$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft File: DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft (raw, json) Hash identifier: 9e2GFkTxQYNeEta2eaDQJddjCTsDPrDIgQErh2HJTms= Subject key identifier: 32:A3:DE:90:76:93:16:E9:D5:37:9F:F8:06:56:3E:07:78:6E:0D:7A Authority key identifier: DC:C1:42:E4:BC:0A:93:D2:22:74:4D:76:4B:A3:1B:31:C5:F7:21:F4 Certificate issuer: /CN=DCC142E4BC0A93D222744D764BA31B31C5F721F4 Certificate serial: AEC1304D17398D8DE1AA663233510BAAE5C64B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft Manifest number: B0 Signing time: Thu 10 Sep 2026 16:27:15 +0000 Manifest this update: Thu 10 Sep 2026 16:22:15 +0000 Manifest next update: Fri 11 Sep 2026 19:06:15 +0000 Files and hashes: 1: 3130332e3136362e32362e302f32342d3234203d3e20313431393334.roa (hash: kO0czL3TN60s3A1dU0vSyh5gDjSRSVnVJULPxG64o8c=) 2: DCC142E4BC0A93D222744D764BA31B31C5F721F4.crl (hash: 759pq5KiL3mmJ1nCHw2CMRJZxUWDO8v/2KjnOItttcA=) 3: 3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa (hash: 8pY7CX5C+z8Wdb/RykV2FDaB/r21Vc0UIOUPAUQlFnI=) 4: 3130332e3136362e32362e302f32332d3233203d3e20313431393334.roa (hash: KOwZSGqnrtZ75etXMGQpPSN15jiljiF6C7JF8Icyb+k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.crl rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 11:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ae:c1:30:4d:17:39:8d:8d:e1:aa:66:32:33:51:0b:aa:e5:c6:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCC142E4BC0A93D222744D764BA31B31C5F721F4 Validity Not Before: Sep 10 16:22:15 2026 GMT Not After : Sep 11 19:06:15 2026 GMT Subject: CN=32A3DE90769316E9D5379FF806563E07786E0D7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:dc:74:bb:53:83:8f:48:a9:2f:a5:56:82:77: ba:d5:83:fc:f6:c7:20:ce:ea:a8:68:68:7e:10:56: 3b:2c:18:1b:91:5e:9d:55:e4:31:7d:79:3f:04:84: 8a:de:dc:69:17:a2:d9:35:8a:7e:4f:79:80:7d:bd: 4b:71:f5:b5:95:55:ae:87:8f:5f:d3:0a:6e:52:73: a2:bc:38:df:c5:76:c5:f3:af:c5:c6:91:3d:3f:31: 44:48:36:d8:52:57:65:3f:4d:e2:51:57:be:c0:95: 16:ff:4e:66:4e:c0:b4:74:39:a0:a4:c1:70:4a:00: 1d:c1:b6:df:e0:11:34:40:1c:4b:e2:67:8b:e1:a3: 44:62:3e:62:60:b8:00:44:c8:c2:f7:4f:e8:f4:80: f7:3c:24:f2:23:92:4b:67:cd:69:52:f4:ec:87:0d: 6f:fa:35:26:5a:81:1d:24:ad:c7:32:b0:7a:24:b0: c7:22:56:62:30:49:9f:57:f7:a7:2f:a7:10:7f:54: 8c:51:ee:39:0a:4a:ea:56:c4:4f:50:c3:3b:9a:70: 0b:79:45:42:31:c6:b9:0f:ab:e4:a1:5a:86:79:a2: 97:5e:91:34:39:4d:7f:8e:8b:9a:70:40:d1:f4:7d: ff:74:a8:de:65:11:81:34:ab:4b:04:0d:f6:28:0f: 13:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A3:DE:90:76:93:16:E9:D5:37:9F:F8:06:56:3E:07:78:6E:0D:7A X509v3 Authority Key Identifier: keyid:DC:C1:42:E4:BC:0A:93:D2:22:74:4D:76:4B:A3:1B:31:C5:F7:21:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:f0:dd:36:6c:df:ba:5e:2e:da:27:d5:5d:61:11:78:ef:12: bb:5c:4b:6a:e5:39:b8:88:a6:32:18:28:99:e9:c4:b9:59:1a: 93:f4:62:d1:38:09:f5:21:c3:2b:34:6e:7a:0a:ad:6f:1c:9a: 03:56:2b:c7:46:e1:b0:5d:6a:7d:c6:b2:f7:5c:ed:9f:9f:10: ab:dc:06:4f:d0:8c:c6:a7:6f:62:2a:0f:ee:8f:70:c0:0e:b1: 50:c2:01:32:1e:18:f1:f8:60:90:04:64:34:d3:e0:b4:9a:17: 1e:ba:b0:e5:bb:23:fa:06:1e:51:6b:44:80:56:2b:6c:f4:9c: e4:c5:7a:35:2f:48:86:09:71:37:03:2c:15:33:13:8f:44:2e: f0:ac:13:f3:9c:c7:3f:8f:11:40:c0:5e:8c:b0:52:df:98:b7: e7:32:e0:d2:6b:83:30:bb:8b:6d:04:13:69:d3:4a:8c:64:16: 23:20:c9:6b:5e:9d:c8:16:f6:01:82:bc:1d:b2:6d:2e:c8:29: fe:bf:50:df:2c:56:b9:2a:a1:e9:2a:bb:64:74:3e:04:e8:8b: 85:c5:3b:98:55:01:fd:ba:c9:ea:70:fc:78:b2:05:33:78:eb: 94:a8:90:4b:6e:40:9f:23:ee:c6:85:db:18:ef:86:1a:c6:70: e2:f5:d2:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAK7BME0XOY2N4apmMjNRC6rlxkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENDMTQyRTRCQzBBOTNEMjIyNzQ0RDc2NEJBMzFCMzFD NUY3MjFGNDAeFw0yNjA5MTAxNjIyMTVaFw0yNjA5MTExOTA2MTVaMDMxMTAvBgNV BAMTKDMyQTNERTkwNzY5MzE2RTlENTM3OUZGODA2NTYzRTA3Nzg2RTBEN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs3HS7U4OPSKkvpVaCd7rVg/z2 xyDO6qhoaH4QVjssGBuRXp1V5DF9eT8EhIre3GkXotk1in5PeYB9vUtx9bWVVa6H j1/TCm5Sc6K8ON/FdsXzr8XGkT0/MURINthSV2U/TeJRV77AlRb/TmZOwLR0OaCk wXBKAB3Btt/gETRAHEviZ4vho0RiPmJguABEyML3T+j0gPc8JPIjkktnzWlS9OyH DW/6NSZagR0krccysHoksMciVmIwSZ9X96cvpxB/VIxR7jkKSupWxE9QwzuacAt5 RUIxxrkPq+ShWoZ5opdekTQ5TX+Oi5pwQNH0ff90qN5lEYE0q0sEDfYoDxNvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMqPekHaTFunVN5/4BlY+B3huDXowHwYDVR0j BBgwFoAU3MFC5LwKk9IidE12S6MbMcX3IfQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmE0MTU0MzgtYWQwMS00MmRjLThjOTItMTUxYmM4YzI3MjFmLzAvRENDMTQyRTRC QzBBOTNEMjIyNzQ0RDc2NEJBMzFCMzFDNUY3MjFGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0MxNDJFNEJDMEE5M0QyMjI3NDRENzY0QkEzMUIzMUM1Rjcy MUY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmE0MTU0MzgtYWQwMS00MmRjLThj OTItMTUxYmM4YzI3MjFmLzAvRENDMTQyRTRCQzBBOTNEMjIyNzQ0RDc2NEJBMzFC MzFDNUY3MjFGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABvw3TZs37peLton1V1hEXjvErtcS2rlObiI pjIYKJnpxLlZGpP0YtE4CfUhwys0bnoKrW8cmgNWK8dG4bBdan3Gsvdc7Z+fEKvc Bk/QjManb2IqD+6PcMAOsVDCATIeGPH4YJAEZDTT4LSaFx66sOW7I/oGHlFrRIBW K2z0nOTFejUvSIYJcTcDLBUzE49ELvCsE/Ocxz+PEUDAXoywUt+Yt+cy4NJrgzC7 i20EE2nTSoxkFiMgyWtencgW9gGCvB2ybS7IKf6/UN8sVrkqoekqu2R0PgToi4XF O5hVAf26yepw/HiyBTN465SokEtuQJ8j7saF2xjvhhrGcOL10lE= -----END CERTIFICATE-----Generated at Fri Sep 11 01:11:09 2026 by rpki-client