$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/1367EFA8AE36CCF2B126747358BA15C62F3C39C4.mft File: 1367EFA8AE36CCF2B126747358BA15C62F3C39C4.mft (raw, json) Hash identifier: bhaJlx/Gd/TIliQMo+TpqT4N2/35BRQo/MpEaqyo49o= Subject key identifier: 4C:5F:E2:DE:1B:96:1E:B1:9B:B1:74:65:4D:A6:8F:E7:E5:59:99:45 Authority key identifier: 13:67:EF:A8:AE:36:CC:F2:B1:26:74:73:58:BA:15:C6:2F:3C:39:C4 Certificate issuer: /CN=1367EFA8AE36CCF2B126747358BA15C62F3C39C4 Certificate serial: 2AFFEC104687FE0A4734D77F18A092FE68935EBA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1367EFA8AE36CCF2B126747358BA15C62F3C39C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/1367EFA8AE36CCF2B126747358BA15C62F3C39C4.mft Manifest number: D4 Signing time: Thu 08 Oct 2026 07:57:58 +0000 Manifest this update: Thu 08 Oct 2026 07:52:58 +0000 Manifest next update: Fri 09 Oct 2026 08:05:58 +0000 Files and hashes: 1: 323430363a623734303a3a2f33322d3332203d3e20313431313235.roa (hash: l7ceT7Yady3oaIAEABjXql9rOL2Wif/UR71ZUsOhJlM=) 2: 3130332e3135382e39382e302f32332d3234203d3e20313431313235.roa (hash: on3Z5+oGLgDPw5+hDaeYnOMdZt9Rn04eceq9zR1eBlQ=) 3: 1367EFA8AE36CCF2B126747358BA15C62F3C39C4.crl (hash: TKCHTlExjpAFAC29elDiEaoM0n/AhnA4cwqglVZ73f4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/1367EFA8AE36CCF2B126747358BA15C62F3C39C4.crl rsync://rpki-rsync.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/1367EFA8AE36CCF2B126747358BA15C62F3C39C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1367EFA8AE36CCF2B126747358BA15C62F3C39C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 08:05:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ff:ec:10:46:87:fe:0a:47:34:d7:7f:18:a0:92:fe:68:93:5e:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1367EFA8AE36CCF2B126747358BA15C62F3C39C4 Validity Not Before: Oct 8 07:52:58 2026 GMT Not After : Oct 9 08:05:58 2026 GMT Subject: CN=4C5FE2DE1B961EB19BB174654DA68FE7E5599945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:92:03:84:6a:7e:96:cd:ea:95:33:1c:16:7e: d7:df:fc:8b:8d:2e:d9:b4:2d:85:45:cc:92:65:07: b5:36:36:cc:24:2f:d0:5b:94:fe:6d:3b:f7:1f:3c: d8:ce:10:4e:c9:9e:34:9c:63:bf:56:d4:f9:3f:dd: ae:ce:30:6a:c1:7f:d2:d5:81:32:b6:45:b3:f1:17: c0:d6:f6:dc:5f:51:0c:3c:5c:50:bc:b0:69:a3:40: 6f:13:78:29:50:76:a2:5f:3b:0b:f3:e8:b1:4a:d5: 15:e7:a4:be:6e:31:5d:51:09:22:eb:83:bd:e0:b8: ca:2a:24:68:7e:7e:81:80:f3:85:ea:1a:12:6d:e4: 68:1d:9d:ec:da:80:3b:19:68:44:86:eb:8f:37:f2: cb:0b:2d:24:4a:20:66:74:5a:9f:58:8e:cf:27:92: b8:09:54:ea:80:e5:0e:1a:07:7a:20:68:a8:7f:c9: ba:ac:fe:0b:b4:ed:5a:05:67:30:4e:79:e2:00:ad: 8b:ce:58:16:ce:3d:78:6b:46:f6:b6:b8:f6:70:be: e3:07:0d:d7:87:26:03:0d:6c:67:24:df:5b:48:e0: a7:a6:a4:58:60:c9:04:fb:d4:cf:c0:92:fe:ea:a6: c9:05:8f:63:4f:76:0f:93:cf:4b:90:73:fa:fc:6c: 3d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5F:E2:DE:1B:96:1E:B1:9B:B1:74:65:4D:A6:8F:E7:E5:59:99:45 X509v3 Authority Key Identifier: keyid:13:67:EF:A8:AE:36:CC:F2:B1:26:74:73:58:BA:15:C6:2F:3C:39:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/1367EFA8AE36CCF2B126747358BA15C62F3C39C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1367EFA8AE36CCF2B126747358BA15C62F3C39C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/1367EFA8AE36CCF2B126747358BA15C62F3C39C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:a7:d1:01:4d:c0:e7:a7:6d:94:2a:1b:db:7b:98:2e:b6:79: 24:63:58:66:28:85:c7:08:b5:da:17:08:58:37:60:11:aa:0d: 2e:f7:5c:30:7e:7f:3c:1b:68:f4:72:83:82:f6:93:71:c6:46: fa:a7:41:55:2a:3e:92:18:c1:e5:e9:d6:27:93:9b:ed:2c:6d: 93:e1:a7:81:4f:4b:51:7e:fe:99:3c:b6:c4:bb:32:c0:f7:dc: d7:53:88:37:36:65:66:cf:16:d6:d3:7a:a1:52:f2:a9:22:b3: b6:ab:21:5f:d2:40:08:21:c6:84:db:16:2c:9d:b1:ed:4d:d3: ff:8f:a7:1d:fb:1a:91:53:a0:3d:b3:d7:22:54:fa:07:94:d1: 30:75:7b:85:eb:b3:c4:1b:37:55:80:51:04:99:4f:17:72:69: 93:52:6f:0f:9a:ac:d1:8b:70:da:3e:f7:85:d4:c2:ca:38:04: 5a:4e:e3:84:6d:21:2c:39:33:bf:0d:7c:6d:6d:34:03:31:43: 41:78:d5:c1:9b:8a:5b:f0:6c:94:68:25:96:7a:c1:8c:79:bf: a6:da:7d:b4:ae:3b:fb:5f:b8:ff:b6:e4:86:07:0b:a0:de:6f: 13:e9:2d:f5:fb:bf:09:53:84:72:8b:1f:a2:8b:21:da:cb:00: b1:e8:56:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKv/sEEaH/gpHNNd/GKCS/miTXrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM2N0VGQThBRTM2Q0NGMkIxMjY3NDczNThCQTE1QzYy RjNDMzlDNDAeFw0yNjEwMDgwNzUyNThaFw0yNjEwMDkwODA1NThaMDMxMTAvBgNV BAMTKDRDNUZFMkRFMUI5NjFFQjE5QkIxNzQ2NTREQTY4RkU3RTU1OTk5NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOkgOEan6WzeqVMxwWftff/IuN Ltm0LYVFzJJlB7U2NswkL9BblP5tO/cfPNjOEE7JnjScY79W1Pk/3a7OMGrBf9LV gTK2RbPxF8DW9txfUQw8XFC8sGmjQG8TeClQdqJfOwvz6LFK1RXnpL5uMV1RCSLr g73guMoqJGh+foGA84XqGhJt5GgdnezagDsZaESG64838ssLLSRKIGZ0Wp9Yjs8n krgJVOqA5Q4aB3ogaKh/ybqs/gu07VoFZzBOeeIArYvOWBbOPXhrRva2uPZwvuMH DdeHJgMNbGck31tI4KempFhgyQT71M/Akv7qpskFj2NPdg+Tz0uQc/r8bD2pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTF/i3huWHrGbsXRlTaaP5+VZmUUwHwYDVR0j BBgwFoAUE2fvqK42zPKxJnRzWLoVxi88OcQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Q2ODUwMGMtNDlmOC00ZjAxLTg3NzQtZjdjMzE2NGEwYTU4LzAvMTM2N0VGQThB RTM2Q0NGMkIxMjY3NDczNThCQTE1QzYyRjNDMzlDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMzY3RUZBOEFFMzZDQ0YyQjEyNjc0NzM1OEJBMTVDNjJGM0Mz OUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q2ODUwMGMtNDlmOC00ZjAxLTg3 NzQtZjdjMzE2NGEwYTU4LzAvMTM2N0VGQThBRTM2Q0NGMkIxMjY3NDczNThCQTE1 QzYyRjNDMzlDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANqn0QFNwOenbZQqG9t7mC62eSRjWGYohccI tdoXCFg3YBGqDS73XDB+fzwbaPRyg4L2k3HGRvqnQVUqPpIYweXp1ieTm+0sbZPh p4FPS1F+/pk8tsS7MsD33NdTiDc2ZWbPFtbTeqFS8qkis7arIV/SQAghxoTbFiyd se1N0/+Ppx37GpFToD2z1yJU+geU0TB1e4Xrs8QbN1WAUQSZTxdyaZNSbw+arNGL cNo+94XUwso4BFpO44RtISw5M78NfG1tNAMxQ0F41cGbilvwbJRoJZZ6wYx5v6ba fbSuO/tfuP+25IYHC6DebxPpLfX7vwlThHKLH6KLIdrLALHoVvU= -----END CERTIFICATE-----Generated at Thu Oct 8 11:47:35 2026 by rpki-client