$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft File: D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft (raw, json) Hash identifier: d9PVLCJWREQsKevik30Dw10mzDXJ91MLgcE29onpTOE= Subject key identifier: AF:E5:F0:A8:04:BE:5B:DC:B4:3D:26:7C:BD:40:21:9F:BA:66:AB:AE Authority key identifier: D5:48:4C:C7:34:0F:D3:8F:D1:52:B9:51:A8:12:A7:BB:0D:2D:C7:4C Certificate issuer: /CN=D5484CC7340FD38FD152B951A812A7BB0D2DC74C Certificate serial: 50836C1C49AAA3F266C5E7383239AE5DC693737C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 00:29:09 +0000 Manifest this update: Thu 17 Sep 2026 00:24:09 +0000 Manifest next update: Fri 18 Sep 2026 02:49:09 +0000 Files and hashes: 1: D5484CC7340FD38FD152B951A812A7BB0D2DC74C.crl (hash: K0MY9UspTzkZ7u1cJ5Mle3wUYUqsZLtwqR9xxC5/mW4=) 2: 3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa (hash: qJeB9IbjX5ag+QxaHUzr5lUIsrKHS9OTMwiaemsfQJ0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.crl rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:83:6c:1c:49:aa:a3:f2:66:c5:e7:38:32:39:ae:5d:c6:93:73:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5484CC7340FD38FD152B951A812A7BB0D2DC74C Validity Not Before: Sep 17 00:24:09 2026 GMT Not After : Sep 18 02:49:09 2026 GMT Subject: CN=AFE5F0A804BE5BDCB43D267CBD40219FBA66ABAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:72:ed:39:ea:d4:21:42:65:85:bd:71:9c:cd: 0d:e3:d7:5d:b2:fe:fe:62:89:74:1a:a4:1e:77:45: 64:66:11:8b:97:36:d4:18:91:42:a4:cb:96:59:76: 62:14:c0:0c:9d:12:c1:18:08:6a:6c:7a:49:fe:49: c1:cd:a5:0d:b6:40:c1:89:27:95:36:b1:d3:50:ec: 51:5b:be:61:3a:11:fd:c0:0e:76:7f:38:0a:22:7c: 36:17:3d:46:0b:04:28:a9:52:cb:62:0c:29:7b:ac: 2a:2b:8f:a5:80:38:3b:05:49:b2:d5:36:3c:db:fd: f2:2e:57:ae:ae:04:9a:8d:d5:8a:c2:90:f9:84:39: 44:fb:c1:b1:94:14:ef:8f:3b:65:a0:4c:85:cd:39: ae:65:8d:ef:67:ac:a9:e2:63:1d:62:09:55:51:bc: d0:80:1b:32:23:e7:cf:24:08:38:c2:e7:0f:da:99: ba:e0:4e:38:2d:68:7a:62:48:dd:98:6a:87:a3:fd: e7:e9:20:ec:a2:a2:2e:c5:49:cf:95:38:21:f1:25: 24:b2:07:92:7f:05:c2:e1:05:61:b4:a6:5e:bd:31: cd:c1:70:84:f6:e8:a0:1c:7d:90:05:ad:6b:cf:88: 61:64:b2:96:4c:da:81:bd:87:9b:85:e2:e8:a3:d8: 49:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E5:F0:A8:04:BE:5B:DC:B4:3D:26:7C:BD:40:21:9F:BA:66:AB:AE X509v3 Authority Key Identifier: keyid:D5:48:4C:C7:34:0F:D3:8F:D1:52:B9:51:A8:12:A7:BB:0D:2D:C7:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:90:9d:83:fd:aa:95:a1:77:b1:31:9b:f0:f6:5a:a6:07:ab: ac:f9:d9:6a:dc:68:9c:44:0e:e7:c3:03:80:eb:65:1e:35:8e: 5b:59:bd:54:6e:5b:f3:8b:cb:e3:85:ab:5f:93:10:ec:76:11: 44:f1:66:ab:9e:fa:3b:92:b8:76:b2:72:c7:49:e6:09:d7:97: a9:02:f1:6d:87:14:59:9c:e2:00:9f:af:38:ea:c0:fb:8f:c5: 29:37:11:8d:b4:33:39:44:06:e3:9b:46:b6:e7:f3:62:71:50: 1d:21:88:08:d0:0f:67:a6:67:7c:37:39:57:cf:40:54:a4:fa: a4:44:fa:16:6a:35:a6:dc:5d:05:ca:52:e8:30:1b:2a:e5:7a: cb:9e:36:04:29:5d:99:b7:b4:bb:86:7b:68:98:01:1f:ef:31: 67:85:74:ad:81:6d:ae:be:4b:f5:11:36:df:57:6e:84:e8:9c: 99:e8:62:4c:49:2d:5d:d7:06:d8:33:ee:03:f5:7a:45:8b:47: d4:8d:06:ac:cd:c4:f4:62:74:99:aa:56:c5:64:2c:e4:0a:25: bd:b7:2d:a9:b9:5b:77:56:01:45:67:e6:c5:a9:4f:1b:fa:55: cd:ff:f5:ab:81:57:f7:48:94:c6:98:1f:d0:b0:f0:d3:99:59: 92:a1:bd:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUINsHEmqo/Jmxec4MjmuXcaTc3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0ODRDQzczNDBGRDM4RkQxNTJCOTUxQTgxMkE3QkIw RDJEQzc0QzAeFw0yNjA5MTcwMDI0MDlaFw0yNjA5MTgwMjQ5MDlaMDMxMTAvBgNV BAMTKEFGRTVGMEE4MDRCRTVCRENCNDNEMjY3Q0JENDAyMTlGQkE2NkFCQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCecu056tQhQmWFvXGczQ3j112y /v5iiXQapB53RWRmEYuXNtQYkUKky5ZZdmIUwAydEsEYCGpsekn+ScHNpQ22QMGJ J5U2sdNQ7FFbvmE6Ef3ADnZ/OAoifDYXPUYLBCipUstiDCl7rCorj6WAODsFSbLV Njzb/fIuV66uBJqN1YrCkPmEOUT7wbGUFO+PO2WgTIXNOa5lje9nrKniYx1iCVVR vNCAGzIj588kCDjC5w/ambrgTjgtaHpiSN2Yaoej/efpIOyioi7FSc+VOCHxJSSy B5J/BcLhBWG0pl69Mc3BcIT26KAcfZAFrWvPiGFkspZM2oG9h5uF4uij2EnlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr+XwqAS+W9y0PSZ8vUAhn7pmq64wHwYDVR0j BBgwFoAU1UhMxzQP04/RUrlRqBKnuw0tx0wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjJlM2U5ODEtYmYzOS00MmUwLWEyZjYtY2Y4N2M3NTdmODI3LzAvRDU0ODRDQzcz NDBGRDM4RkQxNTJCOTUxQTgxMkE3QkIwRDJEQzc0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTQ4NENDNzM0MEZEMzhGRDE1MkI5NTFBODEyQTdCQjBEMkRD NzRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjJlM2U5ODEtYmYzOS00MmUwLWEy ZjYtY2Y4N2M3NTdmODI3LzAvRDU0ODRDQzczNDBGRDM4RkQxNTJCOTUxQTgxMkE3 QkIwRDJEQzc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMKQnYP9qpWhd7Exm/D2WqYHq6z52WrcaJxE DufDA4DrZR41jltZvVRuW/OLy+OFq1+TEOx2EUTxZque+juSuHaycsdJ5gnXl6kC 8W2HFFmc4gCfrzjqwPuPxSk3EY20MzlEBuObRrbn82JxUB0hiAjQD2emZ3w3OVfP QFSk+qRE+hZqNabcXQXKUugwGyrlesueNgQpXZm3tLuGe2iYAR/vMWeFdK2Bba6+ S/URNt9XboTonJnoYkxJLV3XBtgz7gP1ekWLR9SNBqzNxPRidJmqVsVkLOQKJb23 Lam5W3dWAUVn5sWpTxv6Vc3/9auBV/dIlMaYH9Cw8NOZWZKhvbk= -----END CERTIFICATE-----Generated at Thu Sep 17 12:18:35 2026 by rpki-client