$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft File: 673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft (raw, json) Hash identifier: uZsMWhxqqKF3pUKNTcEpbfuKpZguVNPnF0DrqROuhek= Subject key identifier: 0B:AA:44:E1:77:8C:F0:54:A8:F4:52:DA:00:3A:A0:D4:8D:18:E0:A8 Authority key identifier: 67:30:62:FF:FB:B8:7D:54:B2:4F:80:0C:A7:1D:4C:1D:D7:7E:2B:87 Certificate issuer: /CN=673062FFFBB87D54B24F800CA71D4C1DD77E2B87 Certificate serial: 1AEA39438147B928310BD883C85ECFED4643E8EA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 20:41:07 +0000 Manifest this update: Thu 24 Sep 2026 20:36:07 +0000 Manifest next update: Fri 25 Sep 2026 21:33:07 +0000 Files and hashes: 1: 3130332e32392e31302e302f32332d3233203d3e20313431303634.roa (hash: IBUQjMZ5NNzGmdB2zhWUusvHNKo79g9C811Va7sgvlo=) 2: 673062FFFBB87D54B24F800CA71D4C1DD77E2B87.crl (hash: 6xz9DUubF1xelqBmyhAcof5hqiqNfRQ6ou6uNYbqENs=) 3: 3130332e32392e31302e302f32342d3234203d3e20313431303634.roa (hash: uSk10krPfxdFIHOBpfkxhwhZ1K9QJq18Qw/WrYuUlfQ=) 4: 3130332e32392e31312e302f32342d3234203d3e20313431303634.roa (hash: +AUN4MHHWAUjMgF6xm0EYpBlr5qq8MXy2UpCeEPacA4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.crl rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ea:39:43:81:47:b9:28:31:0b:d8:83:c8:5e:cf:ed:46:43:e8:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=673062FFFBB87D54B24F800CA71D4C1DD77E2B87 Validity Not Before: Sep 24 20:36:07 2026 GMT Not After : Sep 25 21:33:07 2026 GMT Subject: CN=0BAA44E1778CF054A8F452DA003AA0D48D18E0A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0f:a3:35:db:59:db:7d:95:f4:ea:22:60:1b: 73:c9:22:72:3b:cc:d7:08:85:b7:cf:9b:17:ea:97: 4c:a1:38:78:95:c3:f3:60:16:c3:ae:15:87:42:7a: 08:41:98:73:7f:ac:7e:4d:e8:d9:c2:9b:24:fd:a5: 43:92:b0:ad:cc:d3:70:94:a7:35:c1:a6:ac:28:d9: 0e:c8:04:c0:8e:8b:f4:23:54:c0:e4:5e:03:b4:42: f8:12:67:23:79:90:3d:d1:c7:2d:f5:75:e0:cb:c3: 5b:5f:43:4b:64:e3:28:06:e7:6c:63:9d:52:50:00: 35:ef:f9:63:90:7c:8a:a5:88:79:60:95:15:b5:2d: ef:f5:a6:37:81:01:42:54:fe:cc:ca:74:04:7d:9c: e6:09:d9:a8:86:69:ef:e4:bc:ec:61:61:3e:72:4b: ae:98:53:6a:d9:eb:cc:86:c8:8a:a5:9d:f7:d5:a0: 44:6b:da:b6:80:ef:bc:37:ca:39:5f:82:42:56:71: 6e:06:37:63:dd:e5:30:4f:4d:78:25:c2:47:4e:dd: f7:97:d3:3b:b3:65:7e:96:73:04:bd:62:73:79:80: c2:c8:11:10:9c:ec:b0:2a:15:db:7b:80:3f:04:d9: 9b:ad:37:d2:b1:9b:f8:47:f1:44:4b:0d:8d:91:8b: aa:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AA:44:E1:77:8C:F0:54:A8:F4:52:DA:00:3A:A0:D4:8D:18:E0:A8 X509v3 Authority Key Identifier: keyid:67:30:62:FF:FB:B8:7D:54:B2:4F:80:0C:A7:1D:4C:1D:D7:7E:2B:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:54:f5:de:ac:e0:01:82:09:f1:26:0a:16:9f:f1:ec:c9:fe: 1f:0f:b7:30:ad:27:e0:db:f5:15:fb:83:b8:55:34:27:18:11: c7:2c:55:ce:ad:21:b0:0d:0c:14:b9:58:c1:d4:eb:d0:d1:fa: 75:a8:3b:0a:09:d1:87:c3:ed:d2:6e:43:e1:59:44:ba:82:97: b2:3e:80:6e:79:a1:59:53:28:fb:49:df:cb:91:1b:a4:0a:8c: 5d:07:ba:e0:b2:fa:8f:ee:2f:c9:3b:14:9e:52:be:fe:28:2b: 37:8d:46:e6:54:dc:67:c6:34:3e:1e:ac:9f:16:17:b1:cd:ee: f8:cb:1f:69:92:3d:43:4e:3a:44:d7:03:e2:1f:3a:43:16:f9: 94:84:c0:d7:95:30:f5:95:2a:f5:d0:2a:a0:82:a2:fd:35:93: 31:b4:a2:56:57:de:84:72:be:af:0b:00:36:2f:fd:b9:6a:4f: 13:ea:33:8c:03:e7:14:7d:15:ab:ba:fd:e0:12:db:58:0e:76: a3:00:90:c1:1e:b9:8d:1f:81:2b:46:42:58:9a:ca:f3:85:7b: 70:02:a5:89:39:59:f6:a5:94:3e:ce:0b:7a:66:a4:1b:1a:21: 1c:c5:68:02:ee:e9:9a:5a:52:9e:35:b2:fb:e8:f8:fe:a8:1c: 61:f4:3f:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGuo5Q4FHuSgxC9iDyF7P7UZD6OowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjczMDYyRkZGQkI4N0Q1NEIyNEY4MDBDQTcxRDRDMURE NzdFMkI4NzAeFw0yNjA5MjQyMDM2MDdaFw0yNjA5MjUyMTMzMDdaMDMxMTAvBgNV BAMTKDBCQUE0NEUxNzc4Q0YwNTRBOEY0NTJEQTAwM0FBMEQ0OEQxOEUwQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1D6M121nbfZX06iJgG3PJInI7 zNcIhbfPmxfql0yhOHiVw/NgFsOuFYdCeghBmHN/rH5N6NnCmyT9pUOSsK3M03CU pzXBpqwo2Q7IBMCOi/QjVMDkXgO0QvgSZyN5kD3Rxy31deDLw1tfQ0tk4ygG52xj nVJQADXv+WOQfIqliHlglRW1Le/1pjeBAUJU/szKdAR9nOYJ2aiGae/kvOxhYT5y S66YU2rZ68yGyIqlnffVoERr2raA77w3yjlfgkJWcW4GN2Pd5TBPTXglwkdO3feX 0zuzZX6WcwS9YnN5gMLIERCc7LAqFdt7gD8E2ZutN9Kxm/hH8URLDY2Ri6qfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC6pE4XeM8FSo9FLaADqg1I0Y4KgwHwYDVR0j BBgwFoAUZzBi//u4fVSyT4AMpx1MHdd+K4cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWE1MzJjNjUtODBiZS00ZmRlLTg3ZDAtMzZjNWJkMjg4Y2Q4LzAvNjczMDYyRkZG QkI4N0Q1NEIyNEY4MDBDQTcxRDRDMURENzdFMkI4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzMwNjJGRkZCQjg3RDU0QjI0RjgwMENBNzFENEMxREQ3N0Uy Qjg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWE1MzJjNjUtODBiZS00ZmRlLTg3 ZDAtMzZjNWJkMjg4Y2Q4LzAvNjczMDYyRkZGQkI4N0Q1NEIyNEY4MDBDQTcxRDRD MURENzdFMkI4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNU9d6s4AGCCfEmChaf8ezJ/h8PtzCtJ+Db 9RX7g7hVNCcYEccsVc6tIbANDBS5WMHU69DR+nWoOwoJ0YfD7dJuQ+FZRLqCl7I+ gG55oVlTKPtJ38uRG6QKjF0HuuCy+o/uL8k7FJ5Svv4oKzeNRuZU3GfGND4erJ8W F7HN7vjLH2mSPUNOOkTXA+IfOkMW+ZSEwNeVMPWVKvXQKqCCov01kzG0olZX3oRy vq8LADYv/blqTxPqM4wD5xR9Fau6/eAS21gOdqMAkMEeuY0fgStGQliayvOFe3AC pYk5WfallD7OC3pmpBsaIRzFaALu6ZpaUp41svvo+P6oHGH0Pz8= -----END CERTIFICATE-----Generated at Thu Sep 24 22:56:49 2026 by rpki-client