$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft File: 602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft (raw, json) Hash identifier: CNwubKMCYw6JvyIxilvlrpj2sCvurDQfZH60QjYpLo0= Subject key identifier: 3D:13:AB:55:50:44:2C:A2:9F:B3:82:9B:9D:F7:31:1A:36:D9:F6:BA Authority key identifier: 60:2D:C3:C0:42:45:09:89:50:9B:4B:AE:FD:B4:AA:29:1E:B6:F8:F6 Certificate issuer: /CN=602DC3C042450989509B4BAEFDB4AA291EB6F8F6 Certificate serial: 2EC7F1FB04E994C6146D908F367CF76ECB69A8CA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 19:28:17 +0000 Manifest this update: Wed 16 Sep 2026 19:23:17 +0000 Manifest next update: Thu 17 Sep 2026 20:38:17 +0000 Files and hashes: 1: 3136302e32302e33382e302f32342d3234203d3e20313532373637.roa (hash: hlIEpb1QvuixIbQLzMUMoA0W+7btuV0cgzPbAs+Iw5M=) 2: 3136302e32302e33392e302f32342d3234203d3e20313532373637.roa (hash: 7YQRPlXdULMyA1HYWK14T5iCJHvbhMELTTePtHF2CN4=) 3: 602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl (hash: Qffwen8ElXc6sdYVWrS4pcc3W4YUn3nWPRXeJF/KUF8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:c7:f1:fb:04:e9:94:c6:14:6d:90:8f:36:7c:f7:6e:cb:69:a8:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=602DC3C042450989509B4BAEFDB4AA291EB6F8F6 Validity Not Before: Sep 16 19:23:17 2026 GMT Not After : Sep 17 20:38:17 2026 GMT Subject: CN=3D13AB5550442CA29FB3829B9DF7311A36D9F6BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:68:7b:1a:99:f6:ca:a8:73:87:4d:55:bd:53: 0f:19:b7:6a:7e:71:6b:05:2d:2c:f1:b1:c5:5c:59: 9e:54:26:4c:02:73:82:76:52:b2:5c:db:62:fb:95: 10:76:6c:91:52:cb:c4:45:15:10:78:95:b3:18:4e: 9d:4f:af:f0:14:a7:d8:01:97:4a:c7:3d:c6:51:94: 3d:4f:c0:e4:d9:45:ad:99:0e:72:f4:5e:8b:6a:ba: dc:ce:fc:97:cf:b6:c9:77:e6:8d:a3:31:a3:30:27: 90:a0:40:db:fb:56:a1:46:00:48:df:bf:03:16:20: 93:65:4b:3e:c5:f3:18:ce:d0:59:f4:80:9e:a3:39: 71:aa:57:9a:3a:5f:e0:54:09:b5:79:90:bf:80:e8: 1e:6c:e5:9c:3e:a0:17:c4:4a:b5:2b:1f:08:37:ec: 47:e3:bb:4d:42:52:7c:c9:2e:b2:1e:a6:07:c5:22: 60:ec:d6:88:f3:49:d5:00:c2:b1:03:08:9a:24:70: 58:41:f6:21:8a:7b:64:fa:80:fd:31:4b:bd:26:61: 63:ce:a8:c9:4e:71:be:90:fc:42:f3:c7:a8:49:b8: 33:85:96:46:44:5f:b2:57:c6:fd:0e:0f:c3:a6:f4: 7e:4d:8b:d4:cb:20:02:0e:ec:d4:c7:eb:d5:da:9e: 29:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:13:AB:55:50:44:2C:A2:9F:B3:82:9B:9D:F7:31:1A:36:D9:F6:BA X509v3 Authority Key Identifier: keyid:60:2D:C3:C0:42:45:09:89:50:9B:4B:AE:FD:B4:AA:29:1E:B6:F8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:65:da:47:ae:42:3c:97:68:4f:d5:ac:cb:a1:5b:bf:72:55: 2c:d1:d8:19:82:7f:b0:c9:d1:6d:c5:b2:f7:0b:af:48:42:16: 7c:b7:b6:bb:ae:42:e1:88:60:9a:7a:9f:42:6e:95:cb:e8:09: 13:01:ae:87:bc:f1:cb:f8:8c:2c:31:20:7f:ce:2d:71:6f:5c: 83:b9:29:dd:7b:d9:32:39:08:85:c0:2e:75:bc:c2:bd:24:dc: 13:cf:d4:62:e7:59:0a:ed:65:04:46:75:8e:14:b8:46:7a:ed: 5b:90:0f:9f:6d:ed:a0:52:09:e4:0a:3f:36:66:bc:b3:96:d6: 88:a5:57:76:d5:f8:d4:91:d7:b1:6b:27:d9:96:ab:80:a4:f1: 38:6f:01:be:51:33:28:2d:64:14:af:25:41:35:fc:20:0e:f0: 65:87:e6:39:b3:8b:d2:51:bb:f0:9e:5e:92:6d:f7:28:8e:a4: 1d:87:fa:dc:9b:67:18:65:63:b7:11:64:34:f5:77:b1:e9:43: d1:af:59:44:bf:1c:42:36:65:6b:61:1a:92:45:c0:59:bc:df: 9c:41:e2:ef:19:9b:4a:85:2f:b0:56:48:fd:3a:b6:80:a5:8e: cb:28:06:e3:66:41:bb:f8:71:32:86:3a:25:ca:61:2d:e1:7e: 2b:a0:bd:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULsfx+wTplMYUbZCPNnz3bstpqMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAyREMzQzA0MjQ1MDk4OTUwOUI0QkFFRkRCNEFBMjkx RUI2RjhGNjAeFw0yNjA5MTYxOTIzMTdaFw0yNjA5MTcyMDM4MTdaMDMxMTAvBgNV BAMTKDNEMTNBQjU1NTA0NDJDQTI5RkIzODI5QjlERjczMTFBMzZEOUY2QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJaHsamfbKqHOHTVW9Uw8Zt2p+ cWsFLSzxscVcWZ5UJkwCc4J2UrJc22L7lRB2bJFSy8RFFRB4lbMYTp1Pr/AUp9gB l0rHPcZRlD1PwOTZRa2ZDnL0XotqutzO/JfPtsl35o2jMaMwJ5CgQNv7VqFGAEjf vwMWIJNlSz7F8xjO0Fn0gJ6jOXGqV5o6X+BUCbV5kL+A6B5s5Zw+oBfESrUrHwg3 7Efju01CUnzJLrIepgfFImDs1ojzSdUAwrEDCJokcFhB9iGKe2T6gP0xS70mYWPO qMlOcb6Q/ELzx6hJuDOFlkZEX7JXxv0OD8Om9H5Ni9TLIAIO7NTH69XanilfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPROrVVBELKKfs4KbnfcxGjbZ9rowHwYDVR0j BBgwFoAUYC3DwEJFCYlQm0uu/bSqKR62+PYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZlN2RhY2MtMmI0NS00MTQxLTk3NzUtZjFiYjlmMDUyMzk2LzAvNjAyREMzQzA0 MjQ1MDk4OTUwOUI0QkFFRkRCNEFBMjkxRUI2RjhGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82MDJEQzNDMDQyNDUwOTg5NTA5QjRCQUVGREI0QUEyOTFFQjZG OEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZlN2RhY2MtMmI0NS00MTQxLTk3 NzUtZjFiYjlmMDUyMzk2LzAvNjAyREMzQzA0MjQ1MDk4OTUwOUI0QkFFRkRCNEFB MjkxRUI2RjhGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZl2keuQjyXaE/VrMuhW79yVSzR2BmCf7DJ 0W3FsvcLr0hCFny3truuQuGIYJp6n0JulcvoCRMBroe88cv4jCwxIH/OLXFvXIO5 Kd172TI5CIXALnW8wr0k3BPP1GLnWQrtZQRGdY4UuEZ67VuQD59t7aBSCeQKPzZm vLOW1oilV3bV+NSR17FrJ9mWq4Ck8ThvAb5RMygtZBSvJUE1/CAO8GWH5jmzi9JR u/CeXpJt9yiOpB2H+tybZxhlY7cRZDT1d7HpQ9GvWUS/HEI2ZWthGpJFwFm835xB 4u8Zm0qFL7BWSP06toCljssoBuNmQbv4cTKGOiXKYS3hfiugvRU= -----END CERTIFICATE-----Generated at Thu Sep 17 10:58:24 2026 by rpki-client