$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft File: D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft (raw, json) Hash identifier: MELTT0MC1lgqLmE1wdBkqPngVSIdiox+pi0mIdDbrkY= Subject key identifier: 25:62:FE:BD:A1:1A:A3:8E:67:CB:8A:E3:97:7B:F9:F8:56:E4:A1:CE Authority key identifier: D3:98:21:43:FC:BA:44:20:C0:7A:A5:CE:EB:50:ED:B2:84:87:CF:2C Certificate issuer: /CN=D3982143FCBA4420C07AA5CEEB50EDB28487CF2C Certificate serial: 13F0AD39E71D1F1F02D5D24997E66F4B59BB8603 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft Manifest number: 93 Signing time: Thu 20 Aug 2026 01:34:43 +0000 Manifest this update: Thu 20 Aug 2026 01:29:43 +0000 Manifest next update: Fri 21 Aug 2026 03:23:43 +0000 Files and hashes: 1: 3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa (hash: mtrDV4mqgTGdX3FIVkCoXVE0ERKQErVYoLX9nuzS4rw=) 2: 3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa (hash: n33ojlZr3PPZOfsVvz1esHOzCxGjqSWfrz4yQc92lmw=) 3: D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.crl (hash: YvSKAyLvfxVz7262oGphMNKF3kP8LDuDzs5b1xqJ7UY=) 4: 3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa (hash: ecWkSgSwkV2u+u82kb3iMyEyHidsVg9ktP1OUEc0RVY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.crl rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Aug 2026 03:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:f0:ad:39:e7:1d:1f:1f:02:d5:d2:49:97:e6:6f:4b:59:bb:86:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3982143FCBA4420C07AA5CEEB50EDB28487CF2C Validity Not Before: Aug 20 01:29:43 2026 GMT Not After : Aug 21 03:23:43 2026 GMT Subject: CN=2562FEBDA11AA38E67CB8AE3977BF9F856E4A1CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9d:17:a8:a2:de:5c:db:92:b8:96:05:fd:f9: 6d:13:ac:6d:2f:24:20:9e:f0:d3:f2:bd:de:a0:32: d8:3f:c5:4c:f0:ab:52:36:cb:43:c9:9d:80:7f:fe: 77:a6:aa:33:bb:06:f1:f7:23:d6:1b:8f:7a:da:2d: e4:ab:af:99:75:3c:69:7d:ba:24:fb:47:30:0f:dd: 51:a6:3b:f9:88:f5:2e:96:8c:1c:15:80:4c:35:f0: 8c:9b:fe:06:33:66:26:eb:ab:b9:73:39:01:2d:dd: 70:ff:17:c3:6e:27:64:08:86:77:0b:b1:6e:7b:c7: dc:bf:10:51:8f:38:5c:ea:b1:75:af:a5:89:46:cb: 7f:b7:1e:e4:df:19:7b:b5:5f:c0:0f:38:a4:f0:c8: 32:05:94:ea:9c:87:d8:05:0c:bf:ca:cc:c6:91:4b: e6:27:a5:59:a2:e7:03:94:7d:6d:d3:2c:7f:1f:03: 40:77:83:f4:f0:da:5c:0e:ff:1e:5b:07:35:dc:d2: 59:46:67:59:01:bb:58:31:35:bb:d7:12:7f:29:bb: 4d:9a:58:20:2f:0e:01:29:bc:25:14:c9:2a:6f:73: 92:16:e0:82:c6:a4:3d:38:f5:d1:a7:84:18:dc:ee: d0:6b:db:62:2f:30:02:a0:4d:10:36:67:24:3e:95: 12:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:62:FE:BD:A1:1A:A3:8E:67:CB:8A:E3:97:7B:F9:F8:56:E4:A1:CE X509v3 Authority Key Identifier: keyid:D3:98:21:43:FC:BA:44:20:C0:7A:A5:CE:EB:50:ED:B2:84:87:CF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:d6:e1:a0:1c:3d:b7:91:ac:e2:78:58:de:00:5c:33:eb:c2: 9f:72:c7:b5:b7:c1:83:1c:4e:15:56:fa:a1:5f:69:14:f2:a8: aa:23:de:08:0f:25:07:9d:d3:66:63:35:e9:c4:3f:28:98:d2: 70:ec:47:19:f4:70:40:6d:b1:84:9d:95:31:b4:b4:a4:de:39: 66:65:ee:2a:01:84:c7:d9:be:9c:81:3f:65:e9:51:34:02:a2: f8:f9:95:ba:26:fe:d6:77:5f:54:d0:85:96:31:a8:77:58:bf: 9f:84:d5:45:95:09:4d:dc:96:8d:78:b3:c4:1f:29:f9:66:a0: a2:19:51:c7:d2:97:d7:5d:d0:a4:28:71:b0:b9:e3:7f:9c:13: b6:dc:aa:62:46:35:0e:f3:ae:00:08:6f:50:2d:e9:74:fa:3b: a6:51:0b:6e:34:10:24:c7:3d:52:f4:03:4b:ae:74:57:cd:8d: 21:c2:f1:6d:71:c7:a9:b3:18:d7:67:5b:cb:9c:20:89:0c:d2: 7b:fc:6f:c8:11:fe:57:c2:02:8e:07:c1:e7:28:36:db:63:a4: 02:f2:ed:4d:7e:88:ec:0e:d4:d3:3d:ea:cd:3a:60:c0:c8:66: a5:db:5e:f5:1f:02:27:77:3f:93:01:8f:b3:c6:27:f1:53:a3: e2:59:49:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE/CtOecdHx8C1dJJl+ZvS1m7hgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM5ODIxNDNGQ0JBNDQyMEMwN0FBNUNFRUI1MEVEQjI4 NDg3Q0YyQzAeFw0yNjA4MjAwMTI5NDNaFw0yNjA4MjEwMzIzNDNaMDMxMTAvBgNV BAMTKDI1NjJGRUJEQTExQUEzOEU2N0NCOEFFMzk3N0JGOUY4NTZFNEExQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFnReoot5c25K4lgX9+W0TrG0v JCCe8NPyvd6gMtg/xUzwq1I2y0PJnYB//nemqjO7BvH3I9Ybj3raLeSrr5l1PGl9 uiT7RzAP3VGmO/mI9S6WjBwVgEw18Iyb/gYzZibrq7lzOQEt3XD/F8NuJ2QIhncL sW57x9y/EFGPOFzqsXWvpYlGy3+3HuTfGXu1X8APOKTwyDIFlOqch9gFDL/KzMaR S+YnpVmi5wOUfW3TLH8fA0B3g/Tw2lwO/x5bBzXc0llGZ1kBu1gxNbvXEn8pu02a WCAvDgEpvCUUySpvc5IW4ILGpD049dGnhBjc7tBr22IvMAKgTRA2ZyQ+lRLrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJWL+vaEao45ny4rjl3v5+Fbkoc4wHwYDVR0j BBgwFoAU05ghQ/y6RCDAeqXO61DtsoSHzywwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZlZTgyYjctYzE4Mi00ZTgzLTg5N2MtZTAwZjNjZTFiMGQyLzAvRDM5ODIxNDNG Q0JBNDQyMEMwN0FBNUNFRUI1MEVEQjI4NDg3Q0YyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzk4MjE0M0ZDQkE0NDIwQzA3QUE1Q0VFQjUwRURCMjg0ODdD RjJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZlZTgyYjctYzE4Mi00ZTgzLTg5 N2MtZTAwZjNjZTFiMGQyLzAvRDM5ODIxNDNGQ0JBNDQyMEMwN0FBNUNFRUI1MEVE QjI4NDg3Q0YyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPW4aAcPbeRrOJ4WN4AXDPrwp9yx7W3wYMc ThVW+qFfaRTyqKoj3ggPJQed02ZjNenEPyiY0nDsRxn0cEBtsYSdlTG0tKTeOWZl 7ioBhMfZvpyBP2XpUTQCovj5lbom/tZ3X1TQhZYxqHdYv5+E1UWVCU3clo14s8Qf KflmoKIZUcfSl9dd0KQocbC543+cE7bcqmJGNQ7zrgAIb1At6XT6O6ZRC240ECTH PVL0A0uudFfNjSHC8W1xx6mzGNdnW8ucIIkM0nv8b8gR/lfCAo4HwecoNttjpALy 7U1+iOwO1NM96s06YMDIZqXbXvUfAid3P5MBj7PGJ/FTo+JZSa0= -----END CERTIFICATE-----Generated at Thu Aug 20 07:00:05 2026 by rpki-client