$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.mft File: D67DDCB46CF40B52641F71BF7756DFA29F4159A2.mft (raw, json) Hash identifier: 6F4CpdvTkG/BDe34NuORoeePzwbU8CYSCJG+7kNNkEE= Subject key identifier: ED:99:B1:23:CE:CC:8B:07:25:E6:F3:1B:49:D9:43:EC:4D:11:8B:14 Authority key identifier: D6:7D:DC:B4:6C:F4:0B:52:64:1F:71:BF:77:56:DF:A2:9F:41:59:A2 Certificate issuer: /CN=D67DDCB46CF40B52641F71BF7756DFA29F4159A2 Certificate serial: 22CFA6B9E26D842E00E1A11291A083F26209E484 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 18:32:06 +0000 Manifest this update: Wed 16 Sep 2026 18:27:06 +0000 Manifest next update: Thu 17 Sep 2026 20:56:06 +0000 Files and hashes: 1: 3230332e3135332e3131322e302f32312d3234203d3e203234323037.roa (hash: Lw1DMZ5kJp5ICeFivj5ZZ60njB9OoQuGFsGq8+auMdU=) 2: 3230332e3135332e39362e302f32302d3234203d3e203234323037.roa (hash: AhfkSgsUfVbnlwjYQF5FXALegxkl9ZVed7BF03/fBz8=) 3: 323430343a663630303a3a2f33322d3438203d3e203234323037.roa (hash: O3BW4/+vpeYZOrGXcLGA8HAU1zfqrZRISOMkRbThX6s=) 4: 3232322e3136352e3139322e302f31382d3234203d3e203234323037.roa (hash: XrQbHF8ES5i2bpLQRbTUE7Wl3M4ZUVmyaoRlPolZS6Y=) 5: D67DDCB46CF40B52641F71BF7756DFA29F4159A2.crl (hash: jGvC/AP980lQDQBivnXcEtKrVBtuzfAX3MRTkn+Z7fg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.crl rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:cf:a6:b9:e2:6d:84:2e:00:e1:a1:12:91:a0:83:f2:62:09:e4:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D67DDCB46CF40B52641F71BF7756DFA29F4159A2 Validity Not Before: Sep 16 18:27:06 2026 GMT Not After : Sep 17 20:56:06 2026 GMT Subject: CN=ED99B123CECC8B0725E6F31B49D943EC4D118B14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:04:24:dd:5d:8b:37:6c:d8:b2:24:a8:dc:6c: fc:00:3f:6e:b6:4f:c0:2e:8a:f8:5a:ae:5d:c0:a9: af:ff:10:47:83:84:9d:8a:8f:86:61:97:28:ca:fd: 10:bd:be:ec:8a:53:79:a1:e2:ef:21:30:2f:74:73: 0c:68:3d:11:aa:2b:f8:8f:28:fb:59:95:3e:45:ed: 26:2c:ab:b6:a1:99:3c:1f:b9:bb:87:7b:d3:f3:bf: 91:aa:84:72:00:3c:8a:da:7c:dd:78:ab:4b:7c:e1: 88:78:31:3e:29:c1:a8:be:84:2d:8e:63:07:f0:c2: 85:da:9f:3a:4b:5d:4e:8c:bd:8c:94:39:34:b6:09: 49:40:f1:bc:90:7b:7b:f9:29:83:c1:e6:e5:3f:99: f3:17:bd:da:3d:82:81:d3:6c:0c:d0:a9:7c:9e:cb: 4e:fb:4c:11:bd:11:c9:65:5c:29:98:4e:a7:be:16: df:8a:6c:09:36:78:14:b7:81:78:2e:0f:5f:c9:9e: 78:9c:d9:c2:b7:8a:9f:8e:d1:e4:7d:e5:87:9d:78: 8a:d1:e5:28:86:2d:0a:bc:9b:dd:d1:4d:69:1e:27: ca:21:e1:18:35:f5:1d:92:72:af:7c:eb:ea:56:76: 67:95:27:83:c6:44:c2:13:36:51:f3:28:e6:60:19: 87:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:99:B1:23:CE:CC:8B:07:25:E6:F3:1B:49:D9:43:EC:4D:11:8B:14 X509v3 Authority Key Identifier: keyid:D6:7D:DC:B4:6C:F4:0B:52:64:1F:71:BF:77:56:DF:A2:9F:41:59:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:f6:3f:71:ae:a9:ce:66:e6:ed:ae:77:2c:ff:65:3e:6b:90: bb:50:4b:da:e8:22:9a:1f:2c:a7:0b:96:78:76:42:bf:06:a8: 97:1b:04:22:eb:36:81:9d:40:ab:54:97:27:52:85:31:03:91: 72:f2:65:7e:4d:0b:08:d0:28:0b:84:c0:19:82:4d:a7:fe:88: 3f:b3:87:74:dd:77:9d:80:9a:bf:9f:13:27:28:b6:66:db:83: e5:71:34:53:89:aa:de:a4:3b:ae:12:89:12:ee:54:96:84:69: 7e:9f:7d:96:c9:40:db:76:04:10:ea:e7:20:e8:88:67:ef:54: 1d:cb:6b:3d:b5:ac:6e:f1:e4:4f:95:26:65:28:3d:18:60:1f: 8d:d8:db:c0:8c:b3:e3:58:88:b3:f4:e8:ba:e6:0f:48:6a:d3: 40:6e:6e:82:18:0b:eb:c0:19:70:cf:e5:80:58:cd:2b:ea:df: 95:8f:95:3c:0b:b4:98:5f:cd:aa:49:4a:45:ee:79:19:05:cd: 62:df:c6:1c:24:ee:59:70:a6:3f:83:a4:c2:ba:b1:4b:99:c1: 75:61:3e:d6:37:6c:77:75:4e:26:d4:30:0c:a4:f1:b0:c3:f2: b6:31:72:61:e6:02:5a:42:ec:8e:ae:51:fe:fd:11:e0:ef:cf: eb:69:4c:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIs+mueJthC4A4aESkaCD8mIJ5IQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY3RERDQjQ2Q0Y0MEI1MjY0MUY3MUJGNzc1NkRGQTI5 RjQxNTlBMjAeFw0yNjA5MTYxODI3MDZaFw0yNjA5MTcyMDU2MDZaMDMxMTAvBgNV BAMTKEVEOTlCMTIzQ0VDQzhCMDcyNUU2RjMxQjQ5RDk0M0VDNEQxMThCMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9BCTdXYs3bNiyJKjcbPwAP262 T8Auivharl3Aqa//EEeDhJ2Kj4ZhlyjK/RC9vuyKU3mh4u8hMC90cwxoPRGqK/iP KPtZlT5F7SYsq7ahmTwfubuHe9Pzv5GqhHIAPIrafN14q0t84Yh4MT4pwai+hC2O YwfwwoXanzpLXU6MvYyUOTS2CUlA8byQe3v5KYPB5uU/mfMXvdo9goHTbAzQqXye y077TBG9EcllXCmYTqe+Ft+KbAk2eBS3gXguD1/Jnnic2cK3ip+O0eR95YedeIrR 5SiGLQq8m93RTWkeJ8oh4Rg19R2Scq986+pWdmeVJ4PGRMITNlHzKOZgGYe5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7ZmxI87Miwcl5vMbSdlD7E0RixQwHwYDVR0j BBgwFoAU1n3ctGz0C1JkH3G/d1bfop9BWaIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmM3ZTgwODEtNjNhZi00OWU3LTk2NDYtNzZjMjVhNWU5N2NhLzAvRDY3RERDQjQ2 Q0Y0MEI1MjY0MUY3MUJGNzc1NkRGQTI5RjQxNTlBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjdERENCNDZDRjQwQjUyNjQxRjcxQkY3NzU2REZBMjlGNDE1 OUEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmM3ZTgwODEtNjNhZi00OWU3LTk2 NDYtNzZjMjVhNWU5N2NhLzAvRDY3RERDQjQ2Q0Y0MEI1MjY0MUY3MUJGNzc1NkRG QTI5RjQxNTlBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADf2P3Guqc5m5u2udyz/ZT5rkLtQS9roIpof LKcLlnh2Qr8GqJcbBCLrNoGdQKtUlydShTEDkXLyZX5NCwjQKAuEwBmCTaf+iD+z h3Tdd52Amr+fEycotmbbg+VxNFOJqt6kO64SiRLuVJaEaX6ffZbJQNt2BBDq5yDo iGfvVB3Laz21rG7x5E+VJmUoPRhgH43Y28CMs+NYiLP06LrmD0hq00BuboIYC+vA GXDP5YBYzSvq35WPlTwLtJhfzapJSkXueRkFzWLfxhwk7llwpj+DpMK6sUuZwXVh PtY3bHd1TibUMAyk8bDD8rYxcmHmAlpC7I6uUf79EeDvz+tpTF0= -----END CERTIFICATE-----Generated at Thu Sep 17 09:19:24 2026 by rpki-client