$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft File: D769452C15749C457029AB81E06B7D36C9F48804.mft (raw, json) Hash identifier: EtMLP570xYIshADN1qWbbjH4mAs4ccqTq71GZwkl2lE= Subject key identifier: B0:10:2C:B6:72:C0:37:80:C1:4C:6A:6F:73:92:32:72:5B:EC:1C:60 Authority key identifier: D7:69:45:2C:15:74:9C:45:70:29:AB:81:E0:6B:7D:36:C9:F4:88:04 Certificate issuer: /CN=D769452C15749C457029AB81E06B7D36C9F48804 Certificate serial: 40B670E8DF3A223DD46292FAAA0A14F85E216B47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D769452C15749C457029AB81E06B7D36C9F48804.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft Manifest number: BD Signing time: Mon 21 Sep 2026 01:18:03 +0000 Manifest this update: Mon 21 Sep 2026 01:13:03 +0000 Manifest next update: Tue 22 Sep 2026 03:57:03 +0000 Files and hashes: 1: 3136302e32352e3234342e302f32332d3233203d3e20313533313131.roa (hash: FxemyMpIsKKyeyZF+nt8pq/Wh2yMuBg7NUlyoxRZXT8=) 2: 3136302e32352e3234352e302f32342d3234203d3e20313533313131.roa (hash: Wgp2Ly277xiC/SJ4ahqqMWo1yKBGTp7hlr1qa44tvrs=) 3: D769452C15749C457029AB81E06B7D36C9F48804.crl (hash: zTDX3i8+w+oyIuoPvJWsArZqKmMWkSiI21x+PApSfks=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.crl rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D769452C15749C457029AB81E06B7D36C9F48804.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:57:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:b6:70:e8:df:3a:22:3d:d4:62:92:fa:aa:0a:14:f8:5e:21:6b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D769452C15749C457029AB81E06B7D36C9F48804 Validity Not Before: Sep 21 01:13:03 2026 GMT Not After : Sep 22 03:57:03 2026 GMT Subject: CN=B0102CB672C03780C14C6A6F739232725BEC1C60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e8:85:bd:63:3d:1c:bb:cd:10:5b:11:d3:3b: 6e:bc:61:df:51:4e:c7:24:46:9b:af:03:11:3d:1a: 84:06:27:67:ff:61:e2:7d:56:f3:2a:6f:a4:f7:ac: db:42:a1:85:cf:f9:d8:aa:62:1b:16:84:00:6f:c7: a6:09:75:c9:fa:b3:f5:ed:bb:49:f0:a7:f3:a6:39: fe:2c:e1:74:dc:b1:54:9a:ad:a2:99:a7:39:44:d2: e8:af:6a:22:1e:66:92:14:1e:0c:89:d6:22:e9:fe: e8:94:8e:c6:d4:b4:d2:e7:42:fc:bc:fe:32:1f:db: 3a:78:77:2e:23:b0:34:21:eb:62:28:b3:00:3e:6b: c1:dd:6a:c4:d3:33:4e:e6:9a:0f:8f:ab:fe:0d:74: 05:2a:c3:a1:d4:36:32:c1:27:d8:47:8e:72:93:60: 0d:a8:ca:b7:ec:ea:17:9e:da:4c:69:87:d4:8e:31: 50:7b:1a:e4:0a:88:79:00:f4:58:21:3f:84:4c:ac: ee:0b:ad:ac:ca:c5:14:ce:70:68:1b:9f:ed:02:41: 8c:3f:fd:f4:08:53:ee:22:d8:e3:2e:a1:b7:3d:46: b2:4e:02:2f:f5:0c:56:27:6d:3a:eb:f9:b8:2b:b1: 4d:62:6a:17:96:e4:a4:66:73:c4:9a:6f:75:1a:2c: 66:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:10:2C:B6:72:C0:37:80:C1:4C:6A:6F:73:92:32:72:5B:EC:1C:60 X509v3 Authority Key Identifier: keyid:D7:69:45:2C:15:74:9C:45:70:29:AB:81:E0:6B:7D:36:C9:F4:88:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D769452C15749C457029AB81E06B7D36C9F48804.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:dc:fc:36:24:05:02:95:ca:52:02:51:05:39:70:a0:96:70: 9e:36:af:a5:17:16:05:62:ab:ef:c7:7e:a5:d0:d6:4a:1b:42: df:c8:cf:c7:b1:f1:03:8d:ef:ee:6e:55:b6:e7:28:eb:2f:6b: 50:2f:02:77:0d:f4:9a:68:2b:ca:66:7b:1a:91:32:81:4d:6e: 68:29:bc:82:ab:9a:6e:b8:5f:a6:c7:7a:53:94:ae:17:67:c3: e5:cb:51:a4:a3:92:f2:53:bc:b0:84:a8:66:78:dc:5e:54:2c: 1c:e2:62:23:f8:0a:11:fa:ca:d3:12:4e:b9:49:03:c8:61:27: 76:79:91:b2:ec:19:36:ac:21:f3:86:08:4b:4b:70:60:da:34: ca:fa:e7:45:e7:2f:33:f6:78:a6:7d:97:fe:6a:2a:14:9d:20: a0:65:c5:9b:d0:6a:e2:7c:71:9c:b1:08:ec:fd:8e:d6:c0:e0: 64:30:87:c9:32:31:0c:b9:50:61:04:fc:8a:2a:43:01:50:ce: 1c:1f:42:f8:24:a3:f9:1d:50:1c:f7:31:cb:85:9c:5e:fb:78: 49:b7:4d:54:0d:36:87:8b:87:90:96:43:61:b4:47:fe:da:76: 87:d7:d8:60:68:1d:78:e5:09:05:7b:1c:20:8a:a0:1d:95:de: 19:88:38:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQLZw6N86Ij3UYpL6qgoU+F4ha0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2OTQ1MkMxNTc0OUM0NTcwMjlBQjgxRTA2QjdEMzZD OUY0ODgwNDAeFw0yNjA5MjEwMTEzMDNaFw0yNjA5MjIwMzU3MDNaMDMxMTAvBgNV BAMTKEIwMTAyQ0I2NzJDMDM3ODBDMTRDNkE2RjczOTIzMjcyNUJFQzFDNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg6IW9Yz0cu80QWxHTO268Yd9R TsckRpuvAxE9GoQGJ2f/YeJ9VvMqb6T3rNtCoYXP+diqYhsWhABvx6YJdcn6s/Xt u0nwp/OmOf4s4XTcsVSaraKZpzlE0uivaiIeZpIUHgyJ1iLp/uiUjsbUtNLnQvy8 /jIf2zp4dy4jsDQh62IoswA+a8HdasTTM07mmg+Pq/4NdAUqw6HUNjLBJ9hHjnKT YA2oyrfs6hee2kxph9SOMVB7GuQKiHkA9FghP4RMrO4LrazKxRTOcGgbn+0CQYw/ /fQIU+4i2OMuobc9RrJOAi/1DFYnbTrr+bgrsU1iaheW5KRmc8Sab3UaLGbvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsBAstnLAN4DBTGpvc5IyclvsHGAwHwYDVR0j BBgwFoAU12lFLBV0nEVwKauB4Gt9Nsn0iAQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzhjYzFjN2UtZGE3NC00YjExLWI2N2EtZDVmMjdkOTgxNzU3LzAvRDc2OTQ1MkMx NTc0OUM0NTcwMjlBQjgxRTA2QjdEMzZDOUY0ODgwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENzY5NDUyQzE1NzQ5QzQ1NzAyOUFCODFFMDZCN0QzNkM5RjQ4 ODA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzhjYzFjN2UtZGE3NC00YjExLWI2 N2EtZDVmMjdkOTgxNzU3LzAvRDc2OTQ1MkMxNTc0OUM0NTcwMjlBQjgxRTA2QjdE MzZDOUY0ODgwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjc/DYkBQKVylICUQU5cKCWcJ42r6UXFgVi q+/HfqXQ1kobQt/Iz8ex8QON7+5uVbbnKOsva1AvAncN9JpoK8pmexqRMoFNbmgp vIKrmm64X6bHelOUrhdnw+XLUaSjkvJTvLCEqGZ43F5ULBziYiP4ChH6ytMSTrlJ A8hhJ3Z5kbLsGTasIfOGCEtLcGDaNMr650XnLzP2eKZ9l/5qKhSdIKBlxZvQauJ8 cZyxCOz9jtbA4GQwh8kyMQy5UGEE/IoqQwFQzhwfQvgko/kdUBz3McuFnF77eEm3 TVQNNoeLh5CWQ2G0R/7adofX2GBoHXjlCQV7HCCKoB2V3hmIONY= -----END CERTIFICATE-----Generated at Mon Sep 21 20:44:52 2026 by rpki-client