$ rpki-client -vvvf rpki-rsync.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/7844F23C52D754615D0DCCF2190967C1B89CF85F.mft File: 7844F23C52D754615D0DCCF2190967C1B89CF85F.mft (raw, json) Hash identifier: AkrlF6SCeXfHZWsKT2V2PnfrzZ8ZTFhnYxS4DuWE+mY= Subject key identifier: 28:03:3C:6B:6F:EA:19:39:E8:C9:71:3C:36:4B:9A:5F:4B:3A:14:FC Authority key identifier: 78:44:F2:3C:52:D7:54:61:5D:0D:CC:F2:19:09:67:C1:B8:9C:F8:5F Certificate issuer: /CN=7844F23C52D754615D0DCCF2190967C1B89CF85F Certificate serial: 302CDAFEB1CC229A88F4FC9B6D17CF5C2931804C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7844F23C52D754615D0DCCF2190967C1B89CF85F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/7844F23C52D754615D0DCCF2190967C1B89CF85F.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 23:45:24 +0000 Manifest this update: Wed 23 Sep 2026 23:40:24 +0000 Manifest next update: Fri 25 Sep 2026 00:19:24 +0000 Files and hashes: 1: 3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa (hash: MkT+sF+nybNeeysnued54G0xsj6WfMLE7g6ep+2x6vw=) 2: 7844F23C52D754615D0DCCF2190967C1B89CF85F.crl (hash: OEjD3zZ8pG7nPEUivws1TYG/SHQ3jxBvl3aOUi8z21I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/7844F23C52D754615D0DCCF2190967C1B89CF85F.crl rsync://rpki-rsync.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/7844F23C52D754615D0DCCF2190967C1B89CF85F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7844F23C52D754615D0DCCF2190967C1B89CF85F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:19:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:2c:da:fe:b1:cc:22:9a:88:f4:fc:9b:6d:17:cf:5c:29:31:80:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7844F23C52D754615D0DCCF2190967C1B89CF85F Validity Not Before: Sep 23 23:40:24 2026 GMT Not After : Sep 25 00:19:24 2026 GMT Subject: CN=28033C6B6FEA1939E8C9713C364B9A5F4B3A14FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:17:5e:5a:7a:8e:69:3c:9c:31:a6:dd:51:46: 00:10:96:44:cc:83:99:e2:fd:bf:2f:03:61:d3:bb: fe:7f:d9:93:ad:48:24:37:35:2c:46:75:7e:e8:bc: ad:fa:b8:28:67:00:a6:f8:91:8d:75:06:f1:96:d6: 46:b0:70:02:dc:a2:de:b1:b6:15:19:68:28:ef:dc: a1:c2:ee:ec:b1:cd:d9:02:ee:33:bb:7f:88:11:70: be:66:6d:70:de:16:02:6b:e1:0b:ab:9f:7c:1a:8f: d9:d8:3f:29:ca:ee:38:6d:30:e9:d3:f6:32:ff:5f: 7e:9a:03:0c:3b:01:50:f1:d7:ad:7c:9b:25:a7:62: ca:6a:b1:2d:07:f4:b2:8d:fd:19:02:46:6b:00:e2: c8:07:6a:0a:a1:2d:21:bb:c3:ea:02:5a:3a:e6:06: 8b:13:82:ba:91:ea:ff:1e:a8:e9:fa:ca:57:b2:c9: e9:b4:f7:69:71:62:6c:97:66:4d:1c:1e:8c:62:1e: 01:6f:ff:18:b5:17:11:2e:5c:79:54:15:64:bd:3b: 04:90:0b:83:34:fc:75:52:f6:43:4e:3a:98:97:f9: ef:0d:dc:d9:0e:bb:6d:04:eb:f1:07:5c:d2:d7:51: a5:35:6d:56:e8:54:ed:25:3a:92:43:98:3a:33:86: f8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:03:3C:6B:6F:EA:19:39:E8:C9:71:3C:36:4B:9A:5F:4B:3A:14:FC X509v3 Authority Key Identifier: keyid:78:44:F2:3C:52:D7:54:61:5D:0D:CC:F2:19:09:67:C1:B8:9C:F8:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/7844F23C52D754615D0DCCF2190967C1B89CF85F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7844F23C52D754615D0DCCF2190967C1B89CF85F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/7844F23C52D754615D0DCCF2190967C1B89CF85F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:a1:ab:66:99:cd:6e:04:b8:4e:51:37:92:8e:01:4b:89:06: f9:96:4a:d6:8d:23:65:21:fd:a5:c0:3b:d2:e3:c2:40:a3:fd: d4:0b:8b:a7:b7:f5:4a:40:b4:8e:bf:ed:77:14:f4:b2:b2:d6: 2d:67:63:ec:eb:d0:b8:98:35:45:1e:ed:7f:80:bc:f9:91:7b: 66:1e:c0:09:28:d8:a6:d6:b3:90:9b:0a:ba:8d:41:a1:ff:4a: 51:7f:1e:c4:b3:a9:f8:c6:b2:0c:10:c6:94:38:f7:26:be:8a: 04:32:cd:33:e4:c7:1c:c1:4e:a1:81:a4:42:7c:1b:d3:1a:d5: ae:0d:8a:ba:77:d5:5f:ac:b9:78:6f:08:8e:9f:e6:f4:ab:1b: 1a:c8:db:d8:cc:21:bc:d6:73:3f:d3:1e:0f:b6:92:01:fd:4f: 78:e7:05:81:4a:66:08:41:2c:2b:d5:55:20:0d:24:ed:c3:93: 14:f3:99:9f:b6:4b:9e:c4:89:cf:c3:1e:9f:14:91:1f:01:59: bd:e1:93:12:9c:1e:d3:04:75:62:2f:c5:83:f2:82:0e:0a:17: 47:63:8c:d9:fa:83:5d:91:53:b8:1f:ff:ae:a0:f0:b3:a1:e1: 40:ef:a4:93:a2:11:a9:57:e4:92:94:05:7f:17:38:8f:0a:e7: 58:4c:fb:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMCza/rHMIpqI9PybbRfPXCkxgEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg0NEYyM0M1MkQ3NTQ2MTVEMERDQ0YyMTkwOTY3QzFC ODlDRjg1RjAeFw0yNjA5MjMyMzQwMjRaFw0yNjA5MjUwMDE5MjRaMDMxMTAvBgNV BAMTKDI4MDMzQzZCNkZFQTE5MzlFOEM5NzEzQzM2NEI5QTVGNEIzQTE0RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnF15aeo5pPJwxpt1RRgAQlkTM g5ni/b8vA2HTu/5/2ZOtSCQ3NSxGdX7ovK36uChnAKb4kY11BvGW1kawcALcot6x thUZaCjv3KHC7uyxzdkC7jO7f4gRcL5mbXDeFgJr4Qurn3waj9nYPynK7jhtMOnT 9jL/X36aAww7AVDx1618myWnYspqsS0H9LKN/RkCRmsA4sgHagqhLSG7w+oCWjrm BosTgrqR6v8eqOn6yleyyem092lxYmyXZk0cHoxiHgFv/xi1FxEuXHlUFWS9OwSQ C4M0/HVS9kNOOpiX+e8N3NkOu20E6/EHXNLXUaU1bVboVO0lOpJDmDozhvhjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKAM8a2/qGTnoyXE8NkuaX0s6FPwwHwYDVR0j BBgwFoAUeETyPFLXVGFdDczyGQlnwbic+F8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTZkNjExMzUtNzVlNC00NmM2LWJkZGQtZmJhNjgzNGRjZTQxLzAvNzg0NEYyM0M1 MkQ3NTQ2MTVEMERDQ0YyMTkwOTY3QzFCODlDRjg1Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83ODQ0RjIzQzUyRDc1NDYxNUQwRENDRjIxOTA5NjdDMUI4OUNG ODVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTZkNjExMzUtNzVlNC00NmM2LWJk ZGQtZmJhNjgzNGRjZTQxLzAvNzg0NEYyM0M1MkQ3NTQ2MTVEMERDQ0YyMTkwOTY3 QzFCODlDRjg1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWhq2aZzW4EuE5RN5KOAUuJBvmWStaNI2Uh /aXAO9LjwkCj/dQLi6e39UpAtI6/7XcU9LKy1i1nY+zr0LiYNUUe7X+AvPmRe2Ye wAko2KbWs5CbCrqNQaH/SlF/HsSzqfjGsgwQxpQ49ya+igQyzTPkxxzBTqGBpEJ8 G9Ma1a4Nirp31V+suXhvCI6f5vSrGxrI29jMIbzWcz/THg+2kgH9T3jnBYFKZghB LCvVVSANJO3DkxTzmZ+2S57Eic/DHp8UkR8BWb3hkxKcHtMEdWIvxYPygg4KF0dj jNn6g12RU7gf/66g8LOh4UDvpJOiEalX5JKUBX8XOI8K51hM+/s= -----END CERTIFICATE-----Generated at Thu Sep 24 17:38:43 2026 by rpki-client