$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft File: DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft (raw, json) Hash identifier: 7cJGpUW8Vj24SJgSYitLwlTAETsl8inwvQmCWfnsRgw= Subject key identifier: 1E:7E:3B:AD:37:E0:DC:AC:D0:E5:7E:FE:44:0C:0E:99:65:38:18:49 Authority key identifier: DF:64:8D:B0:3E:C5:64:14:81:28:C7:0F:BB:6A:0C:C8:77:3A:EF:60 Certificate issuer: /CN=DF648DB03EC564148128C70FBB6A0CC8773AEF60 Certificate serial: 6C6D38762C97F2D9DC601AEFE54D2FEEAD925540 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF648DB03EC564148128C70FBB6A0CC8773AEF60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 19:53:44 +0000 Manifest this update: Wed 16 Sep 2026 19:48:44 +0000 Manifest next update: Thu 17 Sep 2026 20:55:44 +0000 Files and hashes: 1: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (hash: Sq/TPHjnHcU8BdlRhTUGNyaSgFRduqyHP60YOl+s/e4=) 2: DF648DB03EC564148128C70FBB6A0CC8773AEF60.crl (hash: X2ZM/2jW2coQCCQ3yT5sMjcqTnfNebb00q3TEHaWGhY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.crl rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF648DB03EC564148128C70FBB6A0CC8773AEF60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:6d:38:76:2c:97:f2:d9:dc:60:1a:ef:e5:4d:2f:ee:ad:92:55:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF648DB03EC564148128C70FBB6A0CC8773AEF60 Validity Not Before: Sep 16 19:48:44 2026 GMT Not After : Sep 17 20:55:44 2026 GMT Subject: CN=1E7E3BAD37E0DCACD0E57EFE440C0E9965381849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3d:0a:f0:bb:e2:76:0c:44:fc:05:82:35:54: a5:fb:ce:70:84:e8:8f:00:d3:aa:6a:e0:87:a3:5e: c2:7a:80:cc:f7:cb:0e:94:25:a7:9a:21:9c:8a:cf: ca:a5:c7:bc:33:ac:21:0a:1b:fc:25:3e:9b:a6:22: 33:6f:25:88:d8:ec:c7:86:07:ff:24:d9:0c:2a:b2: c7:93:ff:fb:8e:18:f0:0a:ee:98:e8:01:18:bb:b7: c1:c7:2a:d1:42:0f:4c:9f:8a:32:58:07:0c:77:90: b4:15:05:8a:85:ed:d1:50:a7:0f:3d:b5:16:e6:4a: ed:96:15:de:8a:f1:4a:bc:9d:5d:11:08:26:1a:8a: ec:4a:b8:f4:1c:47:53:b8:1a:c0:ee:cc:6f:3c:b1: 6d:d9:24:db:08:d4:56:f4:74:88:cd:b1:d1:a3:23: f2:b2:91:56:0c:22:2f:75:ee:9a:fd:80:e3:78:33: b5:04:07:bd:6a:84:c9:56:09:9c:0c:6c:21:e3:82: d4:d0:1e:cf:7f:54:25:3f:9d:6a:58:c0:dd:0c:df: 46:35:79:a8:fb:f3:5b:5c:45:a9:52:a0:c5:6b:da: 84:dd:c6:2c:59:8c:ad:e4:da:05:90:9d:0d:db:7e: f1:9d:38:42:01:1b:6b:14:52:ad:f3:37:db:63:ca: f0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7E:3B:AD:37:E0:DC:AC:D0:E5:7E:FE:44:0C:0E:99:65:38:18:49 X509v3 Authority Key Identifier: keyid:DF:64:8D:B0:3E:C5:64:14:81:28:C7:0F:BB:6A:0C:C8:77:3A:EF:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF648DB03EC564148128C70FBB6A0CC8773AEF60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:03:de:5e:ff:3d:a5:76:19:5c:19:df:55:7d:2b:9c:1f:be: c1:78:b5:40:9f:71:86:2a:f0:79:95:b6:df:60:92:a4:8c:91: b0:52:9f:74:a4:af:03:cf:3c:a4:f7:54:69:af:9c:02:07:66: 28:29:7a:1c:da:fc:39:ac:1a:f3:5d:02:1a:4d:33:92:ff:79: 6f:b2:28:97:96:24:07:a7:00:cc:ec:ef:af:c5:03:db:39:0f: 89:43:fa:46:b1:47:11:e2:a3:02:ee:78:70:29:75:ff:3b:5f: 7d:9d:e3:d4:a3:ef:7b:7b:f7:03:da:49:14:2c:e5:37:f5:3a: 37:77:1f:ed:c2:02:13:00:0f:32:e1:7e:94:a0:57:e9:71:5e: 6f:66:56:4d:b7:d1:fb:9d:c4:80:8e:36:e4:4f:e8:41:29:c8: e3:f5:88:25:d7:03:ce:32:fc:cd:75:21:ad:c3:39:7c:71:38: 70:23:97:59:d1:2d:05:68:1f:61:d4:5d:67:93:25:24:27:82: ac:96:87:31:bf:8f:be:ee:f8:f6:65:5f:76:79:95:e4:87:fb: 0f:14:a2:e0:99:a8:37:8f:2b:95:cf:09:01:56:ce:8f:55:b7: 2a:4c:45:2c:59:2f:02:fc:1d:e0:96:aa:9d:89:37:06:73:cd: af:cc:1b:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbG04diyX8tncYBrv5U0v7q2SVUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2NDhEQjAzRUM1NjQxNDgxMjhDNzBGQkI2QTBDQzg3 NzNBRUY2MDAeFw0yNjA5MTYxOTQ4NDRaFw0yNjA5MTcyMDU1NDRaMDMxMTAvBgNV BAMTKDFFN0UzQkFEMzdFMERDQUNEMEU1N0VGRTQ0MEMwRTk5NjUzODE4NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+PQrwu+J2DET8BYI1VKX7znCE 6I8A06pq4IejXsJ6gMz3yw6UJaeaIZyKz8qlx7wzrCEKG/wlPpumIjNvJYjY7MeG B/8k2QwqsseT//uOGPAK7pjoARi7t8HHKtFCD0yfijJYBwx3kLQVBYqF7dFQpw89 tRbmSu2WFd6K8Uq8nV0RCCYaiuxKuPQcR1O4GsDuzG88sW3ZJNsI1Fb0dIjNsdGj I/KykVYMIi917pr9gON4M7UEB71qhMlWCZwMbCHjgtTQHs9/VCU/nWpYwN0M30Y1 eaj781tcRalSoMVr2oTdxixZjK3k2gWQnQ3bfvGdOEIBG2sUUq3zN9tjyvDZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHn47rTfg3KzQ5X7+RAwOmWU4GEkwHwYDVR0j BBgwFoAU32SNsD7FZBSBKMcPu2oMyHc672AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdkYjZjNGYtOWZkZi00N2Y2LWIyNGMtMDMzZmUzYTQ0ZDUwLzAvREY2NDhEQjAz RUM1NjQxNDgxMjhDNzBGQkI2QTBDQzg3NzNBRUY2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjY0OERCMDNFQzU2NDE0ODEyOEM3MEZCQjZBMENDODc3M0FF RjYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdkYjZjNGYtOWZkZi00N2Y2LWIy NGMtMDMzZmUzYTQ0ZDUwLzAvREY2NDhEQjAzRUM1NjQxNDgxMjhDNzBGQkI2QTBD Qzg3NzNBRUY2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAD3l7/PaV2GVwZ31V9K5wfvsF4tUCfcYYq 8HmVtt9gkqSMkbBSn3SkrwPPPKT3VGmvnAIHZigpehza/DmsGvNdAhpNM5L/eW+y KJeWJAenAMzs76/FA9s5D4lD+kaxRxHiowLueHApdf87X32d49Sj73t79wPaSRQs 5Tf1Ojd3H+3CAhMADzLhfpSgV+lxXm9mVk230fudxICONuRP6EEpyOP1iCXXA84y /M11Ia3DOXxxOHAjl1nRLQVoH2HUXWeTJSQngqyWhzG/j77u+PZlX3Z5leSH+w8U ouCZqDePK5XPCQFWzo9VtypMRSxZLwL8HeCWqp2JNwZzza/MG7M= -----END CERTIFICATE-----Generated at Thu Sep 17 10:43:39 2026 by rpki-client