$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.mft File: 7377350E3E3A151F4CC7127822802AD47B86A5CF.mft (raw, json) Hash identifier: OFw+Rbgfa9cJmVDGWTo7VE+rbsnsCGnAQlYJlcg5R68= Subject key identifier: 01:24:6F:D5:47:60:4A:F3:F0:1C:B9:C9:88:62:C4:E7:C3:40:43:F3 Authority key identifier: 73:77:35:0E:3E:3A:15:1F:4C:C7:12:78:22:80:2A:D4:7B:86:A5:CF Certificate issuer: /CN=7377350E3E3A151F4CC7127822802AD47B86A5CF Certificate serial: 6BA372864A6D448134274EEEAA9C3DDF924BBE6B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 19:04:16 +0000 Manifest this update: Thu 24 Sep 2026 18:59:16 +0000 Manifest next update: Fri 25 Sep 2026 19:47:16 +0000 Files and hashes: 1: 35382e3134352e3136382e302f32342d3234203d3e203436303534.roa (hash: Vvaj0i3/+/Ad91udWk53Oqtn0qejlYZw543f3Ty/YWA=) 2: 35382e3134352e3137352e302f32342d3234203d3e203436303534.roa (hash: 4T0MkaYeQXnt+7nt+tGVXlJwCuwG3xBT42XqaRTpKC8=) 3: 35382e3134352e3136382e302f32312d3231203d3e203436303534.roa (hash: Hao2KVKZ/SYX9wVFj9FYi2+tYJ4CgtxYRSmxcGvPEds=) 4: 35382e3134352e3137332e302f32342d3234203d3e203436303534.roa (hash: OPxPj77Y9Rv3nPwPPsMOHUQMVs3WuJ+hOwcspHs2qG8=) 5: 35382e3134352e3137322e302f32342d3234203d3e203436303534.roa (hash: e4jbQz3u5a8FYwAIij+O/hjopDRAVXihtcltRGdiV+E=) 6: 35382e3134352e3137342e302f32342d3234203d3e203436303534.roa (hash: B1+lVC5q4sIsDS/x8/d5eAraCNrj0NOZBU8+Bv2wtx0=) 7: 35382e3134352e3137312e302f32342d3234203d3e203436303534.roa (hash: d1NKSb9zCDz65Zahjy0PaWXg282C7xqtAafmjhthBLo=) 8: 35382e3134352e3137302e302f32342d3234203d3e203436303534.roa (hash: OU8A/JqlWEHiLMQOXTcJaLj05li9iqcqdLDEsrie8gk=) 9: 35382e3134352e3136392e302f32342d3234203d3e203436303534.roa (hash: CJsi4P7cF17zeVXlJxUuGuNmwdU6F6/z2QybZclUgaI=) 10: 7377350E3E3A151F4CC7127822802AD47B86A5CF.crl (hash: xlEM89QSzJJCcHIeY01bAuV2rcf71WKF6O7iCt6yHO0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.crl rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:a3:72:86:4a:6d:44:81:34:27:4e:ee:aa:9c:3d:df:92:4b:be:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7377350E3E3A151F4CC7127822802AD47B86A5CF Validity Not Before: Sep 24 18:59:16 2026 GMT Not After : Sep 25 19:47:16 2026 GMT Subject: CN=01246FD547604AF3F01CB9C98862C4E7C34043F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:46:e0:b7:f5:0e:4d:5f:21:cc:f4:d2:f0:8d: 8e:6d:87:ca:27:2b:d0:08:cb:08:26:af:b1:42:3f: 2a:f0:ed:25:b6:0b:0b:c4:47:3c:ba:9d:31:b3:62: 46:79:d8:23:b6:88:09:e9:c3:c1:3c:7e:d8:1d:69: 68:92:9e:11:83:7b:b7:41:f0:c1:fe:29:4c:d9:97: 33:69:33:02:8c:6b:15:68:2b:3d:de:1c:d3:3e:aa: 33:93:3d:e7:e3:c2:47:35:59:36:8b:e3:28:90:e9: de:28:8f:2e:18:6b:ae:fa:ef:f5:a5:7c:b6:6e:0b: 68:09:c1:43:c0:34:43:fd:bc:4c:0c:a5:62:27:59: 7e:5b:d1:65:f6:8f:50:23:ad:64:dc:8d:fc:6e:09: d0:51:99:61:b2:9c:bb:e7:1f:42:81:03:36:85:66: 32:44:d0:4e:9c:80:f9:88:ce:dd:17:fe:11:f0:ec: e4:39:78:7d:87:c4:8d:a3:c9:74:ce:18:08:93:75: 89:2f:3a:a8:08:5c:43:07:1d:d4:84:fc:10:2e:07: dd:60:60:5a:9f:64:2b:fc:8d:00:3b:26:c3:cb:8e: 35:20:c6:dc:9d:f0:7a:6d:c4:51:88:4f:29:a0:d9: b9:88:0c:8a:08:1e:f4:87:17:bc:e3:10:3e:5d:24: e1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:24:6F:D5:47:60:4A:F3:F0:1C:B9:C9:88:62:C4:E7:C3:40:43:F3 X509v3 Authority Key Identifier: keyid:73:77:35:0E:3E:3A:15:1F:4C:C7:12:78:22:80:2A:D4:7B:86:A5:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:c6:fa:da:78:d9:da:19:81:d7:89:02:75:8b:96:c3:71:48: 9c:80:af:31:e8:9e:ae:af:4d:65:ce:42:8e:a8:68:b0:c4:b1: 01:5d:c0:9a:de:a9:97:44:90:59:e4:56:70:3e:92:f8:4c:f6: 78:89:e5:94:2d:b5:fb:a5:ae:bc:53:1c:16:78:ec:20:65:18: d8:e1:75:b9:52:57:62:e7:a6:e2:60:59:96:6e:70:6e:57:96: 4a:dc:1a:a3:3f:c8:0a:44:85:0f:2e:18:6b:94:9a:5f:6d:12: 6e:15:85:1a:11:ea:df:2f:9e:21:db:46:57:77:7b:b8:8c:82: be:68:c4:1d:1d:2e:ed:d5:a6:c6:25:26:7a:86:21:ea:c2:87: f4:d6:f8:9d:22:58:d7:72:f4:ed:c1:db:34:be:ef:72:c5:5a: 22:fa:0c:38:65:f4:b3:8c:3f:d4:a8:8a:8d:7b:0b:07:bf:bf: ec:70:76:d0:7f:f8:f0:f0:b6:61:6a:bb:1a:06:e2:91:8e:8d: 1c:aa:c8:77:2b:ed:71:63:9b:32:4f:c7:85:7a:d9:60:d6:89: 85:aa:7d:c0:b8:f8:18:3b:d0:64:97:f8:dc:9a:9c:f2:5d:d3: 63:51:a1:cf:12:af:41:6e:28:d0:34:c9:45:46:3b:16:6a:b1: df:6b:2b:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa6NyhkptRIE0J07uqpw935JLvmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM3NzM1MEUzRTNBMTUxRjRDQzcxMjc4MjI4MDJBRDQ3 Qjg2QTVDRjAeFw0yNjA5MjQxODU5MTZaFw0yNjA5MjUxOTQ3MTZaMDMxMTAvBgNV BAMTKDAxMjQ2RkQ1NDc2MDRBRjNGMDFDQjlDOTg4NjJDNEU3QzM0MDQzRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGRuC39Q5NXyHM9NLwjY5th8on K9AIywgmr7FCPyrw7SW2CwvERzy6nTGzYkZ52CO2iAnpw8E8ftgdaWiSnhGDe7dB 8MH+KUzZlzNpMwKMaxVoKz3eHNM+qjOTPefjwkc1WTaL4yiQ6d4ojy4Ya6767/Wl fLZuC2gJwUPANEP9vEwMpWInWX5b0WX2j1AjrWTcjfxuCdBRmWGynLvnH0KBAzaF ZjJE0E6cgPmIzt0X/hHw7OQ5eH2HxI2jyXTOGAiTdYkvOqgIXEMHHdSE/BAuB91g YFqfZCv8jQA7JsPLjjUgxtyd8HptxFGITymg2bmIDIoIHvSHF7zjED5dJOEpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUASRv1UdgSvPwHLnJiGLE58NAQ/MwHwYDVR0j BBgwFoAUc3c1Dj46FR9MxxJ4IoAq1HuGpc8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NmMzA5MzYtYzc1MC00MzNiLTljMmEtOGZmNWYzOGU2M2Q0LzAvNzM3NzM1MEUz RTNBMTUxRjRDQzcxMjc4MjI4MDJBRDQ3Qjg2QTVDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Mzc3MzUwRTNFM0ExNTFGNENDNzEyNzgyMjgwMkFENDdCODZB NUNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NmMzA5MzYtYzc1MC00MzNiLTlj MmEtOGZmNWYzOGU2M2Q0LzAvNzM3NzM1MEUzRTNBMTUxRjRDQzcxMjc4MjI4MDJB RDQ3Qjg2QTVDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3G+tp42doZgdeJAnWLlsNxSJyArzHonq6v TWXOQo6oaLDEsQFdwJreqZdEkFnkVnA+kvhM9niJ5ZQttfulrrxTHBZ47CBlGNjh dblSV2LnpuJgWZZucG5XlkrcGqM/yApEhQ8uGGuUml9tEm4VhRoR6t8vniHbRld3 e7iMgr5oxB0dLu3VpsYlJnqGIerCh/TW+J0iWNdy9O3B2zS+73LFWiL6DDhl9LOM P9Soio17Cwe/v+xwdtB/+PDwtmFquxoG4pGOjRyqyHcr7XFjmzJPx4V62WDWiYWq fcC4+Bg70GSX+NyanPJd02NRoc8Sr0FuKNA0yUVGOxZqsd9rKyE= -----END CERTIFICATE-----Generated at Fri Sep 25 01:05:16 2026 by rpki-client