$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft File: 872439399C3ADEB5FD342E7B6286CED219899CA2.mft (raw, json) Hash identifier: wf2ZE2gkC3VB60ePk6bHxahpAyM9soU24NGJUVi46v4= Subject key identifier: 7C:23:74:88:18:E7:F6:99:18:7C:DF:D6:37:25:7E:52:8B:54:C2:68 Authority key identifier: 87:24:39:39:9C:3A:DE:B5:FD:34:2E:7B:62:86:CE:D2:19:89:9C:A2 Certificate issuer: /CN=872439399C3ADEB5FD342E7B6286CED219899CA2 Certificate serial: 614021B88A51C8EFA7C706C3781E4D1DFA12E296 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft Manifest number: BF Signing time: Mon 21 Sep 2026 16:01:29 +0000 Manifest this update: Mon 21 Sep 2026 15:56:29 +0000 Manifest next update: Tue 22 Sep 2026 16:27:29 +0000 Files and hashes: 1: 3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa (hash: NKC5Np3Ag/+a1x7nhQql2VpKY7CAeiWtD4pS8O2fPAg=) 2: 872439399C3ADEB5FD342E7B6286CED219899CA2.crl (hash: kg2IrFZ6SyIAvxldgwyEunvLuVQM+1Sp5qjYULGmlpU=) 3: 3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa (hash: yjf0/JJFQABhzT0gnDsCQ/oag0HSQ3URmpUm4ciNYx4=) 4: 323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (hash: adl429vFkP0oWDwTvPnmag7OFx0zxihqimWJrrJGrRE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.crl rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:40:21:b8:8a:51:c8:ef:a7:c7:06:c3:78:1e:4d:1d:fa:12:e2:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=872439399C3ADEB5FD342E7B6286CED219899CA2 Validity Not Before: Sep 21 15:56:29 2026 GMT Not After : Sep 22 16:27:29 2026 GMT Subject: CN=7C23748818E7F699187CDFD637257E528B54C268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c2:0b:7a:67:a4:f9:19:23:9c:96:5e:7d:63: 00:eb:1f:ce:5c:17:26:28:82:7a:70:2e:b3:79:ea: 5c:88:fc:ef:57:53:8e:2f:82:d6:70:1f:f2:a4:3e: 93:50:c7:8e:3e:44:2b:45:0d:48:49:54:3a:33:90: a6:5d:33:52:d7:b4:cc:fc:cd:cd:a8:fb:0a:0e:4b: 84:c7:63:44:72:b6:56:5b:c4:40:45:ac:08:77:b7: 57:b5:48:e9:7c:21:04:a8:49:df:eb:a7:bb:0f:ae: 1e:32:49:1e:81:e2:d8:6a:b8:cd:d9:f4:a0:b2:dc: fd:2b:75:c6:59:44:6b:f6:8a:53:96:bd:9e:8d:24: 18:1e:97:6f:68:c8:68:13:71:31:64:61:c0:53:75: 19:ec:bf:9d:29:44:39:d5:97:9d:51:85:15:e4:f1: 84:2f:22:db:8a:b7:1c:8d:17:87:37:31:b3:c0:5b: 52:13:1d:13:89:7c:f0:a8:6d:cf:b8:86:b0:1d:9d: a3:97:5f:b1:66:93:9c:d8:ec:a6:ec:97:44:31:e2: 60:e4:b9:dd:4c:03:5e:d1:4c:6f:0e:89:2a:3d:14: 6c:59:93:68:f0:67:92:2f:49:0c:58:f3:1e:26:7c: 6a:f0:34:8d:17:37:53:89:64:23:db:cb:d1:13:e2: f2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:23:74:88:18:E7:F6:99:18:7C:DF:D6:37:25:7E:52:8B:54:C2:68 X509v3 Authority Key Identifier: keyid:87:24:39:39:9C:3A:DE:B5:FD:34:2E:7B:62:86:CE:D2:19:89:9C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:be:34:8d:78:76:d0:9d:8f:21:c6:48:ac:4f:68:af:90:99: 97:04:f4:91:9f:22:82:95:91:a6:10:cb:1d:a3:c0:b9:9b:43: f5:69:2a:62:c7:6a:21:f6:53:91:65:e1:34:e5:d6:97:56:ef: 29:f9:d0:9e:be:11:cd:18:c4:20:0b:3f:72:c9:c3:c8:7e:c5: 3e:8b:ea:ec:41:f2:2d:f8:b4:ba:f7:d7:b0:c8:d8:24:82:79: 77:36:af:28:6b:4f:c7:10:7f:19:60:eb:c5:95:5c:3a:0e:ab: 60:50:99:0d:8a:37:10:82:cb:c7:cb:5a:5d:34:fa:51:e1:9d: e2:dd:65:3e:8e:3a:29:41:9d:d3:a0:18:65:f0:8a:dd:7f:22: 97:6d:46:b4:46:67:82:cf:75:95:86:ac:fc:d3:03:e6:60:93: 57:82:8a:ff:76:62:43:97:84:6b:af:42:a9:76:3b:5b:f4:b9: bc:c6:23:48:ce:c3:00:34:34:90:73:46:c0:57:9a:a6:67:f9: 77:1d:b8:e5:62:77:77:44:27:ee:cd:ad:c2:30:1d:0a:85:98: f2:6c:15:d4:35:c8:21:55:58:f3:6c:cd:64:58:25:5e:45:fb: 8d:27:b0:12:73:f0:33:3e:9c:2c:c5:21:7f:55:f4:af:ca:3b: a4:af:5b:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYUAhuIpRyO+nxwbDeB5NHfoS4pYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcyNDM5Mzk5QzNBREVCNUZEMzQyRTdCNjI4NkNFRDIx OTg5OUNBMjAeFw0yNjA5MjExNTU2MjlaFw0yNjA5MjIxNjI3MjlaMDMxMTAvBgNV BAMTKDdDMjM3NDg4MThFN0Y2OTkxODdDREZENjM3MjU3RTUyOEI1NEMyNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdwgt6Z6T5GSOcll59YwDrH85c FyYognpwLrN56lyI/O9XU44vgtZwH/KkPpNQx44+RCtFDUhJVDozkKZdM1LXtMz8 zc2o+woOS4THY0RytlZbxEBFrAh3t1e1SOl8IQSoSd/rp7sPrh4ySR6B4thquM3Z 9KCy3P0rdcZZRGv2ilOWvZ6NJBgel29oyGgTcTFkYcBTdRnsv50pRDnVl51RhRXk 8YQvItuKtxyNF4c3MbPAW1ITHROJfPCobc+4hrAdnaOXX7Fmk5zY7Kbsl0Qx4mDk ud1MA17RTG8OiSo9FGxZk2jwZ5IvSQxY8x4mfGrwNI0XN1OJZCPby9ET4vJDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfCN0iBjn9pkYfN/WNyV+UotUwmgwHwYDVR0j BBgwFoAUhyQ5OZw63rX9NC57YobO0hmJnKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM3ZDNjYmYtMjRkNi00YjFjLTg2Y2ItMWQ0ODg3NmYzYzZiLzAvODcyNDM5Mzk5 QzNBREVCNUZEMzQyRTdCNjI4NkNFRDIxOTg5OUNBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzI0MzkzOTlDM0FERUI1RkQzNDJFN0I2Mjg2Q0VEMjE5ODk5 Q0EyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM3ZDNjYmYtMjRkNi00YjFjLTg2 Y2ItMWQ0ODg3NmYzYzZiLzAvODcyNDM5Mzk5QzNBREVCNUZEMzQyRTdCNjI4NkNF RDIxOTg5OUNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFe+NI14dtCdjyHGSKxPaK+QmZcE9JGfIoKV kaYQyx2jwLmbQ/VpKmLHaiH2U5Fl4TTl1pdW7yn50J6+Ec0YxCALP3LJw8h+xT6L 6uxB8i34tLr317DI2CSCeXc2ryhrT8cQfxlg68WVXDoOq2BQmQ2KNxCCy8fLWl00 +lHhneLdZT6OOilBndOgGGXwit1/IpdtRrRGZ4LPdZWGrPzTA+Zgk1eCiv92YkOX hGuvQql2O1v0ubzGI0jOwwA0NJBzRsBXmqZn+XcduOVid3dEJ+7NrcIwHQqFmPJs FdQ1yCFVWPNszWRYJV5F+40nsBJz8DM+nCzFIX9V9K/KO6SvW/M= -----END CERTIFICATE-----Generated at Mon Sep 21 20:52:17 2026 by rpki-client