$ rpki-client -vvvf rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.mft File: C797413CFB24F6454A9F7473DF020BB107134EE7.mft (raw, json) Hash identifier: 0Tx0Fb5EM5XP5GQII376gWCMhKEFGyQcg4eONW0Ldgc= Subject key identifier: A7:01:2E:78:09:4C:B6:47:5E:8B:49:7C:4D:C3:1A:01:56:F6:85:74 Authority key identifier: C7:97:41:3C:FB:24:F6:45:4A:9F:74:73:DF:02:0B:B1:07:13:4E:E7 Certificate issuer: /CN=C797413CFB24F6454A9F7473DF020BB107134EE7 Certificate serial: 6335E424331B3AEBC6CAC45BFAC8F8B0501C43AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C797413CFB24F6454A9F7473DF020BB107134EE7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 05:47:59 +0000 Manifest this update: Thu 24 Sep 2026 05:42:59 +0000 Manifest next update: Fri 25 Sep 2026 09:28:59 +0000 Files and hashes: 1: C797413CFB24F6454A9F7473DF020BB107134EE7.crl (hash: lCL7dHr63L5jR2KAQRdS87km9gFWx24kosmHGETZDuI=) 2: 3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa (hash: chSnFe2TA+OmeDv7yM6MlQKXcupUNd+M99kXzF+BQEw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.crl rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C797413CFB24F6454A9F7473DF020BB107134EE7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:35:e4:24:33:1b:3a:eb:c6:ca:c4:5b:fa:c8:f8:b0:50:1c:43:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C797413CFB24F6454A9F7473DF020BB107134EE7 Validity Not Before: Sep 24 05:42:59 2026 GMT Not After : Sep 25 09:28:59 2026 GMT Subject: CN=A7012E78094CB6475E8B497C4DC31A0156F68574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f5:cc:2b:3b:1c:47:de:4a:aa:02:af:ff:c8: 36:e5:af:1b:f3:6f:c5:39:99:3e:5a:aa:80:e7:06: a7:b6:f6:15:80:7c:f7:81:7f:81:7f:1d:76:00:9e: 9e:7a:48:42:c5:76:b6:ec:65:5d:cd:b4:60:8c:e6: 27:1a:5d:78:97:45:54:1f:93:61:7f:db:72:13:46: 09:ca:8f:c5:26:13:58:b0:88:b7:a8:c8:2b:5d:39: 70:cc:69:49:69:ec:da:6a:c2:fb:0d:37:f3:9c:7e: e6:1b:e9:f8:db:e4:46:01:3f:70:0a:fa:17:e9:bf: d4:24:87:98:bb:b3:31:c6:e7:b1:8d:18:9a:5d:1d: 1e:95:c5:55:30:9b:d0:f8:e7:db:a8:34:a5:e5:c7: d2:e2:e7:20:86:3d:60:7d:50:67:5f:a6:8c:9a:6e: 63:bf:ba:46:22:fc:14:03:27:2b:a9:7f:1a:06:83: ce:f7:68:bc:e4:64:b9:c5:d5:83:b5:cf:b1:38:8a: e5:e1:2b:3a:79:aa:1d:a0:e8:ec:a5:58:a7:fc:42: 2f:a3:cf:5e:44:e0:cf:ff:c9:da:a1:08:81:c1:ee: 4d:d1:d5:68:08:fa:8e:0a:37:b3:3e:67:b6:0a:c7: a9:4a:a9:ef:0c:ca:b1:4a:06:42:55:cb:33:0b:15: 42:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:01:2E:78:09:4C:B6:47:5E:8B:49:7C:4D:C3:1A:01:56:F6:85:74 X509v3 Authority Key Identifier: keyid:C7:97:41:3C:FB:24:F6:45:4A:9F:74:73:DF:02:0B:B1:07:13:4E:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C797413CFB24F6454A9F7473DF020BB107134EE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:a5:1e:8c:99:8b:a6:7f:9e:42:55:23:96:44:48:4b:f1:45: d7:d4:6f:72:fc:92:21:6a:94:01:ad:39:ae:b6:d1:3b:75:e2: cb:e8:8a:e0:9a:2e:ff:de:9d:4f:2f:ac:49:e6:b1:d0:73:e9: dc:92:65:23:81:ee:f3:65:52:6e:6a:43:a5:3a:bf:23:eb:10: bc:bb:cb:29:bc:53:99:74:5c:2b:b5:f5:b2:33:96:ec:7e:cd: 6c:f9:70:4d:4a:aa:f7:8b:7d:74:97:ec:db:0d:c7:75:4a:5a: 2e:3e:b1:78:bb:ac:b9:d9:a3:82:9f:90:dc:22:ed:e7:dc:1d: 3b:9c:9f:84:24:96:19:93:5f:90:84:80:ce:83:58:c5:66:7f: ea:0e:f5:6f:0a:f5:e0:5a:7b:d0:49:c8:5d:27:4f:22:c0:82: a2:c8:3f:dc:08:51:77:e2:94:a4:9b:4b:1a:83:71:9b:c1:8d: c4:be:9b:fb:a8:29:a6:f1:40:47:4d:77:86:e1:fb:b6:ea:1c: 7c:37:f1:6b:c6:f7:15:c0:1b:c0:4f:5a:c7:f5:24:03:b9:7d: da:98:cb:0c:9b:c6:19:b3:86:9d:b4:69:02:7a:e5:4a:04:4e: 1d:ce:31:3d:81:1d:dd:d8:84:b2:0b:4a:ad:e8:b0:35:aa:f7: 55:31:9a:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYzXkJDMbOuvGysRb+sj4sFAcQ6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc5NzQxM0NGQjI0RjY0NTRBOUY3NDczREYwMjBCQjEw NzEzNEVFNzAeFw0yNjA5MjQwNTQyNTlaFw0yNjA5MjUwOTI4NTlaMDMxMTAvBgNV BAMTKEE3MDEyRTc4MDk0Q0I2NDc1RThCNDk3QzREQzMxQTAxNTZGNjg1NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg9cwrOxxH3kqqAq//yDblrxvz b8U5mT5aqoDnBqe29hWAfPeBf4F/HXYAnp56SELFdrbsZV3NtGCM5icaXXiXRVQf k2F/23ITRgnKj8UmE1iwiLeoyCtdOXDMaUlp7NpqwvsNN/OcfuYb6fjb5EYBP3AK +hfpv9Qkh5i7szHG57GNGJpdHR6VxVUwm9D459uoNKXlx9Li5yCGPWB9UGdfpoya bmO/ukYi/BQDJyupfxoGg873aLzkZLnF1YO1z7E4iuXhKzp5qh2g6OylWKf8Qi+j z15E4M//ydqhCIHB7k3R1WgI+o4KN7M+Z7YKx6lKqe8MyrFKBkJVyzMLFUI/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpwEueAlMtkdei0l8TcMaAVb2hXQwHwYDVR0j BBgwFoAUx5dBPPsk9kVKn3Rz3wILsQcTTucwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzc4YmJmZDQtNjdiNC00OThkLTg0MTEtZTk2NGM1ZmUxMTcyLzAvQzc5NzQxM0NG QjI0RjY0NTRBOUY3NDczREYwMjBCQjEwNzEzNEVFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzk3NDEzQ0ZCMjRGNjQ1NEE5Rjc0NzNERjAyMEJCMTA3MTM0 RUU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzc4YmJmZDQtNjdiNC00OThkLTg0 MTEtZTk2NGM1ZmUxMTcyLzAvQzc5NzQxM0NGQjI0RjY0NTRBOUY3NDczREYwMjBC QjEwNzEzNEVFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFilHoyZi6Z/nkJVI5ZESEvxRdfUb3L8kiFq lAGtOa620Tt14svoiuCaLv/enU8vrEnmsdBz6dySZSOB7vNlUm5qQ6U6vyPrELy7 yym8U5l0XCu19bIzlux+zWz5cE1KqveLfXSX7NsNx3VKWi4+sXi7rLnZo4KfkNwi 7efcHTucn4QklhmTX5CEgM6DWMVmf+oO9W8K9eBae9BJyF0nTyLAgqLIP9wIUXfi lKSbSxqDcZvBjcS+m/uoKabxQEdNd4bh+7bqHHw38WvG9xXAG8BPWsf1JAO5fdqY ywybxhmzhp20aQJ65UoETh3OMT2BHd3YhLILSq3osDWq91Uxmk4= -----END CERTIFICATE-----Generated at Thu Sep 24 09:36:43 2026 by rpki-client