$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft File: D3CDCB356F94C51B241188653C7ADC2C79D79424.mft (raw, json) Hash identifier: hd9n9dO8RKtNPE6CCGBNHhWEhYA1v6h7KOqwap/858Y= Subject key identifier: 28:63:02:30:14:51:89:22:04:6F:E7:8D:97:C3:71:5C:47:12:F3:0C Authority key identifier: D3:CD:CB:35:6F:94:C5:1B:24:11:88:65:3C:7A:DC:2C:79:D7:94:24 Certificate issuer: /CN=D3CDCB356F94C51B241188653C7ADC2C79D79424 Certificate serial: 3129FF507537A43011E51638F291115E7E10846C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 21:20:24 +0000 Manifest this update: Wed 16 Sep 2026 21:15:24 +0000 Manifest next update: Thu 17 Sep 2026 22:30:24 +0000 Files and hashes: 1: D3CDCB356F94C51B241188653C7ADC2C79D79424.crl (hash: BcA5dxVL6q2FI9pvWZA0N1tD4YVD30CT0DlzQCdJ/RI=) 2: 3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa (hash: 83bYI1z3e7ETkpXnXGTkrnk19/a7Qfy/7K16nNObwH0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.crl rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:29:ff:50:75:37:a4:30:11:e5:16:38:f2:91:11:5e:7e:10:84:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3CDCB356F94C51B241188653C7ADC2C79D79424 Validity Not Before: Sep 16 21:15:24 2026 GMT Not After : Sep 17 22:30:24 2026 GMT Subject: CN=2863023014518922046FE78D97C3715C4712F30C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cd:af:d2:7a:c9:72:ca:c2:73:9b:da:00:b6: 3f:97:1f:0c:0c:fb:63:2f:39:a6:ed:5e:46:53:e2: 55:21:7f:76:77:8b:e3:3b:52:84:33:37:4d:97:ce: 64:e3:b5:84:d9:ce:aa:b9:a2:6a:29:79:89:05:dc: 28:e0:16:a1:b9:d1:ff:00:7c:aa:50:9d:39:ea:4c: 1e:5b:15:bc:9d:0a:b1:99:d3:39:38:73:42:67:67: af:35:96:b4:70:0f:71:5d:41:73:10:6a:02:4c:a2: 01:e9:72:52:aa:e7:fc:42:8d:19:24:e1:27:dc:16: 68:d8:80:81:89:6d:15:34:bc:41:c1:9f:4b:fe:2f: a7:ad:e9:7f:cf:f0:07:d9:46:fd:16:f9:fc:48:63: 0a:cc:28:ee:2f:4a:a1:a9:2f:d6:2c:1e:1e:22:82: 70:28:79:ad:5d:eb:f5:84:31:57:a7:38:3e:9b:ac: 9b:21:4b:48:5c:ee:9d:04:d2:1f:91:04:dd:f3:8e: 5d:12:38:e8:2f:2b:5c:ce:e3:ae:2f:37:ef:fb:c6: f9:03:7f:59:5a:e5:60:74:ca:f8:e6:17:23:a3:b5: c0:73:c3:d0:e1:86:cb:65:76:2c:3e:e9:bd:e7:45: 14:c9:09:03:9e:37:59:e9:79:a4:ba:54:df:8b:e5: 98:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:63:02:30:14:51:89:22:04:6F:E7:8D:97:C3:71:5C:47:12:F3:0C X509v3 Authority Key Identifier: keyid:D3:CD:CB:35:6F:94:C5:1B:24:11:88:65:3C:7A:DC:2C:79:D7:94:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:59:f8:b0:cd:11:7e:fe:91:cd:c4:e9:c4:a4:7a:cd:72:2a: 5a:ca:a8:12:c4:56:da:ad:16:a7:8e:6d:64:51:3e:d5:80:06: 70:88:fb:f5:b8:c1:ff:d2:cc:92:94:af:b0:06:e5:3a:fe:5d: 8a:a1:9c:24:be:8e:2f:67:c7:dc:fc:c2:97:10:ca:c3:04:7b: 06:ee:9c:16:4c:85:5f:e6:17:1a:d9:09:bb:42:70:6e:94:4e: ed:73:a0:42:f9:f3:87:62:aa:e2:4a:36:89:c9:bc:07:4d:b7: 05:7a:e9:2c:a6:ad:f5:70:b6:b5:5b:3b:94:d9:b4:1b:ae:e9: ba:dd:1a:fe:f9:99:bd:3d:d2:f0:f7:61:75:09:b2:35:c4:a1: eb:ac:f4:b5:74:68:1e:ea:70:d9:f0:ad:79:d3:35:70:78:8c: 8a:e0:1e:e7:b9:5f:2e:95:48:f7:9e:90:ae:b1:dd:76:a1:00: 38:7d:1c:6d:bc:b2:7b:b6:7c:26:f9:47:05:40:90:51:67:03: 75:a8:35:0b:17:eb:13:28:9e:ab:f5:e0:62:21:25:f0:04:76: 89:c6:bb:44:c6:1f:7e:68:03:f5:4a:d7:bf:41:38:f9:ab:2b: 7e:3f:d8:4f:98:3c:e5:2e:d6:34:3a:de:f8:bf:7f:56:ee:a8: 6d:ed:66:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMSn/UHU3pDAR5RY48pERXn4QhGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNDRENCMzU2Rjk0QzUxQjI0MTE4ODY1M0M3QURDMkM3 OUQ3OTQyNDAeFw0yNjA5MTYyMTE1MjRaFw0yNjA5MTcyMjMwMjRaMDMxMTAvBgNV BAMTKDI4NjMwMjMwMTQ1MTg5MjIwNDZGRTc4RDk3QzM3MTVDNDcxMkYzMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1za/SeslyysJzm9oAtj+XHwwM +2MvOabtXkZT4lUhf3Z3i+M7UoQzN02XzmTjtYTZzqq5omopeYkF3CjgFqG50f8A fKpQnTnqTB5bFbydCrGZ0zk4c0JnZ681lrRwD3FdQXMQagJMogHpclKq5/xCjRkk 4SfcFmjYgIGJbRU0vEHBn0v+L6et6X/P8AfZRv0W+fxIYwrMKO4vSqGpL9YsHh4i gnAoea1d6/WEMVenOD6brJshS0hc7p0E0h+RBN3zjl0SOOgvK1zO464vN+/7xvkD f1la5WB0yvjmFyOjtcBzw9Dhhstldiw+6b3nRRTJCQOeN1npeaS6VN+L5ZjVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKGMCMBRRiSIEb+eNl8NxXEcS8wwwHwYDVR0j BBgwFoAU083LNW+UxRskEYhlPHrcLHnXlCQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2FmY2JmYmItYmEzZi00ZDUzLWEwNGYtMTRkNmY0YmUwY2IxLzAvRDNDRENCMzU2 Rjk0QzUxQjI0MTE4ODY1M0M3QURDMkM3OUQ3OTQyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EM0NEQ0IzNTZGOTRDNTFCMjQxMTg4NjUzQzdBREMyQzc5RDc5 NDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzAvRDNDRENCMzU2Rjk0QzUxQjI0MTE4ODY1M0M3QURD MkM3OUQ3OTQyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEdZ+LDNEX7+kc3E6cSkes1yKlrKqBLEVtqt FqeObWRRPtWABnCI+/W4wf/SzJKUr7AG5Tr+XYqhnCS+ji9nx9z8wpcQysMEewbu nBZMhV/mFxrZCbtCcG6UTu1zoEL584diquJKNonJvAdNtwV66SymrfVwtrVbO5TZ tBuu6brdGv75mb090vD3YXUJsjXEoeus9LV0aB7qcNnwrXnTNXB4jIrgHue5Xy6V SPeekK6x3XahADh9HG28snu2fCb5RwVAkFFnA3WoNQsX6xMonqv14GIhJfAEdonG u0TGH35oA/VK179BOPmrK34/2E+YPOUu1jQ63vi/f1buqG3tZoo= -----END CERTIFICATE-----Generated at Thu Sep 17 11:27:04 2026 by rpki-client