$ rpki-client -vvvf rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft File: C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft (raw, json) Hash identifier: cW9ijT90LO6BQimp8H6x0WxmOPLxvtfshkdLTMGycCs= Subject key identifier: 5C:2D:73:99:BB:5B:DC:98:CD:22:4C:58:D5:E8:A9:34:0F:FC:EE:39 Authority key identifier: C7:6F:AE:70:E7:14:64:49:6E:F4:FA:8E:EE:F0:DF:5C:93:12:C7:C9 Certificate issuer: /CN=C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9 Certificate serial: 43A3AA77AAAE1170A9A5AFC37698CD871D248353 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft Manifest number: BF Signing time: Tue 22 Sep 2026 03:56:17 +0000 Manifest this update: Tue 22 Sep 2026 03:51:17 +0000 Manifest next update: Wed 23 Sep 2026 06:19:17 +0000 Files and hashes: 1: 3130332e3232382e3131362e302f32322d3234203d3e203539323831.roa (hash: GPynHByObMVja2DkXkj4DTeAw6Zu/eMPLF3FIx9zUPw=) 2: C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl (hash: U68fBboTyLO0YP/RNdIaTpyMoWiQ/BOTowuF5bxSfzs=) 3: 3133372e35392e3136302e302f32322d3234203d3e203539323831.roa (hash: eKAt3iHXo2lgEa5TxrbQhnXVdOLFjM4blG/eTgED9F0=) 4: 323430303a636438303a3a2f33322d3438203d3e203539323831.roa (hash: j1suU85D1/7FjlJvr2yGn6MbcsgwWHNmUCiTqlRJqgg=) 5: 3133372e35392e3136322e302f32332d3233203d3e203536323432.roa (hash: YSFAL2tW6cTVQfgDTgZL8q+MB0PvmVYIYCi98VnDYcA=) 6: 3133372e35392e3136322e302f32342d3234203d3e203536323432.roa (hash: WqJlVr9FXIRfRfoifCa2GdwTJsz5m8eNFT1ExD1lr/o=) 7: 3133372e35392e3136312e302f32342d3234203d3e203536323432.roa (hash: 9h4BjIyizuthkQUuXWWv2bNzQm5B95LJDNd0MLV8X24=) 8: 3130332e3232382e3131362e302f32332d3233203d3e203536323432.roa (hash: YRJhcs0eQNvvPgXOg+gQPByywRt+Knf6CLtlmsMwkjM=) 9: 3133372e35392e3136332e302f32342d3234203d3e203536323432.roa (hash: g2Ud6J6HCNFfVncrEeujGYDFgaSbLTIo6wU1RvlC+Tc=) 10: 3130332e3232382e3131362e302f32322d3232203d3e203536323432.roa (hash: RkOZ4BqJISFweILCm3wRYadHRRUC1NJILvlksQQiLxk=) 11: 3130332e3232382e3131382e302f32332d3233203d3e203536323432.roa (hash: ykRVY1EBIN+ucKdlxDLDuc2SEVpBAQD0eYMAZuEgryE=) 12: 323430303a636438303a3a2f33322d3438203d3e203536323432.roa (hash: fi/7+4zEIqvSpKlVqvbMDeqY2YCrGnjUpksCJ4fAKrA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 06:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a3:aa:77:aa:ae:11:70:a9:a5:af:c3:76:98:cd:87:1d:24:83:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9 Validity Not Before: Sep 22 03:51:17 2026 GMT Not After : Sep 23 06:19:17 2026 GMT Subject: CN=5C2D7399BB5BDC98CD224C58D5E8A9340FFCEE39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:db:9c:bb:b3:0b:43:95:2c:da:4e:2a:c2:e5: a0:94:42:e6:05:eb:9c:bf:d0:8b:30:e2:0e:00:b5: 2d:5c:df:7a:27:f6:75:9a:90:70:a4:55:dd:f4:08: 3f:84:87:a5:3a:ab:a3:96:21:8c:92:97:0d:e1:08: 22:cd:6b:bc:4a:f4:32:05:9f:e1:c8:8e:43:24:e3: e7:8b:59:2f:33:00:f1:d1:4b:9d:a1:20:2e:d8:14: 1e:8d:a5:25:b1:fe:5a:1a:9d:45:59:a8:a2:2b:c4: c9:96:1d:c4:b3:66:85:90:76:11:85:1b:c2:a8:e9: 27:13:ef:91:6a:80:0b:4c:50:6a:d2:4e:80:b6:02: 9e:1f:96:2f:c2:87:cb:63:ae:5c:25:a5:f9:d5:46: 29:02:56:6b:a3:89:f1:b6:dc:4f:f2:e6:1e:44:19: 2a:0a:67:0f:98:8a:1e:a8:46:9e:7e:e4:c7:89:bf: 84:98:11:66:1e:1a:e6:dc:29:8d:04:48:22:80:a6: 8b:5b:1f:bb:02:6e:cb:1f:bd:8a:0c:16:56:81:b2: 96:01:f1:96:dd:7c:fd:5a:25:b6:eb:8a:92:51:95: 73:44:a7:c7:3e:22:cf:8b:2d:f9:00:dd:a4:fa:32: ab:ba:fa:65:b2:c9:36:a7:6a:8e:34:4d:77:6b:d9: 7f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:2D:73:99:BB:5B:DC:98:CD:22:4C:58:D5:E8:A9:34:0F:FC:EE:39 X509v3 Authority Key Identifier: keyid:C7:6F:AE:70:E7:14:64:49:6E:F4:FA:8E:EE:F0:DF:5C:93:12:C7:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:7c:29:ea:b5:56:0d:f5:32:a1:fa:8c:65:fb:8a:ea:f3:14: c5:29:7f:87:41:fc:47:fe:a3:5b:a5:3a:e4:b9:09:e7:7e:f3: 60:b5:0c:f6:87:12:cf:f0:dc:bf:87:e0:e1:2e:f1:d5:50:a1: 75:68:03:81:7e:c0:b0:64:25:cb:82:44:96:7a:61:d3:af:9e: e4:f4:b4:3b:0c:fe:27:a5:4d:30:56:d2:db:c9:07:f4:62:15: 3d:23:b3:a0:3a:14:0a:9e:51:72:74:c1:d8:c1:ae:fe:f9:08: ac:19:99:05:b4:59:fc:45:77:0a:31:55:89:66:9c:93:86:e0: 1c:10:c1:11:e2:86:b2:6a:83:c0:eb:21:f0:bd:0c:3a:d4:10: 11:ee:9d:03:3b:dc:96:ea:22:06:47:06:45:71:1d:48:bc:0a: bb:48:c9:5c:3b:27:e3:18:5c:d1:83:16:cd:6a:e7:af:56:f7: 18:f5:12:73:aa:8e:82:d0:2e:d1:ad:ba:fd:07:df:d2:70:f8: a8:19:a3:d5:dc:5c:47:a5:e5:27:9f:8b:e1:4e:9c:bd:8b:8f: 37:8e:42:bc:39:61:93:93:40:62:e6:25:79:35:cb:6b:3c:81: 78:a2:f1:b5:98:ba:59:3b:95:78:20:b0:17:c0:ee:7b:8b:5d: b6:a6:17:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ6Oqd6quEXCppa/DdpjNhx0kg1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc2RkFFNzBFNzE0NjQ0OTZFRjRGQThFRUVGMERGNUM5 MzEyQzdDOTAeFw0yNjA5MjIwMzUxMTdaFw0yNjA5MjMwNjE5MTdaMDMxMTAvBgNV BAMTKDVDMkQ3Mzk5QkI1QkRDOThDRDIyNEM1OEQ1RThBOTM0MEZGQ0VFMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN25y7swtDlSzaTirC5aCUQuYF 65y/0Isw4g4AtS1c33on9nWakHCkVd30CD+Eh6U6q6OWIYySlw3hCCLNa7xK9DIF n+HIjkMk4+eLWS8zAPHRS52hIC7YFB6NpSWx/loanUVZqKIrxMmWHcSzZoWQdhGF G8Ko6ScT75FqgAtMUGrSToC2Ap4fli/Ch8tjrlwlpfnVRikCVmujifG23E/y5h5E GSoKZw+Yih6oRp5+5MeJv4SYEWYeGubcKY0ESCKApotbH7sCbssfvYoMFlaBspYB 8ZbdfP1aJbbripJRlXNEp8c+Is+LLfkA3aT6Mqu6+mWyyTanao40TXdr2X+FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXC1zmbtb3JjNIkxY1eipNA/87jkwHwYDVR0j BBgwFoAUx2+ucOcUZElu9PqO7vDfXJMSx8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTdhMmQyNWItY2IxOC00NWJlLTlmYTEtMTU0Y2ExNTc5MjIzLzAvQzc2RkFFNzBF NzE0NjQ0OTZFRjRGQThFRUVGMERGNUM5MzEyQzdDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzZGQUU3MEU3MTQ2NDQ5NkVGNEZBOEVFRUYwREY1QzkzMTJD N0M5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTdhMmQyNWItY2IxOC00NWJlLTlm YTEtMTU0Y2ExNTc5MjIzLzAvQzc2RkFFNzBFNzE0NjQ0OTZFRjRGQThFRUVGMERG NUM5MzEyQzdDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEt8Keq1Vg31MqH6jGX7iurzFMUpf4dB/Ef+ o1ulOuS5Ced+82C1DPaHEs/w3L+H4OEu8dVQoXVoA4F+wLBkJcuCRJZ6YdOvnuT0 tDsM/ielTTBW0tvJB/RiFT0js6A6FAqeUXJ0wdjBrv75CKwZmQW0WfxFdwoxVYlm nJOG4BwQwRHihrJqg8DrIfC9DDrUEBHunQM73JbqIgZHBkVxHUi8CrtIyVw7J+MY XNGDFs1q569W9xj1EnOqjoLQLtGtuv0H39Jw+KgZo9XcXEel5Sefi+FOnL2LjzeO Qrw5YZOTQGLmJXk1y2s8gXii8bWYulk7lXggsBfA7nuLXbamF7E= -----END CERTIFICATE-----Generated at Tue Sep 22 13:36:52 2026 by rpki-client