$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft File: 00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft (raw, json) Hash identifier: H2jV5llILfsOpXGxfLR/wBf3Z9tiEaqkmu/OSUsYy9M= Subject key identifier: 52:8F:20:D0:37:8A:99:59:4B:36:3A:85:C0:CB:50:DD:34:49:51:E3 Authority key identifier: 00:84:1D:BD:E5:F6:CE:BF:8C:94:FD:EE:22:77:71:94:6E:21:52:CF Certificate issuer: /CN=00841DBDE5F6CEBF8C94FDEE227771946E2152CF Certificate serial: 7C01E2BDB0780BFA1A4795481AE8EA2CCB4F0DCF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft Manifest number: BA Signing time: Wed 16 Sep 2026 22:06:14 +0000 Manifest this update: Wed 16 Sep 2026 22:01:14 +0000 Manifest next update: Fri 18 Sep 2026 01:22:14 +0000 Files and hashes: 1: 3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa (hash: RevoOpF5++1wWoPWwmQB4PPK000UixnKZHWg4wTOKek=) 2: 00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl (hash: ByMzVmKMbw4PZESZBG8nv/LxQWobJM9Ul7q1hLPJAxg=) 3: 323430343a643563303a3a2f33322d3438203d3e20313338383534.roa (hash: Rh9qnUB02qhjNfXj2g1O5tEu9u7bYMmnyx0Vs0JNy30=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:01:e2:bd:b0:78:0b:fa:1a:47:95:48:1a:e8:ea:2c:cb:4f:0d:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00841DBDE5F6CEBF8C94FDEE227771946E2152CF Validity Not Before: Sep 16 22:01:14 2026 GMT Not After : Sep 18 01:22:14 2026 GMT Subject: CN=528F20D0378A99594B363A85C0CB50DD344951E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:da:b6:c6:1e:b0:86:bd:6d:3f:ec:9c:37:f8: d7:83:0c:62:61:79:29:c3:94:ea:cc:10:6b:72:f5: 4b:db:a1:fb:00:a2:bf:a8:f2:85:4f:f7:8c:35:9c: d8:f1:a8:01:7b:de:89:c6:c3:71:8e:43:cf:b2:e4: f8:f2:a4:7f:25:9f:38:4a:20:da:36:08:10:35:7d: 52:b6:df:33:4c:fc:71:3e:10:12:9d:18:c7:f6:93: 17:9a:77:af:a2:d0:ec:41:22:b6:fb:9c:2c:17:0e: 6d:2b:1d:c7:c2:de:0c:d0:24:79:4d:20:1b:40:95: 3a:92:21:7c:15:47:6f:89:ba:af:7c:8c:62:ef:08: d5:b5:19:b0:e0:01:ba:21:56:21:17:b6:65:0c:3d: fe:96:38:c5:02:fe:e8:27:c4:54:c1:7d:ce:aa:d2: 3e:19:73:48:a2:4b:ea:da:6f:a7:8d:c3:76:f0:38: 59:74:c4:25:98:ab:a4:df:26:ec:87:4e:1b:7a:fb: 99:ea:e3:df:33:2e:f2:1d:d5:11:bb:58:5c:c8:c3: 6b:24:e9:3e:7c:7f:10:3a:1a:d8:c4:b4:85:65:40: 89:3e:71:5d:43:b0:44:b0:fd:c9:de:44:a0:1a:35: 64:4f:b6:f2:0f:fb:79:1e:c8:2e:17:0f:67:96:9a: f3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8F:20:D0:37:8A:99:59:4B:36:3A:85:C0:CB:50:DD:34:49:51:E3 X509v3 Authority Key Identifier: keyid:00:84:1D:BD:E5:F6:CE:BF:8C:94:FD:EE:22:77:71:94:6E:21:52:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:6d:3c:78:40:b3:48:bc:fc:02:18:52:47:d7:ae:90:76:e9: 3f:ef:90:ff:05:65:91:5a:37:2e:91:92:a5:99:f1:23:d5:49: 3b:49:50:2b:be:3d:0a:3c:30:a0:0e:b7:02:52:b7:8a:fd:7c: bf:a7:c9:44:2a:96:03:02:0b:56:15:e2:61:8f:ff:92:0f:0a: f4:d1:95:a1:c6:84:ba:8c:d8:ce:dc:78:54:4e:22:d7:62:ac: 2a:a7:a6:05:19:fd:d7:10:3d:a5:76:52:05:46:2e:83:00:76: f4:b7:8f:d7:68:c7:08:3f:27:e5:8d:4c:ba:21:18:1c:36:dc: 2b:7e:da:d9:7a:b5:3d:2c:00:4c:44:27:c4:5b:f9:ac:7f:65: 23:7b:9c:43:e6:02:ff:f5:4d:2f:1e:d5:b7:12:1a:d6:61:62: 86:13:44:c8:56:4c:b7:65:29:9c:4d:59:71:e4:a8:cd:a6:87: 3a:3e:43:7c:16:c7:a7:15:65:a8:a0:04:fb:5d:8a:a6:35:7e: c3:72:ae:f6:76:b9:8d:4b:5f:c0:50:75:99:2d:d1:55:8f:da: fe:e0:7b:77:89:db:72:cf:c9:41:a4:d3:3c:89:68:a7:15:be: 1d:29:ea:f5:32:81:dc:07:89:f6:da:ea:f0:b5:3c:91:e5:20: f5:fc:9c:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfAHivbB4C/oaR5VIGujqLMtPDc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDA4NDFEQkRFNUY2Q0VCRjhDOTRGREVFMjI3NzcxOTQ2 RTIxNTJDRjAeFw0yNjA5MTYyMjAxMTRaFw0yNjA5MTgwMTIyMTRaMDMxMTAvBgNV BAMTKDUyOEYyMEQwMzc4QTk5NTk0QjM2M0E4NUMwQ0I1MEREMzQ0OTUxRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm2rbGHrCGvW0/7Jw3+NeDDGJh eSnDlOrMEGty9UvbofsAor+o8oVP94w1nNjxqAF73onGw3GOQ8+y5PjypH8lnzhK INo2CBA1fVK23zNM/HE+EBKdGMf2kxead6+i0OxBIrb7nCwXDm0rHcfC3gzQJHlN IBtAlTqSIXwVR2+Juq98jGLvCNW1GbDgAbohViEXtmUMPf6WOMUC/ugnxFTBfc6q 0j4Zc0iiS+rab6eNw3bwOFl0xCWYq6TfJuyHTht6+5nq498zLvId1RG7WFzIw2sk 6T58fxA6GtjEtIVlQIk+cV1DsESw/cneRKAaNWRPtvIP+3keyC4XD2eWmvP7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUo8g0DeKmVlLNjqFwMtQ3TRJUeMwHwYDVR0j BBgwFoAUAIQdveX2zr+MlP3uIndxlG4hUs8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDI1MDIyMDUtNWM1NC00N2RiLWFlNmYtOWQ0OGUxODMyNDFjLzAvMDA4NDFEQkRF NUY2Q0VCRjhDOTRGREVFMjI3NzcxOTQ2RTIxNTJDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDg0MURCREU1RjZDRUJGOEM5NEZERUUyMjc3NzE5NDZFMjE1 MkNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDI1MDIyMDUtNWM1NC00N2RiLWFl NmYtOWQ0OGUxODMyNDFjLzAvMDA4NDFEQkRFNUY2Q0VCRjhDOTRGREVFMjI3Nzcx OTQ2RTIxNTJDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKNtPHhAs0i8/AIYUkfXrpB26T/vkP8FZZFa Ny6RkqWZ8SPVSTtJUCu+PQo8MKAOtwJSt4r9fL+nyUQqlgMCC1YV4mGP/5IPCvTR laHGhLqM2M7ceFROItdirCqnpgUZ/dcQPaV2UgVGLoMAdvS3j9doxwg/J+WNTLoh GBw23Ct+2tl6tT0sAExEJ8Rb+ax/ZSN7nEPmAv/1TS8e1bcSGtZhYoYTRMhWTLdl KZxNWXHkqM2mhzo+Q3wWx6cVZaigBPtdiqY1fsNyrvZ2uY1LX8BQdZkt0VWP2v7g e3eJ23LPyUGk0zyJaKcVvh0p6vUygdwHifba6vC1PJHlIPX8nDY= -----END CERTIFICATE-----Generated at Thu Sep 17 09:22:58 2026 by rpki-client