$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft File: D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft (raw, json) Hash identifier: EVzL91ktZYCycR9dPtdRD/GHJUEPf8VecJYLJKgOcXE= Subject key identifier: E7:9F:8D:B6:55:3D:36:BF:01:AD:3A:10:2D:87:EF:36:C9:30:DD:2D Authority key identifier: D5:51:D5:8F:28:76:BB:DA:9C:36:67:8E:FF:8D:27:1A:14:EA:D8:A3 Certificate issuer: /CN=D551D58F2876BBDA9C36678EFF8D271A14EAD8A3 Certificate serial: 06481B2BB93A18BB77DC465F1658B2EDDD81B4F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft Manifest number: B6 Signing time: Thu 17 Sep 2026 02:21:25 +0000 Manifest this update: Thu 17 Sep 2026 02:16:25 +0000 Manifest next update: Fri 18 Sep 2026 05:13:25 +0000 Files and hashes: 1: D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.crl (hash: C9L+iYB++pOp/9xjq27iqeVNu/ZDIYqD4dThoNv+iO8=) 2: 3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa (hash: yiKtjyaJg+/4RrQVJVpsjcN53nYqA/23WnoDn5hFEmM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.crl rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:48:1b:2b:b9:3a:18:bb:77:dc:46:5f:16:58:b2:ed:dd:81:b4:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D551D58F2876BBDA9C36678EFF8D271A14EAD8A3 Validity Not Before: Sep 17 02:16:25 2026 GMT Not After : Sep 18 05:13:25 2026 GMT Subject: CN=E79F8DB6553D36BF01AD3A102D87EF36C930DD2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3d:46:da:29:00:bd:90:f6:88:97:be:5e:78: d4:b6:09:72:60:56:c2:c1:be:75:22:70:7f:4f:32: fb:6c:9c:98:cc:da:2d:d1:17:e2:d0:46:7e:03:7e: 33:eb:96:35:12:1f:59:58:bb:d0:d9:00:05:67:9d: c1:aa:77:ee:3e:f9:ea:a6:28:97:f4:c7:74:52:19: ab:a0:01:b8:41:70:16:b3:55:88:49:d1:e4:8a:53: bb:0a:ca:80:38:1f:c3:73:b7:f9:c2:4f:33:fc:f1: eb:c7:11:c5:9c:11:24:76:9e:48:ee:6c:41:16:5d: b2:e3:fd:04:82:54:de:f0:2f:34:9a:70:47:55:2b: b3:2d:da:78:08:0f:b1:2e:6b:5b:3e:ca:ab:03:c9: 4f:57:4d:fa:83:db:8c:5c:99:bf:69:21:cd:a6:ae: 8e:18:c3:2b:26:8f:97:52:a9:42:61:c8:97:af:78: 1f:91:5f:63:80:4f:9a:30:dc:13:17:22:ff:1d:97: f2:cc:a7:be:84:22:02:44:54:4b:e7:70:b6:54:6e: 38:db:fd:b9:34:1f:f1:66:5b:69:7c:16:24:fa:e2: de:1b:37:97:06:39:52:cb:70:8f:bb:bb:db:f7:82: b1:60:76:8e:fb:6b:ef:dd:5a:76:7b:dd:ae:c1:01: 57:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:9F:8D:B6:55:3D:36:BF:01:AD:3A:10:2D:87:EF:36:C9:30:DD:2D X509v3 Authority Key Identifier: keyid:D5:51:D5:8F:28:76:BB:DA:9C:36:67:8E:FF:8D:27:1A:14:EA:D8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:5b:55:8e:b0:a8:75:81:db:11:60:89:2b:e6:e1:08:52:13: 7d:b4:07:20:38:d2:27:83:49:2b:90:4a:67:ba:67:e4:3a:86: 56:19:42:68:3e:e1:ca:f5:20:77:97:a7:c0:09:02:05:4d:39: 68:0e:d5:d9:cd:d5:63:f9:ba:2f:4f:ec:fc:c4:ce:37:d7:cb: 2a:69:58:9e:6b:84:18:94:72:75:98:63:34:58:7c:21:44:ce: c3:13:66:90:a7:50:ae:9d:e3:8e:aa:63:e5:cc:5a:57:ea:a7: f0:43:2d:03:46:17:47:23:9e:eb:cf:1c:41:d3:80:25:2c:f2: da:62:ae:97:49:c2:0b:b5:87:74:47:a6:98:92:da:86:d3:94: 7a:77:12:1d:4f:6a:6b:c9:aa:fc:ed:06:c0:30:bf:78:ba:b2: f9:aa:58:39:5f:7e:b6:9f:15:cb:4f:3b:14:b8:a9:c1:6b:51: 28:c5:81:d0:f9:17:98:bc:ca:a8:0c:ad:69:b1:21:20:aa:f9: 97:70:90:79:04:cd:8e:13:30:2a:31:32:e2:88:5a:55:a2:2b: d8:ba:78:c4:5c:3b:0c:2c:eb:18:62:71:06:8f:67:d8:61:b4: 6a:72:de:4e:82:fa:29:0b:32:3e:9d:e0:31:f0:19:1b:2a:42: aa:c6:78:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBkgbK7k6GLt33EZfFliy7d2BtPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1MUQ1OEYyODc2QkJEQTlDMzY2NzhFRkY4RDI3MUEx NEVBRDhBMzAeFw0yNjA5MTcwMjE2MjVaFw0yNjA5MTgwNTEzMjVaMDMxMTAvBgNV BAMTKEU3OUY4REI2NTUzRDM2QkYwMUFEM0ExMDJEODdFRjM2QzkzMEREMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFPUbaKQC9kPaIl75eeNS2CXJg VsLBvnUicH9PMvtsnJjM2i3RF+LQRn4DfjPrljUSH1lYu9DZAAVnncGqd+4++eqm KJf0x3RSGaugAbhBcBazVYhJ0eSKU7sKyoA4H8Nzt/nCTzP88evHEcWcESR2nkju bEEWXbLj/QSCVN7wLzSacEdVK7Mt2ngID7Eua1s+yqsDyU9XTfqD24xcmb9pIc2m ro4Ywysmj5dSqUJhyJeveB+RX2OAT5ow3BMXIv8dl/LMp76EIgJEVEvncLZUbjjb /bk0H/FmW2l8FiT64t4bN5cGOVLLcI+7u9v3grFgdo77a+/dWnZ73a7BAVdHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU55+NtlU9Nr8BrToQLYfvNskw3S0wHwYDVR0j BBgwFoAU1VHVjyh2u9qcNmeO/40nGhTq2KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDQwYmQ2ZTQtYjRmYi00ZjQ4LWI4M2EtYWNiOGYyZDc0NTgzLzAvRDU1MUQ1OEYy ODc2QkJEQTlDMzY2NzhFRkY4RDI3MUExNEVBRDhBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENTUxRDU4RjI4NzZCQkRBOUMzNjY3OEVGRjhEMjcxQTE0RUFE OEEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDQwYmQ2ZTQtYjRmYi00ZjQ4LWI4 M2EtYWNiOGYyZDc0NTgzLzAvRDU1MUQ1OEYyODc2QkJEQTlDMzY2NzhFRkY4RDI3 MUExNEVBRDhBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBbVY6wqHWB2xFgiSvm4QhSE320ByA40ieD SSuQSme6Z+Q6hlYZQmg+4cr1IHeXp8AJAgVNOWgO1dnN1WP5ui9P7PzEzjfXyypp WJ5rhBiUcnWYYzRYfCFEzsMTZpCnUK6d446qY+XMWlfqp/BDLQNGF0cjnuvPHEHT gCUs8tpirpdJwgu1h3RHppiS2obTlHp3Eh1PamvJqvztBsAwv3i6svmqWDlffraf FctPOxS4qcFrUSjFgdD5F5i8yqgMrWmxISCq+ZdwkHkEzY4TMCoxMuKIWlWiK9i6 eMRcOwws6xhicQaPZ9hhtGpy3k6C+ikLMj6d4DHwGRsqQqrGeMU= -----END CERTIFICATE-----Generated at Thu Sep 17 15:45:29 2026 by rpki-client