$ rpki-client -vvvf rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.mft File: 7637E963EF709E2BBD39881202E68EA7BA09EB64.mft (raw, json) Hash identifier: I140UNQ2+98+/lsGL65HwDtVsFrb2xGzqbrD5wJN7Lo= Subject key identifier: F9:12:AD:5E:4E:4A:5E:F6:CF:97:0A:8F:5C:59:8D:3C:4C:88:52:3B Authority key identifier: 76:37:E9:63:EF:70:9E:2B:BD:39:88:12:02:E6:8E:A7:BA:09:EB:64 Certificate issuer: /CN=7637E963EF709E2BBD39881202E68EA7BA09EB64 Certificate serial: 6AE6C84CAFCDC08DEB8F1D94502E5CFE65233BFF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.mft Manifest number: BF Signing time: Mon 21 Sep 2026 22:03:59 +0000 Manifest this update: Mon 21 Sep 2026 21:58:59 +0000 Manifest next update: Tue 22 Sep 2026 22:53:59 +0000 Files and hashes: 1: 323430323a363938303a323030303a3a2f34382d3438203d3e203539323738.roa (hash: SGR/VUMdxBsuFmwp4lsUWkYdYAOdn6A4y8vkO6Hv4pk=) 2: 3130332e3232372e3234302e302f32322d3234203d3e203539323738.roa (hash: jDwYR0eXqs/UReeXAyA7K2tU1AiHfANmWKIdRhF2du0=) 3: 323430323a363938303a3a2f33322d3438203d3e203539323738.roa (hash: aRqarVDmeezXJU+Pwuv00vHqWnKaxtDs6IZN+swCI28=) 4: 323430323a363938303a343030303a3a2f34382d3438203d3e203539323738.roa (hash: VcEziwvajBz0ScjFh/mK+RRpNiyAva/gnfSzmxA7gy8=) 5: 7637E963EF709E2BBD39881202E68EA7BA09EB64.crl (hash: lSiLm+OSfp8HJD5f79f/3iutJpX6qyQkHRX3gfFL1Hs=) 6: 323430323a363938303a333030303a3a2f34382d3438203d3e203539323738.roa (hash: Yr07K6DWQdF2XKTnmuR+IZeyvkTjOYoZ4wAJOdd5cXc=) 7: 323430323a363938303a313030303a3a2f34382d3438203d3e203539323738.roa (hash: nWI4uIvaFgK4Hk7GaUoKI1TVheMwIL3XscjU5iDUJX4=) 8: 3130332e35382e3136302e302f32322d3234203d3e203539323738.roa (hash: OGWj7w+3IXgMzGQNophA491Hc35+yTJ0Ol+4T3sD95Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.crl rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:e6:c8:4c:af:cd:c0:8d:eb:8f:1d:94:50:2e:5c:fe:65:23:3b:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7637E963EF709E2BBD39881202E68EA7BA09EB64 Validity Not Before: Sep 21 21:58:59 2026 GMT Not After : Sep 22 22:53:59 2026 GMT Subject: CN=F912AD5E4E4A5EF6CF970A8F5C598D3C4C88523B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:70:42:a2:2a:4e:39:d9:1f:91:fc:33:d6:3d: c8:2b:02:94:c2:30:24:9b:6e:1d:c5:78:79:24:9d: e6:13:56:c3:33:c2:cc:0d:51:33:14:f1:c8:f8:70: df:c6:77:dd:b8:69:d9:fc:b3:29:cb:39:85:6f:98: 05:c9:45:eb:d7:bc:05:4c:14:1a:7e:93:48:2c:d2: 33:1f:e8:f9:35:1a:d5:91:38:62:fd:85:86:37:4e: d4:f3:e7:00:1f:14:4e:a1:3a:72:61:45:01:b3:a9: 07:8b:53:35:07:7e:2f:95:d6:79:93:38:4e:c5:4f: 53:fb:9b:1d:3a:64:fe:39:a7:41:19:97:51:c2:04: ec:aa:c3:d0:74:0c:59:a9:cb:9c:67:ae:7c:61:fd: 6a:e7:00:77:6d:11:a6:dc:da:d7:69:5a:9c:a6:0e: 89:fa:cc:44:b1:b0:92:72:27:aa:f1:46:01:e7:46: a6:1c:70:82:2e:bc:b7:78:89:bd:52:3a:23:d1:a9: 39:37:af:5b:8c:14:05:43:32:3b:9d:6f:a0:b5:21: 9e:1c:86:f8:e6:ac:92:b7:37:8b:b4:05:08:2d:e9: 43:71:d6:af:e3:82:22:75:d2:d5:1e:07:5c:20:6e: d1:6b:18:42:6e:6c:86:fc:42:9c:cd:47:5b:f9:28: f7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:12:AD:5E:4E:4A:5E:F6:CF:97:0A:8F:5C:59:8D:3C:4C:88:52:3B X509v3 Authority Key Identifier: keyid:76:37:E9:63:EF:70:9E:2B:BD:39:88:12:02:E6:8E:A7:BA:09:EB:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:a5:62:ec:18:78:12:67:2c:38:b3:36:d8:a4:32:10:1e:35: 83:2d:58:63:2b:0c:1a:b0:cf:4a:68:c1:74:67:a2:2a:2d:d8: 36:cc:3b:d7:d8:c2:4d:2b:92:f5:60:27:85:ee:86:e4:4a:51: 56:4f:9f:85:d6:40:7e:f7:f2:b8:2d:26:b2:f2:ab:79:82:a4: c1:3d:8e:c2:4d:ee:0e:85:64:7c:a2:aa:df:e6:be:3f:22:58: 6d:a6:0f:86:1c:00:51:47:02:40:75:9a:5a:d4:5c:e8:8d:47: 0d:91:0e:33:d3:6b:1e:ed:a5:7f:2e:32:b3:7e:2f:72:1a:86: 5f:0a:1a:4c:89:59:4f:a4:d2:b5:a6:3f:6c:58:b4:cc:ba:41: 6d:83:b9:39:6b:24:cb:71:47:64:9a:f0:f4:e9:29:6e:6a:af: 0a:45:8d:b3:59:80:97:8c:43:c7:73:fb:a7:d4:f3:35:34:eb: a6:36:b0:79:b8:1a:9b:f5:69:b8:01:74:ae:e0:50:19:fe:35: dd:2a:8e:7e:de:9e:c1:eb:69:14:c1:e1:96:41:c4:06:43:04: 72:c7:80:33:77:32:de:47:b2:5a:ca:43:bb:77:da:47:84:34: 61:6b:84:3f:d3:a3:8a:2e:8e:7d:5c:c3:eb:13:f4:8c:87:f5: 7f:cb:eb:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaubITK/NwI3rjx2UUC5c/mUjO/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzYzN0U5NjNFRjcwOUUyQkJEMzk4ODEyMDJFNjhFQTdC QTA5RUI2NDAeFw0yNjA5MjEyMTU4NTlaFw0yNjA5MjIyMjUzNTlaMDMxMTAvBgNV BAMTKEY5MTJBRDVFNEU0QTVFRjZDRjk3MEE4RjVDNTk4RDNDNEM4ODUyM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGcEKiKk452R+R/DPWPcgrApTC MCSbbh3FeHkkneYTVsMzwswNUTMU8cj4cN/Gd924adn8synLOYVvmAXJRevXvAVM FBp+k0gs0jMf6Pk1GtWROGL9hYY3TtTz5wAfFE6hOnJhRQGzqQeLUzUHfi+V1nmT OE7FT1P7mx06ZP45p0EZl1HCBOyqw9B0DFmpy5xnrnxh/WrnAHdtEabc2tdpWpym Don6zESxsJJyJ6rxRgHnRqYccIIuvLd4ib1SOiPRqTk3r1uMFAVDMjudb6C1IZ4c hvjmrJK3N4u0BQgt6UNx1q/jgiJ10tUeB1wgbtFrGEJubIb8QpzNR1v5KPcFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+RKtXk5KXvbPlwqPXFmNPEyIUjswHwYDVR0j BBgwFoAUdjfpY+9wniu9OYgSAuaOp7oJ62QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWYxYzc5ZjEtMjY0ZS00MjNmLTllMDgtMGIyOTAwZGE2OTQ5LzAvNzYzN0U5NjNF RjcwOUUyQkJEMzk4ODEyMDJFNjhFQTdCQTA5RUI2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NjM3RTk2M0VGNzA5RTJCQkQzOTg4MTIwMkU2OEVBN0JBMDlF QjY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWYxYzc5ZjEtMjY0ZS00MjNmLTll MDgtMGIyOTAwZGE2OTQ5LzAvNzYzN0U5NjNFRjcwOUUyQkJEMzk4ODEyMDJFNjhF QTdCQTA5RUI2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACOlYuwYeBJnLDizNtikMhAeNYMtWGMrDBqw z0powXRnoiot2DbMO9fYwk0rkvVgJ4XuhuRKUVZPn4XWQH738rgtJrLyq3mCpME9 jsJN7g6FZHyiqt/mvj8iWG2mD4YcAFFHAkB1mlrUXOiNRw2RDjPTax7tpX8uMrN+ L3Iahl8KGkyJWU+k0rWmP2xYtMy6QW2DuTlrJMtxR2Sa8PTpKW5qrwpFjbNZgJeM Q8dz+6fU8zU066Y2sHm4Gpv1abgBdK7gUBn+Nd0qjn7ensHraRTB4ZZBxAZDBHLH gDN3Mt5HslrKQ7t32keENGFrhD/To4oujn1cw+sT9IyH9X/L6wM= -----END CERTIFICATE-----Generated at Tue Sep 22 17:22:05 2026 by rpki-client