$ rpki-client -vvvf rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft File: C687463B31D1E298020BCE05C39C8B4C428C4D37.mft (raw, json) Hash identifier: iDz4Nd3j0HXnlZx2RgmNJBTvX5rnK66vq73e7yqwXEw= Subject key identifier: 4E:B1:6B:CF:CB:BA:3D:AC:0D:A2:63:F5:87:67:85:BA:B8:A1:3F:CE Authority key identifier: C6:87:46:3B:31:D1:E2:98:02:0B:CE:05:C3:9C:8B:4C:42:8C:4D:37 Certificate issuer: /CN=C687463B31D1E298020BCE05C39C8B4C428C4D37 Certificate serial: 3B75C1FA00342C1AA8DC9F6FFA8C04703BC13D09 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft Manifest number: D9 Signing time: Sat 10 Oct 2026 18:45:50 +0000 Manifest this update: Sat 10 Oct 2026 18:40:50 +0000 Manifest next update: Sun 11 Oct 2026 21:54:50 +0000 Files and hashes: 1: 3130332e32382e32312e302f32342d3234203d3e203536323536.roa (hash: YAhRb5MLLPBq7GLmsdwukjSGrR09NAZjb7/Q0IbDPGs=) 2: 3130332e34312e3130392e302f32342d3234203d3e203536323536.roa (hash: FMD2KI8vXpC0oPiEKe8NJdG3T8DkuTzlFnyK8zKEONk=) 3: C687463B31D1E298020BCE05C39C8B4C428C4D37.crl (hash: +DwcitYwkSZ4iDLHXaWMelcAJHTEVUsQN011BA9Rtwk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.crl rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 04:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:75:c1:fa:00:34:2c:1a:a8:dc:9f:6f:fa:8c:04:70:3b:c1:3d:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C687463B31D1E298020BCE05C39C8B4C428C4D37 Validity Not Before: Oct 10 18:40:50 2026 GMT Not After : Oct 11 21:54:50 2026 GMT Subject: CN=4EB16BCFCBBA3DAC0DA263F5876785BAB8A13FCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3b:a7:0f:3c:7b:94:db:6c:0d:9d:0e:19:95: dc:e6:17:73:66:e3:7a:9a:e3:07:56:05:51:62:b7: 76:55:41:32:23:9a:37:03:3d:51:a2:6a:f3:5f:63: a7:ea:18:9c:c0:ac:7f:d1:12:cd:7f:95:d9:d5:9a: bd:53:cf:ae:56:a1:d1:2c:b7:19:da:3d:93:4b:b2: 81:cc:f1:a1:9f:70:69:31:6d:b3:e3:4d:24:af:12: 35:3b:7e:3c:6a:1b:ee:4f:ae:02:d9:20:7a:3b:99: 05:d6:6e:04:1a:f8:57:a0:32:3b:85:b1:c7:e8:e5: 3d:f6:5b:f0:8c:57:e1:b6:4c:bc:7a:a2:e6:81:01: 34:f1:2d:c0:bf:fa:1b:44:e3:78:ca:d3:d6:ed:fe: 49:20:1f:99:b1:64:28:3b:13:57:84:31:96:6b:e2: 8d:c1:e1:b4:e4:51:43:e4:4e:11:8a:0c:41:ee:c4: a2:6d:2e:9e:f5:f6:fc:71:48:ca:de:2b:50:8b:b1: 07:d7:1d:0f:fd:d1:5e:5d:57:78:8c:da:8c:72:c4: ea:2f:ef:fa:35:0c:79:6e:63:40:3a:2a:a7:c8:3c: 0d:2c:42:bb:ba:56:e8:b4:f4:4d:9e:61:6b:d9:c7: ce:a4:78:51:2b:da:89:1a:d8:42:f1:d8:8b:c6:97: 1b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B1:6B:CF:CB:BA:3D:AC:0D:A2:63:F5:87:67:85:BA:B8:A1:3F:CE X509v3 Authority Key Identifier: keyid:C6:87:46:3B:31:D1:E2:98:02:0B:CE:05:C3:9C:8B:4C:42:8C:4D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:55:25:90:59:f0:af:ba:88:83:db:33:a9:0f:01:f5:8e:8c: 28:e0:df:c2:0c:f3:c2:f7:52:59:80:b0:69:29:c9:e8:47:05: 7b:fd:79:0a:29:6d:83:ce:3d:38:b4:76:3f:9f:5d:d2:7a:ff: d6:dd:29:86:2e:eb:66:8a:2e:b8:00:bd:2a:ef:4c:32:fd:ab: 86:57:42:12:72:e1:bc:e7:23:34:5f:84:bf:30:fc:21:4b:0c: 94:4a:91:04:3b:3f:4c:eb:d4:81:4c:85:7d:72:76:ad:4d:60: ed:8d:c7:eb:83:6e:8b:b3:26:18:19:b0:46:a3:51:26:d2:02: 2c:4a:ee:f8:ae:80:27:e8:18:18:c3:1c:73:f3:57:1e:77:1c: 08:8e:da:45:ee:7f:81:c0:8c:b2:3f:02:a2:dd:ef:a9:94:57: 9b:39:ab:a1:fa:de:f0:7f:9d:c2:54:89:82:ca:65:af:9c:ed: 38:8b:b9:f4:62:f8:d3:a3:bf:b9:eb:c4:3f:bb:11:76:76:35: fc:68:7a:5d:12:54:a0:19:16:13:f6:50:65:4f:2b:22:1a:1d: 39:92:cd:1a:e1:39:2d:3d:61:a6:dd:a3:f9:01:d1:76:ad:57: 1a:85:8d:ab:e4:5e:10:2b:8d:69:56:50:fa:85:5d:3f:cb:14: 33:e4:28:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO3XB+gA0LBqo3J9v+owEcDvBPQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY4NzQ2M0IzMUQxRTI5ODAyMEJDRTA1QzM5QzhCNEM0 MjhDNEQzNzAeFw0yNjEwMTAxODQwNTBaFw0yNjEwMTEyMTU0NTBaMDMxMTAvBgNV BAMTKDRFQjE2QkNGQ0JCQTNEQUMwREEyNjNGNTg3Njc4NUJBQjhBMTNGQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgO6cPPHuU22wNnQ4ZldzmF3Nm 43qa4wdWBVFit3ZVQTIjmjcDPVGiavNfY6fqGJzArH/REs1/ldnVmr1Tz65WodEs txnaPZNLsoHM8aGfcGkxbbPjTSSvEjU7fjxqG+5PrgLZIHo7mQXWbgQa+FegMjuF scfo5T32W/CMV+G2TLx6ouaBATTxLcC/+htE43jK09bt/kkgH5mxZCg7E1eEMZZr 4o3B4bTkUUPkThGKDEHuxKJtLp719vxxSMreK1CLsQfXHQ/90V5dV3iM2oxyxOov 7/o1DHluY0A6KqfIPA0sQru6Vui09E2eYWvZx86keFEr2oka2ELx2IvGlxuNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTrFrz8u6PawNomP1h2eFurihP84wHwYDVR0j BBgwFoAUxodGOzHR4pgCC84Fw5yLTEKMTTcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzZjMDAzNzYtMzM1MS00ZmEzLTk3ZWUtNTIzODViYTRkOTAzLzAvQzY4NzQ2M0Iz MUQxRTI5ODAyMEJDRTA1QzM5QzhCNEM0MjhDNEQzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNjg3NDYzQjMxRDFFMjk4MDIwQkNFMDVDMzlDOEI0QzQyOEM0 RDM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzZjMDAzNzYtMzM1MS00ZmEzLTk3 ZWUtNTIzODViYTRkOTAzLzAvQzY4NzQ2M0IzMUQxRTI5ODAyMEJDRTA1QzM5QzhC NEM0MjhDNEQzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVVJZBZ8K+6iIPbM6kPAfWOjCjg38IM88L3 UlmAsGkpyehHBXv9eQopbYPOPTi0dj+fXdJ6/9bdKYYu62aKLrgAvSrvTDL9q4ZX QhJy4bznIzRfhL8w/CFLDJRKkQQ7P0zr1IFMhX1ydq1NYO2Nx+uDbouzJhgZsEaj USbSAixK7viugCfoGBjDHHPzVx53HAiO2kXuf4HAjLI/AqLd76mUV5s5q6H63vB/ ncJUiYLKZa+c7TiLufRi+NOjv7nrxD+7EXZ2Nfxoel0SVKAZFhP2UGVPKyIaHTmS zRrhOS09Yabdo/kB0XatVxqFjavkXhArjWlWUPqFXT/LFDPkKDc= -----END CERTIFICATE-----Generated at Sat Oct 10 21:50:50 2026 by rpki-client