$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.mft File: B677F5476721449C1CB3D8F67673665A0A038595.mft (raw, json) Hash identifier: 7zN30+aetZbUCkeD71qDexABQ336mQvMdnvOqDgbxhk= Subject key identifier: 61:87:84:78:55:DD:11:2F:02:CE:D3:F4:27:02:17:21:46:B5:4E:E8 Authority key identifier: B6:77:F5:47:67:21:44:9C:1C:B3:D8:F6:76:73:66:5A:0A:03:85:95 Certificate issuer: /CN=B677F5476721449C1CB3D8F67673665A0A038595 Certificate serial: 4A9DB6ECA8BE94E173865314AE74991C0C8BD130 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B677F5476721449C1CB3D8F67673665A0A038595.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 12:46:41 +0000 Manifest this update: Thu 24 Sep 2026 12:41:41 +0000 Manifest next update: Fri 25 Sep 2026 13:12:41 +0000 Files and hashes: 1: 3130332e3133372e38322e302f32332d3234203d3e20313338383238.roa (hash: lRUuWcUd02IZlpdvWX9KHM1+gKLrQM+l0jBHsP+smvs=) 2: B677F5476721449C1CB3D8F67673665A0A038595.crl (hash: q3AlxEWJZAm9Sji3jqg123BfEpBR0vJm3OMmyKo2/sM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.crl rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B677F5476721449C1CB3D8F67673665A0A038595.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:9d:b6:ec:a8:be:94:e1:73:86:53:14:ae:74:99:1c:0c:8b:d1:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B677F5476721449C1CB3D8F67673665A0A038595 Validity Not Before: Sep 24 12:41:41 2026 GMT Not After : Sep 25 13:12:41 2026 GMT Subject: CN=6187847855DD112F02CED3F42702172146B54EE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1c:e3:21:ef:40:ba:36:02:dd:e9:16:ae:7f: 45:26:b1:96:2e:15:73:e0:83:7a:7b:de:65:17:c0: 66:18:2a:08:fe:9d:7c:fb:84:9c:c9:a2:e3:42:23: cf:ac:2e:db:01:2f:f9:93:a8:1d:08:fc:6b:25:35: 95:c3:ce:17:b4:94:b7:54:eb:ea:0e:85:cd:67:27: 77:36:f6:5a:84:3e:c3:75:69:cf:2b:47:d3:2f:7b: 57:34:27:12:cc:7c:f2:cf:e9:5c:d6:6b:9c:98:78: 26:2e:02:87:47:ba:83:fc:38:62:84:4f:01:5a:18: 49:7c:dc:d7:58:31:e0:97:11:eb:8b:24:d6:2a:c4: 05:6e:03:ed:95:93:53:b2:1f:cc:96:29:fc:1d:bb: 73:22:1f:db:ee:fc:e7:f7:5e:b9:7a:8a:54:9e:50: 72:30:a0:95:2f:92:b4:f7:1b:1e:d8:11:e8:34:6d: 29:1e:ed:a4:df:89:4a:2c:71:d1:b2:fb:3f:17:3e: 0d:a2:05:a4:63:cf:2f:3e:73:a3:d0:df:61:6c:77: 23:fa:5a:33:8b:cd:55:8f:dc:3f:78:df:4b:45:cc: d5:e1:2c:0d:7b:b3:b2:27:72:32:1b:e8:a4:92:b1: ff:0f:73:37:19:d5:bb:75:07:c4:d6:d7:de:d2:e1: 26:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:87:84:78:55:DD:11:2F:02:CE:D3:F4:27:02:17:21:46:B5:4E:E8 X509v3 Authority Key Identifier: keyid:B6:77:F5:47:67:21:44:9C:1C:B3:D8:F6:76:73:66:5A:0A:03:85:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B677F5476721449C1CB3D8F67673665A0A038595.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:48:8e:bd:b6:2e:5a:5c:f6:a4:7a:be:e7:39:d6:99:7b:34: 1e:10:0b:22:43:06:05:57:61:8f:32:fc:a9:9f:f6:dd:90:d5: 8e:83:e5:e3:21:a3:bf:4d:8e:45:df:4a:0f:21:41:a9:05:c4: 38:a5:65:1e:cf:05:1e:d2:4b:4e:4f:fb:80:3f:2a:44:da:8a: ab:65:5c:27:99:2a:28:4f:f4:d1:97:1d:05:b5:17:24:cb:3e: 86:87:13:14:84:16:25:49:4a:83:a9:d0:d9:9a:18:bb:f7:b0: aa:d0:7f:13:d7:7e:88:23:c1:90:68:86:00:ef:7f:7c:7e:9f: 2b:2f:25:57:a4:56:8a:48:3d:90:70:4f:92:30:ca:1d:ea:28: a1:b0:d4:71:b0:05:f3:18:8a:0a:1b:d4:5a:06:c1:9d:08:c0: b2:2f:98:4e:23:65:07:7e:c1:6b:fd:ef:a3:b7:e0:c8:e4:06: da:2a:94:8c:31:34:f0:51:38:85:25:73:f7:e1:ae:33:3e:bb: c2:c2:f4:7e:a9:f3:45:f0:c4:87:0d:0f:10:61:de:13:0b:f1: 16:30:9b:c0:60:db:91:63:f7:73:1e:55:98:f2:5f:0f:97:05: 98:b7:8a:b9:3f:8c:86:a0:a7:ce:65:39:20:7c:d7:cc:c4:42: fc:53:c0:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSp227Ki+lOFzhlMUrnSZHAyL0TAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY3N0Y1NDc2NzIxNDQ5QzFDQjNEOEY2NzY3MzY2NUEw QTAzODU5NTAeFw0yNjA5MjQxMjQxNDFaFw0yNjA5MjUxMzEyNDFaMDMxMTAvBgNV BAMTKDYxODc4NDc4NTVERDExMkYwMkNFRDNGNDI3MDIxNzIxNDZCNTRFRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpHOMh70C6NgLd6Rauf0UmsZYu FXPgg3p73mUXwGYYKgj+nXz7hJzJouNCI8+sLtsBL/mTqB0I/GslNZXDzhe0lLdU 6+oOhc1nJ3c29lqEPsN1ac8rR9Mve1c0JxLMfPLP6VzWa5yYeCYuAodHuoP8OGKE TwFaGEl83NdYMeCXEeuLJNYqxAVuA+2Vk1OyH8yWKfwdu3MiH9vu/Of3Xrl6ilSe UHIwoJUvkrT3Gx7YEeg0bSke7aTfiUoscdGy+z8XPg2iBaRjzy8+c6PQ32FsdyP6 WjOLzVWP3D9430tFzNXhLA17s7IncjIb6KSSsf8PczcZ1bt1B8TW197S4SYjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYYeEeFXdES8CztP0JwIXIUa1TugwHwYDVR0j BBgwFoAUtnf1R2chRJwcs9j2dnNmWgoDhZUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmFlNmNkNDEtMmU0Yy00Y2MyLTg4MWUtYmFiNDRhODg0ZmQ0LzAvQjY3N0Y1NDc2 NzIxNDQ5QzFDQjNEOEY2NzY3MzY2NUEwQTAzODU5NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjc3RjU0NzY3MjE0NDlDMUNCM0Q4RjY3NjczNjY1QTBBMDM4 NTk1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmFlNmNkNDEtMmU0Yy00Y2MyLTg4 MWUtYmFiNDRhODg0ZmQ0LzAvQjY3N0Y1NDc2NzIxNDQ5QzFDQjNEOEY2NzY3MzY2 NUEwQTAzODU5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRIjr22Llpc9qR6vuc51pl7NB4QCyJDBgVX YY8y/Kmf9t2Q1Y6D5eMho79NjkXfSg8hQakFxDilZR7PBR7SS05P+4A/KkTaiqtl XCeZKihP9NGXHQW1FyTLPoaHExSEFiVJSoOp0NmaGLv3sKrQfxPXfogjwZBohgDv f3x+nysvJVekVopIPZBwT5Iwyh3qKKGw1HGwBfMYigob1FoGwZ0IwLIvmE4jZQd+ wWv976O34MjkBtoqlIwxNPBROIUlc/fhrjM+u8LC9H6p80XwxIcNDxBh3hML8RYw m8Bg25Fj93MeVZjyXw+XBZi3irk/jIagp85lOSB818zEQvxTwCo= -----END CERTIFICATE-----Generated at Fri Sep 25 04:48:57 2026 by rpki-client