8:6c:e8:fd:af:83:66:51:78:4f:21:62:c3:46:71:d6:50: 98:eb:7a:48:f3:59:1b:7d:d0:49:0f:85:11:33:f1:82:16:7c: 9e:ef:b3:dc:67:9e:85:26:d7:28:59:34:49:15:d4:4a:98:d8: ea:27:85:30:f4:0d:7e:27:b3:ad:2a:14:ab:8c:ba:1a:eb:d1: 6f:42:bb:a5:e7:9e:89:38:7a:64:30:a3:e4:2f:5f:c8:88:a7: 15:50:44:41:43:05:cb:97:82:1d:37:fd:91:d9:93:d1:36:7f: 0e:f6:19:dd:93:dd:b7:c8:cf:06:e7:57:7a:00:bc:50:da:98: 9f:05:96:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJW/TMWUpgHCxO885z/vqsjl1xpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZCRDg0NzNCRTU1MTZCMTA5QjVBMTc5MUQ5RENCREY2 NzIzMDQ1NjAeFw0yNjA5MTYxODIyMDJaFw0yNjA5MTcyMjE2MDJaMDMxMTAvBgNV BAMTKEY4Q0YzOEIxNjEyMjVGQjk3QkYzNzQ4QjYwN0FGNDdGODA1QzY0QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrACxfAyT8uuQF2AL1SYDRahST WtIRXAFCbaYxZYRu4SyEvR2aBnnkUX7SreI/pl0aMseo2Z2qgAV3ymrrbRLRQalQ 5W/nTsNRQmw6lAzHqYM7kJJoGc7O20xGd4OcHthfIv6ds/I3DWaHAAKi6xlADzgT 2Lj1Sv5GkIxpMIW8ReW8Fm91KUhkyOt0cgOAvScsJqEIcY4RXyAboXh7Pr4rFiZy 3OOi/MZZHFnQXU9XBn0sY1P7qLaHIIKRqlfBh7UMMv2CSOmT8oyafvwWWTTnPoGe byIVudB6ZAS7Tmmleg94OHFYnrzaWE9ylZaJQ4tko0Ud4ds10kPwl/yjqbxNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+M84sWEiX7l783SLYHr0f4BcZKkwHwYDVR0j BBgwFoAU372Ec75VFrEJtaF5HZ3L32cjBFYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjNjOTczZDUtZmU5NC00MDBkLWJjYmYtZjIzM2U4YWM1NTM3LzAvREZCRDg0NzNC RTU1MTZCMTA5QjVBMTc5MUQ5RENCREY2NzIzMDQ1Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERkJEODQ3M0JFNTUxNkIxMDlCNUExNzkxRDlEQ0JERjY3MjMw NDU2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjNjOTczZDUtZmU5NC00MDBkLWJj YmYtZjIzM2U4YWM1NTM3LzAvREZCRDg0NzNCRTU1MTZCMTA5QjVBMTc5MUQ5RENC REY2NzIzMDQ1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIl1aeYu+4EzyDAj7QJwp/99PF+Hyzzk9hxw /qze2BmoyZ9Swclv+zw90ZNm7DxB8P+TBxW0SY0nJCi50MQn8yEzkoQ+VtXnRSzB BokZCk5jtMYxYK8B6y3yZRbBVBD9JuR/AKWYWY2aRqjtOkXPVUaycginl5Eq6/iQ iell2My4bOj9r4NmUXhPIWLDRnHWUJjrekjzWRt90EkPhREz8YIWfJ7vs9xnnoUm 1yhZNEkV1EqY2OonhTD0DX4ns60qFKuMuhrr0W9Cu6Xnnok4emQwo+QvX8iIpxVQ REFDBcuXgh03/ZHZk9E2fw72Gd2T3bfIzwbnV3oAvFDamJ8FloQ= -----END CERTIFICATE-----Generated at Thu Sep 17 14:45:27 2026 by rpki-client