$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft File: D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft (raw, json) Hash identifier: qUYcs8F4Qt6KdpIoOTIULY3fmxmD+a+JpmZq4vgLI78= Subject key identifier: 40:8A:40:2E:79:DD:B3:62:0A:88:40:C9:46:FE:B5:AC:6E:73:7D:98 Authority key identifier: D2:70:7D:53:E0:7D:53:B0:0A:F1:91:7C:7B:06:CA:FE:0B:48:C1:05 Certificate issuer: /CN=D2707D53E07D53B00AF1917C7B06CAFE0B48C105 Certificate serial: 20C84692D38D5446E972FCF3941E3FF0207629C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft Manifest number: C1 Signing time: Tue 22 Sep 2026 21:07:36 +0000 Manifest this update: Tue 22 Sep 2026 21:02:36 +0000 Manifest next update: Wed 23 Sep 2026 22:48:36 +0000 Files and hashes: 1: 3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa (hash: TWEuLcbFsQpYWxLsu1a0ItVks1vfqJFaCCURAAEUNEI=) 2: 3130332e37392e3133302e302f32332d3233203d3e20313430343433.roa (hash: z0PNiSkl97AAkKJELLOVf430z2bBk4x4W6fIOoHOGmo=) 3: D2707D53E07D53B00AF1917C7B06CAFE0B48C105.crl (hash: vZpMFXYa8vbRi9/H6pboLS4iPb/o2eoVyU2YyyNo838=) 4: 3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa (hash: N+OTkKCrsA8j5gwyH0Mpha31q8YHuNMGpdCuA0VgWcY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.crl rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 22:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c8:46:92:d3:8d:54:46:e9:72:fc:f3:94:1e:3f:f0:20:76:29:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2707D53E07D53B00AF1917C7B06CAFE0B48C105 Validity Not Before: Sep 22 21:02:36 2026 GMT Not After : Sep 23 22:48:36 2026 GMT Subject: CN=408A402E79DDB3620A8840C946FEB5AC6E737D98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:22:a9:56:13:6a:d4:3e:e6:90:c4:8b:c4:a8: 2a:12:0e:1d:3d:d2:9a:1b:de:a4:8d:8d:45:5e:5b: bd:6b:c9:b4:cb:0f:af:c5:98:6f:32:50:51:36:59: 40:6b:78:68:ea:3c:56:a2:04:bd:b3:6e:f9:3e:73: 85:96:79:88:7e:93:5c:1e:9f:ef:eb:72:ef:9b:c7: d6:fd:42:d2:19:ca:d8:c7:f7:0b:a2:39:27:b8:55: a3:af:51:7c:f0:f8:5b:36:cf:43:dd:1f:62:c3:fb: e1:ee:2d:a6:26:63:95:77:75:0e:29:9c:fd:45:79: 00:a7:e6:a1:8b:2b:37:36:35:3f:ef:47:10:02:1f: f0:71:23:6c:56:dd:f3:45:26:6a:6e:13:7c:33:9c: ca:fc:cb:8f:2c:97:3e:32:3c:8c:d8:74:22:f1:16: f2:6a:63:42:e2:13:bb:ad:98:95:88:52:06:90:b8: c2:23:42:f8:e2:de:9a:77:00:84:90:8b:4e:98:93: 7f:f4:96:c6:2f:d3:f6:5d:e2:28:e6:36:05:f7:99: 12:33:df:4a:58:79:84:3a:47:c3:0e:f2:65:cb:f0: 51:03:cd:43:8b:bf:e5:66:e8:a0:8a:a3:a6:15:8e: 7e:f9:fe:29:74:ec:5b:73:f5:a6:69:12:bf:fc:5b: 4a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8A:40:2E:79:DD:B3:62:0A:88:40:C9:46:FE:B5:AC:6E:73:7D:98 X509v3 Authority Key Identifier: keyid:D2:70:7D:53:E0:7D:53:B0:0A:F1:91:7C:7B:06:CA:FE:0B:48:C1:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:25:b4:71:73:7b:e1:95:e6:09:d3:10:34:f8:69:7f:5a:b7: 5c:4a:68:6f:a5:cb:49:dc:e1:cc:7b:9d:18:a1:68:1a:67:c8: 51:67:af:99:8d:a4:5d:e5:08:27:a1:26:8c:21:f2:1a:06:03: d0:45:15:4c:af:19:d0:fe:17:4d:8a:64:90:e6:02:d5:21:9d: 93:dc:85:69:6f:fe:c6:dd:d5:91:52:f4:55:11:c8:1f:44:13: a2:4b:8d:b0:92:fa:2f:75:53:d8:e6:5d:11:10:1f:49:7a:b4: 48:d0:8f:8f:b6:95:40:ce:f9:4f:43:fb:f2:4b:d5:ac:57:6e: 65:6b:23:0f:a6:7d:71:ff:c8:c2:bb:f5:12:b8:2c:bd:d0:ce: 84:e2:fe:2c:b7:d0:37:ad:09:43:1b:5e:d4:0c:d4:be:9e:98: 94:62:c6:38:af:c9:6b:92:36:34:ea:7c:2d:37:d0:5f:69:8b: 31:ec:63:b6:02:d5:b6:49:88:53:30:52:ca:91:37:9c:69:38: 58:d3:58:c1:54:d3:d3:82:7b:64:84:7c:38:69:8c:e5:a8:19: 20:56:fd:d5:0f:0d:4e:19:24:3b:e1:bd:e4:d4:fe:b2:bb:4c: 96:e7:47:43:74:08:13:ac:9a:9d:a2:23:c0:e8:50:e5:d0:4e: 91:23:1a:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIMhGktONVEbpcvzzlB4/8CB2KcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI3MDdENTNFMDdENTNCMDBBRjE5MTdDN0IwNkNBRkUw QjQ4QzEwNTAeFw0yNjA5MjIyMTAyMzZaFw0yNjA5MjMyMjQ4MzZaMDMxMTAvBgNV BAMTKDQwOEE0MDJFNzlEREIzNjIwQTg4NDBDOTQ2RkVCNUFDNkU3MzdEOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpIqlWE2rUPuaQxIvEqCoSDh09 0pob3qSNjUVeW71rybTLD6/FmG8yUFE2WUBreGjqPFaiBL2zbvk+c4WWeYh+k1we n+/rcu+bx9b9QtIZytjH9wuiOSe4VaOvUXzw+Fs2z0PdH2LD++HuLaYmY5V3dQ4p nP1FeQCn5qGLKzc2NT/vRxACH/BxI2xW3fNFJmpuE3wznMr8y48slz4yPIzYdCLx FvJqY0LiE7utmJWIUgaQuMIjQvji3pp3AISQi06Yk3/0lsYv0/Zd4ijmNgX3mRIz 30pYeYQ6R8MO8mXL8FEDzUOLv+Vm6KCKo6YVjn75/il07Ftz9aZpEr/8W0prAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQIpALnnds2IKiEDJRv61rG5zfZgwHwYDVR0j BBgwFoAU0nB9U+B9U7AK8ZF8ewbK/gtIwQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFlMjQ5MDctYTZmMi00YTU1LWFhNmYtMThjN2RiMTQzZmU4LzAvRDI3MDdENTNF MDdENTNCMDBBRjE5MTdDN0IwNkNBRkUwQjQ4QzEwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjcwN0Q1M0UwN0Q1M0IwMEFGMTkxN0M3QjA2Q0FGRTBCNDhD MTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFlMjQ5MDctYTZmMi00YTU1LWFh NmYtMThjN2RiMTQzZmU4LzAvRDI3MDdENTNFMDdENTNCMDBBRjE5MTdDN0IwNkNB RkUwQjQ4QzEwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALAltHFze+GV5gnTEDT4aX9at1xKaG+ly0nc 4cx7nRihaBpnyFFnr5mNpF3lCCehJowh8hoGA9BFFUyvGdD+F02KZJDmAtUhnZPc hWlv/sbd1ZFS9FURyB9EE6JLjbCS+i91U9jmXREQH0l6tEjQj4+2lUDO+U9D+/JL 1axXbmVrIw+mfXH/yMK79RK4LL3QzoTi/iy30DetCUMbXtQM1L6emJRixjivyWuS NjTqfC030F9pizHsY7YC1bZJiFMwUsqRN5xpOFjTWMFU09OCe2SEfDhpjOWoGSBW /dUPDU4ZJDvhveTU/rK7TJbnR0N0CBOsmp2iI8DoUOXQTpEjGsc= -----END CERTIFICATE-----Generated at Wed Sep 23 04:30:27 2026 by rpki-client