$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft File: D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft (raw, json) Hash identifier: AjpRvSMlJq9LB6lNZitaK6pfjeJgxAseNI2xAYihuU0= Subject key identifier: 9A:D4:74:12:75:36:44:ED:71:E3:BE:47:CF:0D:8C:06:08:7D:8E:15 Authority key identifier: D7:61:C4:4A:BE:9A:A9:89:F7:04:8B:4D:3E:56:14:89:C4:DA:82:80 Certificate issuer: /CN=D761C44ABE9AA989F7048B4D3E561489C4DA8280 Certificate serial: 2C8D61D2161B78737D3F3A1B32CFCA5FBAA85DB7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 14:29:00 +0000 Manifest this update: Wed 23 Sep 2026 14:24:00 +0000 Manifest next update: Thu 24 Sep 2026 17:15:00 +0000 Files and hashes: 1: D761C44ABE9AA989F7048B4D3E561489C4DA8280.crl (hash: 5TX+MPerik1S5ahxvQ59XUDHkHjrHTUVxiNjvP3FleQ=) 2: 3135372e36362e3137342e302f32332d3234203d3e20313532373439.roa (hash: 6xlY6BkzLkqd/N9VB1huC6lhu8FPlH61fiI7wLd83Qc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.crl rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:8d:61:d2:16:1b:78:73:7d:3f:3a:1b:32:cf:ca:5f:ba:a8:5d:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D761C44ABE9AA989F7048B4D3E561489C4DA8280 Validity Not Before: Sep 23 14:24:00 2026 GMT Not After : Sep 24 17:15:00 2026 GMT Subject: CN=9AD47412753644ED71E3BE47CF0D8C06087D8E15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:39:16:01:3a:a4:79:11:93:d1:6c:21:25:c3: 11:92:40:a7:58:29:ca:9a:b6:a1:32:ca:de:2d:3f: 7b:83:9d:e8:c7:63:12:f6:3e:a5:5d:07:f2:5c:74: ba:4c:98:9a:d5:76:c3:9d:4f:6c:b9:ea:3a:45:0b: 78:31:7e:59:89:8a:28:95:bf:c2:07:a8:16:14:30: 28:6b:59:36:12:bd:b1:0b:eb:48:ab:1d:60:71:b3: 88:46:5d:84:7d:f1:25:0e:73:12:b6:45:a2:a7:65: 4e:8f:44:bd:ca:6a:6d:2e:fe:f8:48:df:1e:f0:4f: 7c:a7:e1:05:d0:07:a6:a6:c4:af:e8:25:ae:89:1b: 47:16:a9:cf:96:34:1d:f5:f5:ca:25:2c:fd:71:2f: a3:b5:5d:d5:7e:ac:46:dd:97:2a:64:72:e8:a8:a9: 2a:4c:bb:67:bd:b6:38:e6:27:b2:fd:2b:bd:38:68: 36:18:5c:8c:9e:cf:7d:cd:63:29:24:19:bc:35:90: 87:2d:57:10:23:af:93:4e:93:03:2c:99:47:02:60: 34:81:38:3e:da:95:34:39:23:ed:73:1e:a1:6f:1c: 17:b0:ca:23:52:80:21:df:b4:e8:8f:8b:b2:36:6c: 49:6b:f7:59:88:fc:c1:32:a1:be:b8:17:f6:27:28: d6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D4:74:12:75:36:44:ED:71:E3:BE:47:CF:0D:8C:06:08:7D:8E:15 X509v3 Authority Key Identifier: keyid:D7:61:C4:4A:BE:9A:A9:89:F7:04:8B:4D:3E:56:14:89:C4:DA:82:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:b4:91:8b:ce:3a:47:1f:19:bf:21:dd:fe:c9:59:39:49:c9: 88:02:e5:fa:bc:91:8f:49:7f:b4:5f:ef:ed:dd:af:72:de:a1: 56:4f:e1:bc:8e:39:eb:e4:a1:09:da:de:c2:7a:e1:16:f4:20: 27:6b:35:ec:d8:e1:34:58:1f:56:ac:a4:c7:c4:9f:58:7d:cd: a2:0c:06:9c:cb:97:9e:a2:d5:ab:f2:1c:ad:a1:13:20:5c:d6: a1:7a:3a:13:5f:28:92:d9:3e:c4:38:29:8c:bb:89:12:6b:13: ff:fa:b6:76:f9:7c:c9:67:de:14:65:99:32:61:84:49:6e:00: 0e:cb:ad:41:23:98:dc:61:85:aa:4e:39:90:96:af:15:63:d5: 4d:4b:5a:40:29:8f:88:5d:ee:47:1f:43:c2:b5:7a:cf:30:da: ef:2f:7c:e1:32:db:0e:a5:c5:11:e0:4b:7f:3e:31:c7:ae:0e: ea:e8:f6:bd:db:ff:9d:ff:e2:1d:ec:08:e9:85:1e:b8:81:26: 15:08:0a:a7:8d:0b:69:1a:95:75:0d:59:93:d6:bd:40:48:80: ac:0e:21:04:1c:41:e0:6e:78:fa:c4:45:09:d0:4c:2f:1a:17: b0:ab:62:58:1c:2b:49:a5:fc:3e:42:03:3e:ff:c2:ab:74:b2: 41:9c:cc:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULI1h0hYbeHN9PzobMs/KX7qoXbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2MUM0NEFCRTlBQTk4OUY3MDQ4QjREM0U1NjE0ODlD NERBODI4MDAeFw0yNjA5MjMxNDI0MDBaFw0yNjA5MjQxNzE1MDBaMDMxMTAvBgNV BAMTKDlBRDQ3NDEyNzUzNjQ0RUQ3MUUzQkU0N0NGMEQ4QzA2MDg3RDhFMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiORYBOqR5EZPRbCElwxGSQKdY KcqatqEyyt4tP3uDnejHYxL2PqVdB/JcdLpMmJrVdsOdT2y56jpFC3gxflmJiiiV v8IHqBYUMChrWTYSvbEL60irHWBxs4hGXYR98SUOcxK2RaKnZU6PRL3Kam0u/vhI 3x7wT3yn4QXQB6amxK/oJa6JG0cWqc+WNB319colLP1xL6O1XdV+rEbdlypkcuio qSpMu2e9tjjmJ7L9K704aDYYXIyez33NYykkGbw1kIctVxAjr5NOkwMsmUcCYDSB OD7alTQ5I+1zHqFvHBewyiNSgCHftOiPi7I2bElr91mI/MEyob64F/YnKNZ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmtR0EnU2RO1x475Hzw2MBgh9jhUwHwYDVR0j BBgwFoAU12HESr6aqYn3BItNPlYUicTagoAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI3MzNkY2YtOWY1ZS00Nzc1LTljZTctOWRkNTI1YjQ0Yjg2LzAvRDc2MUM0NEFC RTlBQTk4OUY3MDQ4QjREM0U1NjE0ODlDNERBODI4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENzYxQzQ0QUJFOUFBOTg5RjcwNDhCNEQzRTU2MTQ4OUM0REE4 MjgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzAvRDc2MUM0NEFCRTlBQTk4OUY3MDQ4QjREM0U1NjE0 ODlDNERBODI4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEG0kYvOOkcfGb8h3f7JWTlJyYgC5fq8kY9J f7Rf7+3dr3LeoVZP4byOOevkoQna3sJ64Rb0ICdrNezY4TRYH1aspMfEn1h9zaIM BpzLl56i1avyHK2hEyBc1qF6OhNfKJLZPsQ4KYy7iRJrE//6tnb5fMln3hRlmTJh hEluAA7LrUEjmNxhhapOOZCWrxVj1U1LWkApj4hd7kcfQ8K1es8w2u8vfOEy2w6l xRHgS38+MceuDuro9r3b/53/4h3sCOmFHriBJhUICqeNC2kalXUNWZPWvUBIgKwO IQQcQeBuePrERQnQTC8aF7CrYlgcK0ml/D5CAz7/wqt0skGczA0= -----END CERTIFICATE-----Generated at Wed Sep 23 21:59:14 2026 by rpki-client