$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.mft File: 637A957BABD264BD486DB1ED9AD344531E09DAA9.mft (raw, json) Hash identifier: RTN/4xiLwCB4r3D3UEiXfVZbzRY/7IIGjdsgwCV8QMM= Subject key identifier: 2B:2E:31:CB:FF:D5:4E:84:D0:53:94:EC:49:A5:76:3A:5B:0F:9D:03 Authority key identifier: 63:7A:95:7B:AB:D2:64:BD:48:6D:B1:ED:9A:D3:44:53:1E:09:DA:A9 Certificate issuer: /CN=637A957BABD264BD486DB1ED9AD344531E09DAA9 Certificate serial: 6D789DA2E72AD1EDC3C637D56FFD473BE4261346 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/637A957BABD264BD486DB1ED9AD344531E09DAA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.mft Manifest number: BD Signing time: Mon 21 Sep 2026 13:02:37 +0000 Manifest this update: Mon 21 Sep 2026 12:57:37 +0000 Manifest next update: Tue 22 Sep 2026 16:10:37 +0000 Files and hashes: 1: 637A957BABD264BD486DB1ED9AD344531E09DAA9.crl (hash: 72BM4dl5eaiQEayD+S1f7RGk0UQoFn5Pd/wZKmqWmWw=) 2: 3130332e3136302e3133382e302f32332d3234203d3e203338333230.roa (hash: pBvBGLopvQdoZtJVsgZWZ9wA+Pu9rrcY8EO/1TZFlpo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.crl rsync://rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/637A957BABD264BD486DB1ED9AD344531E09DAA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 16:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:78:9d:a2:e7:2a:d1:ed:c3:c6:37:d5:6f:fd:47:3b:e4:26:13:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637A957BABD264BD486DB1ED9AD344531E09DAA9 Validity Not Before: Sep 21 12:57:37 2026 GMT Not After : Sep 22 16:10:37 2026 GMT Subject: CN=2B2E31CBFFD54E84D05394EC49A5763A5B0F9D03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f6:90:66:40:75:57:a1:85:21:09:3e:6d:45: 4e:d7:1a:e3:7e:5d:e0:64:59:5a:aa:79:67:a6:b6: 7b:b7:e2:69:86:ac:07:b8:67:0f:1a:36:3e:2e:25: 98:4e:2b:e2:24:90:62:20:99:93:a8:95:f5:e9:ea: 3b:b2:6d:26:14:2f:56:aa:ac:db:05:4d:06:1f:fe: 6c:91:64:50:cc:33:28:c9:fb:8d:79:8f:cd:8e:05: df:bf:be:07:2c:36:74:64:bb:c9:5d:fd:04:b5:9f: 93:2e:94:7c:cf:e3:5a:fe:fb:35:e2:95:db:0f:8c: c1:3e:cc:ee:3a:e6:c9:3b:fe:1c:3c:e8:8e:73:97: 4c:f2:b6:02:42:1c:f2:17:73:e8:21:ca:d3:f0:f0: 13:f7:ff:1b:f9:c5:a0:00:66:ae:4d:ab:bc:df:29: ab:e8:9e:c5:b1:1b:e0:40:35:14:08:c5:b0:10:cd: 9f:3f:13:08:cd:a3:17:51:39:9b:88:44:62:f3:4c: 15:f5:be:43:0f:be:13:77:bd:a3:72:04:34:a5:18: 83:7f:c4:97:53:dd:2c:52:0f:18:3f:de:36:ce:a8: fc:dc:31:9f:d5:2d:ab:51:b1:01:6e:5f:55:70:bc: c4:82:01:6b:27:0f:3d:62:ea:12:64:40:6d:8c:59: 0f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2E:31:CB:FF:D5:4E:84:D0:53:94:EC:49:A5:76:3A:5B:0F:9D:03 X509v3 Authority Key Identifier: keyid:63:7A:95:7B:AB:D2:64:BD:48:6D:B1:ED:9A:D3:44:53:1E:09:DA:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/637A957BABD264BD486DB1ED9AD344531E09DAA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:3f:b8:1f:3c:86:3f:b2:c0:bb:1f:7a:55:c8:cd:b3:ba:a3: cc:c7:6e:5a:98:80:de:23:a1:34:f7:30:56:81:ff:b2:6c:3b: 42:af:cf:ef:5c:3e:76:c6:49:3d:19:e4:e1:65:c1:53:82:c1: 85:fd:cc:78:6d:a8:b4:38:1f:0d:ec:a7:9f:b1:00:1f:8f:3c: f5:f9:99:93:01:38:b2:c4:35:b2:e7:49:8d:47:35:92:6a:84: 89:5c:0a:18:68:62:d5:af:08:b7:5c:80:d8:99:bf:91:ed:d4: ff:66:ca:14:80:0c:c8:a6:6f:b9:dd:21:03:72:ba:b2:f1:47: ea:82:83:b8:d3:d3:dd:56:af:9b:53:5a:00:66:d0:ad:65:b1: 45:bf:46:90:52:cc:13:bb:e1:7a:0a:92:41:61:10:74:c5:14: 5e:49:c9:c9:73:13:e7:98:e7:09:d5:f2:18:08:06:14:a8:2a: ee:35:80:f9:7f:8f:8b:95:17:ff:1e:63:fd:9b:cb:9e:a1:8a: 08:03:89:1c:1e:26:01:0a:98:77:a9:1c:0a:f4:81:d7:b8:c2: dc:6a:05:0a:5d:89:6c:25:e4:85:f8:27:6c:61:66:64:8e:b7: 86:b3:c1:9c:c6:b1:5f:d2:83:0b:a9:15:8a:b9:e2:ee:01:46: 59:77:1a:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbXidoucq0e3DxjfVb/1HO+QmE0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM3QTk1N0JBQkQyNjRCRDQ4NkRCMUVEOUFEMzQ0NTMx RTA5REFBOTAeFw0yNjA5MjExMjU3MzdaFw0yNjA5MjIxNjEwMzdaMDMxMTAvBgNV BAMTKDJCMkUzMUNCRkZENTRFODREMDUzOTRFQzQ5QTU3NjNBNUIwRjlEMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP9pBmQHVXoYUhCT5tRU7XGuN+ XeBkWVqqeWemtnu34mmGrAe4Zw8aNj4uJZhOK+IkkGIgmZOolfXp6juybSYUL1aq rNsFTQYf/myRZFDMMyjJ+415j82OBd+/vgcsNnRku8ld/QS1n5MulHzP41r++zXi ldsPjME+zO465sk7/hw86I5zl0zytgJCHPIXc+ghytPw8BP3/xv5xaAAZq5Nq7zf KavonsWxG+BANRQIxbAQzZ8/EwjNoxdROZuIRGLzTBX1vkMPvhN3vaNyBDSlGIN/ xJdT3SxSDxg/3jbOqPzcMZ/VLatRsQFuX1VwvMSCAWsnDz1i6hJkQG2MWQ/5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKy4xy//VToTQU5TsSaV2OlsPnQMwHwYDVR0j BBgwFoAUY3qVe6vSZL1IbbHtmtNEUx4J2qkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmZkYjE4ZWYtNjU5Zi00YjFlLWEyZTAtYjU4YWY2YjEyNzFmLzAvNjM3QTk1N0JB QkQyNjRCRDQ4NkRCMUVEOUFEMzQ0NTMxRTA5REFBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzdBOTU3QkFCRDI2NEJENDg2REIxRUQ5QUQzNDQ1MzFFMDlE QUE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmZkYjE4ZWYtNjU5Zi00YjFlLWEy ZTAtYjU4YWY2YjEyNzFmLzAvNjM3QTk1N0JBQkQyNjRCRDQ4NkRCMUVEOUFEMzQ0 NTMxRTA5REFBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0/uB88hj+ywLsfelXIzbO6o8zHblqYgN4j oTT3MFaB/7JsO0Kvz+9cPnbGST0Z5OFlwVOCwYX9zHhtqLQ4Hw3sp5+xAB+PPPX5 mZMBOLLENbLnSY1HNZJqhIlcChhoYtWvCLdcgNiZv5Ht1P9myhSADMimb7ndIQNy urLxR+qCg7jT091Wr5tTWgBm0K1lsUW/RpBSzBO74XoKkkFhEHTFFF5JyclzE+eY 5wnV8hgIBhSoKu41gPl/j4uVF/8eY/2by56higgDiRweJgEKmHepHAr0gde4wtxq BQpdiWwl5IX4J2xhZmSOt4azwZzGsV/SgwupFYq54u4BRll3GkI= -----END CERTIFICATE-----Generated at Tue Sep 22 03:21:06 2026 by rpki-client