$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.mft File: 267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.mft (raw, json) Hash identifier: yWlukyaK6wtHjy61sZmtEDKd6XGWYQSVxEkyNhBbgdk= Subject key identifier: 4A:CB:D5:2E:52:51:79:99:FD:49:68:7E:C6:FD:D5:C8:3F:44:F2:B0 Authority key identifier: 26:7E:9A:66:F7:A7:C7:8F:7C:C7:C0:49:86:D6:1B:87:DE:BF:51:23 Certificate issuer: /CN=267E9A66F7A7C78F7CC7C04986D61B87DEBF5123 Certificate serial: 3DAD7EC3DEC2BA63D1712E32D06B2F0093DB21DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.mft Manifest number: BF Signing time: Mon 21 Sep 2026 20:06:19 +0000 Manifest this update: Mon 21 Sep 2026 20:01:19 +0000 Manifest next update: Tue 22 Sep 2026 21:02:19 +0000 Files and hashes: 1: 267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.crl (hash: t1O4DrhKZJhFmIH4XGueZaFUBJ0TphNA8LjHA9PCJJ8=) 2: 3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa (hash: vTNwoFQSRd6UXwDXhePDtYRySxnP7vYZs8QtGgvL7F8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.crl rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 21:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ad:7e:c3:de:c2:ba:63:d1:71:2e:32:d0:6b:2f:00:93:db:21:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=267E9A66F7A7C78F7CC7C04986D61B87DEBF5123 Validity Not Before: Sep 21 20:01:19 2026 GMT Not After : Sep 22 21:02:19 2026 GMT Subject: CN=4ACBD52E52517999FD49687EC6FDD5C83F44F2B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:bb:73:6e:4a:21:55:80:62:eb:a7:70:31:d2: 4a:16:84:65:2a:1a:15:4c:f6:e7:af:59:b2:2c:11: 7e:11:8e:10:4d:d1:84:13:6e:6a:d9:6f:fe:a8:df: 35:f6:e2:4b:35:d6:4f:91:22:95:86:3c:b5:f7:3c: e8:28:19:3f:34:6b:64:00:86:d0:17:75:63:b7:06: bb:0a:b4:70:ea:9e:15:f7:a9:41:ba:a4:1f:40:b3: 06:02:ca:d1:30:0f:80:e2:bf:7e:9f:fa:b4:ed:2e: 60:25:0c:f4:c4:e3:20:7f:b0:64:d9:5b:39:a7:0d: 06:19:1e:4f:83:9c:d2:5c:3a:4d:e6:e5:3c:09:18: 97:1b:76:6b:f9:70:b7:5d:b9:47:35:5e:de:9a:71: 8e:bf:ad:17:cb:13:0a:81:8e:07:c2:b4:9c:e6:82: 64:1b:22:46:62:52:de:0d:e8:cb:d1:70:04:8f:b5: c0:97:66:31:7f:32:90:30:57:a6:c7:83:30:fd:21: 06:ec:15:9d:2d:1c:e7:a8:ea:ff:6e:af:f3:b9:35: 03:b3:11:32:a2:81:4c:80:7a:87:b0:28:69:ae:7b: ce:da:31:72:59:3c:88:89:8f:62:56:70:a9:be:e2: 1a:d7:c5:aa:52:5d:e0:1a:13:27:85:3c:49:b3:11: e3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CB:D5:2E:52:51:79:99:FD:49:68:7E:C6:FD:D5:C8:3F:44:F2:B0 X509v3 Authority Key Identifier: keyid:26:7E:9A:66:F7:A7:C7:8F:7C:C7:C0:49:86:D6:1B:87:DE:BF:51:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:67:78:68:a2:1a:3e:d3:86:9d:6e:73:1a:06:98:bd:b0:b7: 00:d3:06:9a:06:d1:44:9b:e4:57:d0:0e:aa:79:ce:56:e1:5e: 22:ed:98:af:15:9e:82:bb:6b:32:b5:2f:cb:a0:03:bb:fd:1b: a5:ef:58:0c:22:8b:f2:fc:43:f2:0d:34:49:1b:5b:86:4b:ca: 1e:13:7f:d8:f6:d3:44:ae:87:02:0c:a5:47:92:de:df:c3:19: 9a:91:c3:b9:23:17:f4:5c:49:82:f7:be:43:4d:75:56:3e:6a: 86:11:c4:53:50:fe:c6:ae:fb:99:18:2a:c8:4b:87:75:2e:d3: 68:1c:bf:35:08:a2:11:89:0a:58:59:4b:d4:91:c4:4c:b8:8f: 57:4b:94:4c:24:7a:71:eb:f6:bd:8a:0c:70:68:8d:81:f6:07: dc:6a:43:15:23:a0:45:52:a0:a1:a5:f8:e2:d5:30:10:cb:db: f4:68:5a:ae:4f:f6:1b:db:49:5c:70:f7:24:14:d0:71:93:e0: ab:cf:16:1e:ef:77:6a:19:b6:92:f0:e4:f8:d0:6d:8a:ea:58: 47:1f:07:7a:3d:c8:a3:92:d4:5c:4c:3d:4e:c8:e5:64:42:49: 52:91:53:be:48:15:c3:cd:fb:73:77:76:3c:a3:62:19:3a:6b: c8:f4:d7:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPa1+w97CumPRcS4y0GsvAJPbId4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY3RTlBNjZGN0E3Qzc4RjdDQzdDMDQ5ODZENjFCODdE RUJGNTEyMzAeFw0yNjA5MjEyMDAxMTlaFw0yNjA5MjIyMTAyMTlaMDMxMTAvBgNV BAMTKDRBQ0JENTJFNTI1MTc5OTlGRDQ5Njg3RUM2RkRENUM4M0Y0NEYyQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnu3NuSiFVgGLrp3Ax0koWhGUq GhVM9uevWbIsEX4RjhBN0YQTbmrZb/6o3zX24ks11k+RIpWGPLX3POgoGT80a2QA htAXdWO3BrsKtHDqnhX3qUG6pB9AswYCytEwD4Div36f+rTtLmAlDPTE4yB/sGTZ WzmnDQYZHk+DnNJcOk3m5TwJGJcbdmv5cLdduUc1Xt6acY6/rRfLEwqBjgfCtJzm gmQbIkZiUt4N6MvRcASPtcCXZjF/MpAwV6bHgzD9IQbsFZ0tHOeo6v9ur/O5NQOz ETKigUyAeoewKGmue87aMXJZPIiJj2JWcKm+4hrXxapSXeAaEyeFPEmzEeOzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSsvVLlJReZn9SWh+xv3VyD9E8rAwHwYDVR0j BBgwFoAUJn6aZvenx498x8BJhtYbh96/USMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTBmN2M3OTAtNzZiNS00OTY3LWI2ZmYtMTJkYzc1NmJiZjdkLzAvMjY3RTlBNjZG N0E3Qzc4RjdDQzdDMDQ5ODZENjFCODdERUJGNTEyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yNjdFOUE2NkY3QTdDNzhGN0NDN0MwNDk4NkQ2MUI4N0RFQkY1 MTIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTBmN2M3OTAtNzZiNS00OTY3LWI2 ZmYtMTJkYzc1NmJiZjdkLzAvMjY3RTlBNjZGN0E3Qzc4RjdDQzdDMDQ5ODZENjFC ODdERUJGNTEyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK9neGiiGj7Thp1ucxoGmL2wtwDTBpoG0USb 5FfQDqp5zlbhXiLtmK8VnoK7azK1L8ugA7v9G6XvWAwii/L8Q/INNEkbW4ZLyh4T f9j200SuhwIMpUeS3t/DGZqRw7kjF/RcSYL3vkNNdVY+aoYRxFNQ/sau+5kYKshL h3Uu02gcvzUIohGJClhZS9SRxEy4j1dLlEwkenHr9r2KDHBojYH2B9xqQxUjoEVS oKGl+OLVMBDL2/RoWq5P9hvbSVxw9yQU0HGT4KvPFh7vd2oZtpLw5PjQbYrqWEcf B3o9yKOS1FxMPU7I5WRCSVKRU75IFcPN+3N3djyjYhk6a8j0108= -----END CERTIFICATE-----Generated at Tue Sep 22 14:39:01 2026 by rpki-client