$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/079553C97D2389A3877E74AD1819142D97B1FB15.mft File: 079553C97D2389A3877E74AD1819142D97B1FB15.mft (raw, json) Hash identifier: U+kAU9oPKZtj6GjsiUucnUfOdfxFRkHhv5pq/YFLBKY= Subject key identifier: 7F:46:39:44:4E:41:81:47:8C:4A:AE:8A:B8:FB:7B:CB:80:A8:68:BA Authority key identifier: 07:95:53:C9:7D:23:89:A3:87:7E:74:AD:18:19:14:2D:97:B1:FB:15 Certificate issuer: /CN=079553C97D2389A3877E74AD1819142D97B1FB15 Certificate serial: 426E1FE12AE53AAE234EB3EC3F587F9930EAD884 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/079553C97D2389A3877E74AD1819142D97B1FB15.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/079553C97D2389A3877E74AD1819142D97B1FB15.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 18:08:25 +0000 Manifest this update: Wed 23 Sep 2026 18:03:25 +0000 Manifest next update: Thu 24 Sep 2026 20:21:25 +0000 Files and hashes: 1: 079553C97D2389A3877E74AD1819142D97B1FB15.crl (hash: +bqB08lf/E47SaqidJXQKsYHFBFoAml8B1HY/L+NlKM=) 2: 3130332e3134372e3134382e302f32332d3234203d3e203137373639.roa (hash: RLk4XFf8H33QbTfk0Gqq1DhqepI+8UwhHo0o2myf+uY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/079553C97D2389A3877E74AD1819142D97B1FB15.crl rsync://rpki-rsync.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/079553C97D2389A3877E74AD1819142D97B1FB15.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/079553C97D2389A3877E74AD1819142D97B1FB15.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:6e:1f:e1:2a:e5:3a:ae:23:4e:b3:ec:3f:58:7f:99:30:ea:d8:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=079553C97D2389A3877E74AD1819142D97B1FB15 Validity Not Before: Sep 23 18:03:25 2026 GMT Not After : Sep 24 20:21:25 2026 GMT Subject: CN=7F4639444E4181478C4AAE8AB8FB7BCB80A868BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:64:a4:52:21:4f:39:42:4c:f1:14:1c:6c:6f: 1e:03:a3:09:82:47:c5:9b:cf:18:bc:e0:9d:6e:9a: b4:bd:58:e3:a9:b2:df:66:4d:36:81:0a:0c:3d:ec: 8a:7f:cb:73:52:bf:e5:69:3c:4e:8d:48:dc:c5:77: 48:80:7d:1e:01:5f:93:9d:8a:76:36:d2:35:03:1a: 54:f6:0a:d8:96:39:4a:77:39:d8:aa:81:3d:3f:88: 48:a9:6c:fa:11:59:20:b2:6b:52:08:96:82:cd:f8: 94:98:b3:c2:5c:cf:b2:b7:2a:c5:c4:40:c4:dd:c4: be:f9:5f:da:f0:70:f8:b9:cd:b0:e2:06:b5:df:8a: 42:7a:c6:9e:aa:e7:a3:f9:29:72:7d:54:eb:b3:27: 57:10:ce:59:9b:44:b5:a4:d0:7b:ea:1f:3d:a2:21: 6d:fd:71:8c:59:04:fb:fc:e3:4d:b0:34:01:4b:89: 82:94:ba:3f:c9:e6:c8:1b:dd:d7:22:ec:83:1a:8b: 0b:17:36:08:2d:0b:2a:8a:9e:a7:e4:3b:1b:b4:62: 63:ad:4b:c8:53:2c:ca:b2:be:75:e9:16:98:cf:f8: ae:0e:39:54:61:ae:31:82:19:7d:4a:ba:3a:de:cd: 8b:c4:58:28:a5:bf:fd:f7:25:88:6c:2f:07:04:7f: bc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:46:39:44:4E:41:81:47:8C:4A:AE:8A:B8:FB:7B:CB:80:A8:68:BA X509v3 Authority Key Identifier: keyid:07:95:53:C9:7D:23:89:A3:87:7E:74:AD:18:19:14:2D:97:B1:FB:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/079553C97D2389A3877E74AD1819142D97B1FB15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/079553C97D2389A3877E74AD1819142D97B1FB15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/079553C97D2389A3877E74AD1819142D97B1FB15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:0d:60:22:94:ff:15:f6:a9:65:45:11:8a:5f:52:8b:86:27: 92:c9:3f:7e:a4:39:dd:d8:15:dc:7e:b5:bd:03:bd:e3:36:9e: 8b:6e:6c:b7:7e:c0:ee:5c:49:66:2f:c4:f7:8a:1c:b2:c1:00: d6:e9:7c:70:3e:67:5a:9c:6a:b1:f9:22:d8:0a:12:00:a6:65: 39:c9:0a:4e:16:c3:62:a1:3d:4c:b7:16:bc:2a:33:15:20:37: 0a:16:cd:52:95:b4:bd:e1:e4:55:e4:b6:41:a7:46:f6:d5:42: 86:a8:1a:e6:30:5d:1e:ba:d3:dd:91:7a:79:8e:3a:76:5a:55: 5b:08:b4:c5:00:67:37:36:3b:5f:f5:9e:11:08:ba:86:3c:66: c8:6c:6f:8f:e9:73:07:96:95:e8:22:0a:b1:bf:99:00:7a:6e: 36:14:ad:a8:f0:71:6e:84:92:18:bf:bd:a4:d9:90:2d:40:6b: b9:49:c8:1b:62:74:c8:24:ac:14:0f:f8:15:e2:9b:34:e1:a7: 44:64:8e:6e:08:b2:4b:a7:c7:9c:38:9b:54:71:82:ec:b6:61: 76:5c:ed:f2:c4:24:12:b9:1e:44:14:e9:7e:6b:02:e5:e4:5a: 2a:21:92:96:71:50:ff:82:8c:e2:ed:a0:b1:50:ac:4b:93:9c: 16:32:51:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQm4f4SrlOq4jTrPsP1h/mTDq2IQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDc5NTUzQzk3RDIzODlBMzg3N0U3NEFEMTgxOTE0MkQ5 N0IxRkIxNTAeFw0yNjA5MjMxODAzMjVaFw0yNjA5MjQyMDIxMjVaMDMxMTAvBgNV BAMTKDdGNDYzOTQ0NEU0MTgxNDc4QzRBQUU4QUI4RkI3QkNCODBBODY4QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ZKRSIU85QkzxFBxsbx4DowmC R8Wbzxi84J1umrS9WOOpst9mTTaBCgw97Ip/y3NSv+VpPE6NSNzFd0iAfR4BX5Od inY20jUDGlT2CtiWOUp3OdiqgT0/iEipbPoRWSCya1IIloLN+JSYs8Jcz7K3KsXE QMTdxL75X9rwcPi5zbDiBrXfikJ6xp6q56P5KXJ9VOuzJ1cQzlmbRLWk0HvqHz2i IW39cYxZBPv8402wNAFLiYKUuj/J5sgb3dci7IMaiwsXNggtCyqKnqfkOxu0YmOt S8hTLMqyvnXpFpjP+K4OOVRhrjGCGX1KujrezYvEWCilv/33JYhsLwcEf7zJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf0Y5RE5BgUeMSq6KuPt7y4CoaLowHwYDVR0j BBgwFoAUB5VTyX0jiaOHfnStGBkULZex+xUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzkzMWZhZTktNjI3YS00YTA4LWJlNWMtNDRhMGMxNTcxNDg3LzAvMDc5NTUzQzk3 RDIzODlBMzg3N0U3NEFEMTgxOTE0MkQ5N0IxRkIxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNzk1NTNDOTdEMjM4OUEzODc3RTc0QUQxODE5MTQyRDk3QjFG QjE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzkzMWZhZTktNjI3YS00YTA4LWJl NWMtNDRhMGMxNTcxNDg3LzAvMDc5NTUzQzk3RDIzODlBMzg3N0U3NEFEMTgxOTE0 MkQ5N0IxRkIxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJINYCKU/xX2qWVFEYpfUouGJ5LJP36kOd3Y Fdx+tb0DveM2notubLd+wO5cSWYvxPeKHLLBANbpfHA+Z1qcarH5ItgKEgCmZTnJ Ck4Ww2KhPUy3FrwqMxUgNwoWzVKVtL3h5FXktkGnRvbVQoaoGuYwXR66092RenmO OnZaVVsItMUAZzc2O1/1nhEIuoY8Zshsb4/pcweWlegiCrG/mQB6bjYUrajwcW6E khi/vaTZkC1Aa7lJyBtidMgkrBQP+BXimzThp0Rkjm4Iskunx5w4m1Rxguy2YXZc 7fLEJBK5HkQU6X5rAuXkWiohkpZxUP+CjOLtoLFQrEuTnBYyUSQ= -----END CERTIFICATE-----Generated at Thu Sep 24 13:45:25 2026 by rpki-client