$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft File: 07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft (raw, json) Hash identifier: glHycHXCR1mKXdKEzPSADNOfT5z91dLs5IuDKq3eha4= Subject key identifier: 48:0B:61:3A:30:4B:2A:EC:F8:A2:27:65:31:30:59:69:1D:62:FA:32 Authority key identifier: 07:AF:34:F2:44:C0:13:D3:93:BA:ED:01:50:A6:52:F2:BF:9F:1A:5D Certificate issuer: /CN=07AF34F244C013D393BAED0150A652F2BF9F1A5D Certificate serial: 17AC655EA61FC903E661EE3BF89BE3D1CF12AEF0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft Manifest number: BD Signing time: Mon 21 Sep 2026 00:47:35 +0000 Manifest this update: Mon 21 Sep 2026 00:42:35 +0000 Manifest next update: Tue 22 Sep 2026 03:48:35 +0000 Files and hashes: 1: 3130332e3137332e3134302e302f32342d3234203d3e203538343835.roa (hash: rVSTBgAcxMjiphBfXsUD1/ITkO/ZRhpcgBHWKyAe9do=) 2: 3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa (hash: ZInQWIdIz9yreiElsNwlmLmVmB2tNTPmR2V0a4fG3f8=) 3: 07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl (hash: R85hPSrM01gxkUg5YZmFwbuQKlJ7wsZY6zsWaoPu9hs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ac:65:5e:a6:1f:c9:03:e6:61:ee:3b:f8:9b:e3:d1:cf:12:ae:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07AF34F244C013D393BAED0150A652F2BF9F1A5D Validity Not Before: Sep 21 00:42:35 2026 GMT Not After : Sep 22 03:48:35 2026 GMT Subject: CN=480B613A304B2AECF8A22765313059691D62FA32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ea:a3:cc:fa:3e:6e:20:3a:b6:cc:0a:48:72: 7a:67:8a:39:24:b1:79:e5:ed:ce:8f:a1:f5:94:1a: 78:34:6f:49:68:29:91:32:66:07:e6:81:8d:ec:1e: c8:a5:29:69:af:7a:db:da:61:05:50:8b:46:0b:b2: e2:7d:97:52:01:7e:e0:60:d9:b6:dd:09:78:1c:18: d4:96:ed:b6:cf:06:ff:08:e9:f6:37:5a:d8:6b:dc: 48:34:d3:f4:9e:1b:1e:71:96:a8:fe:c3:9e:a1:25: c0:01:d9:55:c6:d4:3a:d0:c7:a5:e0:29:45:13:74: 37:c7:15:59:9d:bd:b7:d4:f2:7f:bf:b5:49:eb:65: ed:4a:42:36:e4:b7:ef:0c:85:35:a7:72:78:e9:00: a1:31:c0:cd:ce:3b:f3:83:86:bf:b4:9b:f4:aa:f1: ce:c6:d7:9f:63:82:a5:9f:56:e2:5f:31:01:52:d1: a0:a3:32:94:e5:43:29:a3:72:be:5b:05:4e:bd:d4: 18:8f:96:cc:e5:5b:93:36:33:b0:49:4f:ec:63:bc: 5d:4e:de:31:4b:56:00:ac:bc:65:8b:db:76:e2:07: 4c:dd:72:0a:a2:18:01:27:1d:d6:d1:10:bf:70:c0: 57:25:5a:f6:24:4f:de:11:39:0f:90:82:80:45:db: 94:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:0B:61:3A:30:4B:2A:EC:F8:A2:27:65:31:30:59:69:1D:62:FA:32 X509v3 Authority Key Identifier: keyid:07:AF:34:F2:44:C0:13:D3:93:BA:ED:01:50:A6:52:F2:BF:9F:1A:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:0d:1c:89:9b:e3:09:e2:1d:b2:7f:06:79:bd:b8:22:c4:2d: b2:7f:f1:6d:fe:90:70:d1:86:82:0f:09:45:de:46:7a:5d:1f: b3:de:81:f2:82:3d:b7:b7:1a:51:f5:e7:ce:bd:4a:97:ce:02: d6:db:2a:92:9e:2a:c1:9d:e7:b0:55:97:ed:36:2a:74:42:4d: 0a:43:cc:82:31:1e:24:37:c2:23:de:1b:42:62:3e:8b:4b:cd: ce:10:b9:3f:e3:b8:e0:30:af:68:29:81:3e:62:39:c7:d4:46: fd:bb:0a:ee:2e:dc:34:b5:1b:b0:56:40:db:5d:8b:7b:41:4f: 06:0d:01:63:8f:9a:a3:bb:da:f1:ff:92:f6:25:e0:af:15:9b: ed:ef:c8:11:97:2a:d1:e7:fc:40:d6:88:bf:b1:0c:69:88:07: 09:4d:7f:93:31:83:7e:b0:9f:cb:60:71:92:1c:6f:d4:b4:54: ca:a7:ce:08:fd:b9:3f:97:04:52:f1:b6:f1:6d:74:54:23:cc: 7b:5b:a1:a6:11:07:95:11:09:95:e0:fe:6b:99:ab:e0:38:ca: 2f:68:75:4f:f2:13:5f:84:ca:95:90:50:14:fd:0d:9d:05:eb: 32:3c:e4:37:41:4e:6a:ca:c2:84:24:34:89:2a:7b:b8:5f:d5: cc:22:6a:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF6xlXqYfyQPmYe47+Jvj0c8SrvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDdBRjM0RjI0NEMwMTNEMzkzQkFFRDAxNTBBNjUyRjJC RjlGMUE1RDAeFw0yNjA5MjEwMDQyMzVaFw0yNjA5MjIwMzQ4MzVaMDMxMTAvBgNV BAMTKDQ4MEI2MTNBMzA0QjJBRUNGOEEyMjc2NTMxMzA1OTY5MUQ2MkZBMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb6qPM+j5uIDq2zApIcnpnijkk sXnl7c6PofWUGng0b0loKZEyZgfmgY3sHsilKWmvetvaYQVQi0YLsuJ9l1IBfuBg 2bbdCXgcGNSW7bbPBv8I6fY3Wthr3Eg00/SeGx5xlqj+w56hJcAB2VXG1DrQx6Xg KUUTdDfHFVmdvbfU8n+/tUnrZe1KQjbkt+8MhTWncnjpAKExwM3OO/ODhr+0m/Sq 8c7G159jgqWfVuJfMQFS0aCjMpTlQymjcr5bBU691BiPlszlW5M2M7BJT+xjvF1O 3jFLVgCsvGWL23biB0zdcgqiGAEnHdbREL9wwFclWvYkT94ROQ+QgoBF25RJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSAthOjBLKuz4oidlMTBZaR1i+jIwHwYDVR0j BBgwFoAUB6808kTAE9OTuu0BUKZS8r+fGl0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFhYmI1NzgtYjlkYi00YTQ3LThkN2UtMTFhNjM0Mjg5MDE4LzAvMDdBRjM0RjI0 NEMwMTNEMzkzQkFFRDAxNTBBNjUyRjJCRjlGMUE1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wN0FGMzRGMjQ0QzAxM0QzOTNCQUVEMDE1MEE2NTJGMkJGOUYx QTVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFhYmI1NzgtYjlkYi00YTQ3LThk N2UtMTFhNjM0Mjg5MDE4LzAvMDdBRjM0RjI0NEMwMTNEMzkzQkFFRDAxNTBBNjUy RjJCRjlGMUE1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGANHImb4wniHbJ/Bnm9uCLELbJ/8W3+kHDR hoIPCUXeRnpdH7PegfKCPbe3GlH15869SpfOAtbbKpKeKsGd57BVl+02KnRCTQpD zIIxHiQ3wiPeG0JiPotLzc4QuT/juOAwr2gpgT5iOcfURv27Cu4u3DS1G7BWQNtd i3tBTwYNAWOPmqO72vH/kvYl4K8Vm+3vyBGXKtHn/EDWiL+xDGmIBwlNf5Mxg36w n8tgcZIcb9S0VMqnzgj9uT+XBFLxtvFtdFQjzHtboaYRB5URCZXg/muZq+A4yi9o dU/yE1+EypWQUBT9DZ0F6zI85DdBTmrKwoQkNIkqe7hf1cwiao4= -----END CERTIFICATE-----Generated at Mon Sep 21 13:48:19 2026 by rpki-client