$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft File: D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft (raw, json) Hash identifier: kORx7470CWeipsmRNkb4kzuzEwYlQ9Zrrf+ZSD7zsFw= Subject key identifier: F0:05:3B:0B:F8:C0:EF:80:82:DC:6C:B0:72:99:4C:84:5F:41:05:35 Authority key identifier: D2:86:1B:66:14:2D:51:B5:DE:4E:39:CD:C5:E1:64:41:59:BC:7B:BC Certificate issuer: /CN=D2861B66142D51B5DE4E39CDC5E1644159BC7BBC Certificate serial: 72FD0A9769899F7D0A149D53C75F1A0E919DE239 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 12:24:02 +0000 Manifest this update: Thu 17 Sep 2026 12:19:02 +0000 Manifest next update: Fri 18 Sep 2026 14:00:02 +0000 Files and hashes: 1: D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.crl (hash: 4HS5r2lhCGfNwFfQoYyfWq9GxgE9xzgYkEziX2ZXG1o=) 2: 323030313a6466333a643163303a3a2f34382d3438203d3e20313532373538.roa (hash: KLJKltDFBgSRycUEiUgW7XKQBHKRYM0bmiK8DEJJdYA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.crl rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:fd:0a:97:69:89:9f:7d:0a:14:9d:53:c7:5f:1a:0e:91:9d:e2:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2861B66142D51B5DE4E39CDC5E1644159BC7BBC Validity Not Before: Sep 17 12:19:02 2026 GMT Not After : Sep 18 14:00:02 2026 GMT Subject: CN=F0053B0BF8C0EF8082DC6CB072994C845F410535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:77:46:b6:5f:ed:fb:4f:43:63:2e:fb:bf:13: 83:dc:39:fa:a9:12:98:ea:45:38:04:37:7e:f4:d5: fc:c7:0c:6d:58:2c:c1:2b:b4:f2:b9:7d:f1:1c:27: b2:2b:36:a5:2e:ca:90:2d:c6:5d:75:f5:6e:d0:67: ad:a5:cc:e5:86:3d:43:42:d8:fe:03:e5:0b:8f:16: b3:01:f3:d3:19:f3:c6:ff:b6:eb:22:89:c4:68:fd: 31:55:35:bf:8d:77:c6:7a:cf:b8:a9:60:dd:78:5d: 78:60:2c:a0:0c:c2:00:7a:a0:b3:b5:56:3e:83:95: c8:71:84:17:ba:fd:4a:b7:c3:31:d8:d5:ef:82:db: 06:60:45:a9:58:98:04:aa:77:82:93:b4:82:b2:e4: bb:21:be:8c:1a:f1:f3:20:1c:7d:45:c1:5a:dc:6e: cb:76:74:c7:7a:da:d5:c4:c0:ea:4f:fe:1a:c7:a1: 60:2f:37:b9:ae:5b:5d:21:c5:6a:a3:d3:5a:6a:c6: 31:d5:4b:a2:54:f7:15:4b:3a:a6:38:85:15:91:b5: af:36:c6:c5:e4:a0:a7:e3:46:c3:4d:e3:2b:8a:7f: ff:f6:76:2f:59:a0:4e:fa:60:70:6b:87:10:38:7c: dc:fe:0e:9b:cb:63:de:ac:d2:0b:e1:4a:e9:06:40: e1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:05:3B:0B:F8:C0:EF:80:82:DC:6C:B0:72:99:4C:84:5F:41:05:35 X509v3 Authority Key Identifier: keyid:D2:86:1B:66:14:2D:51:B5:DE:4E:39:CD:C5:E1:64:41:59:BC:7B:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:31:e0:62:a5:32:09:a6:5d:95:85:d7:5c:18:5f:e9:31:6e: a9:61:50:d5:d3:a9:5d:91:45:cd:f5:7b:e5:cd:26:8a:83:dd: 90:2e:31:81:e3:66:08:f6:59:93:53:f9:08:26:ad:4c:34:33: 6b:80:9c:12:7b:65:39:32:6a:d2:7c:65:04:d3:46:a8:29:b0: 12:45:35:2d:8a:c7:f7:99:c7:8f:df:0b:d6:4a:94:24:dc:5f: d5:b1:0c:28:28:50:6d:67:ee:28:81:ff:93:01:42:e3:eb:14: 01:6b:c3:8e:5c:06:77:21:90:be:84:22:cb:7d:d8:f5:85:69: ff:99:eb:dd:e5:a0:b7:a3:4a:71:d0:af:b8:1e:6f:5c:49:87: 2d:c6:80:4c:68:15:05:6f:d4:5e:74:9c:31:a0:32:c3:f7:1c: cf:99:83:43:a5:19:78:ae:d0:00:d3:b2:4c:0c:0a:d3:f3:62: 6e:90:e1:73:01:7f:78:85:61:3c:19:97:d9:ff:ea:35:2a:2d: d9:6f:00:ed:52:e6:f8:d0:76:a1:38:7f:8c:c1:7a:9f:d0:4a: 71:72:1b:40:a9:cf:46:ca:0d:f9:a8:36:e5:6f:fd:c6:61:56: 7c:78:a4:2d:9e:e6:86:57:63:0f:24:13:81:2d:18:37:20:f7: 5b:a9:b7:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcv0Kl2mJn30KFJ1Tx18aDpGd4jkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4NjFCNjYxNDJENTFCNURFNEUzOUNEQzVFMTY0NDE1 OUJDN0JCQzAeFw0yNjA5MTcxMjE5MDJaFw0yNjA5MTgxNDAwMDJaMDMxMTAvBgNV BAMTKEYwMDUzQjBCRjhDMEVGODA4MkRDNkNCMDcyOTk0Qzg0NUY0MTA1MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCld0a2X+37T0NjLvu/E4PcOfqp EpjqRTgEN3701fzHDG1YLMErtPK5ffEcJ7IrNqUuypAtxl119W7QZ62lzOWGPUNC 2P4D5QuPFrMB89MZ88b/tusiicRo/TFVNb+Nd8Z6z7ipYN14XXhgLKAMwgB6oLO1 Vj6DlchxhBe6/Uq3wzHY1e+C2wZgRalYmASqd4KTtIKy5Lshvowa8fMgHH1FwVrc bst2dMd62tXEwOpP/hrHoWAvN7muW10hxWqj01pqxjHVS6JU9xVLOqY4hRWRta82 xsXkoKfjRsNN4yuKf//2di9ZoE76YHBrhxA4fNz+DpvLY96s0gvhSukGQOH3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8AU7C/jA74CC3GywcplMhF9BBTUwHwYDVR0j BBgwFoAU0oYbZhQtUbXeTjnNxeFkQVm8e7wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdkZDI1MTktMzA3OC00N2QzLTllODYtNDhmZDNiZGU3NmM4LzEvRDI4NjFCNjYx NDJENTFCNURFNEUzOUNEQzVFMTY0NDE1OUJDN0JCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjg2MUI2NjE0MkQ1MUI1REU0RTM5Q0RDNUUxNjQ0MTU5QkM3 QkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzEvRDI4NjFCNjYxNDJENTFCNURFNEUzOUNEQzVFMTY0 NDE1OUJDN0JCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0x4GKlMgmmXZWF11wYX+kxbqlhUNXTqV2R Rc31e+XNJoqD3ZAuMYHjZgj2WZNT+QgmrUw0M2uAnBJ7ZTkyatJ8ZQTTRqgpsBJF NS2Kx/eZx4/fC9ZKlCTcX9WxDCgoUG1n7iiB/5MBQuPrFAFrw45cBnchkL6EIst9 2PWFaf+Z693loLejSnHQr7geb1xJhy3GgExoFQVv1F50nDGgMsP3HM+Zg0OlGXiu 0ADTskwMCtPzYm6Q4XMBf3iFYTwZl9n/6jUqLdlvAO1S5vjQdqE4f4zBep/QSnFy G0Cpz0bKDfmoNuVv/cZhVnx4pC2e5oZXYw8kE4EtGDcg91uptwk= -----END CERTIFICATE-----Generated at Thu Sep 17 18:22:48 2026 by rpki-client