$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.mft File: 607EB065616BF1A985E6E549EC540E1C94E94819.mft (raw, json) Hash identifier: cnit3/iEuD6HFlSlEUElWE0IO5oKp31j1PcVJ/zJuqk= Subject key identifier: 3E:B9:7D:D8:70:2F:21:57:46:AB:44:93:69:0F:10:07:2F:2E:B2:35 Authority key identifier: 60:7E:B0:65:61:6B:F1:A9:85:E6:E5:49:EC:54:0E:1C:94:E9:48:19 Certificate issuer: /CN=607EB065616BF1A985E6E549EC540E1C94E94819 Certificate serial: 2598B55DDC3ABE45BE128DF58E224DDC0BC0DA7E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/607EB065616BF1A985E6E549EC540E1C94E94819.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.mft Manifest number: BF Signing time: Tue 22 Sep 2026 17:38:23 +0000 Manifest this update: Tue 22 Sep 2026 17:33:23 +0000 Manifest next update: Wed 23 Sep 2026 18:58:23 +0000 Files and hashes: 1: 607EB065616BF1A985E6E549EC540E1C94E94819.crl (hash: F51glalc1YS50b1cZ11yuLQarxjGfpzM3NqHih/1p4U=) 2: 3130332e3132312e3138302e302f32332d3234203d3e20313335343738.roa (hash: jjNj0cEM+Wj64PDL2yAGNM6cCQQfvKyXt4I1SVLIB/E=) 3: 3130332e3132312e3138322e302f32332d3234203d3e20313335343738.roa (hash: 8jyMA8Gmhc97Vi1yoxS8QxZYiktn7eC0pGgFqwBSsy8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.crl rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/607EB065616BF1A985E6E549EC540E1C94E94819.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 17:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:98:b5:5d:dc:3a:be:45:be:12:8d:f5:8e:22:4d:dc:0b:c0:da:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=607EB065616BF1A985E6E549EC540E1C94E94819 Validity Not Before: Sep 22 17:33:23 2026 GMT Not After : Sep 23 18:58:23 2026 GMT Subject: CN=3EB97DD8702F215746AB4493690F10072F2EB235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2d:63:a4:26:58:a3:7d:11:87:fd:3c:e3:ae: 4a:67:9c:f6:09:16:c6:3e:26:56:fc:d3:09:32:fb: af:d0:bf:6b:51:97:ba:a4:33:e6:5b:8e:d7:af:9c: bf:29:b0:c3:46:f9:60:b7:fe:df:5f:2a:71:ec:b5: e8:71:cb:3d:76:b0:60:2a:5c:47:c2:6a:5c:1f:ae: 6d:b0:4c:e1:04:4c:d8:4b:fc:4a:d7:2d:c5:3b:f0: ca:70:86:7c:8d:f0:3b:8a:4c:ca:17:ce:a9:bc:12: b5:f7:5b:66:6e:70:59:da:70:a6:1d:e5:a9:93:19: 5a:10:af:42:94:90:1d:43:eb:a6:31:85:06:e2:cc: 0b:3c:17:6a:5b:f3:28:b5:5f:84:61:55:d9:3e:64: 8d:28:91:08:d2:78:22:3c:4d:08:44:0d:a7:a0:d1: fd:d2:ed:cb:12:a8:1a:5e:bf:b2:08:fa:80:66:03: 47:02:e5:7c:99:ef:f9:c6:c8:2a:79:f0:b1:0c:3b: 00:0b:cd:32:f6:b2:19:b0:53:bb:ea:c8:d8:a9:1a: 74:45:a7:b7:e3:c9:b7:19:78:ba:1a:9f:7f:3e:7f: 12:bf:23:52:1a:1f:dc:be:63:fd:84:dc:63:87:98: 38:0a:3a:17:6e:9d:6d:db:50:06:d5:82:ef:d8:b3: ef:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B9:7D:D8:70:2F:21:57:46:AB:44:93:69:0F:10:07:2F:2E:B2:35 X509v3 Authority Key Identifier: keyid:60:7E:B0:65:61:6B:F1:A9:85:E6:E5:49:EC:54:0E:1C:94:E9:48:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/607EB065616BF1A985E6E549EC540E1C94E94819.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:3c:a3:22:57:25:32:02:d8:f2:e8:d4:65:e5:bf:f8:71:1d: 96:06:72:9f:08:25:3d:99:f6:e1:2e:10:7c:a5:2e:b8:6f:66: a8:35:9e:60:cc:dd:d6:f1:37:4e:09:62:02:f6:6c:90:df:4f: 20:1f:ac:82:60:d7:d5:18:29:be:f1:aa:9d:dc:df:18:96:c6: a7:46:00:df:2e:fc:d8:19:ed:c7:04:b9:ed:be:5c:22:93:ae: a5:1e:49:eb:01:2c:2d:5f:f7:5d:75:da:9e:25:86:23:7a:3a: 3b:f2:4c:49:53:7e:86:1b:f2:c0:f1:c4:00:1e:aa:34:c7:43: 55:82:0f:03:ca:bf:5e:6e:3e:61:4f:4d:f3:46:7b:ce:5e:4e: 4e:63:e5:6b:23:ca:6c:5c:93:25:f2:2d:f1:7d:4b:24:0b:e5: b4:59:e7:1f:07:c2:1f:f4:f9:6e:ba:61:37:a1:cc:45:c7:f5: 35:ae:4a:1a:5b:8a:f7:60:f3:18:e3:66:1d:1a:99:b3:30:24: db:b7:73:bf:7e:a8:95:10:30:1b:fe:3c:c0:a4:93:f2:df:a9: f5:c3:54:b0:ca:2d:56:a4:87:23:4d:38:8b:75:45:6c:83:24: ff:8e:41:b8:91:df:c6:a1:a0:38:04:82:bd:a2:8d:ef:5d:42: 44:c4:d2:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJZi1Xdw6vkW+Eo31jiJN3AvA2n4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA3RUIwNjU2MTZCRjFBOTg1RTZFNTQ5RUM1NDBFMUM5 NEU5NDgxOTAeFw0yNjA5MjIxNzMzMjNaFw0yNjA5MjMxODU4MjNaMDMxMTAvBgNV BAMTKDNFQjk3REQ4NzAyRjIxNTc0NkFCNDQ5MzY5MEYxMDA3MkYyRUIyMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjLWOkJlijfRGH/TzjrkpnnPYJ FsY+Jlb80wky+6/Qv2tRl7qkM+ZbjtevnL8psMNG+WC3/t9fKnHstehxyz12sGAq XEfCalwfrm2wTOEETNhL/ErXLcU78MpwhnyN8DuKTMoXzqm8ErX3W2ZucFnacKYd 5amTGVoQr0KUkB1D66YxhQbizAs8F2pb8yi1X4RhVdk+ZI0okQjSeCI8TQhEDaeg 0f3S7csSqBpev7II+oBmA0cC5XyZ7/nGyCp58LEMOwALzTL2shmwU7vqyNipGnRF p7fjybcZeLoan38+fxK/I1IaH9y+Y/2E3GOHmDgKOhdunW3bUAbVgu/Ys++9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPrl92HAvIVdGq0STaQ8QBy8usjUwHwYDVR0j BBgwFoAUYH6wZWFr8amF5uVJ7FQOHJTpSBkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWU4OTVjZWItMjc3Ny00YWQ5LTkyZGItNDg3M2U0ODVjMWY2LzAvNjA3RUIwNjU2 MTZCRjFBOTg1RTZFNTQ5RUM1NDBFMUM5NEU5NDgxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MDdFQjA2NTYxNkJGMUE5ODVFNkU1NDlFQzU0MEUxQzk0RTk0 ODE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWU4OTVjZWItMjc3Ny00YWQ5LTky ZGItNDg3M2U0ODVjMWY2LzAvNjA3RUIwNjU2MTZCRjFBOTg1RTZFNTQ5RUM1NDBF MUM5NEU5NDgxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMM8oyJXJTIC2PLo1GXlv/hxHZYGcp8IJT2Z 9uEuEHylLrhvZqg1nmDM3dbxN04JYgL2bJDfTyAfrIJg19UYKb7xqp3c3xiWxqdG AN8u/NgZ7ccEue2+XCKTrqUeSesBLC1f91112p4lhiN6OjvyTElTfoYb8sDxxAAe qjTHQ1WCDwPKv15uPmFPTfNGe85eTk5j5WsjymxckyXyLfF9SyQL5bRZ5x8Hwh/0 +W66YTehzEXH9TWuShpbivdg8xjjZh0ambMwJNu3c79+qJUQMBv+PMCkk/LfqfXD VLDKLVakhyNNOIt1RWyDJP+OQbiR38ahoDgEgr2ije9dQkTE0mY= -----END CERTIFICATE-----Generated at Tue Sep 22 22:36:15 2026 by rpki-client