$ rpki-client -vvvf rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.mft File: 107CC3B5D832F9C49566A53614D4CD97DCCF422C.mft (raw, json) Hash identifier: lKfbHih9fxEWYFdPhij7LZWLfrxP/SB8Q1R0dxE7gFw= Subject key identifier: 6F:89:32:1D:FF:D7:65:27:D9:78:71:97:6C:3D:DA:09:57:84:52:81 Authority key identifier: 10:7C:C3:B5:D8:32:F9:C4:95:66:A5:36:14:D4:CD:97:DC:CF:42:2C Certificate issuer: /CN=107CC3B5D832F9C49566A53614D4CD97DCCF422C Certificate serial: 2A1E283EFA24D3564E10A61DDC47798BA7A0B4BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/107CC3B5D832F9C49566A53614D4CD97DCCF422C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.mft Manifest number: BC Signing time: Sun 20 Sep 2026 11:00:39 +0000 Manifest this update: Sun 20 Sep 2026 10:55:39 +0000 Manifest next update: Mon 21 Sep 2026 14:15:39 +0000 Files and hashes: 1: 3130332e3232302e3131342e302f32332d3234203d3e20313335343436.roa (hash: hUbYV74o2po437IyhmufJ2EH4wEuOB+BJKCVuYVEfLs=) 2: 107CC3B5D832F9C49566A53614D4CD97DCCF422C.crl (hash: 0PXiGHtsUtTd1Dp6l1SWv1aKpScPqeQQFI0F3Go4lmg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.crl rsync://rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/107CC3B5D832F9C49566A53614D4CD97DCCF422C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:15:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:1e:28:3e:fa:24:d3:56:4e:10:a6:1d:dc:47:79:8b:a7:a0:b4:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=107CC3B5D832F9C49566A53614D4CD97DCCF422C Validity Not Before: Sep 20 10:55:39 2026 GMT Not After : Sep 21 14:15:39 2026 GMT Subject: CN=6F89321DFFD76527D97871976C3DDA0957845281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5f:80:f1:8a:a9:6b:c3:be:1b:f1:dd:72:8d: 40:57:d3:c4:6b:52:a4:81:88:b3:10:f3:32:f1:d4: 1f:3e:c4:05:7d:de:06:8a:65:99:ea:1a:3f:01:c0: f6:c7:66:9c:d4:a0:4b:85:cf:9d:e8:1a:6e:21:d3: 0b:1a:eb:0d:19:8e:9c:b9:98:da:4b:ce:1d:c0:c7: 4c:72:ce:e2:b5:86:25:84:0b:cb:ec:fb:3c:46:ea: 6f:25:d3:eb:48:32:c7:4a:4b:68:85:7f:50:34:df: 13:19:11:19:f6:d7:3e:6e:0b:13:0b:55:b9:7f:b1: be:97:e1:41:e3:ea:db:9c:08:19:21:d9:c9:01:7f: 40:3e:6d:9f:b4:f7:08:f1:46:7f:66:56:90:ea:72: af:f0:ac:fe:26:4e:66:d4:3b:16:8e:8d:b3:33:2a: 7c:e4:82:44:c7:56:c0:1b:44:71:e1:0b:ba:40:a3: 0d:62:fe:3c:63:e1:05:c5:c4:c8:a3:18:95:c6:70: 23:da:7a:11:18:9b:5b:d7:4f:e0:63:e5:0e:42:56: 39:55:12:0a:cf:20:3b:90:88:72:5a:f3:3e:94:4e: 38:b6:d2:94:18:07:a7:7a:9c:09:47:20:c2:e9:c6: 9a:96:ea:76:1c:73:80:74:20:98:b9:98:fe:8d:d9: 9a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:89:32:1D:FF:D7:65:27:D9:78:71:97:6C:3D:DA:09:57:84:52:81 X509v3 Authority Key Identifier: keyid:10:7C:C3:B5:D8:32:F9:C4:95:66:A5:36:14:D4:CD:97:DC:CF:42:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/107CC3B5D832F9C49566A53614D4CD97DCCF422C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:ae:fc:c3:ee:0f:88:1f:51:7e:af:81:40:08:57:19:16:cd: e8:0c:22:6f:c1:eb:53:7c:24:43:af:a8:91:c4:7f:69:d0:f9: 74:c1:2e:76:0f:28:1f:4a:df:10:f9:55:e2:5a:7e:6e:f6:a8: aa:1f:3b:94:9e:fb:e1:c5:9d:75:32:ec:df:45:5a:ff:42:7e: fe:c9:7b:26:70:7a:5f:5a:59:d0:b3:fb:3e:0e:58:a9:d1:c1: 9c:99:b3:1d:f0:18:04:58:d0:30:f5:83:43:78:42:96:81:00: b2:2f:07:95:4a:85:f8:e7:d7:11:64:36:0d:2a:2d:2f:37:fb: 2b:a4:db:3f:da:c3:a9:72:bd:6f:97:34:08:87:93:54:39:4b: 29:76:5f:1e:02:7d:70:19:fc:22:2b:d6:b9:85:37:68:82:5f: ce:99:2a:6e:2c:aa:22:5b:03:ef:3e:25:80:7f:6f:b7:de:25: 05:51:4e:cd:54:75:2c:15:38:b5:90:73:c9:1a:5c:57:cf:e6: 46:7b:da:0f:56:c9:d0:fa:25:84:a0:a6:65:ef:e8:6d:26:9a: 1e:cc:92:2b:1c:f9:59:71:36:5b:ac:60:f1:75:18:1d:3b:e0: 2a:18:2a:8c:68:93:9a:37:e6:21:09:a7:fa:00:31:7d:e9:0f: 5c:21:12:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKh4oPvok01ZOEKYd3Ed5i6egtL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA3Q0MzQjVEODMyRjlDNDk1NjZBNTM2MTRENENEOTdE Q0NGNDIyQzAeFw0yNjA5MjAxMDU1MzlaFw0yNjA5MjExNDE1MzlaMDMxMTAvBgNV BAMTKDZGODkzMjFERkZENzY1MjdEOTc4NzE5NzZDM0REQTA5NTc4NDUyODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfX4Dxiqlrw74b8d1yjUBX08Rr UqSBiLMQ8zLx1B8+xAV93gaKZZnqGj8BwPbHZpzUoEuFz53oGm4h0wsa6w0Zjpy5 mNpLzh3Ax0xyzuK1hiWEC8vs+zxG6m8l0+tIMsdKS2iFf1A03xMZERn21z5uCxML Vbl/sb6X4UHj6tucCBkh2ckBf0A+bZ+09wjxRn9mVpDqcq/wrP4mTmbUOxaOjbMz KnzkgkTHVsAbRHHhC7pAow1i/jxj4QXFxMijGJXGcCPaehEYm1vXT+Bj5Q5CVjlV EgrPIDuQiHJa8z6UTji20pQYB6d6nAlHIMLpxpqW6nYcc4B0IJi5mP6N2ZrNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb4kyHf/XZSfZeHGXbD3aCVeEUoEwHwYDVR0j BBgwFoAUEHzDtdgy+cSVZqU2FNTNl9zPQiwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTU0YjlkMzItM2M1YS00MGUyLWI3ODgtMDY5ZGUwYzNkMmRlLzAvMTA3Q0MzQjVE ODMyRjlDNDk1NjZBNTM2MTRENENEOTdEQ0NGNDIyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDdDQzNCNUQ4MzJGOUM0OTU2NkE1MzYxNEQ0Q0Q5N0RDQ0Y0 MjJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTU0YjlkMzItM2M1YS00MGUyLWI3 ODgtMDY5ZGUwYzNkMmRlLzAvMTA3Q0MzQjVEODMyRjlDNDk1NjZBNTM2MTRENENE OTdEQ0NGNDIyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKu/MPuD4gfUX6vgUAIVxkWzegMIm/B61N8 JEOvqJHEf2nQ+XTBLnYPKB9K3xD5VeJafm72qKofO5Se++HFnXUy7N9FWv9Cfv7J eyZwel9aWdCz+z4OWKnRwZyZsx3wGARY0DD1g0N4QpaBALIvB5VKhfjn1xFkNg0q LS83+yuk2z/aw6lyvW+XNAiHk1Q5Syl2Xx4CfXAZ/CIr1rmFN2iCX86ZKm4sqiJb A+8+JYB/b7feJQVRTs1UdSwVOLWQc8kaXFfP5kZ72g9WydD6JYSgpmXv6G0mmh7M kisc+VlxNlusYPF1GB074CoYKoxok5o35iEJp/oAMX3pD1whEo8= -----END CERTIFICATE-----Generated at Mon Sep 21 05:39:10 2026 by rpki-client