$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft File: 647AC2310971579801DD46D3B271B994E9E436B8.mft (raw, json) Hash identifier: df5cbZAbMJ7UPHRM3V0ERBLT2+XJuhSkDaLf2QIonbU= Subject key identifier: 18:55:0D:AC:A8:51:7E:4D:A2:4F:C2:09:C8:27:30:CF:9D:F8:B1:28 Authority key identifier: 64:7A:C2:31:09:71:57:98:01:DD:46:D3:B2:71:B9:94:E9:E4:36:B8 Certificate issuer: /CN=647AC2310971579801DD46D3B271B994E9E436B8 Certificate serial: 428AC008211ABCC9408D5AEF1F1C7757F6C91D44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/647AC2310971579801DD46D3B271B994E9E436B8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft Manifest number: D9 Signing time: Sun 11 Oct 2026 21:17:57 +0000 Manifest this update: Sun 11 Oct 2026 21:12:57 +0000 Manifest next update: Mon 12 Oct 2026 22:34:57 +0000 Files and hashes: 1: 3133382e3235322e3133392e302f32342d3234203d3e20313534333837.roa (hash: yku2OKFmq6fXhF7DFYEYGMGLBbIVUHGQwGNi4OKZMJU=) 2: 647AC2310971579801DD46D3B271B994E9E436B8.crl (hash: KLN2r5fqpk5fMY+rKg4fiuap/82QHCQGx1BrVVxzmLc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.crl rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/647AC2310971579801DD46D3B271B994E9E436B8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 22:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:8a:c0:08:21:1a:bc:c9:40:8d:5a:ef:1f:1c:77:57:f6:c9:1d:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=647AC2310971579801DD46D3B271B994E9E436B8 Validity Not Before: Oct 11 21:12:57 2026 GMT Not After : Oct 12 22:34:57 2026 GMT Subject: CN=18550DACA8517E4DA24FC209C82730CF9DF8B128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cf:e9:d8:86:0c:15:fe:46:7c:41:78:cc:9e: 6f:78:9b:a9:d7:0e:41:5c:50:33:b2:45:64:de:d4: 87:1e:89:28:04:36:46:33:be:62:66:90:4c:2c:15: 23:29:db:08:dc:fb:84:28:63:8c:03:be:82:53:f6: 00:d4:d7:e1:9c:c2:7c:5d:15:dd:68:4b:7f:cd:89: ec:9d:e2:25:77:d9:6b:9c:6c:60:fc:82:a4:42:6c: 99:66:17:61:f2:be:ef:a3:b3:6e:48:4d:ed:49:8f: 18:e1:59:12:47:93:6c:fc:13:c1:8a:53:63:4c:2e: ed:cf:ef:4d:33:13:2b:39:0c:fe:04:0b:3d:04:00: b4:bd:58:5f:d3:42:0e:11:61:a6:06:82:8f:8a:bb: 56:22:19:a3:39:bb:bb:48:9b:b7:2f:09:f5:6e:64: 9a:7e:58:9a:e9:09:9f:62:80:79:ab:c5:54:db:6d: 2f:31:58:fe:9f:26:78:fe:66:f3:e7:8b:6f:4c:ed: af:2a:d2:a2:0f:62:f7:d9:99:a8:4d:9d:f2:55:f9: 94:9c:98:4a:98:d8:13:ab:56:98:55:f7:51:7d:00: 0f:bb:d9:9b:34:7e:7c:c8:f3:2e:04:5d:56:2d:bd: 27:d8:32:73:de:6a:31:16:eb:81:d4:ed:4f:a4:f3: 91:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:55:0D:AC:A8:51:7E:4D:A2:4F:C2:09:C8:27:30:CF:9D:F8:B1:28 X509v3 Authority Key Identifier: keyid:64:7A:C2:31:09:71:57:98:01:DD:46:D3:B2:71:B9:94:E9:E4:36:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/647AC2310971579801DD46D3B271B994E9E436B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:46:05:c5:df:81:dc:33:83:ef:35:3d:b9:9f:94:dd:0f:3a: a8:25:42:0b:dc:8c:27:c8:a6:0e:8b:23:a8:8b:13:4f:d6:8d: ab:c7:68:fa:e0:d5:02:8a:c0:f0:08:d7:df:d7:97:f3:a5:7b: 34:60:d2:3a:21:5e:bd:45:cc:83:75:12:a4:de:02:2d:01:6d: 67:27:42:ee:7e:3c:37:53:b0:a7:99:2e:e6:43:66:de:ab:03: f8:25:16:bc:c2:da:28:e6:0f:37:59:4f:c8:e6:eb:1a:1e:eb: 71:02:19:31:ee:5b:34:ad:31:2a:90:0d:0f:92:1b:90:e2:72: 74:7a:e3:b2:16:e5:2f:b1:c7:87:71:09:c7:bd:7e:f6:b2:f1: 2e:3a:89:9b:6a:73:27:23:9c:81:e7:55:e1:f6:84:08:a6:6a: f5:2c:89:b5:9f:f0:52:ee:6f:bc:c7:2d:b2:9b:e2:f1:8e:ce: 2b:12:87:3d:40:23:eb:a8:2d:76:84:50:66:56:2f:3f:02:c1: e7:cf:fd:03:46:9b:0c:c0:60:bf:0e:bf:86:56:a8:17:48:36: 6d:4e:df:23:05:e8:0e:73:8f:22:86:aa:35:56:38:6b:b6:4e: ce:15:29:8c:97:a3:16:22:c0:9b:d3:56:c4:5c:61:e7:b3:a1: 57:ff:8b:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQorACCEavMlAjVrvHxx3V/bJHUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ3QUMyMzEwOTcxNTc5ODAxREQ0NkQzQjI3MUI5OTRF OUU0MzZCODAeFw0yNjEwMTEyMTEyNTdaFw0yNjEwMTIyMjM0NTdaMDMxMTAvBgNV BAMTKDE4NTUwREFDQTg1MTdFNERBMjRGQzIwOUM4MjczMENGOURGOEIxMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmz+nYhgwV/kZ8QXjMnm94m6nX DkFcUDOyRWTe1IceiSgENkYzvmJmkEwsFSMp2wjc+4QoY4wDvoJT9gDU1+Gcwnxd Fd1oS3/Nieyd4iV32WucbGD8gqRCbJlmF2Hyvu+js25ITe1JjxjhWRJHk2z8E8GK U2NMLu3P700zEys5DP4ECz0EALS9WF/TQg4RYaYGgo+Ku1YiGaM5u7tIm7cvCfVu ZJp+WJrpCZ9igHmrxVTbbS8xWP6fJnj+ZvPni29M7a8q0qIPYvfZmahNnfJV+ZSc mEqY2BOrVphV91F9AA+72Zs0fnzI8y4EXVYtvSfYMnPeajEW64HU7U+k85GBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGFUNrKhRfk2iT8IJyCcwz534sSgwHwYDVR0j BBgwFoAUZHrCMQlxV5gB3UbTsnG5lOnkNrgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ3OGI1MGItNDQ5Yy00NTRiLTg1MGQtZjIwODAzNzg5YjU4LzAvNjQ3QUMyMzEw OTcxNTc5ODAxREQ0NkQzQjI3MUI5OTRFOUU0MzZCOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82NDdBQzIzMTA5NzE1Nzk4MDFERDQ2RDNCMjcxQjk5NEU5RTQz NkI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ3OGI1MGItNDQ5Yy00NTRiLTg1 MGQtZjIwODAzNzg5YjU4LzAvNjQ3QUMyMzEwOTcxNTc5ODAxREQ0NkQzQjI3MUI5 OTRFOUU0MzZCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKdGBcXfgdwzg+81PbmflN0POqglQgvcjCfI pg6LI6iLE0/WjavHaPrg1QKKwPAI19/Xl/OlezRg0johXr1FzIN1EqTeAi0BbWcn Qu5+PDdTsKeZLuZDZt6rA/glFrzC2ijmDzdZT8jm6xoe63ECGTHuWzStMSqQDQ+S G5DicnR647IW5S+xx4dxCce9fvay8S46iZtqcycjnIHnVeH2hAimavUsibWf8FLu b7zHLbKb4vGOzisShz1AI+uoLXaEUGZWLz8CwefP/QNGmwzAYL8Ov4ZWqBdINm1O 3yMF6A5zjyKGqjVWOGu2Ts4VKYyXoxYiwJvTVsRcYeezoVf/i4k= -----END CERTIFICATE-----Generated at Mon Oct 12 07:05:40 2026 by rpki-client