$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft File: 647AC2310971579801DD46D3B271B994E9E436B8.mft (raw, json) Hash identifier: H6rmDCj54zbCE6U6msbrFoqDjZ6tIIdXDi0+Gb2c7Xk= Subject key identifier: 6A:D1:62:09:E6:D8:B9:9D:ED:AE:53:78:FC:51:57:4C:F2:BD:EE:3F Authority key identifier: 64:7A:C2:31:09:71:57:98:01:DD:46:D3:B2:71:B9:94:E9:E4:36:B8 Certificate issuer: /CN=647AC2310971579801DD46D3B271B994E9E436B8 Certificate serial: 17E8256E9104B3725BED90205C2299C6ADAEC393 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/647AC2310971579801DD46D3B271B994E9E436B8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft Manifest number: D8 Signing time: Sun 11 Oct 2026 04:11:56 +0000 Manifest this update: Sun 11 Oct 2026 04:06:56 +0000 Manifest next update: Mon 12 Oct 2026 05:16:56 +0000 Files and hashes: 1: 647AC2310971579801DD46D3B271B994E9E436B8.crl (hash: gg1LaVYRQlbCIKTDt5zlUGUbb20VVUeQWSSSkjSLeHs=) 2: 3133382e3235322e3133392e302f32342d3234203d3e20313534333837.roa (hash: yku2OKFmq6fXhF7DFYEYGMGLBbIVUHGQwGNi4OKZMJU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.crl rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/647AC2310971579801DD46D3B271B994E9E436B8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 05:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:e8:25:6e:91:04:b3:72:5b:ed:90:20:5c:22:99:c6:ad:ae:c3:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=647AC2310971579801DD46D3B271B994E9E436B8 Validity Not Before: Oct 11 04:06:56 2026 GMT Not After : Oct 12 05:16:56 2026 GMT Subject: CN=6AD16209E6D8B99DEDAE5378FC51574CF2BDEE3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d5:e6:20:0c:97:d1:64:aa:87:24:29:04:95: 7d:aa:4a:ed:41:92:81:0a:26:a4:f1:05:8a:73:5f: 0f:a6:09:26:31:41:4d:c3:de:f2:c9:ff:24:4b:4d: 30:65:ed:05:72:08:21:6c:b6:45:fb:a5:b0:9d:61: df:43:e3:fd:5e:26:1c:0f:b3:8b:f5:32:87:b1:74: de:91:cd:a8:5c:db:b5:1a:0c:b2:96:7c:cd:d8:2d: 89:d6:fb:82:48:df:81:a2:20:18:42:9c:ea:f8:1c: 1e:3f:1e:e3:e0:9e:7e:04:1b:74:27:c8:ae:37:2b: 8c:ad:27:6a:2c:a5:9a:6b:30:cd:b2:44:a2:e9:50: 21:8f:79:ab:46:11:32:15:b8:97:09:5e:01:50:3b: f3:d8:df:c2:3e:ba:16:94:ff:91:e1:94:76:7a:c0: bd:ff:7d:3b:df:70:e0:c0:7c:c5:0f:05:22:ed:e4: 25:90:58:16:6c:63:71:ab:ee:6b:d3:fa:8a:b3:1f: 40:14:66:f3:c8:48:00:d3:f5:19:7d:62:5e:7a:3c: 01:87:84:72:84:18:5a:a1:17:0f:f0:a3:e8:45:80: da:ed:2e:c7:59:98:84:1d:fb:8f:78:27:bf:4c:47: cb:63:ef:d5:20:88:8a:13:cf:ff:0c:e8:1c:fa:6b: 00:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D1:62:09:E6:D8:B9:9D:ED:AE:53:78:FC:51:57:4C:F2:BD:EE:3F X509v3 Authority Key Identifier: keyid:64:7A:C2:31:09:71:57:98:01:DD:46:D3:B2:71:B9:94:E9:E4:36:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/647AC2310971579801DD46D3B271B994E9E436B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:65:cb:f4:d8:ec:9c:c4:18:c9:ff:4d:d5:ac:fd:93:6e:a2: 78:f9:7c:26:36:5d:bc:d1:e2:41:0c:07:ae:f8:4a:a7:21:fc: 96:c3:55:7a:2e:13:e2:a3:b0:4d:6f:bc:5b:85:be:71:c6:6f: 5f:f8:cd:a7:23:d4:da:29:09:26:fd:07:6d:69:09:f9:ec:ad: 7e:b4:d0:70:57:b5:31:91:cd:c5:83:74:9a:dd:d0:cb:8e:f5: 44:fd:75:20:f4:15:63:88:90:29:64:08:91:bf:52:66:21:62: f2:fa:66:5d:38:96:1a:ca:48:6b:86:d5:9e:5f:2a:45:fb:a4: dc:bd:24:3a:a1:b5:da:3c:88:5e:29:86:8d:1a:6c:38:2f:17: 8b:fe:3a:40:c1:7b:f6:f2:fb:c9:ac:5f:39:b3:92:9c:44:f1: 6b:f1:22:05:c4:7b:e8:a1:81:f9:0c:46:fe:1e:bd:42:36:61: fd:dd:eb:58:5f:23:6c:c4:8a:65:f3:38:1e:14:27:19:fe:be: f0:fd:18:ef:50:e3:c1:ef:95:2d:27:95:0a:3b:57:72:94:37: e8:a8:d4:85:fb:73:7d:ce:d0:c7:b0:d0:07:dd:58:78:18:be: b4:61:04:80:e7:7d:4d:9c:bc:2d:93:c6:31:8e:2f:c1:21:2b: c8:c4:52:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF+glbpEEs3Jb7ZAgXCKZxq2uw5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ3QUMyMzEwOTcxNTc5ODAxREQ0NkQzQjI3MUI5OTRF OUU0MzZCODAeFw0yNjEwMTEwNDA2NTZaFw0yNjEwMTIwNTE2NTZaMDMxMTAvBgNV BAMTKDZBRDE2MjA5RTZEOEI5OURFREFFNTM3OEZDNTE1NzRDRjJCREVFM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ1eYgDJfRZKqHJCkElX2qSu1B koEKJqTxBYpzXw+mCSYxQU3D3vLJ/yRLTTBl7QVyCCFstkX7pbCdYd9D4/1eJhwP s4v1MoexdN6Rzahc27UaDLKWfM3YLYnW+4JI34GiIBhCnOr4HB4/HuPgnn4EG3Qn yK43K4ytJ2ospZprMM2yRKLpUCGPeatGETIVuJcJXgFQO/PY38I+uhaU/5HhlHZ6 wL3/fTvfcODAfMUPBSLt5CWQWBZsY3Gr7mvT+oqzH0AUZvPISADT9Rl9Yl56PAGH hHKEGFqhFw/wo+hFgNrtLsdZmIQd+494J79MR8tj79UgiIoTz/8M6Bz6awCrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUatFiCebYuZ3trlN4/FFXTPK97j8wHwYDVR0j BBgwFoAUZHrCMQlxV5gB3UbTsnG5lOnkNrgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ3OGI1MGItNDQ5Yy00NTRiLTg1MGQtZjIwODAzNzg5YjU4LzAvNjQ3QUMyMzEw OTcxNTc5ODAxREQ0NkQzQjI3MUI5OTRFOUU0MzZCOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82NDdBQzIzMTA5NzE1Nzk4MDFERDQ2RDNCMjcxQjk5NEU5RTQz NkI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ3OGI1MGItNDQ5Yy00NTRiLTg1 MGQtZjIwODAzNzg5YjU4LzAvNjQ3QUMyMzEwOTcxNTc5ODAxREQ0NkQzQjI3MUI5 OTRFOUU0MzZCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1ly/TY7JzEGMn/TdWs/ZNuonj5fCY2XbzR 4kEMB674Sqch/JbDVXouE+KjsE1vvFuFvnHGb1/4zacj1NopCSb9B21pCfnsrX60 0HBXtTGRzcWDdJrd0MuO9UT9dSD0FWOIkClkCJG/UmYhYvL6Zl04lhrKSGuG1Z5f KkX7pNy9JDqhtdo8iF4pho0abDgvF4v+OkDBe/by+8msXzmzkpxE8WvxIgXEe+ih gfkMRv4evUI2Yf3d61hfI2zEimXzOB4UJxn+vvD9GO9Q48HvlS0nlQo7V3KUN+io 1IX7c33O0Mew0AfdWHgYvrRhBIDnfU2cvC2TxjGOL8EhK8jEUlI= -----END CERTIFICATE-----Generated at Sun Oct 11 23:05:19 2026 by rpki-client