$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft File: D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft (raw, json) Hash identifier: Nk7OKDCb29Y6XZ5sPMLSh4ZGx+87v2W25K5JneNRcZg= Subject key identifier: 8F:FA:D1:3F:60:5E:BF:31:C0:EA:71:84:27:BB:07:63:64:6B:2F:DD Authority key identifier: D3:D1:A4:AA:48:52:5A:5C:83:52:5E:AA:53:7E:49:FE:2A:F4:DF:FA Certificate issuer: /CN=D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA Certificate serial: 479599A090E8EBDD7B254F30DFDBDA92223BF03A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft Manifest number: AF Signing time: Thu 10 Sep 2026 11:36:17 +0000 Manifest this update: Thu 10 Sep 2026 11:31:17 +0000 Manifest next update: Fri 11 Sep 2026 12:31:17 +0000 Files and hashes: 1: D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.crl (hash: CkzPqxdV4q0BxwJp9omYWm5Wvkn/xaiGtsJq6WmfLks=) 2: 3130332e3136392e3133362e302f32332d3234203d3e203538383231.roa (hash: d3+XsStuI4V6Oj2xnH0hFfx5wuWKXEgPdu/mNqcOqsI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.crl rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 11:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:95:99:a0:90:e8:eb:dd:7b:25:4f:30:df:db:da:92:22:3b:f0:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA Validity Not Before: Sep 10 11:31:17 2026 GMT Not After : Sep 11 12:31:17 2026 GMT Subject: CN=8FFAD13F605EBF31C0EA718427BB0763646B2FDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:07:d7:1c:13:15:fc:f0:8f:71:1d:80:92:7e: 88:29:7f:4e:8a:0c:36:fa:7a:13:87:fc:f5:03:f4: 16:e3:58:b7:47:16:f8:14:a2:37:22:66:6b:b2:8c: 53:aa:11:93:7a:7a:5c:28:64:74:92:00:42:f7:d9: 5f:de:81:00:26:14:f3:09:38:ef:cd:b8:06:0d:ea: 06:cc:c7:59:29:12:64:eb:bb:4b:39:a4:80:44:f3: 8b:b3:f9:65:b1:13:86:92:65:04:f6:dd:e2:86:a9: e6:26:be:a4:0d:40:f7:c6:c4:fc:1a:d8:b5:c9:8d: 5e:f8:3d:7b:e6:af:fb:55:42:36:67:08:fc:3e:04: 2c:0b:e6:35:09:37:a1:36:26:3f:4b:b1:79:19:6b: 48:1d:91:c7:e1:a8:91:14:21:cb:e7:3a:5c:06:8e: 56:26:2b:38:9b:56:23:3d:20:bf:1b:ff:cc:dd:ae: 82:f6:ba:71:cc:90:5d:8d:af:12:5c:27:79:3b:cb: 1f:9f:87:72:a1:46:3f:4b:3f:30:75:45:1c:94:54: 23:2e:75:31:10:ec:a8:23:f9:56:04:b0:c8:66:5d: e8:b0:59:dc:93:30:ef:b7:35:c8:79:df:25:b3:2f: e3:36:67:29:65:3a:89:10:1e:61:b8:2c:b1:07:9a: 7d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FA:D1:3F:60:5E:BF:31:C0:EA:71:84:27:BB:07:63:64:6B:2F:DD X509v3 Authority Key Identifier: keyid:D3:D1:A4:AA:48:52:5A:5C:83:52:5E:AA:53:7E:49:FE:2A:F4:DF:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:6d:5e:65:7b:8b:27:c8:96:0e:0f:86:8a:03:6d:c4:73:bd: 87:0b:bb:21:ea:4e:43:48:0f:b4:e0:86:1a:6a:f2:c7:4f:77: 94:6d:91:4c:f0:7a:7b:75:5a:b4:45:63:29:aa:94:5b:74:fc: 6d:fd:53:40:1a:81:da:c8:a6:ae:6d:2b:a8:9f:1b:a8:f2:ed: c4:e0:fa:fd:24:eb:29:77:55:c4:ae:78:09:be:83:38:c4:8b: 6b:40:4b:cf:05:57:b9:fe:71:6f:5c:84:a0:6b:92:54:59:8f: 29:32:29:39:7c:84:61:5c:a7:32:68:a9:8e:5a:83:09:b7:ec: 0c:eb:bf:f5:5a:20:63:99:d5:f8:65:d0:74:1c:1a:13:ff:96: 84:80:22:be:b6:53:9f:52:a8:2e:c2:77:5f:7f:3b:8d:83:1e: bb:9a:7d:78:85:db:42:ea:24:3d:42:41:fb:8c:4e:59:64:4e: fe:1a:6d:88:28:40:70:45:3e:11:cb:41:ef:d7:1c:98:5d:46: a0:cc:4b:b1:c7:d3:de:7a:73:cc:3a:cd:ce:03:54:8e:5f:01: ec:48:b8:18:e8:fc:49:a2:85:9f:90:03:7a:0e:3c:03:cd:45: 5c:50:5f:0d:e9:4c:60:b1:9e:70:f3:1e:a0:86:11:ca:a4:8f: 68:ec:f7:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR5WZoJDo6917JU8w39vakiI78DowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNEMUE0QUE0ODUyNUE1QzgzNTI1RUFBNTM3RTQ5RkUy QUY0REZGQTAeFw0yNjA5MTAxMTMxMTdaFw0yNjA5MTExMjMxMTdaMDMxMTAvBgNV BAMTKDhGRkFEMTNGNjA1RUJGMzFDMEVBNzE4NDI3QkIwNzYzNjQ2QjJGREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChB9ccExX88I9xHYCSfogpf06K DDb6ehOH/PUD9BbjWLdHFvgUojciZmuyjFOqEZN6elwoZHSSAEL32V/egQAmFPMJ OO/NuAYN6gbMx1kpEmTru0s5pIBE84uz+WWxE4aSZQT23eKGqeYmvqQNQPfGxPwa 2LXJjV74PXvmr/tVQjZnCPw+BCwL5jUJN6E2Jj9LsXkZa0gdkcfhqJEUIcvnOlwG jlYmKzibViM9IL8b/8zdroL2unHMkF2NrxJcJ3k7yx+fh3KhRj9LPzB1RRyUVCMu dTEQ7Kgj+VYEsMhmXeiwWdyTMO+3Nch53yWzL+M2ZyllOokQHmG4LLEHmn1fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj/rRP2BevzHA6nGEJ7sHY2RrL90wHwYDVR0j BBgwFoAU09GkqkhSWlyDUl6qU35J/ir03/owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFjYjJlOGUtYTFhMi00Y2EwLTgwYjAtMjI1NTE4ZmZhZTE0LzAvRDNEMUE0QUE0 ODUyNUE1QzgzNTI1RUFBNTM3RTQ5RkUyQUY0REZGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EM0QxQTRBQTQ4NTI1QTVDODM1MjVFQUE1MzdFNDlGRTJBRjRE RkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFjYjJlOGUtYTFhMi00Y2EwLTgw YjAtMjI1NTE4ZmZhZTE0LzAvRDNEMUE0QUE0ODUyNUE1QzgzNTI1RUFBNTM3RTQ5 RkUyQUY0REZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANxtXmV7iyfIlg4PhooDbcRzvYcLuyHqTkNI D7Tghhpq8sdPd5RtkUzwent1WrRFYymqlFt0/G39U0AagdrIpq5tK6ifG6jy7cTg +v0k6yl3VcSueAm+gzjEi2tAS88FV7n+cW9chKBrklRZjykyKTl8hGFcpzJoqY5a gwm37Azrv/VaIGOZ1fhl0HQcGhP/loSAIr62U59SqC7Cd19/O42DHruafXiF20Lq JD1CQfuMTllkTv4abYgoQHBFPhHLQe/XHJhdRqDMS7HH0956c8w6zc4DVI5fAexI uBjo/EmihZ+QA3oOPAPNRVxQXw3pTGCxnnDzHqCGEcqkj2js9/k= -----END CERTIFICATE-----Generated at Fri Sep 11 02:07:16 2026 by rpki-client