$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft File: D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft (raw, json) Hash identifier: DeIZqNxffIhehVs4C8xb+9f4GF4xOtxQKIjROIB/QEk= Subject key identifier: 79:26:BA:92:1E:23:EE:2A:CD:4E:57:C5:E2:3B:55:B6:81:21:24:14 Authority key identifier: D7:4C:D7:B8:7D:74:4D:2D:30:1C:3F:69:77:4A:99:FB:E8:35:ED:DD Certificate issuer: /CN=D74CD7B87D744D2D301C3F69774A99FBE835EDDD Certificate serial: 055329DF08F9034FEADD9155EB624CD3E6D05599 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 07:45:16 +0000 Manifest this update: Thu 24 Sep 2026 07:40:16 +0000 Manifest next update: Fri 25 Sep 2026 08:15:16 +0000 Files and hashes: 1: D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl (hash: YNhsNpqwNfGAWaLyBm0H0vT0lVsdN3cNz5gElYS/cfI=) 2: 3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa (hash: tvgNMRKF9YhTkUojezBviQo+Tr5X2S/8TAOF/Ehj41w=) 3: 3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa (hash: zZwF560CCW8FIsmpm9G6YMYG8iguu4mvO1b/REjgURE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 08:15:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:53:29:df:08:f9:03:4f:ea:dd:91:55:eb:62:4c:d3:e6:d0:55:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D74CD7B87D744D2D301C3F69774A99FBE835EDDD Validity Not Before: Sep 24 07:40:16 2026 GMT Not After : Sep 25 08:15:16 2026 GMT Subject: CN=7926BA921E23EE2ACD4E57C5E23B55B681212414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b9:39:51:27:66:a0:6b:5f:ad:78:48:ce:69: 63:1b:b9:46:4e:3e:71:64:b7:ab:39:0f:7c:7b:41: 0e:39:60:d3:b7:90:e7:2f:4a:9d:fe:d2:18:51:8c: 49:5d:9b:54:9d:cf:90:3f:b5:a6:1a:de:3f:51:db: 69:e8:98:0a:64:38:90:b2:32:60:5f:86:77:be:7c: c8:d5:ae:9a:2f:75:9b:2e:86:b4:44:44:11:ae:13: ee:2b:7a:c3:9c:dc:0c:c4:93:cb:6c:e3:84:ad:16: c3:4d:29:e8:e5:d6:94:2e:e9:fa:88:6c:5c:d9:68: d7:24:af:d3:74:c1:48:2c:19:b3:53:57:a3:7f:4e: 8c:6d:73:2e:ab:b8:09:9c:93:02:60:14:da:9f:69: 4a:33:8b:41:3f:bd:c0:fa:4a:a7:1d:a0:41:b7:bc: 5e:85:24:7f:70:2f:fe:8b:6e:54:cc:a2:c9:27:88: 11:66:b6:33:9e:dd:04:32:fd:de:b3:8d:41:b3:d1: 71:4c:76:1a:34:c8:86:a2:bc:36:50:38:42:27:56: 60:fc:9d:4a:3f:91:81:c3:81:d2:c2:c9:b8:20:42: 46:1a:52:8d:1a:4f:a0:67:4a:0f:58:c9:ea:46:32: 43:7c:8c:c3:9a:60:0b:48:cc:41:db:28:7a:0b:0f: 99:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:26:BA:92:1E:23:EE:2A:CD:4E:57:C5:E2:3B:55:B6:81:21:24:14 X509v3 Authority Key Identifier: keyid:D7:4C:D7:B8:7D:74:4D:2D:30:1C:3F:69:77:4A:99:FB:E8:35:ED:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:c7:67:6c:29:d1:b9:8a:5f:43:ee:55:3c:86:fb:a5:b9:15: 61:0f:34:cc:d1:e2:52:75:d4:a7:eb:63:4f:98:f8:54:d2:1b: 23:a8:f3:d6:db:16:96:bf:c5:87:b3:36:e3:e6:49:5e:bf:2e: 41:41:42:1a:29:69:e3:ea:3e:af:12:ed:ea:b1:d2:b2:b2:03: 2b:c8:ae:01:fb:54:e9:6c:d6:42:8b:2c:ba:e1:06:9d:52:d2: 1c:a2:2b:31:95:00:56:90:80:07:47:3b:97:a4:3b:47:b6:ec: 80:0c:97:13:97:bb:85:b3:71:2b:f7:3b:8a:df:a2:b2:04:e8: e0:9b:ca:16:86:64:71:00:14:79:64:82:40:25:7d:e0:a6:34: e2:75:79:83:14:48:be:49:b3:f3:10:f7:3b:16:79:39:84:82: d7:55:22:ee:0f:21:7e:0e:f7:c3:f0:53:c8:ee:cc:b7:e9:8b: 7f:b5:04:e4:a1:9d:44:79:98:f9:c2:30:38:50:b5:7e:ae:0f: 35:25:e8:cd:a9:86:ee:e8:da:fb:2a:ce:e8:f6:3a:31:e1:98: ec:d9:0b:12:75:bd:0b:fb:ba:fa:e7:a3:2e:e4:83:11:e9:4e: 2b:76:d6:6c:99:48:b0:b2:64:72:72:c2:09:c4:14:7d:d4:ad: d9:27:29:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBVMp3wj5A0/q3ZFV62JM0+bQVZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc0Q0Q3Qjg3RDc0NEQyRDMwMUMzRjY5Nzc0QTk5RkJF ODM1RURERDAeFw0yNjA5MjQwNzQwMTZaFw0yNjA5MjUwODE1MTZaMDMxMTAvBgNV BAMTKDc5MjZCQTkyMUUyM0VFMkFDRDRFNTdDNUUyM0I1NUI2ODEyMTI0MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEuTlRJ2aga1+teEjOaWMbuUZO PnFkt6s5D3x7QQ45YNO3kOcvSp3+0hhRjEldm1Sdz5A/taYa3j9R22nomApkOJCy MmBfhne+fMjVrpovdZsuhrRERBGuE+4resOc3AzEk8ts44StFsNNKejl1pQu6fqI bFzZaNckr9N0wUgsGbNTV6N/Toxtcy6ruAmckwJgFNqfaUozi0E/vcD6SqcdoEG3 vF6FJH9wL/6LblTMoskniBFmtjOe3QQy/d6zjUGz0XFMdho0yIaivDZQOEInVmD8 nUo/kYHDgdLCybggQkYaUo0aT6BnSg9YyepGMkN8jMOaYAtIzEHbKHoLD5mdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeSa6kh4j7irNTlfF4jtVtoEhJBQwHwYDVR0j BBgwFoAU10zXuH10TS0wHD9pd0qZ++g17d0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRlZTEyNmYtODE5Mi00ZDI4LWIyNWUtZGVhYmRiNzllYjIxLzAvRDc0Q0Q3Qjg3 RDc0NEQyRDMwMUMzRjY5Nzc0QTk5RkJFODM1RURERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzRDRDdCODdENzQ0RDJEMzAxQzNGNjk3NzRBOTlGQkU4MzVF RERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWRlZTEyNmYtODE5Mi00ZDI4LWIy NWUtZGVhYmRiNzllYjIxLzAvRDc0Q0Q3Qjg3RDc0NEQyRDMwMUMzRjY5Nzc0QTk5 RkJFODM1RURERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACfHZ2wp0bmKX0PuVTyG+6W5FWEPNMzR4lJ1 1KfrY0+Y+FTSGyOo89bbFpa/xYezNuPmSV6/LkFBQhopaePqPq8S7eqx0rKyAyvI rgH7VOls1kKLLLrhBp1S0hyiKzGVAFaQgAdHO5ekO0e27IAMlxOXu4WzcSv3O4rf orIE6OCbyhaGZHEAFHlkgkAlfeCmNOJ1eYMUSL5Js/MQ9zsWeTmEgtdVIu4PIX4O 98PwU8juzLfpi3+1BOShnUR5mPnCMDhQtX6uDzUl6M2phu7o2vsqzuj2OjHhmOzZ CxJ1vQv7uvrnoy7kgxHpTit21myZSLCyZHJywgnEFH3UrdknKWg= -----END CERTIFICATE-----Generated at Thu Sep 24 11:37:29 2026 by rpki-client