$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.mft File: 357778A786AA1E6854673B0A6AAAA40B85254E94.mft (raw, json) Hash identifier: 2ZSj1FMzT+QqztwZsMLJiWjDZs131d9mZU1mfZIFm80= Subject key identifier: 28:76:DC:F8:37:60:A9:27:8D:1D:8D:94:74:BD:FB:6F:22:01:B5:EB Authority key identifier: 35:77:78:A7:86:AA:1E:68:54:67:3B:0A:6A:AA:A4:0B:85:25:4E:94 Certificate issuer: /CN=357778A786AA1E6854673B0A6AAAA40B85254E94 Certificate serial: 23B1092DFE85FEC38F16C842F0407A3FC1C28F7C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/357778A786AA1E6854673B0A6AAAA40B85254E94.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.mft Manifest number: C7 Signing time: Mon 28 Sep 2026 17:31:21 +0000 Manifest this update: Mon 28 Sep 2026 17:26:21 +0000 Manifest next update: Tue 29 Sep 2026 17:49:21 +0000 Files and hashes: 1: 3130332e3137342e3137342e302f32332d3233203d3e20313437313031.roa (hash: hjalkv3P7i18uJ7S9FBqgBtHEhsf6OEBgP8fNSR+fXY=) 2: 3130332e3137342e3137342e302f32342d3234203d3e20313437313031.roa (hash: 5+l8Bv4b+lu/zj1I0m9wF216uhFzz02OufoiSu3ruBk=) 3: 3130332e3137342e3137352e302f32342d3234203d3e20313437313031.roa (hash: 7ETsMsldfe5UrsfaSRsi4x54y8+ydy+yp/J35qzk+sc=) 4: 357778A786AA1E6854673B0A6AAAA40B85254E94.crl (hash: ZCRXaDNxA+v1BzcWVOFOepDhL7Pa9ht3/C3D9ShvCJE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.crl rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/357778A786AA1E6854673B0A6AAAA40B85254E94.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b1:09:2d:fe:85:fe:c3:8f:16:c8:42:f0:40:7a:3f:c1:c2:8f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357778A786AA1E6854673B0A6AAAA40B85254E94 Validity Not Before: Sep 28 17:26:21 2026 GMT Not After : Sep 29 17:49:21 2026 GMT Subject: CN=2876DCF83760A9278D1D8D9474BDFB6F2201B5EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:36:a3:fd:c7:ce:91:61:e1:a7:1f:27:fc:97: 3d:26:17:ad:28:6b:88:be:2f:63:0b:db:05:91:08: 40:c2:bc:a3:41:3e:61:03:cd:a2:4b:ea:ee:05:b5: 2b:d2:ab:f2:fd:ed:b3:4e:75:b1:ac:0a:14:73:2a: 08:60:92:ac:24:73:d7:73:60:28:34:70:ae:78:e7: 8f:3e:be:14:37:1b:78:8a:8f:de:64:5c:2b:b6:84: a1:8e:84:4c:ad:0d:26:98:22:60:96:77:fe:04:90: 52:71:58:6e:53:28:d7:9b:b6:00:a9:08:4e:3e:d7: 46:c4:ed:91:d1:82:aa:24:58:ef:96:37:26:ca:51: eb:4f:ac:7d:a6:2a:2f:af:18:f9:09:45:fc:11:a6: 7f:ca:36:c9:92:93:ab:54:23:66:ba:50:29:12:2a: 8e:a7:7d:dd:b0:87:4c:26:1f:89:26:25:ff:08:27: 40:a7:fa:3f:60:49:f6:f5:b3:9c:f2:43:3d:3f:58: 87:81:b5:d4:d4:a3:42:10:ed:dc:5f:84:c1:ed:20: 6f:e4:e5:68:4c:3f:72:90:04:4a:ca:bd:e1:8d:7e: 74:47:87:81:1b:71:39:2f:73:f1:46:06:91:4e:1a: 46:8e:23:40:94:19:c4:c5:2f:b1:41:c3:ba:9d:0b: 6b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:76:DC:F8:37:60:A9:27:8D:1D:8D:94:74:BD:FB:6F:22:01:B5:EB X509v3 Authority Key Identifier: keyid:35:77:78:A7:86:AA:1E:68:54:67:3B:0A:6A:AA:A4:0B:85:25:4E:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/357778A786AA1E6854673B0A6AAAA40B85254E94.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:b9:fb:38:20:d8:48:38:66:30:cb:1a:46:a8:49:4a:d3:d1: 73:08:79:f6:bf:d7:e1:b7:10:e9:dc:ed:0e:ff:8b:f5:42:77: 4c:0b:db:3d:65:85:33:57:19:cf:85:45:5a:68:f6:f3:25:b6: e8:94:33:b0:34:cc:4f:1f:f6:3b:49:56:e9:57:e4:2f:f3:ae: 76:d1:fb:aa:7a:8b:25:74:df:76:e5:02:00:a6:c4:03:ee:80: 13:f4:7c:19:c0:0d:ad:4d:21:de:31:1e:ba:1e:88:c3:28:c7: 9e:4e:b6:84:5d:69:b1:06:cc:fd:9d:a7:25:65:29:86:b5:1f: 3b:1f:56:c4:4e:9a:1e:2b:90:1a:2d:8e:14:6d:9c:e1:b3:80: 9b:41:a7:f9:d9:bf:f1:d3:1c:e5:a7:b6:eb:3c:27:af:47:01: d2:68:84:6f:64:23:89:4d:94:06:35:03:81:35:f5:0d:05:43: 05:f8:a0:0b:96:55:96:74:21:9e:6a:e4:08:6a:fe:53:40:27: 44:d3:96:5f:c7:a6:51:e7:24:d3:24:e8:54:59:1e:9b:35:e6: 1f:aa:22:06:dc:d6:5d:d4:ab:ab:06:ba:5f:34:b8:ca:ba:60: 57:41:80:77:5e:35:16:58:e8:c3:67:a8:a0:e1:10:ff:41:16: f4:8b:37:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI7EJLf6F/sOPFshC8EB6P8HCj3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3Nzc4QTc4NkFBMUU2ODU0NjczQjBBNkFBQUE0MEI4 NTI1NEU5NDAeFw0yNjA5MjgxNzI2MjFaFw0yNjA5MjkxNzQ5MjFaMDMxMTAvBgNV BAMTKDI4NzZEQ0Y4Mzc2MEE5Mjc4RDFEOEQ5NDc0QkRGQjZGMjIwMUI1RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvNqP9x86RYeGnHyf8lz0mF60o a4i+L2ML2wWRCEDCvKNBPmEDzaJL6u4FtSvSq/L97bNOdbGsChRzKghgkqwkc9dz YCg0cK54548+vhQ3G3iKj95kXCu2hKGOhEytDSaYImCWd/4EkFJxWG5TKNebtgCp CE4+10bE7ZHRgqokWO+WNybKUetPrH2mKi+vGPkJRfwRpn/KNsmSk6tUI2a6UCkS Ko6nfd2wh0wmH4kmJf8IJ0Cn+j9gSfb1s5zyQz0/WIeBtdTUo0IQ7dxfhMHtIG/k 5WhMP3KQBErKveGNfnRHh4EbcTkvc/FGBpFOGkaOI0CUGcTFL7FBw7qdC2u5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKHbc+DdgqSeNHY2UdL37byIBteswHwYDVR0j BBgwFoAUNXd4p4aqHmhUZzsKaqqkC4UlTpQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2E3MGQ0NGUtMGY3MC00NWEzLWFmMDQtODFmNDI5ZGIzYTVkLzAvMzU3Nzc4QTc4 NkFBMUU2ODU0NjczQjBBNkFBQUE0MEI4NTI1NEU5NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNTc3NzhBNzg2QUExRTY4NTQ2NzNCMEE2QUFBQTQwQjg1MjU0 RTk0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2E3MGQ0NGUtMGY3MC00NWEzLWFm MDQtODFmNDI5ZGIzYTVkLzAvMzU3Nzc4QTc4NkFBMUU2ODU0NjczQjBBNkFBQUE0 MEI4NTI1NEU5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADG5+zgg2Eg4ZjDLGkaoSUrT0XMIefa/1+G3 EOnc7Q7/i/VCd0wL2z1lhTNXGc+FRVpo9vMltuiUM7A0zE8f9jtJVulX5C/zrnbR +6p6iyV033blAgCmxAPugBP0fBnADa1NId4xHroeiMMox55OtoRdabEGzP2dpyVl KYa1HzsfVsROmh4rkBotjhRtnOGzgJtBp/nZv/HTHOWntus8J69HAdJohG9kI4lN lAY1A4E19Q0FQwX4oAuWVZZ0IZ5q5Ahq/lNAJ0TTll/HplHnJNMk6FRZHps15h+q Igbc1l3Uq6sGul80uMq6YFdBgHdeNRZY6MNnqKDhEP9BFvSLN3E= -----END CERTIFICATE-----Generated at Tue Sep 29 04:23:07 2026 by rpki-client