$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft File: D626CC25972BF9948C6B3BDE4E354C71F2570880.mft (raw, json) Hash identifier: guaQBmoO95pUsmlLNHBMmUftiTTR4walTb4V19qGKjY= Subject key identifier: 61:01:B3:7D:1D:E5:4D:62:91:24:9B:E5:4C:21:61:79:C6:F7:94:B5 Authority key identifier: D6:26:CC:25:97:2B:F9:94:8C:6B:3B:DE:4E:35:4C:71:F2:57:08:80 Certificate issuer: /CN=D626CC25972BF9948C6B3BDE4E354C71F2570880 Certificate serial: 1647FC0707917C0FD1253C45C3C07DAE1DFD4243 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 03:48:09 +0000 Manifest this update: Thu 17 Sep 2026 03:43:09 +0000 Manifest next update: Fri 18 Sep 2026 06:03:09 +0000 Files and hashes: 1: 3130332e3130342e3230352e302f32342d3234203d3e20313336383639.roa (hash: +bc1aSBLcX6ZQm4jECmlMCivSavxhqXkBTLrz820pWg=) 2: 3130332e3130342e3230372e302f32342d3234203d3e20313336383639.roa (hash: jRI7u+pgcEtmrDDRmjulrcR4SRRZM/aGtsQfGUXuJ24=) 3: 323430323a316134303a3a2f33322d3332203d3e20313336383639.roa (hash: nb8z2N9rnH96t5B0H624NhPlR7I0KYPMhvCR0O/fhs4=) 4: 3130332e3130342e3230342e302f32342d3234203d3e20313336383639.roa (hash: 0aDHxXMr4KUimzxt4JkDC404Ezku76mxRU40fEJqQUU=) 5: D626CC25972BF9948C6B3BDE4E354C71F2570880.crl (hash: 77sNOPb3TCUHlaHOSz/tE+/8rx8RWPH+TqKqbcJWYhI=) 6: 3130332e3130342e3230362e302f32342d3234203d3e20313336383639.roa (hash: yo9Rg0RIu4bi5AvFSf1HgeoEO2ptRcGKCjbNNgnoU1A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.crl rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:03:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:47:fc:07:07:91:7c:0f:d1:25:3c:45:c3:c0:7d:ae:1d:fd:42:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D626CC25972BF9948C6B3BDE4E354C71F2570880 Validity Not Before: Sep 17 03:43:09 2026 GMT Not After : Sep 18 06:03:09 2026 GMT Subject: CN=6101B37D1DE54D6291249BE54C216179C6F794B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b0:c0:45:fa:07:7a:14:ec:d6:b7:c6:1b:fa: b2:f4:53:26:05:80:9f:a2:0b:f3:e1:56:ce:46:60: eb:24:28:be:cc:72:a5:c7:ca:a3:04:3a:4b:99:a5: 51:01:55:e2:09:90:dc:93:1f:7b:98:98:b2:26:80: c0:c4:22:0c:03:2e:04:28:d7:5e:d5:2b:8a:b9:91: af:f0:8f:3d:fd:6b:6a:df:57:0f:d7:3b:ba:07:ee: ba:89:e8:54:ca:b1:1b:d6:4c:3e:6f:ee:ae:3f:32: 38:b8:2b:86:77:10:65:d8:e5:db:5d:37:97:d6:9e: ac:05:dc:68:ea:02:51:13:46:01:1c:cc:58:d7:ea: bd:c7:7b:06:e1:31:b1:7a:7c:83:b9:97:57:12:63: 5d:54:fa:ad:a3:d5:e1:fb:46:50:6b:5f:13:fb:83: 7e:21:06:e5:d3:08:5f:17:e3:2c:8a:c8:94:72:09: e5:95:e6:65:89:0b:70:86:9e:90:07:a6:20:3f:f0: f2:9c:9c:d4:85:16:14:6b:e0:62:7b:4e:dc:35:57: 69:61:bf:57:6e:7b:10:66:6b:4c:59:cf:d8:75:81: d2:61:53:7e:3f:5a:31:65:cd:7a:db:c4:97:a9:6b: 36:7f:15:fe:35:1f:20:27:97:8e:5b:17:31:74:dc: 01:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:01:B3:7D:1D:E5:4D:62:91:24:9B:E5:4C:21:61:79:C6:F7:94:B5 X509v3 Authority Key Identifier: keyid:D6:26:CC:25:97:2B:F9:94:8C:6B:3B:DE:4E:35:4C:71:F2:57:08:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:83:b1:24:24:be:91:77:13:ca:08:db:29:30:5f:c2:66:e6: 6e:3c:bb:ee:db:e4:f6:9e:19:fa:ec:af:72:3c:d9:83:61:77: 39:2c:93:68:c1:56:d4:ea:e3:5d:49:59:0e:db:75:c6:81:12: 90:fd:be:0c:ca:e0:aa:99:e9:ee:4c:36:95:e3:69:42:60:49: 10:05:b7:1f:f8:e3:82:71:6b:6e:cd:d3:0d:10:a9:0e:83:d8: 7b:f6:c9:39:40:74:44:35:14:08:30:7a:3e:f9:2b:f3:4a:db: cd:f8:c6:79:af:27:41:c3:8c:ae:27:b4:c3:e1:99:d9:10:bf: 50:4f:2e:43:56:af:8a:2b:14:8b:66:7b:a0:02:5e:d9:47:bd: 82:b5:6d:3d:e5:55:a6:93:4c:a0:fc:18:bd:c5:f1:7f:7b:0f: c6:5f:34:4b:ce:c7:3c:df:45:b5:36:df:ef:78:93:6d:6d:f2: 72:37:fd:5a:5a:35:9f:88:68:df:08:4f:78:27:8a:d1:a3:fc: 6c:97:85:e5:db:30:4f:86:56:7e:08:3d:46:72:4d:68:cf:0d: ac:fd:54:ac:ee:28:af:47:65:41:82:aa:87:ac:41:b5:c0:3b: 83:f6:ce:6e:21:89:b2:34:a1:a3:34:ac:ed:fc:db:1c:99:10: 21:e6:af:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFkf8BweRfA/RJTxFw8B9rh39QkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYyNkNDMjU5NzJCRjk5NDhDNkIzQkRFNEUzNTRDNzFG MjU3MDg4MDAeFw0yNjA5MTcwMzQzMDlaFw0yNjA5MTgwNjAzMDlaMDMxMTAvBgNV BAMTKDYxMDFCMzdEMURFNTRENjI5MTI0OUJFNTRDMjE2MTc5QzZGNzk0QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGsMBF+gd6FOzWt8Yb+rL0UyYF gJ+iC/PhVs5GYOskKL7McqXHyqMEOkuZpVEBVeIJkNyTH3uYmLImgMDEIgwDLgQo 117VK4q5ka/wjz39a2rfVw/XO7oH7rqJ6FTKsRvWTD5v7q4/Mji4K4Z3EGXY5dtd N5fWnqwF3GjqAlETRgEczFjX6r3HewbhMbF6fIO5l1cSY11U+q2j1eH7RlBrXxP7 g34hBuXTCF8X4yyKyJRyCeWV5mWJC3CGnpAHpiA/8PKcnNSFFhRr4GJ7Ttw1V2lh v1duexBma0xZz9h1gdJhU34/WjFlzXrbxJepazZ/Ff41HyAnl45bFzF03AGlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYQGzfR3lTWKRJJvlTCFhecb3lLUwHwYDVR0j BBgwFoAU1ibMJZcr+ZSMazveTjVMcfJXCIAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDIzMWU2YjEtMTg0MS00NzZkLWI0NmItYjQ0YjljYjk2OGIwLzAvRDYyNkNDMjU5 NzJCRjk5NDhDNkIzQkRFNEUzNTRDNzFGMjU3MDg4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjI2Q0MyNTk3MkJGOTk0OEM2QjNCREU0RTM1NEM3MUYyNTcw ODgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDIzMWU2YjEtMTg0MS00NzZkLWI0 NmItYjQ0YjljYjk2OGIwLzAvRDYyNkNDMjU5NzJCRjk5NDhDNkIzQkRFNEUzNTRD NzFGMjU3MDg4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAuDsSQkvpF3E8oI2ykwX8Jm5m48u+7b5Pae Gfrsr3I82YNhdzksk2jBVtTq411JWQ7bdcaBEpD9vgzK4KqZ6e5MNpXjaUJgSRAF tx/444Jxa27N0w0QqQ6D2Hv2yTlAdEQ1FAgwej75K/NK2834xnmvJ0HDjK4ntMPh mdkQv1BPLkNWr4orFItme6ACXtlHvYK1bT3lVaaTTKD8GL3F8X97D8ZfNEvOxzzf RbU23+94k21t8nI3/VpaNZ+IaN8IT3gnitGj/GyXheXbME+GVn4IPUZyTWjPDaz9 VKzuKK9HZUGCqoesQbXAO4P2zm4hibI0oaM0rO382xyZECHmr+I= -----END CERTIFICATE-----Generated at Thu Sep 17 11:44:28 2026 by rpki-client