$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.mft File: 0834397E0D61D0AABF517AF83A3C2BA1DB62C242.mft (raw, json) Hash identifier: df4xWHTkFNMwryNEVg8FQgr/Der/yjnLnsStXV3lSmo= Subject key identifier: AC:72:5B:1A:D4:39:E5:AC:FE:89:53:67:AD:CD:4F:AD:7B:FF:1F:EB Authority key identifier: 08:34:39:7E:0D:61:D0:AA:BF:51:7A:F8:3A:3C:2B:A1:DB:62:C2:42 Certificate issuer: /CN=0834397E0D61D0AABF517AF83A3C2BA1DB62C242 Certificate serial: 0AE6DD4CD8D7D8408A856EA4B03BFBFC71D1F0B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 14:47:18 +0000 Manifest this update: Wed 16 Sep 2026 14:42:18 +0000 Manifest next update: Thu 17 Sep 2026 15:57:18 +0000 Files and hashes: 1: 0834397E0D61D0AABF517AF83A3C2BA1DB62C242.crl (hash: KF8EQwwhtihuf6MSIQyLDIeJ0tJl9Z89bnc+eBsaO/A=) 2: 3130332e3135382e3139362e302f32342d3234203d3e20313431313333.roa (hash: +HdgvP+uGxgAxogBbgKZdpEZmiEj0DQvXIC1nOPvcEc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.crl rsync://rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 15:57:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:e6:dd:4c:d8:d7:d8:40:8a:85:6e:a4:b0:3b:fb:fc:71:d1:f0:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0834397E0D61D0AABF517AF83A3C2BA1DB62C242 Validity Not Before: Sep 16 14:42:18 2026 GMT Not After : Sep 17 15:57:18 2026 GMT Subject: CN=AC725B1AD439E5ACFE895367ADCD4FAD7BFF1FEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:be:58:a2:a4:65:f6:6e:8f:e0:a8:0a:ea:89: 8f:a9:04:30:28:bf:2f:c2:2f:ba:0d:e4:3f:28:b9: 4e:5d:96:b0:9f:20:de:2a:7e:94:28:87:9a:aa:2a: f6:17:78:28:d8:a8:19:5a:5d:b5:97:e5:58:91:4b: b0:95:69:44:01:68:bb:14:75:fd:53:33:2d:d4:5c: 95:9d:f6:73:fc:7e:03:fa:9c:0e:ff:0b:0f:fa:fb: 71:05:99:18:e3:0f:2e:33:2d:a4:db:c0:25:b1:76: 97:8e:2e:fa:98:e0:20:fd:48:48:00:ad:23:27:2f: 92:b0:3a:88:f9:37:74:89:d4:cf:ec:e9:c4:64:c9: 68:95:bf:52:ba:fa:df:92:d3:fd:1b:a1:17:f9:ca: 8d:91:be:a0:0f:ef:e0:63:a1:eb:60:a5:40:d8:2b: 08:10:3d:e2:93:5f:7a:63:31:7e:bb:cb:f5:e0:41: c9:87:fd:f9:06:8b:60:e7:d5:51:9a:16:47:e1:f2: 4e:11:b6:39:bc:fc:4d:33:e6:fc:15:7b:82:9a:e2: 07:39:f0:ca:d7:ab:c2:75:fd:8f:57:a4:f5:96:a7: 56:46:d3:f2:0d:c7:40:44:72:19:1f:60:7a:85:af: bb:0d:44:a1:d4:a5:34:3f:9c:2a:6d:cf:9f:da:58: 34:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:72:5B:1A:D4:39:E5:AC:FE:89:53:67:AD:CD:4F:AD:7B:FF:1F:EB X509v3 Authority Key Identifier: keyid:08:34:39:7E:0D:61:D0:AA:BF:51:7A:F8:3A:3C:2B:A1:DB:62:C2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/0834397E0D61D0AABF517AF83A3C2BA1DB62C242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:a0:66:c9:4c:d6:35:e3:38:07:f8:0a:fd:62:0a:a3:ac:e1: 25:2f:e2:b7:53:90:eb:06:e6:5e:f6:d4:3d:9c:20:19:45:ba: 0c:28:76:12:a7:81:95:94:aa:37:ed:70:9f:cf:cc:de:1e:b6: ee:ae:5f:6e:5e:62:85:03:5e:24:f3:64:5c:9a:68:99:39:59: 55:70:a4:f2:28:21:68:94:e3:8f:f2:b8:d6:64:ce:a6:f6:1c: cc:7c:f5:62:fa:27:f4:54:f2:96:81:76:39:7b:c4:da:6c:27: 2e:69:52:fa:d7:fc:58:a8:a4:5b:c3:94:bd:cc:bc:c1:9f:04: 6e:4d:8c:0b:79:0d:51:6f:64:02:6f:77:74:4e:77:f6:c5:09: d3:34:62:12:47:ef:eb:cb:7d:bd:72:83:16:44:79:c5:9a:27: d9:e6:7e:17:85:55:64:e3:90:ad:1c:d8:ae:ff:a2:db:c4:f4: 16:d6:dd:99:7d:21:60:52:01:4d:a4:a0:44:dd:9f:95:51:d3: 3d:ef:9b:46:29:8a:10:56:32:13:2c:69:e7:9f:29:34:f8:3b: d7:3e:9c:b3:46:a6:0b:cc:aa:0e:d5:d5:6b:40:2c:81:18:52: fb:7c:0e:91:00:49:51:62:31:88:8e:d0:f7:47:b0:54:3f:c8: 5e:de:37:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCubdTNjX2ECKhW6ksDv7/HHR8LkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDgzNDM5N0UwRDYxRDBBQUJGNTE3QUY4M0EzQzJCQTFE QjYyQzI0MjAeFw0yNjA5MTYxNDQyMThaFw0yNjA5MTcxNTU3MThaMDMxMTAvBgNV BAMTKEFDNzI1QjFBRDQzOUU1QUNGRTg5NTM2N0FEQ0Q0RkFEN0JGRjFGRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCevliipGX2bo/gqArqiY+pBDAo vy/CL7oN5D8ouU5dlrCfIN4qfpQoh5qqKvYXeCjYqBlaXbWX5ViRS7CVaUQBaLsU df1TMy3UXJWd9nP8fgP6nA7/Cw/6+3EFmRjjDy4zLaTbwCWxdpeOLvqY4CD9SEgA rSMnL5KwOoj5N3SJ1M/s6cRkyWiVv1K6+t+S0/0boRf5yo2RvqAP7+BjoetgpUDY KwgQPeKTX3pjMX67y/XgQcmH/fkGi2Dn1VGaFkfh8k4Rtjm8/E0z5vwVe4Ka4gc5 8MrXq8J1/Y9XpPWWp1ZG0/INx0BEchkfYHqFr7sNRKHUpTQ/nCptz5/aWDRzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrHJbGtQ55az+iVNnrc1PrXv/H+swHwYDVR0j BBgwFoAUCDQ5fg1h0Kq/UXr4OjwrodtiwkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZkZGNiNGItNmQ4ZS00NTliLThhYTItOTlhNjA4ODYyNTZhLzAvMDgzNDM5N0Uw RDYxRDBBQUJGNTE3QUY4M0EzQzJCQTFEQjYyQzI0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wODM0Mzk3RTBENjFEMEFBQkY1MTdBRjgzQTNDMkJBMURCNjJD MjQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZkZGNiNGItNmQ4ZS00NTliLThh YTItOTlhNjA4ODYyNTZhLzAvMDgzNDM5N0UwRDYxRDBBQUJGNTE3QUY4M0EzQzJC QTFEQjYyQzI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALagZslM1jXjOAf4Cv1iCqOs4SUv4rdTkOsG 5l721D2cIBlFugwodhKngZWUqjftcJ/PzN4etu6uX25eYoUDXiTzZFyaaJk5WVVw pPIoIWiU44/yuNZkzqb2HMx89WL6J/RU8paBdjl7xNpsJy5pUvrX/FiopFvDlL3M vMGfBG5NjAt5DVFvZAJvd3ROd/bFCdM0YhJH7+vLfb1ygxZEecWaJ9nmfheFVWTj kK0c2K7/otvE9BbW3Zl9IWBSAU2koETdn5VR0z3vm0YpihBWMhMsaeefKTT4O9c+ nLNGpgvMqg7V1WtALIEYUvt8DpEASVFiMYiO0PdHsFQ/yF7eN3Q= -----END CERTIFICATE-----Generated at Thu Sep 17 10:03:20 2026 by rpki-client