$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft File: 267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft (raw, json) Hash identifier: gZFaM49mnTZXbQJGDXwiPd7qxX9X8zzhyPNo+j0jy9c= Subject key identifier: B9:CA:49:99:CF:99:4D:EC:5C:8E:34:68:FA:36:09:26:D1:4D:37:12 Authority key identifier: 26:73:81:23:4D:E6:7C:D8:E7:FC:C5:32:54:0C:0B:1A:69:8F:D8:B0 Certificate issuer: /CN=267381234DE67CD8E7FCC532540C0B1A698FD8B0 Certificate serial: 3201790AED479A91D49FDD255593D087742F4E35 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/267381234DE67CD8E7FCC532540C0B1A698FD8B0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft Manifest number: BD Signing time: Sun 20 Sep 2026 12:42:50 +0000 Manifest this update: Sun 20 Sep 2026 12:37:50 +0000 Manifest next update: Mon 21 Sep 2026 13:21:50 +0000 Files and hashes: 1: 3130332e31352e3231352e302f32342d3234203d3e20313335343737.roa (hash: OOL38iHSy0/NkkysB63GXJ99F6I1QYegNu69it5kV/Y=) 2: 3130332e31352e3231342e302f32342d3234203d3e20313335343737.roa (hash: ZyYg2y6us1LQrG7diwKFALUA9hvUN3acAbNTmnkm8fU=) 3: 267381234DE67CD8E7FCC532540C0B1A698FD8B0.crl (hash: XsKrK7yCuNjjdBmcXhNfOal3G1u9jeUizNV5sc/5TYo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.crl rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/267381234DE67CD8E7FCC532540C0B1A698FD8B0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 13:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:01:79:0a:ed:47:9a:91:d4:9f:dd:25:55:93:d0:87:74:2f:4e:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=267381234DE67CD8E7FCC532540C0B1A698FD8B0 Validity Not Before: Sep 20 12:37:50 2026 GMT Not After : Sep 21 13:21:50 2026 GMT Subject: CN=B9CA4999CF994DEC5C8E3468FA360926D14D3712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fe:56:4c:3c:d6:b2:89:d4:e6:a8:d1:44:51: 23:61:0b:54:c1:5d:d8:01:f0:b6:9f:0e:9f:2a:e6: 9a:6f:d3:50:7a:a9:ee:6d:e8:ec:ce:5a:88:4f:6b: 2f:a1:86:07:33:34:56:37:eb:4c:4a:91:8e:f4:38: 5f:e7:41:c2:12:69:5d:0a:37:7e:bb:5f:39:18:f1: 9a:81:b1:85:96:8a:05:25:04:61:1e:5f:7b:5d:d2: 5f:71:ce:e1:8e:10:70:a0:d6:ba:67:ab:f6:22:7a: 16:29:c8:29:27:f3:99:2e:d2:cb:bc:fc:b1:ee:88: ab:0b:3a:1d:4a:54:a5:42:c4:44:b3:f5:c0:89:b0: 2f:06:6d:ae:0d:e4:8d:2a:44:c3:be:74:21:1d:9f: 56:9d:41:bb:bf:aa:b2:a3:5c:c9:98:12:97:be:08: f2:80:0f:c4:38:46:54:62:0c:0e:e1:77:73:7c:17: b2:20:90:d8:57:44:66:af:c5:01:aa:66:6a:b2:31: d6:ac:12:d9:52:1f:79:1b:be:f7:11:65:c9:33:91: 18:9d:b5:13:0d:c6:65:de:7d:77:2e:41:ce:8a:8e: f6:c7:d5:98:a3:c8:14:c5:f7:6c:6e:c4:bf:60:24: cb:38:af:be:6b:89:a8:a6:05:49:60:bf:3a:c0:eb: 42:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:CA:49:99:CF:99:4D:EC:5C:8E:34:68:FA:36:09:26:D1:4D:37:12 X509v3 Authority Key Identifier: keyid:26:73:81:23:4D:E6:7C:D8:E7:FC:C5:32:54:0C:0B:1A:69:8F:D8:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/267381234DE67CD8E7FCC532540C0B1A698FD8B0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:38:be:91:1e:b4:b3:e4:02:45:5f:ae:50:05:37:05:19:11: a5:ab:ac:0e:31:59:c0:38:f8:b4:8d:df:1e:9f:bc:97:49:7f: f1:1c:d0:ca:4f:5c:ae:34:e3:92:bd:ae:22:31:8e:6b:da:35: 6a:88:b6:0a:06:c4:66:af:3d:98:32:6a:2a:b1:16:bc:ff:ab: 20:4e:c8:4a:91:57:c9:d6:75:d7:bb:8a:b3:5b:c4:11:17:04: 87:b9:b4:2f:56:bb:38:81:68:d0:64:24:8c:ca:78:c0:df:bc: b9:c0:1f:4c:a9:a6:21:40:c2:ae:ba:73:b0:ee:15:74:2b:18: 12:a7:05:0a:35:8b:87:e8:f5:d1:59:4e:fd:da:6c:05:a6:dd: 6c:45:9b:19:af:1d:7c:07:8f:53:51:27:fd:fa:e7:ac:5b:78: 7f:2d:5a:5d:41:d2:de:80:bc:05:da:56:c2:fa:9a:f1:a8:46: 60:ae:6d:db:69:a1:02:ee:25:65:ba:da:17:64:21:4d:39:9b: ff:56:5e:2d:8d:17:bc:e8:cf:54:93:af:c9:cc:c2:d3:84:32: 9b:0f:3f:dd:c7:5f:d2:0c:a5:b7:ab:dc:e9:6f:52:c0:b9:ad: a9:fc:b6:e1:08:12:c4:60:0f:db:71:28:90:0a:15:bc:01:58: b8:aa:d1:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMgF5Cu1HmpHUn90lVZPQh3QvTjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY3MzgxMjM0REU2N0NEOEU3RkNDNTMyNTQwQzBCMUE2 OThGRDhCMDAeFw0yNjA5MjAxMjM3NTBaFw0yNjA5MjExMzIxNTBaMDMxMTAvBgNV BAMTKEI5Q0E0OTk5Q0Y5OTRERUM1QzhFMzQ2OEZBMzYwOTI2RDE0RDM3MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd/lZMPNayidTmqNFEUSNhC1TB XdgB8LafDp8q5ppv01B6qe5t6OzOWohPay+hhgczNFY360xKkY70OF/nQcISaV0K N367XzkY8ZqBsYWWigUlBGEeX3td0l9xzuGOEHCg1rpnq/YiehYpyCkn85ku0su8 /LHuiKsLOh1KVKVCxESz9cCJsC8Gba4N5I0qRMO+dCEdn1adQbu/qrKjXMmYEpe+ CPKAD8Q4RlRiDA7hd3N8F7IgkNhXRGavxQGqZmqyMdasEtlSH3kbvvcRZckzkRid tRMNxmXefXcuQc6KjvbH1ZijyBTF92xuxL9gJMs4r75riaimBUlgvzrA60K/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUucpJmc+ZTexcjjRo+jYJJtFNNxIwHwYDVR0j BBgwFoAUJnOBI03mfNjn/MUyVAwLGmmP2LAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZmNDc2N2QtZTg0Zi00MjEwLTg0MjMtNDA2OTY2MThmMzc3LzAvMjY3MzgxMjM0 REU2N0NEOEU3RkNDNTMyNTQwQzBCMUE2OThGRDhCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNjczODEyMzRERTY3Q0Q4RTdGQ0M1MzI1NDBDMEIxQTY5OEZE OEIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZmNDc2N2QtZTg0Zi00MjEwLTg0 MjMtNDA2OTY2MThmMzc3LzAvMjY3MzgxMjM0REU2N0NEOEU3RkNDNTMyNTQwQzBC MUE2OThGRDhCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFs4vpEetLPkAkVfrlAFNwUZEaWrrA4xWcA4 +LSN3x6fvJdJf/Ec0MpPXK4045K9riIxjmvaNWqItgoGxGavPZgyaiqxFrz/qyBO yEqRV8nWdde7irNbxBEXBIe5tC9WuziBaNBkJIzKeMDfvLnAH0yppiFAwq66c7Du FXQrGBKnBQo1i4fo9dFZTv3abAWm3WxFmxmvHXwHj1NRJ/3656xbeH8tWl1B0t6A vAXaVsL6mvGoRmCubdtpoQLuJWW62hdkIU05m/9WXi2NF7zoz1STr8nMwtOEMpsP P93HX9IMpber3OlvUsC5ran8tuEIEsRgD9txKJAKFbwBWLiq0Qg= -----END CERTIFICATE-----Generated at Sun Sep 20 20:13:11 2026 by rpki-client