$ rpki-client -vvvf rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft File: D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft (raw, json) Hash identifier: 1qtAO5fuKqVSy1w8aiftrGw0+kzFLJOUF7vcq6Nbuxg= Subject key identifier: 74:51:97:35:3C:E8:6B:F1:C0:D6:D4:62:C8:AB:58:8A:0C:77:C4:30 Authority key identifier: D7:B3:D2:9A:1C:58:F2:A7:64:EF:71:D9:0E:EB:34:A0:85:23:E1:4B Certificate issuer: /CN=D7B3D29A1C58F2A764EF71D90EEB34A08523E14B Certificate serial: 6D22DBB5CA3AFD75DB0CFC74D85945215DDC4C0D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft Manifest number: C5 Signing time: Thu 24 Sep 2026 06:23:39 +0000 Manifest this update: Thu 24 Sep 2026 06:18:39 +0000 Manifest next update: Fri 25 Sep 2026 09:05:39 +0000 Files and hashes: 1: D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.crl (hash: 2+TfPxnktwP9rJ8H6lwFlEjkFEeqzAXow1ac6i+yFAg=) 2: 3130332e3135322e3234322e302f32332d3233203d3e203538383230.roa (hash: UfSTsOVMmUHhlSuicPfv/acnVZkznnLyaQTNx0s5r/I=) 3: 3130332e3135322e3234322e302f32342d3234203d3e20313339343536.roa (hash: QnjSCWkwabhUboJKZ28QBKGbgaSMy7Q0+XqOshpVH5I=) 4: 323430373a373234303a3a2f33322d3332203d3e203538383230.roa (hash: XbL3x6HL60HenYCDQv+H+1fWOEpLqL6GUYrIDXhN5Ec=) 5: 3130332e3135322e3234332e302f32342d3234203d3e20313339343536.roa (hash: 1SUvsGX664dyT73KTnssj6SLYMQJcE1PRfUOLl0J8A0=) 6: 323430373a373234303a3a2f33322d3438203d3e203538383230.roa (hash: pbfRu1u/17aE+5jbLOXSjK5kSHLY3NJFYSy/GgweGtc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.crl rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 09:05:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:22:db:b5:ca:3a:fd:75:db:0c:fc:74:d8:59:45:21:5d:dc:4c:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7B3D29A1C58F2A764EF71D90EEB34A08523E14B Validity Not Before: Sep 24 06:18:39 2026 GMT Not After : Sep 25 09:05:39 2026 GMT Subject: CN=745197353CE86BF1C0D6D462C8AB588A0C77C430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f9:f3:42:cc:7f:1b:ce:68:af:e3:10:30:f7: 7f:73:1e:19:f5:ac:92:52:aa:d2:74:3f:ca:8e:5b: d5:54:d2:9f:a3:f7:96:fc:cf:81:75:52:cf:eb:74: c7:42:a1:fa:34:92:f9:cb:78:c8:b9:e4:0c:d8:e3: b3:87:9d:44:24:f8:f2:aa:84:ac:c6:ef:73:a3:01: 31:ce:97:0b:e4:6b:b6:30:e8:59:85:6f:8a:77:ca: b2:ac:6a:3c:8d:eb:59:58:6f:5b:fe:fc:3c:47:9c: b3:32:65:44:27:97:f6:ee:8b:0c:d8:69:30:dc:df: bc:e6:b8:3e:de:25:3e:b3:b9:b9:ef:a9:8d:08:2f: 49:dd:e5:0a:ec:28:e8:fe:a7:70:e9:df:60:a6:35: 9c:b7:b7:72:67:f7:87:96:f3:d2:d4:21:83:27:7e: 2c:30:f5:01:b6:92:b6:82:61:30:1d:b1:66:29:62: 9b:65:14:04:16:61:d5:9c:cc:02:58:f5:09:01:af: 24:e8:f2:c0:d2:5c:d9:24:61:b1:bf:b7:75:33:12: 50:ae:1f:e3:66:78:62:b7:00:cd:db:bb:7b:76:bc: 1e:34:09:02:53:cb:d4:39:c0:ba:a3:70:5a:d2:da: b6:38:ae:75:34:52:fc:d6:61:ea:e1:34:c6:34:ed: 9b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:51:97:35:3C:E8:6B:F1:C0:D6:D4:62:C8:AB:58:8A:0C:77:C4:30 X509v3 Authority Key Identifier: keyid:D7:B3:D2:9A:1C:58:F2:A7:64:EF:71:D9:0E:EB:34:A0:85:23:E1:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:55:77:2a:85:90:af:58:36:ce:9b:45:a0:8a:d8:3e:bd:f8: 87:b2:1f:48:2f:1d:95:43:16:4d:af:b3:1c:6d:57:09:52:6e: 6c:94:0f:b6:30:d1:2f:28:de:5c:c8:6f:3f:64:cd:39:b7:19: a7:57:01:66:9e:71:dc:2e:17:b3:9b:5a:f9:64:66:a4:18:99: 56:a3:38:40:9d:5b:d2:6b:e0:e5:18:20:8d:b5:3d:a8:2d:6e: ae:c6:04:68:e6:7e:d7:5d:0b:28:83:69:7d:37:b8:d8:9e:51: 87:25:a0:85:eb:68:d8:5f:8e:a5:7e:d2:a4:35:b9:d0:33:dd: 46:16:9d:44:bc:75:94:1b:7d:29:11:92:e6:4b:1b:9f:01:e6: 68:53:22:9c:0d:f9:43:3d:87:9c:26:11:ac:b0:b4:24:c6:97: ff:a6:4e:49:93:78:96:3b:be:a5:9f:2c:2e:b8:94:8a:7f:82: 61:96:61:18:bf:ac:c3:86:8a:e5:a5:8e:c4:57:24:3a:35:a0: 16:e5:04:d5:e4:c1:aa:55:bb:14:29:55:e7:7f:04:9d:21:c2: e2:62:21:b3:d5:89:55:e2:16:63:77:3e:c0:6d:02:0d:3b:5f: 59:91:17:5e:b5:96:32:cf:4b:47:67:21:b4:74:72:2e:ac:45: 6d:0c:f6:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbSLbtco6/XXbDPx02FlFIV3cTA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdCM0QyOUExQzU4RjJBNzY0RUY3MUQ5MEVFQjM0QTA4 NTIzRTE0QjAeFw0yNjA5MjQwNjE4MzlaFw0yNjA5MjUwOTA1MzlaMDMxMTAvBgNV BAMTKDc0NTE5NzM1M0NFODZCRjFDMEQ2RDQ2MkM4QUI1ODhBMEM3N0M0MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa+fNCzH8bzmiv4xAw939zHhn1 rJJSqtJ0P8qOW9VU0p+j95b8z4F1Us/rdMdCofo0kvnLeMi55AzY47OHnUQk+PKq hKzG73OjATHOlwvka7Yw6FmFb4p3yrKsajyN61lYb1v+/DxHnLMyZUQnl/buiwzY aTDc37zmuD7eJT6zubnvqY0IL0nd5QrsKOj+p3Dp32CmNZy3t3Jn94eW89LUIYMn fiww9QG2kraCYTAdsWYpYptlFAQWYdWczAJY9QkBryTo8sDSXNkkYbG/t3UzElCu H+NmeGK3AM3bu3t2vB40CQJTy9Q5wLqjcFrS2rY4rnU0UvzWYerhNMY07ZvfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdFGXNTzoa/HA1tRiyKtYigx3xDAwHwYDVR0j BBgwFoAU17PSmhxY8qdk73HZDus0oIUj4UswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjRiYTY3NzgtYjE2ZC00YmE4LTk4NGYtMzRlNDE5ZmM5YzQ5LzAvRDdCM0QyOUEx QzU4RjJBNzY0RUY3MUQ5MEVFQjM0QTA4NTIzRTE0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EN0IzRDI5QTFDNThGMkE3NjRFRjcxRDkwRUVCMzRBMDg1MjNF MTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjRiYTY3NzgtYjE2ZC00YmE4LTk4 NGYtMzRlNDE5ZmM5YzQ5LzAvRDdCM0QyOUExQzU4RjJBNzY0RUY3MUQ5MEVFQjM0 QTA4NTIzRTE0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5VdyqFkK9YNs6bRaCK2D69+IeyH0gvHZVD Fk2vsxxtVwlSbmyUD7Yw0S8o3lzIbz9kzTm3GadXAWaecdwuF7ObWvlkZqQYmVaj OECdW9Jr4OUYII21Pagtbq7GBGjmftddCyiDaX03uNieUYcloIXraNhfjqV+0qQ1 udAz3UYWnUS8dZQbfSkRkuZLG58B5mhTIpwN+UM9h5wmEaywtCTGl/+mTkmTeJY7 vqWfLC64lIp/gmGWYRi/rMOGiuWljsRXJDo1oBblBNXkwapVuxQpVed/BJ0hwuJi IbPViVXiFmN3PsBtAg07X1mRF161ljLPS0dnIbR0ci6sRW0M9hQ= -----END CERTIFICATE-----Generated at Thu Sep 24 12:47:42 2026 by rpki-client