$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft File: D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft (raw, json) Hash identifier: Ya/qpbVpBnpAP3+jH9jNu+3d6llnXTBkIMytk3AzmgM= Subject key identifier: 34:43:AF:39:6C:D4:53:D7:E8:CD:56:7E:3F:6A:25:FB:67:D5:EC:0F Authority key identifier: D7:61:C4:4A:BE:9A:A9:89:F7:04:8B:4D:3E:56:14:89:C4:DA:82:80 Certificate issuer: /CN=D761C44ABE9AA989F7048B4D3E561489C4DA8280 Certificate serial: 1AC87A47376824C27912245AD964D03ABA612E61 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft Manifest number: BE Signing time: Mon 21 Sep 2026 10:19:22 +0000 Manifest this update: Mon 21 Sep 2026 10:14:22 +0000 Manifest next update: Tue 22 Sep 2026 10:23:22 +0000 Files and hashes: 1: D761C44ABE9AA989F7048B4D3E561489C4DA8280.crl (hash: QsYFNlGVWbhswMJQLwrvOMYj8fh0oz4ynH18p5GXuSE=) 2: 3135372e36362e3137342e302f32332d3234203d3e20313532373439.roa (hash: 6xlY6BkzLkqd/N9VB1huC6lhu8FPlH61fiI7wLd83Qc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.crl rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:c8:7a:47:37:68:24:c2:79:12:24:5a:d9:64:d0:3a:ba:61:2e:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D761C44ABE9AA989F7048B4D3E561489C4DA8280 Validity Not Before: Sep 21 10:14:22 2026 GMT Not After : Sep 22 10:23:22 2026 GMT Subject: CN=3443AF396CD453D7E8CD567E3F6A25FB67D5EC0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f1:21:98:77:c4:35:73:32:07:36:35:04:e8: 7c:44:7e:86:62:8b:44:56:fb:25:10:ef:00:a6:e2: 72:2c:d2:e6:7a:ff:9d:07:6a:36:7d:c6:f0:75:09: 9a:3d:b3:17:ed:88:44:7d:7a:4d:88:47:ba:8e:45: eb:50:ba:57:8c:d2:ab:eb:aa:42:57:48:5c:b2:7e: fb:95:5b:7c:ab:16:8f:d5:c0:f9:34:31:cd:96:77: 17:14:21:04:b2:da:2f:fb:6a:da:68:3d:96:a1:6a: dc:50:fa:37:7b:56:af:7f:08:e5:8d:5b:4f:1f:24: 71:13:81:14:14:96:32:33:0d:a2:97:43:df:a2:1f: c2:db:98:0e:25:c6:27:00:15:fa:a2:88:e3:71:bd: 21:bf:66:69:6e:ff:74:76:b1:82:b5:7f:d3:1c:b9: c9:54:7f:f6:8a:15:89:42:45:ea:2e:e3:05:c8:3c: 52:72:55:c2:f0:91:55:74:69:5c:63:45:8d:ea:33: 09:7d:a1:78:32:49:d3:a5:ac:ec:be:55:24:ec:7d: d9:aa:8c:24:9b:d1:d8:d8:95:f5:b0:8f:96:7b:1f: 10:05:96:b0:37:df:64:94:44:a9:42:53:9f:be:d2: e1:ea:35:84:f3:e1:b1:a6:70:22:2c:c3:35:2c:35: 2d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:43:AF:39:6C:D4:53:D7:E8:CD:56:7E:3F:6A:25:FB:67:D5:EC:0F X509v3 Authority Key Identifier: keyid:D7:61:C4:4A:BE:9A:A9:89:F7:04:8B:4D:3E:56:14:89:C4:DA:82:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:d8:3c:78:d1:73:73:82:35:81:93:89:86:30:4b:2f:f8:d1: f7:56:df:9f:22:bd:0c:7d:c7:5b:c7:e9:ec:1d:55:3f:2b:f9: a0:20:4a:bc:4e:85:69:e7:af:58:f8:37:09:99:a8:12:1a:a3: 1b:46:08:6f:5e:cc:16:12:c4:01:1a:6f:16:ff:00:c9:f9:ee: 4b:dd:29:1f:fd:d9:46:c5:83:7f:f6:cc:4c:1f:15:e9:af:3d: 5f:02:72:2b:a4:ce:cc:2e:a7:d6:a9:38:21:43:5f:d5:05:c4: da:07:a2:8f:d0:78:6b:45:ee:e7:6d:fe:f6:bd:7d:77:a4:1e: 9f:62:cf:10:32:e9:af:ba:c3:4c:55:23:f2:39:b4:dd:d6:0e: 9c:b9:74:90:b3:49:9b:82:44:59:27:9a:af:6c:c1:70:c5:71: 39:a3:35:12:c4:c8:c5:e2:68:3a:c5:df:1a:5c:b1:71:ea:a1: af:26:d8:7b:15:94:02:2d:76:bb:92:7e:c6:db:aa:09:c8:96: 65:2f:73:26:89:f7:b5:e5:6c:73:51:3b:a5:4c:1b:d8:32:8b: 4f:c9:37:89:ce:06:39:a5:6a:80:52:19:86:62:c7:e7:4c:ed: d9:9c:8d:4a:4f:dd:af:4a:38:d5:6c:ea:f8:ba:54:b2:37:20: 1c:dc:b3:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGsh6RzdoJMJ5EiRa2WTQOrphLmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2MUM0NEFCRTlBQTk4OUY3MDQ4QjREM0U1NjE0ODlD NERBODI4MDAeFw0yNjA5MjExMDE0MjJaFw0yNjA5MjIxMDIzMjJaMDMxMTAvBgNV BAMTKDM0NDNBRjM5NkNENDUzRDdFOENENTY3RTNGNkEyNUZCNjdENUVDMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp8SGYd8Q1czIHNjUE6HxEfoZi i0RW+yUQ7wCm4nIs0uZ6/50HajZ9xvB1CZo9sxftiER9ek2IR7qORetQuleM0qvr qkJXSFyyfvuVW3yrFo/VwPk0Mc2WdxcUIQSy2i/7atpoPZahatxQ+jd7Vq9/COWN W08fJHETgRQUljIzDaKXQ9+iH8LbmA4lxicAFfqiiONxvSG/Zmlu/3R2sYK1f9Mc uclUf/aKFYlCReou4wXIPFJyVcLwkVV0aVxjRY3qMwl9oXgySdOlrOy+VSTsfdmq jCSb0djYlfWwj5Z7HxAFlrA332SURKlCU5++0uHqNYTz4bGmcCIswzUsNS2pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNEOvOWzUU9fozVZ+P2ol+2fV7A8wHwYDVR0j BBgwFoAU12HESr6aqYn3BItNPlYUicTagoAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI3MzNkY2YtOWY1ZS00Nzc1LTljZTctOWRkNTI1YjQ0Yjg2LzAvRDc2MUM0NEFC RTlBQTk4OUY3MDQ4QjREM0U1NjE0ODlDNERBODI4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENzYxQzQ0QUJFOUFBOTg5RjcwNDhCNEQzRTU2MTQ4OUM0REE4 MjgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzAvRDc2MUM0NEFCRTlBQTk4OUY3MDQ4QjREM0U1NjE0 ODlDNERBODI4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALYPHjRc3OCNYGTiYYwSy/40fdW358ivQx9 x1vH6ewdVT8r+aAgSrxOhWnnr1j4NwmZqBIaoxtGCG9ezBYSxAEabxb/AMn57kvd KR/92UbFg3/2zEwfFemvPV8Cciukzswup9apOCFDX9UFxNoHoo/QeGtF7udt/va9 fXekHp9izxAy6a+6w0xVI/I5tN3WDpy5dJCzSZuCRFknmq9swXDFcTmjNRLEyMXi aDrF3xpcsXHqoa8m2HsVlAItdruSfsbbqgnIlmUvcyaJ97XlbHNRO6VMG9gyi0/J N4nOBjmlaoBSGYZix+dM7dmcjUpP3a9KONVs6vi6VLI3IBzcs9c= -----END CERTIFICATE-----Generated at Mon Sep 21 22:17:17 2026 by rpki-client