$ rpki-client -vvvf rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.mft File: 107CC3B5D832F9C49566A53614D4CD97DCCF422C.mft (raw, json) Hash identifier: n8S5TByhaaWN6i7NpVIcHxZsaX2nLW5xW1vvJsgALP0= Subject key identifier: D5:B3:5F:74:45:8E:F0:5E:BC:81:C5:D0:74:F2:8F:3B:33:81:D3:26 Authority key identifier: 10:7C:C3:B5:D8:32:F9:C4:95:66:A5:36:14:D4:CD:97:DC:CF:42:2C Certificate issuer: /CN=107CC3B5D832F9C49566A53614D4CD97DCCF422C Certificate serial: 4B942B761E3CB0823D97D3F89F7250602EAB45AD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/107CC3B5D832F9C49566A53614D4CD97DCCF422C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 17:37:46 +0000 Manifest this update: Wed 23 Sep 2026 17:32:46 +0000 Manifest next update: Thu 24 Sep 2026 18:37:46 +0000 Files and hashes: 1: 107CC3B5D832F9C49566A53614D4CD97DCCF422C.crl (hash: vbRWBk8Tsrntbmi2RR0q1on3dvsTvUaVmR2HKtP+RA8=) 2: 3130332e3232302e3131342e302f32332d3234203d3e20313335343436.roa (hash: hUbYV74o2po437IyhmufJ2EH4wEuOB+BJKCVuYVEfLs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.crl rsync://rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/107CC3B5D832F9C49566A53614D4CD97DCCF422C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:37:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:94:2b:76:1e:3c:b0:82:3d:97:d3:f8:9f:72:50:60:2e:ab:45:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=107CC3B5D832F9C49566A53614D4CD97DCCF422C Validity Not Before: Sep 23 17:32:46 2026 GMT Not After : Sep 24 18:37:46 2026 GMT Subject: CN=D5B35F74458EF05EBC81C5D074F28F3B3381D326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e9:a2:31:ee:e0:40:5b:c6:6e:a9:81:23:0b: 2e:ba:84:44:c6:aa:4a:25:a0:8d:29:50:ac:ea:4f: 73:0f:40:43:37:8b:eb:be:10:fe:8c:5c:67:9a:5f: ff:f4:74:b7:04:71:bc:de:e0:6b:aa:f7:82:92:49: 0d:cc:d7:80:af:4e:1c:1d:dc:3d:b6:48:d2:d1:ef: 79:a4:0f:38:d6:a0:5a:68:79:e2:66:4d:2c:0a:ac: 08:68:c7:26:6b:50:89:0a:f8:86:77:05:a4:4c:64: 9d:6b:63:0f:e3:07:3d:fa:90:4c:17:d4:72:91:3c: ae:1c:ea:c4:ae:08:78:a7:e9:9d:f4:2b:da:03:76: 19:8f:ac:1d:7d:3c:1c:bd:4b:bc:c3:b2:b3:12:d9: 00:c7:0a:f2:64:6e:70:75:00:0d:c4:aa:53:12:39: f1:83:0e:d0:71:8e:7c:9e:9f:ca:8a:83:9e:a2:9f: 9b:77:26:c3:36:c6:1c:39:36:62:f5:f9:f0:cc:bf: c5:2e:f9:be:82:84:83:50:9b:56:11:3c:9c:28:62: 37:18:02:ed:31:43:0c:c6:ec:58:ed:99:e2:11:fe: 6b:58:c1:13:7f:d5:b7:ed:60:e3:cc:f3:53:3f:56: b3:14:40:3e:31:9e:bc:46:12:26:4f:cb:b6:94:ce: e5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B3:5F:74:45:8E:F0:5E:BC:81:C5:D0:74:F2:8F:3B:33:81:D3:26 X509v3 Authority Key Identifier: keyid:10:7C:C3:B5:D8:32:F9:C4:95:66:A5:36:14:D4:CD:97:DC:CF:42:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/107CC3B5D832F9C49566A53614D4CD97DCCF422C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:e5:18:c9:4b:49:24:17:6f:f7:70:41:7c:56:ec:d4:91:8b: d2:6c:b7:9c:1c:10:13:4b:d8:db:04:14:da:18:37:d4:af:10: 43:14:01:0c:73:bd:9d:a2:32:9d:2d:b2:5a:47:f5:81:24:5d: 40:5b:99:d8:48:99:fe:38:5c:72:d9:f3:98:5b:66:e2:c7:96: 52:2d:49:99:9b:61:2e:3b:09:d4:31:5c:51:c1:4e:3c:4d:76: 5c:bd:ac:b1:95:88:0c:64:16:73:44:1f:2d:bb:4d:4d:7b:b2: 42:3c:34:50:d7:4b:20:42:48:13:f1:f8:c6:2d:c5:7a:00:21: 31:4b:2f:51:37:1a:e1:ef:f3:80:bb:b9:53:e9:e8:a3:31:ec: 69:df:83:8f:a2:fb:cc:8f:4c:36:6c:7b:f4:77:cf:eb:cc:c8: 36:70:88:06:11:99:29:cd:5a:1f:42:6e:f1:d8:5a:c9:f2:e7: 63:3c:38:e4:73:0a:31:60:91:65:69:a3:5c:82:24:8f:23:00: 3d:f0:5b:00:d6:eb:ff:eb:66:24:9a:07:3c:04:3c:d7:a8:6d: 70:28:f9:e5:4e:b7:55:0f:fa:75:51:e9:27:07:9b:61:91:b5: d5:7a:c5:9b:78:bf:7c:c1:f4:cd:49:13:bd:3d:33:bb:4c:32: 6f:17:35:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS5Qrdh48sII9l9P4n3JQYC6rRa0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA3Q0MzQjVEODMyRjlDNDk1NjZBNTM2MTRENENEOTdE Q0NGNDIyQzAeFw0yNjA5MjMxNzMyNDZaFw0yNjA5MjQxODM3NDZaMDMxMTAvBgNV BAMTKEQ1QjM1Rjc0NDU4RUYwNUVCQzgxQzVEMDc0RjI4RjNCMzM4MUQzMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp6aIx7uBAW8ZuqYEjCy66hETG qkoloI0pUKzqT3MPQEM3i+u+EP6MXGeaX//0dLcEcbze4Guq94KSSQ3M14CvThwd 3D22SNLR73mkDzjWoFpoeeJmTSwKrAhoxyZrUIkK+IZ3BaRMZJ1rYw/jBz36kEwX 1HKRPK4c6sSuCHin6Z30K9oDdhmPrB19PBy9S7zDsrMS2QDHCvJkbnB1AA3EqlMS OfGDDtBxjnyen8qKg56in5t3JsM2xhw5NmL1+fDMv8Uu+b6ChINQm1YRPJwoYjcY Au0xQwzG7FjtmeIR/mtYwRN/1bftYOPM81M/VrMUQD4xnrxGEiZPy7aUzuURAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1bNfdEWO8F68gcXQdPKPOzOB0yYwHwYDVR0j BBgwFoAUEHzDtdgy+cSVZqU2FNTNl9zPQiwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTU0YjlkMzItM2M1YS00MGUyLWI3ODgtMDY5ZGUwYzNkMmRlLzAvMTA3Q0MzQjVE ODMyRjlDNDk1NjZBNTM2MTRENENEOTdEQ0NGNDIyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDdDQzNCNUQ4MzJGOUM0OTU2NkE1MzYxNEQ0Q0Q5N0RDQ0Y0 MjJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTU0YjlkMzItM2M1YS00MGUyLWI3 ODgtMDY5ZGUwYzNkMmRlLzAvMTA3Q0MzQjVEODMyRjlDNDk1NjZBNTM2MTRENENE OTdEQ0NGNDIyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvlGMlLSSQXb/dwQXxW7NSRi9Jst5wcEBNL 2NsEFNoYN9SvEEMUAQxzvZ2iMp0tslpH9YEkXUBbmdhImf44XHLZ85hbZuLHllIt SZmbYS47CdQxXFHBTjxNdly9rLGViAxkFnNEHy27TU17skI8NFDXSyBCSBPx+MYt xXoAITFLL1E3GuHv84C7uVPp6KMx7Gnfg4+i+8yPTDZse/R3z+vMyDZwiAYRmSnN Wh9CbvHYWsny52M8OORzCjFgkWVpo1yCJI8jAD3wWwDW6//rZiSaBzwEPNeobXAo +eVOt1UP+nVR6ScHm2GRtdV6xZt4v3zB9M1JE709M7tMMm8XNQg= -----END CERTIFICATE-----Generated at Wed Sep 23 21:48:26 2026 by rpki-client