$ rpki-client -vvvf rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft File: DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft (raw, json) Hash identifier: oTDQ9TxOOB3Iync2OKMurgB0Hl8cUwVufeCxjfhiwqI= Subject key identifier: 58:B8:6E:8F:5C:6D:11:80:26:D1:44:C9:F6:B0:93:AB:3D:97:12:79 Authority key identifier: DB:F8:29:0B:AC:F2:AD:96:DB:B0:24:36:48:CC:6A:C6:D6:A7:76:18 Certificate issuer: /CN=DBF8290BACF2AD96DBB0243648CC6AC6D6A77618 Certificate serial: 59BC3C3650024B3ACED37ECB2361A0AB35FFB508 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 01:40:36 +0000 Manifest this update: Thu 17 Sep 2026 01:35:36 +0000 Manifest next update: Fri 18 Sep 2026 05:28:36 +0000 Files and hashes: 1: 3130332e3137322e3132322e302f32342d3234203d3e20313431353935.roa (hash: J7DIB6hfPPTu3E2KzBH8yAsIGJFne3bOrj0Y9GAdcDc=) 2: 3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa (hash: MrbeRL/3NlCVWGAvenapRPN6GCB6X5UzgLlN8P6C5B4=) 3: DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl (hash: ws1oaEmnd1boyTjeZRTD4MDjXxYJ7sAd34IBvvP+MJg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:bc:3c:36:50:02:4b:3a:ce:d3:7e:cb:23:61:a0:ab:35:ff:b5:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF8290BACF2AD96DBB0243648CC6AC6D6A77618 Validity Not Before: Sep 17 01:35:36 2026 GMT Not After : Sep 18 05:28:36 2026 GMT Subject: CN=58B86E8F5C6D118026D144C9F6B093AB3D971279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2c:b0:32:68:54:6a:27:b4:28:b1:91:6c:cf: 60:47:97:ed:0b:24:ee:03:f0:ad:39:69:23:9e:2d: 43:4d:71:dc:eb:71:84:86:2f:ad:4c:8f:1a:a3:37: 82:a3:12:8a:6e:23:11:5f:68:cf:5c:57:a3:f2:a5: 99:4b:43:47:57:9d:60:e1:5b:77:ca:e8:91:ea:d4: 2f:3f:20:ef:8f:86:dd:83:58:df:f8:ea:a0:53:4b: be:d5:fa:61:8e:87:8a:35:75:08:da:5c:fe:7a:be: 7e:2d:27:99:b7:35:2a:23:75:38:e7:35:ff:c9:51: a5:69:1c:ad:8c:84:9a:f9:c8:13:a9:31:bb:27:5f: 14:7b:ae:be:82:6f:4f:ce:50:75:4c:92:89:d9:de: 89:92:59:ea:cc:d5:6b:e2:32:6d:90:22:88:ae:e8: c1:ef:68:e6:a4:5e:0d:d9:49:dc:b1:a0:c4:2d:c7: 22:17:05:2a:02:c0:46:6f:0f:c5:cd:a9:51:45:1a: a9:4a:60:89:7f:71:5c:28:33:4e:33:81:fa:11:43: 14:b3:fc:fb:b9:20:c4:d2:c7:66:bb:fe:a2:33:5d: 34:43:18:5e:b2:3b:85:46:de:a8:c4:c0:ec:4f:ed: 42:be:f4:6c:54:87:1d:f1:6a:a9:e1:1e:ce:f8:3a: 99:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B8:6E:8F:5C:6D:11:80:26:D1:44:C9:F6:B0:93:AB:3D:97:12:79 X509v3 Authority Key Identifier: keyid:DB:F8:29:0B:AC:F2:AD:96:DB:B0:24:36:48:CC:6A:C6:D6:A7:76:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:03:d5:bc:bd:fa:36:7f:c5:e9:25:4a:2e:00:d4:dc:3c:5a: 1f:47:bd:04:e2:9d:09:c1:50:58:c4:ba:a5:5b:b0:49:7a:9a: 5e:7f:08:d7:b0:1e:6f:01:30:91:d5:c4:9c:34:b8:24:d3:a6: 2a:cb:f0:ae:17:40:0e:56:56:6d:93:e1:ea:c3:62:66:31:ef: 58:4f:bf:7b:d8:3c:4d:e3:bd:38:31:84:f1:d7:a5:8e:1a:ac: b3:48:63:54:84:f5:f9:1d:aa:69:06:14:23:c2:31:f5:77:02: 08:5e:47:b9:ce:3c:f3:4f:13:8d:de:51:85:79:e0:25:e5:3e: ab:7b:b8:96:fd:e5:c9:b9:aa:a0:24:c6:73:dd:37:db:07:10: 96:77:06:70:20:ef:b3:da:62:44:44:40:89:bf:43:ce:1e:a3: 1f:d5:11:f6:90:8a:47:70:7a:ee:f9:7d:ea:dc:a2:4e:28:31: 51:73:88:29:22:a4:44:63:12:4d:38:25:85:49:b0:37:6f:f5: 15:e7:9d:a3:c7:de:ca:39:24:bd:28:a2:1c:a5:43:99:8d:aa: 57:52:b5:a7:38:27:32:d3:c3:9f:e2:a7:fc:f1:bc:58:45:43: c4:ba:b3:1a:c6:72:3e:c1:ad:a6:e1:c4:5d:b9:c1:e2:33:ce: 83:87:c3:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWbw8NlACSzrO037LI2GgqzX/tQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGODI5MEJBQ0YyQUQ5NkRCQjAyNDM2NDhDQzZBQzZE NkE3NzYxODAeFw0yNjA5MTcwMTM1MzZaFw0yNjA5MTgwNTI4MzZaMDMxMTAvBgNV BAMTKDU4Qjg2RThGNUM2RDExODAyNkQxNDRDOUY2QjA5M0FCM0Q5NzEyNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSLLAyaFRqJ7QosZFsz2BHl+0L JO4D8K05aSOeLUNNcdzrcYSGL61MjxqjN4KjEopuIxFfaM9cV6PypZlLQ0dXnWDh W3fK6JHq1C8/IO+Pht2DWN/46qBTS77V+mGOh4o1dQjaXP56vn4tJ5m3NSojdTjn Nf/JUaVpHK2MhJr5yBOpMbsnXxR7rr6Cb0/OUHVMkonZ3omSWerM1WviMm2QIoiu 6MHvaOakXg3ZSdyxoMQtxyIXBSoCwEZvD8XNqVFFGqlKYIl/cVwoM04zgfoRQxSz /Pu5IMTSx2a7/qIzXTRDGF6yO4VG3qjEwOxP7UK+9GxUhx3xaqnhHs74OpnXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWLhuj1xtEYAm0UTJ9rCTqz2XEnkwHwYDVR0j BBgwFoAU2/gpC6zyrZbbsCQ2SMxqxtandhgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU2MDA0ODYtOTc4MC00M2VlLWJiMmQtYjgxMTA5NGExNDQ1LzAvREJGODI5MEJB Q0YyQUQ5NkRCQjAyNDM2NDhDQzZBQzZENkE3NzYxOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQkY4MjkwQkFDRjJBRDk2REJCMDI0MzY0OENDNkFDNkQ2QTc3 NjE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU2MDA0ODYtOTc4MC00M2VlLWJi MmQtYjgxMTA5NGExNDQ1LzAvREJGODI5MEJBQ0YyQUQ5NkRCQjAyNDM2NDhDQzZB QzZENkE3NzYxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0D1by9+jZ/xeklSi4A1Nw8Wh9HvQTinQnB UFjEuqVbsEl6ml5/CNewHm8BMJHVxJw0uCTTpirL8K4XQA5WVm2T4erDYmYx71hP v3vYPE3jvTgxhPHXpY4arLNIY1SE9fkdqmkGFCPCMfV3AgheR7nOPPNPE43eUYV5 4CXlPqt7uJb95cm5qqAkxnPdN9sHEJZ3BnAg77PaYkREQIm/Q84eox/VEfaQikdw eu75fercok4oMVFziCkipERjEk04JYVJsDdv9RXnnaPH3so5JL0oohylQ5mNqldS tac4JzLTw5/ip/zxvFhFQ8S6sxrGcj7BrabhxF25weIzzoOHw+g= -----END CERTIFICATE-----Generated at Thu Sep 17 11:27:04 2026 by rpki-client