$ rpki-client -vvvf rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.mft File: C797413CFB24F6454A9F7473DF020BB107134EE7.mft (raw, json) Hash identifier: QzSuUEblYQx9QQR6vUYx2BKPYUD/1PrGqPZbl4cEm7k= Subject key identifier: D7:74:33:73:7C:DC:0B:A7:C3:BC:B5:A3:20:8A:B9:5E:FB:E0:FF:98 Authority key identifier: C7:97:41:3C:FB:24:F6:45:4A:9F:74:73:DF:02:0B:B1:07:13:4E:E7 Certificate issuer: /CN=C797413CFB24F6454A9F7473DF020BB107134EE7 Certificate serial: 6A7EFFDB2A4BE9DD86E7078932A181A27FDBF88C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C797413CFB24F6454A9F7473DF020BB107134EE7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.mft Manifest number: BE Signing time: Mon 21 Sep 2026 05:18:13 +0000 Manifest this update: Mon 21 Sep 2026 05:13:13 +0000 Manifest next update: Tue 22 Sep 2026 06:22:13 +0000 Files and hashes: 1: C797413CFB24F6454A9F7473DF020BB107134EE7.crl (hash: GQF/4XlGlHJIHcIvXGaQnBIueUm6jybVUgWJMOvMWc0=) 2: 3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa (hash: chSnFe2TA+OmeDv7yM6MlQKXcupUNd+M99kXzF+BQEw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.crl rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C797413CFB24F6454A9F7473DF020BB107134EE7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:7e:ff:db:2a:4b:e9:dd:86:e7:07:89:32:a1:81:a2:7f:db:f8:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C797413CFB24F6454A9F7473DF020BB107134EE7 Validity Not Before: Sep 21 05:13:13 2026 GMT Not After : Sep 22 06:22:13 2026 GMT Subject: CN=D77433737CDC0BA7C3BCB5A3208AB95EFBE0FF98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:55:06:e7:2b:05:d2:90:47:e1:e3:01:5a:20: ab:ac:51:c6:af:41:6f:85:4a:17:1d:2c:ab:00:7f: b1:35:3c:16:96:38:3a:be:ce:a6:09:c4:b9:30:b2: b0:cb:6e:ac:44:35:57:30:59:39:f8:11:d5:55:a2: b7:46:75:d5:dd:35:88:e9:f2:98:0e:49:ad:45:31: 39:36:6a:ae:28:c5:ab:40:4a:62:94:f3:01:f4:61: 49:73:c3:49:a7:72:0b:cd:25:db:5d:de:20:cf:41: 3f:19:27:c3:5d:dc:d9:f1:cf:68:e0:3d:51:80:1a: 58:f6:51:6f:00:bc:53:23:8c:73:56:d9:91:03:f3: d2:41:b3:59:cd:d9:0c:ba:f5:16:98:b1:f4:d5:9f: 72:20:c9:63:13:66:7a:78:84:45:f4:0b:9e:dc:1f: 04:8d:2f:72:53:6a:54:1c:fb:69:e0:f3:6d:ad:b0: 3c:05:d4:88:ce:55:97:0d:4d:8e:66:39:23:93:8d: f2:fb:ce:78:b2:a0:1a:37:82:23:50:2d:c6:83:39: 39:2d:9e:77:db:e2:22:bc:32:7f:94:2a:f0:f7:e2: db:c0:93:df:15:1e:ca:73:87:3e:04:4b:fb:8d:1e: 6f:16:66:77:f7:0e:af:d3:1e:8a:04:5f:bf:ae:82: f1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:74:33:73:7C:DC:0B:A7:C3:BC:B5:A3:20:8A:B9:5E:FB:E0:FF:98 X509v3 Authority Key Identifier: keyid:C7:97:41:3C:FB:24:F6:45:4A:9F:74:73:DF:02:0B:B1:07:13:4E:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C797413CFB24F6454A9F7473DF020BB107134EE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:bc:66:fe:9e:15:1c:18:d6:37:9a:73:a4:0e:be:ee:82:40: 8f:12:eb:6f:10:b1:6f:3e:31:8d:f6:ba:43:0d:23:14:92:ec: e7:f4:a4:4c:a2:13:16:26:ca:f3:02:b6:e5:7d:08:0d:92:34: 04:97:10:33:f9:9e:5c:52:30:97:4d:f4:c8:a9:f9:a3:a2:9a: 2c:96:0b:76:78:c6:01:d0:fa:22:18:99:a1:f8:f1:22:5d:43: 83:bb:b1:43:7f:ab:3b:e8:8e:95:91:e2:83:1b:5c:10:01:e4: e3:d6:9d:dc:29:13:f1:d0:cb:23:b4:99:b8:5c:20:08:92:d9: a5:d2:7a:73:18:f3:d2:e6:76:b6:e9:91:e0:26:de:40:f1:13: a4:be:4c:a2:b3:35:74:b2:33:1a:84:82:d7:08:80:3c:41:7b: 81:51:fe:52:3b:cc:02:cb:1c:f8:07:8e:70:4d:a0:53:26:83: 1b:47:bb:f0:1f:89:af:b9:d6:80:80:01:21:34:93:74:15:c4: a1:c7:d3:2f:6b:5f:ad:f9:ac:f4:d3:6b:b6:24:19:fd:f7:0f: 8c:a9:1b:f1:3c:ef:5f:69:e6:d0:86:dc:41:0f:59:f9:d5:d6: b6:cd:3a:db:6e:3a:72:a7:9a:c2:55:83:47:25:92:e1:85:59: 44:a8:ba:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUan7/2ypL6d2G5weJMqGBon/b+IwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc5NzQxM0NGQjI0RjY0NTRBOUY3NDczREYwMjBCQjEw NzEzNEVFNzAeFw0yNjA5MjEwNTEzMTNaFw0yNjA5MjIwNjIyMTNaMDMxMTAvBgNV BAMTKEQ3NzQzMzczN0NEQzBCQTdDM0JDQjVBMzIwOEFCOTVFRkJFMEZGOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkVQbnKwXSkEfh4wFaIKusUcav QW+FShcdLKsAf7E1PBaWODq+zqYJxLkwsrDLbqxENVcwWTn4EdVVordGddXdNYjp 8pgOSa1FMTk2aq4oxatASmKU8wH0YUlzw0mncgvNJdtd3iDPQT8ZJ8Nd3Nnxz2jg PVGAGlj2UW8AvFMjjHNW2ZED89JBs1nN2Qy69RaYsfTVn3IgyWMTZnp4hEX0C57c HwSNL3JTalQc+2ng822tsDwF1IjOVZcNTY5mOSOTjfL7zniyoBo3giNQLcaDOTkt nnfb4iK8Mn+UKvD34tvAk98VHspzhz4ES/uNHm8WZnf3Dq/THooEX7+ugvGrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU13Qzc3zcC6fDvLWjIIq5Xvvg/5gwHwYDVR0j BBgwFoAUx5dBPPsk9kVKn3Rz3wILsQcTTucwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzc4YmJmZDQtNjdiNC00OThkLTg0MTEtZTk2NGM1ZmUxMTcyLzAvQzc5NzQxM0NG QjI0RjY0NTRBOUY3NDczREYwMjBCQjEwNzEzNEVFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzk3NDEzQ0ZCMjRGNjQ1NEE5Rjc0NzNERjAyMEJCMTA3MTM0 RUU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzc4YmJmZDQtNjdiNC00OThkLTg0 MTEtZTk2NGM1ZmUxMTcyLzAvQzc5NzQxM0NGQjI0RjY0NTRBOUY3NDczREYwMjBC QjEwNzEzNEVFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAW8Zv6eFRwY1jeac6QOvu6CQI8S628QsW8+ MY32ukMNIxSS7Of0pEyiExYmyvMCtuV9CA2SNASXEDP5nlxSMJdN9Mip+aOimiyW C3Z4xgHQ+iIYmaH48SJdQ4O7sUN/qzvojpWR4oMbXBAB5OPWndwpE/HQyyO0mbhc IAiS2aXSenMY89LmdrbpkeAm3kDxE6S+TKKzNXSyMxqEgtcIgDxBe4FR/lI7zALL HPgHjnBNoFMmgxtHu/Afia+51oCAASE0k3QVxKHH0y9rX635rPTTa7YkGf33D4yp G/E8719p5tCG3EEPWfnV1rbNOttuOnKnmsJVg0clkuGFWUSoukk= -----END CERTIFICATE-----Generated at Mon Sep 21 20:42:34 2026 by rpki-client