$ rpki-client -vvvf rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft File: D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft (raw, json) Hash identifier: 21HnyaNAnPYGNUC6cAMWZk0BhsCvjHTwAcJwtZuAMJg= Subject key identifier: 4A:40:F4:A5:CE:0D:99:2D:73:FD:F2:9B:C9:A7:D1:51:E3:1B:8A:6B Authority key identifier: D7:B3:D2:9A:1C:58:F2:A7:64:EF:71:D9:0E:EB:34:A0:85:23:E1:4B Certificate issuer: /CN=D7B3D29A1C58F2A764EF71D90EEB34A08523E14B Certificate serial: 1C7FBA47252A8BC92A8233A6DDFC621911F9E4A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft Manifest number: C1 Signing time: Mon 21 Sep 2026 07:15:35 +0000 Manifest this update: Mon 21 Sep 2026 07:10:35 +0000 Manifest next update: Tue 22 Sep 2026 09:33:35 +0000 Files and hashes: 1: D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.crl (hash: isz30qDfroB25xU9zc8spMynwkBdY/Wlw9+lNu2RlgQ=) 2: 3130332e3135322e3234332e302f32342d3234203d3e20313339343536.roa (hash: 1SUvsGX664dyT73KTnssj6SLYMQJcE1PRfUOLl0J8A0=) 3: 323430373a373234303a3a2f33322d3438203d3e203538383230.roa (hash: pbfRu1u/17aE+5jbLOXSjK5kSHLY3NJFYSy/GgweGtc=) 4: 323430373a373234303a3a2f33322d3332203d3e203538383230.roa (hash: XbL3x6HL60HenYCDQv+H+1fWOEpLqL6GUYrIDXhN5Ec=) 5: 3130332e3135322e3234322e302f32332d3233203d3e203538383230.roa (hash: UfSTsOVMmUHhlSuicPfv/acnVZkznnLyaQTNx0s5r/I=) 6: 3130332e3135322e3234322e302f32342d3234203d3e20313339343536.roa (hash: QnjSCWkwabhUboJKZ28QBKGbgaSMy7Q0+XqOshpVH5I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.crl rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:7f:ba:47:25:2a:8b:c9:2a:82:33:a6:dd:fc:62:19:11:f9:e4:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7B3D29A1C58F2A764EF71D90EEB34A08523E14B Validity Not Before: Sep 21 07:10:35 2026 GMT Not After : Sep 22 09:33:35 2026 GMT Subject: CN=4A40F4A5CE0D992D73FDF29BC9A7D151E31B8A6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b5:f5:1b:9c:b6:eb:91:b7:3f:c6:55:40:c3: d6:ac:5c:83:5a:cb:2b:50:06:09:8b:b0:f9:03:57: f9:c0:41:95:a4:4d:78:08:5b:f6:35:5c:0a:44:8a: cd:17:0f:d6:68:78:7c:fe:8a:29:69:f2:a3:81:42: 30:38:cf:34:3a:cc:79:d8:ef:59:27:44:88:d3:19: 2b:b0:d2:df:48:fd:32:e9:70:f6:d0:98:75:c2:a2: 76:63:b5:f9:60:9f:2a:1f:2d:f5:ae:ec:67:b4:0d: a4:85:6a:4d:04:8a:37:1d:ec:2f:2b:c7:89:d7:91: 97:4d:6e:d9:50:f0:67:b7:c3:98:d1:25:13:83:2a: b2:48:a9:51:1c:dc:20:6c:f1:58:cb:ae:19:82:3d: 65:03:58:ad:b6:c0:ff:1b:d3:ce:df:eb:64:e2:be: d4:bc:77:a4:6d:6f:a3:ec:ed:19:1a:3d:93:ec:3e: ce:67:87:2d:47:b4:ec:63:57:89:ea:5d:2e:71:91: c3:16:7a:55:3e:0b:a2:6c:11:a3:59:2e:7c:ad:95: 1a:27:17:ac:3f:5e:94:48:3f:af:4d:8e:0f:3c:33: 2d:d1:99:fb:b7:4d:18:e3:ee:9a:09:de:ca:4b:9b: 5c:b6:ae:63:61:d5:7e:2c:2f:0d:38:72:0d:d1:db: 55:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:40:F4:A5:CE:0D:99:2D:73:FD:F2:9B:C9:A7:D1:51:E3:1B:8A:6B X509v3 Authority Key Identifier: keyid:D7:B3:D2:9A:1C:58:F2:A7:64:EF:71:D9:0E:EB:34:A0:85:23:E1:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:9b:7b:ec:44:b9:57:80:9b:fd:e0:6d:9b:30:e4:d6:89:6e: 29:6d:5f:8c:4b:0c:31:71:da:eb:9a:e0:bb:07:b1:bd:5f:16: d3:87:cd:83:a7:6c:18:fc:05:1e:3d:03:68:ee:30:3c:e0:46: 35:d5:bc:d9:f9:c2:a8:6e:09:0a:f6:ed:91:e5:ab:46:f2:26: 13:c2:b4:93:64:ab:9b:12:65:52:bd:23:43:d0:ad:c3:00:52: 5d:71:74:08:f9:7a:58:2d:25:e8:bf:45:c1:20:16:12:69:a2: 52:6f:01:d1:13:c2:ed:c4:29:b2:58:07:37:b7:b5:60:f8:a3: 18:f4:7d:74:bc:ee:c3:80:2b:85:98:38:50:3a:03:f6:4d:9f: a0:ca:b6:98:fe:be:70:fb:01:87:65:b3:a8:3f:3b:57:02:12: 49:ad:0f:32:7b:5e:80:e6:07:50:5b:1e:be:3e:1c:bc:fb:41: d0:5c:b6:53:61:97:e6:01:fa:97:88:89:a6:f8:a5:bb:5d:0a: 8d:da:e5:ca:b6:41:d6:24:ce:02:0a:b6:85:6f:3c:f1:33:29: 37:fb:58:63:60:29:4d:e1:2b:85:3f:71:b0:d8:bb:55:96:48: 7f:79:b6:c2:bf:c3:3e:49:94:c1:15:60:08:70:81:8a:85:2c: 03:a5:cc:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHH+6RyUqi8kqgjOm3fxiGRH55KkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdCM0QyOUExQzU4RjJBNzY0RUY3MUQ5MEVFQjM0QTA4 NTIzRTE0QjAeFw0yNjA5MjEwNzEwMzVaFw0yNjA5MjIwOTMzMzVaMDMxMTAvBgNV BAMTKDRBNDBGNEE1Q0UwRDk5MkQ3M0ZERjI5QkM5QTdEMTUxRTMxQjhBNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEtfUbnLbrkbc/xlVAw9asXINa yytQBgmLsPkDV/nAQZWkTXgIW/Y1XApEis0XD9ZoeHz+iilp8qOBQjA4zzQ6zHnY 71knRIjTGSuw0t9I/TLpcPbQmHXConZjtflgnyofLfWu7Ge0DaSFak0Eijcd7C8r x4nXkZdNbtlQ8Ge3w5jRJRODKrJIqVEc3CBs8VjLrhmCPWUDWK22wP8b087f62Ti vtS8d6Rtb6Ps7RkaPZPsPs5nhy1HtOxjV4nqXS5xkcMWelU+C6JsEaNZLnytlRon F6w/XpRIP69Njg88My3Rmfu3TRjj7poJ3spLm1y2rmNh1X4sLw04cg3R21U9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSkD0pc4NmS1z/fKbyafRUeMbimswHwYDVR0j BBgwFoAU17PSmhxY8qdk73HZDus0oIUj4UswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjRiYTY3NzgtYjE2ZC00YmE4LTk4NGYtMzRlNDE5ZmM5YzQ5LzAvRDdCM0QyOUEx QzU4RjJBNzY0RUY3MUQ5MEVFQjM0QTA4NTIzRTE0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EN0IzRDI5QTFDNThGMkE3NjRFRjcxRDkwRUVCMzRBMDg1MjNF MTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjRiYTY3NzgtYjE2ZC00YmE4LTk4 NGYtMzRlNDE5ZmM5YzQ5LzAvRDdCM0QyOUExQzU4RjJBNzY0RUY3MUQ5MEVFQjM0 QTA4NTIzRTE0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWbe+xEuVeAm/3gbZsw5NaJbiltX4xLDDFx 2uua4LsHsb1fFtOHzYOnbBj8BR49A2juMDzgRjXVvNn5wqhuCQr27ZHlq0byJhPC tJNkq5sSZVK9I0PQrcMAUl1xdAj5elgtJei/RcEgFhJpolJvAdETwu3EKbJYBze3 tWD4oxj0fXS87sOAK4WYOFA6A/ZNn6DKtpj+vnD7AYdls6g/O1cCEkmtDzJ7XoDm B1BbHr4+HLz7QdBctlNhl+YB+peIiab4pbtdCo3a5cq2QdYkzgIKtoVvPPEzKTf7 WGNgKU3hK4U/cbDYu1WWSH95tsK/wz5JlMEVYAhwgYqFLAOlzGM= -----END CERTIFICATE-----Generated at Mon Sep 21 09:48:31 2026 by rpki-client