$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft File: D931809BED9AF438E358376B71B803D5CE61B2F5.mft (raw, json) Hash identifier: FnMvWtvUHPRSPI5zq9KM1AAJln1w0H9JCtFAOa3pNyM= Subject key identifier: 7A:74:59:E7:EF:D0:8F:28:DF:ED:34:99:B7:E0:B4:9C:3E:EB:F3:A7 Authority key identifier: D9:31:80:9B:ED:9A:F4:38:E3:58:37:6B:71:B8:03:D5:CE:61:B2:F5 Certificate issuer: /CN=D931809BED9AF438E358376B71B803D5CE61B2F5 Certificate serial: 74374885B217E9584A5D086E945D10D676D2B2E7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D931809BED9AF438E358376B71B803D5CE61B2F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 21:20:21 +0000 Manifest this update: Wed 16 Sep 2026 21:15:21 +0000 Manifest next update: Fri 18 Sep 2026 00:05:21 +0000 Files and hashes: 1: D931809BED9AF438E358376B71B803D5CE61B2F5.crl (hash: ZTNStZLVWWv3NSKgoV9vVxvDnC4bs4x3Tgj02gsnZIg=) 2: 3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa (hash: JqEBH5YvRn5xbIFqmvyQg68HK5OM9z3ELY7zjQkgJLI=) 3: 323030313a6466313a326430303a3a2f34382d3438203d3e20313336313132.roa (hash: RKwP+mZy2zIyOi9W+fTg2udU4bmegNaF/ZtZIeSMp7c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.crl rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D931809BED9AF438E358376B71B803D5CE61B2F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:37:48:85:b2:17:e9:58:4a:5d:08:6e:94:5d:10:d6:76:d2:b2:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D931809BED9AF438E358376B71B803D5CE61B2F5 Validity Not Before: Sep 16 21:15:21 2026 GMT Not After : Sep 18 00:05:21 2026 GMT Subject: CN=7A7459E7EFD08F28DFED3499B7E0B49C3EEBF3A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3d:9e:55:d1:4a:db:c4:62:56:0a:60:b3:4b: 41:02:1e:10:ee:2f:c9:74:8c:ae:2e:d0:f6:a0:70: b5:d0:8a:79:95:49:c1:a3:0e:e4:b8:02:6e:c8:21: a2:6b:9c:26:1b:de:74:d6:fa:10:ed:69:44:bb:87: 24:da:be:8a:75:36:7c:c0:c2:0d:e5:9a:b1:d6:d0: 16:9e:eb:db:a4:38:e8:e9:6e:8b:fb:dc:ca:e6:b2: fe:60:a2:7f:cc:34:83:b9:9a:74:33:71:6d:24:3b: 7a:81:9d:cf:de:b7:3e:15:f6:32:e0:26:5a:4b:e0: f0:c6:ed:72:2d:c5:2f:c8:f6:7c:64:52:c6:3a:9a: 9f:71:48:19:c7:e1:9d:ed:5d:a5:c6:70:8a:ef:16: 46:0f:48:62:67:46:00:79:28:be:ae:f1:2d:46:88: 4f:8c:59:67:cc:9f:d2:9a:cd:6e:13:a9:24:24:c8: 0d:c1:e7:68:ee:6f:8f:08:c3:62:49:29:62:71:d8: 4e:54:a5:70:26:f8:d3:b9:f2:d9:c9:22:42:ec:a6: d5:5f:2e:39:56:08:1b:f6:2e:28:f6:f5:5c:3d:8c: 9a:b9:5c:46:f3:d5:c9:15:89:e0:88:11:9c:39:a7: fd:2e:f0:ec:65:22:63:f6:ba:52:63:e7:4f:1f:e3: 34:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:74:59:E7:EF:D0:8F:28:DF:ED:34:99:B7:E0:B4:9C:3E:EB:F3:A7 X509v3 Authority Key Identifier: keyid:D9:31:80:9B:ED:9A:F4:38:E3:58:37:6B:71:B8:03:D5:CE:61:B2:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D931809BED9AF438E358376B71B803D5CE61B2F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:b3:98:1a:c7:7e:16:91:4d:23:11:b5:ef:4f:1d:72:67:0a: 36:4b:4b:86:75:03:7e:e4:4e:66:0c:2b:dd:42:fd:98:6e:71: 02:8f:e0:87:f3:3f:03:be:43:2c:9e:be:51:96:aa:2d:15:fd: 33:c2:af:26:bc:05:c9:21:fa:eb:c7:74:d6:72:4e:67:f4:f1: 36:68:57:02:6d:23:52:a2:5b:bd:44:4b:27:fb:c1:e6:75:48: fd:80:7b:2d:61:c9:5b:73:76:f8:db:1c:dc:51:39:0f:67:30: b4:08:f7:fa:79:7c:8d:02:2b:f2:33:4c:d6:8b:72:63:da:ac: dd:d1:17:e3:0f:fb:e4:8a:61:d7:b3:1f:bf:d3:6f:be:54:7a: 4f:17:5a:0a:ab:6a:f0:ae:da:0a:74:17:98:9e:27:39:c7:64: 92:7a:3d:a8:e5:52:f9:2e:b1:15:ea:2b:48:ee:27:6c:57:5e: b9:78:e5:97:d8:85:fa:b3:6e:05:18:f0:09:32:57:c2:d5:a2: 0c:ce:b0:e6:d4:d2:a5:dc:40:46:03:39:da:3f:69:00:a5:30: ad:88:06:8d:0a:8d:2f:46:ea:43:d5:2a:99:14:cd:21:fe:2c: a8:61:ba:c4:3c:8b:e7:af:4c:bf:25:7b:ec:7c:dc:14:80:55: 9f:a5:4c:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdDdIhbIX6VhKXQhulF0Q1nbSsucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkzMTgwOUJFRDlBRjQzOEUzNTgzNzZCNzFCODAzRDVD RTYxQjJGNTAeFw0yNjA5MTYyMTE1MjFaFw0yNjA5MTgwMDA1MjFaMDMxMTAvBgNV BAMTKDdBNzQ1OUU3RUZEMDhGMjhERkVEMzQ5OUI3RTBCNDlDM0VFQkYzQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkPZ5V0UrbxGJWCmCzS0ECHhDu L8l0jK4u0PagcLXQinmVScGjDuS4Am7IIaJrnCYb3nTW+hDtaUS7hyTavop1NnzA wg3lmrHW0Bae69ukOOjpbov73Mrmsv5gon/MNIO5mnQzcW0kO3qBnc/etz4V9jLg JlpL4PDG7XItxS/I9nxkUsY6mp9xSBnH4Z3tXaXGcIrvFkYPSGJnRgB5KL6u8S1G iE+MWWfMn9KazW4TqSQkyA3B52jub48Iw2JJKWJx2E5UpXAm+NO58tnJIkLsptVf LjlWCBv2Lij29Vw9jJq5XEbz1ckVieCIEZw5p/0u8OxlImP2ulJj508f4zRhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUenRZ5+/Qjyjf7TSZt+C0nD7r86cwHwYDVR0j BBgwFoAU2TGAm+2a9DjjWDdrcbgD1c5hsvUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjBlMTFmZmMtZTc1YS00YmY0LTg0NDgtYzY4ZTIwMzM1ZWU4LzAvRDkzMTgwOUJF RDlBRjQzOEUzNTgzNzZCNzFCODAzRDVDRTYxQjJGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOTMxODA5QkVEOUFGNDM4RTM1ODM3NkI3MUI4MDNENUNFNjFC MkY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjBlMTFmZmMtZTc1YS00YmY0LTg0 NDgtYzY4ZTIwMzM1ZWU4LzAvRDkzMTgwOUJFRDlBRjQzOEUzNTgzNzZCNzFCODAz RDVDRTYxQjJGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHizmBrHfhaRTSMRte9PHXJnCjZLS4Z1A37k TmYMK91C/ZhucQKP4IfzPwO+QyyevlGWqi0V/TPCrya8Bckh+uvHdNZyTmf08TZo VwJtI1KiW71ESyf7weZ1SP2Aey1hyVtzdvjbHNxROQ9nMLQI9/p5fI0CK/IzTNaL cmParN3RF+MP++SKYdezH7/Tb75Uek8XWgqravCu2gp0F5ieJznHZJJ6PajlUvku sRXqK0juJ2xXXrl45ZfYhfqzbgUY8AkyV8LVogzOsObU0qXcQEYDOdo/aQClMK2I Bo0KjS9G6kPVKpkUzSH+LKhhusQ8i+evTL8le+x83BSAVZ+lTFE= -----END CERTIFICATE-----Generated at Thu Sep 17 10:02:05 2026 by rpki-client