$ rpki-client -vvvf rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/677938123D24C0A27D10E007C474D99FC455C86B.mft File: 677938123D24C0A27D10E007C474D99FC455C86B.mft (raw, json) Hash identifier: cnuylBKJM+whUqz1JgInTft1YNXtNqX8tLe9Snyzbv4= Subject key identifier: 8B:C6:07:A1:1C:76:0B:F5:6D:B1:3D:83:F2:6C:EC:6E:DC:03:BB:CB Authority key identifier: 67:79:38:12:3D:24:C0:A2:7D:10:E0:07:C4:74:D9:9F:C4:55:C8:6B Certificate issuer: /CN=677938123D24C0A27D10E007C474D99FC455C86B Certificate serial: 2D6F83E8EE5486F481AAD1630090ED5D84C4FB87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/677938123D24C0A27D10E007C474D99FC455C86B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/677938123D24C0A27D10E007C474D99FC455C86B.mft Manifest number: BE Signing time: Sun 20 Sep 2026 17:23:27 +0000 Manifest this update: Sun 20 Sep 2026 17:18:27 +0000 Manifest next update: Mon 21 Sep 2026 19:46:27 +0000 Files and hashes: 1: 3135372e32302e32342e302f32342d3234203d3e203633353036.roa (hash: 4Cc4QPAN4qbF7Ai91llZsgvFRMCExHlGGbgV9qW0tuM=) 2: 677938123D24C0A27D10E007C474D99FC455C86B.crl (hash: Pci1KGILydEC9idnyOWl3ca5zcMnh/LgPPDmnZkDLyc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/677938123D24C0A27D10E007C474D99FC455C86B.crl rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/677938123D24C0A27D10E007C474D99FC455C86B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/677938123D24C0A27D10E007C474D99FC455C86B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 19:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:6f:83:e8:ee:54:86:f4:81:aa:d1:63:00:90:ed:5d:84:c4:fb:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=677938123D24C0A27D10E007C474D99FC455C86B Validity Not Before: Sep 20 17:18:27 2026 GMT Not After : Sep 21 19:46:27 2026 GMT Subject: CN=8BC607A11C760BF56DB13D83F26CEC6EDC03BBCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:84:48:ad:c3:29:74:89:53:5f:c9:18:37:d9: 5e:f5:f2:33:43:5b:27:b8:55:2b:41:17:62:16:0c: 8c:ff:85:7d:9b:6e:04:2f:1e:f2:83:25:8c:de:7d: 0f:73:8f:b9:18:aa:d0:6e:9d:32:d2:28:ce:05:d5: 51:e6:a4:28:a9:8d:ab:0e:04:9f:28:9a:d8:79:8c: 02:1a:e4:b7:26:f7:00:66:d6:1c:38:da:5b:c4:5e: 2c:ff:1a:ae:d6:2f:a0:fb:97:d7:d5:93:98:16:af: 02:b5:81:7a:6f:3e:7f:d2:bb:85:96:d7:1e:bf:ea: af:d1:34:1b:47:ce:44:77:09:c6:7b:fc:82:4b:1d: a5:41:02:5f:87:b3:0d:34:bd:2e:a3:39:d4:e4:24: 68:8b:27:51:d9:87:10:12:f6:58:93:ce:37:60:9f: a8:2b:ea:19:3c:46:d9:55:47:f2:0c:a2:da:5e:7a: 80:f3:8b:bd:2f:79:77:07:31:0c:35:b1:33:81:1b: ba:6a:b5:00:e4:85:a8:0f:31:a9:03:d7:13:2b:5d: 54:53:fb:ce:91:4c:69:1e:62:91:ab:d0:13:9b:b6: f0:55:51:45:1e:0b:a2:bd:5a:f1:30:72:2c:b8:10: db:44:b4:95:62:05:55:be:02:22:70:24:49:18:63: 6b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C6:07:A1:1C:76:0B:F5:6D:B1:3D:83:F2:6C:EC:6E:DC:03:BB:CB X509v3 Authority Key Identifier: keyid:67:79:38:12:3D:24:C0:A2:7D:10:E0:07:C4:74:D9:9F:C4:55:C8:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/677938123D24C0A27D10E007C474D99FC455C86B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/677938123D24C0A27D10E007C474D99FC455C86B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/677938123D24C0A27D10E007C474D99FC455C86B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:84:97:7a:8f:28:5b:13:a9:81:fd:09:8d:61:fd:04:71:ff: 86:e9:e5:79:8b:dd:94:87:73:bf:f3:7c:9e:33:e6:e9:18:ec: 94:95:41:58:63:60:64:02:42:a9:96:c9:91:d9:5a:c6:79:23: 7f:b9:32:8c:b0:5b:84:d3:7e:fd:d5:b1:be:3b:fe:d7:26:4d: b9:b3:5b:46:7b:6b:4c:e3:76:07:68:67:97:02:2f:b5:6c:79: 69:db:a0:eb:d4:82:bf:46:f2:c1:5b:1c:6f:a6:1a:f8:94:c3: 01:81:58:35:c2:80:de:7b:44:c4:89:76:30:f3:db:aa:2a:4d: a6:5c:80:bf:7e:8b:3e:51:78:e7:f6:71:cc:a6:3e:16:7d:ea: bd:5d:65:ce:33:1b:48:e9:d0:65:ba:9a:88:75:9b:b9:03:4b: 5b:bc:2c:35:5d:ea:84:59:30:ef:41:be:51:b4:a3:60:9d:38: 29:59:96:6a:b9:41:21:39:e7:03:d5:7a:04:b2:e1:91:b8:38: 9f:1f:e0:37:39:6a:a8:f4:3d:27:d6:05:50:5c:76:11:23:f3: 00:d4:1d:75:dd:93:72:6f:b9:53:59:40:b2:be:24:5c:eb:13: 97:b7:6e:01:66:cd:ac:8a:ff:a3:aa:27:f5:57:04:0e:3b:75: a4:b2:73:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULW+D6O5UhvSBqtFjAJDtXYTE+4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc3OTM4MTIzRDI0QzBBMjdEMTBFMDA3QzQ3NEQ5OUZD NDU1Qzg2QjAeFw0yNjA5MjAxNzE4MjdaFw0yNjA5MjExOTQ2MjdaMDMxMTAvBgNV BAMTKDhCQzYwN0ExMUM3NjBCRjU2REIxM0Q4M0YyNkNFQzZFREMwM0JCQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyhEitwyl0iVNfyRg32V718jND Wye4VStBF2IWDIz/hX2bbgQvHvKDJYzefQ9zj7kYqtBunTLSKM4F1VHmpCipjasO BJ8omth5jAIa5Lcm9wBm1hw42lvEXiz/Gq7WL6D7l9fVk5gWrwK1gXpvPn/Su4WW 1x6/6q/RNBtHzkR3CcZ7/IJLHaVBAl+Hsw00vS6jOdTkJGiLJ1HZhxAS9liTzjdg n6gr6hk8RtlVR/IMotpeeoDzi70veXcHMQw1sTOBG7pqtQDkhagPMakD1xMrXVRT +86RTGkeYpGr0BObtvBVUUUeC6K9WvEwciy4ENtEtJViBVW+AiJwJEkYY2srAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi8YHoRx2C/VtsT2D8mzsbtwDu8swHwYDVR0j BBgwFoAUZ3k4Ej0kwKJ9EOAHxHTZn8RVyGswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTViYWUzMGMtYjM2My00MDdiLWEwYWItMzE1NGViMzA5YWU5LzAvNjc3OTM4MTIz RDI0QzBBMjdEMTBFMDA3QzQ3NEQ5OUZDNDU1Qzg2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82Nzc5MzgxMjNEMjRDMEEyN0QxMEUwMDdDNDc0RDk5RkM0NTVD ODZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTViYWUzMGMtYjM2My00MDdiLWEw YWItMzE1NGViMzA5YWU5LzAvNjc3OTM4MTIzRDI0QzBBMjdEMTBFMDA3QzQ3NEQ5 OUZDNDU1Qzg2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmEl3qPKFsTqYH9CY1h/QRx/4bp5XmL3ZSH c7/zfJ4z5ukY7JSVQVhjYGQCQqmWyZHZWsZ5I3+5MoywW4TTfv3Vsb47/tcmTbmz W0Z7a0zjdgdoZ5cCL7VseWnboOvUgr9G8sFbHG+mGviUwwGBWDXCgN57RMSJdjDz 26oqTaZcgL9+iz5ReOf2ccymPhZ96r1dZc4zG0jp0GW6moh1m7kDS1u8LDVd6oRZ MO9BvlG0o2CdOClZlmq5QSE55wPVegSy4ZG4OJ8f4Dc5aqj0PSfWBVBcdhEj8wDU HXXdk3JvuVNZQLK+JFzrE5e3bgFmzayK/6OqJ/VXBA47daSyc2U= -----END CERTIFICATE-----Generated at Mon Sep 21 10:46:12 2026 by rpki-client