$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/B07262415656C2D65AF1FB6B516A57353FEA8D40.mft File: B07262415656C2D65AF1FB6B516A57353FEA8D40.mft (raw, json) Hash identifier: cap7ulU2a+QOs6yvhNoTU8+SY0pVOpMO/BtNMaJGkHA= Subject key identifier: C1:55:CC:43:5A:2E:96:C7:13:73:A7:24:C0:F1:D7:DF:93:78:E8:63 Authority key identifier: B0:72:62:41:56:56:C2:D6:5A:F1:FB:6B:51:6A:57:35:3F:EA:8D:40 Certificate issuer: /CN=B07262415656C2D65AF1FB6B516A57353FEA8D40 Certificate serial: 0C3557DDA6C61DBAC1808E0CE6E6D271EC0E0FB7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B07262415656C2D65AF1FB6B516A57353FEA8D40.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/B07262415656C2D65AF1FB6B516A57353FEA8D40.mft Manifest number: C0 Signing time: Sun 20 Sep 2026 22:24:36 +0000 Manifest this update: Sun 20 Sep 2026 22:19:36 +0000 Manifest next update: Tue 22 Sep 2026 00:57:36 +0000 Files and hashes: 1: B07262415656C2D65AF1FB6B516A57353FEA8D40.crl (hash: KkwpHE/9TD16IP+XPKgUdE/Rt8PQl+oZOg4odzq2i34=) 2: 3130332e3136362e3231332e302f32342d3234203d3e20313431393537.roa (hash: HMulnii/HDUOgXgEUkM8p+8sNcb96i7rF2Rlq6FbVIs=) 3: 3130332e3136362e3231322e302f32342d3234203d3e20313431393537.roa (hash: TU34W0uej+lBgrEZ9f3pjCsz5qnJOOeLATUQpCTCETg=) 4: 3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa (hash: 5+QjDX8KG0DdCRMLkCdouqkAivuUBYGCvdZURD0Juiw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/B07262415656C2D65AF1FB6B516A57353FEA8D40.crl rsync://rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/B07262415656C2D65AF1FB6B516A57353FEA8D40.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B07262415656C2D65AF1FB6B516A57353FEA8D40.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 00:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:35:57:dd:a6:c6:1d:ba:c1:80:8e:0c:e6:e6:d2:71:ec:0e:0f:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B07262415656C2D65AF1FB6B516A57353FEA8D40 Validity Not Before: Sep 20 22:19:36 2026 GMT Not After : Sep 22 00:57:36 2026 GMT Subject: CN=C155CC435A2E96C71373A724C0F1D7DF9378E863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:05:4b:28:ed:da:1e:ee:5a:80:5b:1d:03:2d: b5:36:4a:7f:d2:8c:7a:1a:7a:99:8e:f5:3d:9c:84: 58:af:57:09:0c:42:b3:2c:c8:a0:b7:cf:d5:19:f6: 6b:4b:58:60:6e:ba:49:08:78:cb:ab:9f:4e:a5:fc: 9b:82:18:93:1c:c3:2e:df:42:46:dc:87:79:06:e0: 55:df:84:a8:86:9b:cd:59:eb:a5:ce:1a:c8:84:cd: f9:dc:05:40:71:c3:50:d2:78:43:3e:4c:16:a1:98: ba:f0:71:72:8c:2c:0f:05:eb:0a:c3:d5:c0:c4:6e: 62:21:97:d2:ca:ed:68:13:36:e5:15:2a:4a:4c:73: 40:6b:89:ee:b4:0c:23:88:8f:27:81:fc:4f:9a:eb: 86:2b:e6:75:3f:1c:ac:5a:ba:b4:37:6f:bc:bc:93: 7e:b3:f2:c0:81:0c:cd:52:1d:d9:37:2b:13:fe:3f: 13:de:0b:7e:34:05:4b:f3:09:52:50:c3:74:eb:61: 0c:8d:d6:31:aa:09:8e:11:32:8f:48:4c:9a:34:2f: 3f:4b:77:7e:76:ac:a3:8b:22:c7:7f:60:4c:8e:c1: d7:24:fc:7d:ad:10:e9:33:3a:9a:55:46:2b:ca:84: a9:82:4f:71:b9:f8:9c:93:2a:81:c7:87:a5:be:f7: 6a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:55:CC:43:5A:2E:96:C7:13:73:A7:24:C0:F1:D7:DF:93:78:E8:63 X509v3 Authority Key Identifier: keyid:B0:72:62:41:56:56:C2:D6:5A:F1:FB:6B:51:6A:57:35:3F:EA:8D:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/B07262415656C2D65AF1FB6B516A57353FEA8D40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B07262415656C2D65AF1FB6B516A57353FEA8D40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/B07262415656C2D65AF1FB6B516A57353FEA8D40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:51:bd:e1:2b:4c:4b:33:af:ce:e4:f0:69:b5:9a:66:d5:98: 0c:d7:d4:35:d1:dd:54:9a:61:9a:7a:6a:5b:4a:7d:d5:cb:df: e9:92:d3:e4:be:ab:9f:d0:ff:65:fd:19:56:ff:9d:90:8c:cc: 61:e1:90:22:c7:f2:41:e6:27:3e:8f:30:6d:7c:61:61:76:0c: 2f:05:b1:53:ec:79:20:8c:ad:5a:73:26:6a:38:df:a3:99:23: b1:11:96:78:bc:23:c7:9a:dd:83:ac:18:d5:9e:3e:bb:77:4b: c0:ed:18:c5:5d:80:60:b9:d0:b7:73:5c:90:ba:4d:26:7d:7c: 34:e4:44:26:50:1d:d7:60:89:f3:e3:53:84:ad:75:47:00:8c: 84:c5:77:d5:9a:6b:2a:4c:9b:15:86:02:3b:2d:64:9f:9f:d0: 7c:4a:8d:3d:2c:fd:80:71:e5:93:c3:60:72:46:0c:86:48:b6: 41:a4:af:c0:4f:e4:22:04:75:db:b2:5a:47:a8:e3:2b:a0:ad: 65:7d:c6:c4:6b:7f:92:7b:6d:01:b2:2d:5c:32:78:1b:a3:b6: 2b:a1:a3:3e:c8:d2:e2:1c:3c:97:f9:42:3e:4b:9c:a0:11:cf: 77:e3:34:95:8e:9c:51:81:b7:75:93:da:54:41:fa:f4:64:97: 8d:35:08:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDDVX3abGHbrBgI4M5ubScewOD7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA3MjYyNDE1NjU2QzJENjVBRjFGQjZCNTE2QTU3MzUz RkVBOEQ0MDAeFw0yNjA5MjAyMjE5MzZaFw0yNjA5MjIwMDU3MzZaMDMxMTAvBgNV BAMTKEMxNTVDQzQzNUEyRTk2QzcxMzczQTcyNEMwRjFEN0RGOTM3OEU4NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUBUso7doe7lqAWx0DLbU2Sn/S jHoaepmO9T2chFivVwkMQrMsyKC3z9UZ9mtLWGBuukkIeMurn06l/JuCGJMcwy7f Qkbch3kG4FXfhKiGm81Z66XOGsiEzfncBUBxw1DSeEM+TBahmLrwcXKMLA8F6wrD 1cDEbmIhl9LK7WgTNuUVKkpMc0Brie60DCOIjyeB/E+a64Yr5nU/HKxaurQ3b7y8 k36z8sCBDM1SHdk3KxP+PxPeC340BUvzCVJQw3TrYQyN1jGqCY4RMo9ITJo0Lz9L d352rKOLIsd/YEyOwdck/H2tEOkzOppVRivKhKmCT3G5+JyTKoHHh6W+92oFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwVXMQ1oulscTc6ckwPHX35N46GMwHwYDVR0j BBgwFoAUsHJiQVZWwtZa8ftrUWpXNT/qjUAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTU5NWI3ZDQtM2FhYi00YjgzLTk0YjItYzQyNjdiMmFlMGEwLzAvQjA3MjYyNDE1 NjU2QzJENjVBRjFGQjZCNTE2QTU3MzUzRkVBOEQ0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMDcyNjI0MTU2NTZDMkQ2NUFGMUZCNkI1MTZBNTczNTNGRUE4 RDQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTU5NWI3ZDQtM2FhYi00YjgzLTk0 YjItYzQyNjdiMmFlMGEwLzAvQjA3MjYyNDE1NjU2QzJENjVBRjFGQjZCNTE2QTU3 MzUzRkVBOEQ0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMZRveErTEszr87k8Gm1mmbVmAzX1DXR3VSa YZp6altKfdXL3+mS0+S+q5/Q/2X9GVb/nZCMzGHhkCLH8kHmJz6PMG18YWF2DC8F sVPseSCMrVpzJmo436OZI7ERlni8I8ea3YOsGNWePrt3S8DtGMVdgGC50LdzXJC6 TSZ9fDTkRCZQHddgifPjU4StdUcAjITFd9WaaypMmxWGAjstZJ+f0HxKjT0s/YBx 5ZPDYHJGDIZItkGkr8BP5CIEdduyWkeo4yugrWV9xsRrf5J7bQGyLVwyeBujtiuh oz7I0uIcPJf5Qj5LnKARz3fjNJWOnFGBt3WT2lRB+vRkl401COU= -----END CERTIFICATE-----Generated at Mon Sep 21 13:24:16 2026 by rpki-client