$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft File: 673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft (raw, json) Hash identifier: +5Y9B4i4FBMMcepAKg7Vrl2K7a7MruoGP6RD+QSF3EQ= Subject key identifier: 91:8A:64:A1:2D:57:95:A1:A1:04:B9:C8:EB:EF:F5:7A:66:28:D1:DD Authority key identifier: 67:30:62:FF:FB:B8:7D:54:B2:4F:80:0C:A7:1D:4C:1D:D7:7E:2B:87 Certificate issuer: /CN=673062FFFBB87D54B24F800CA71D4C1DD77E2B87 Certificate serial: 35A2C8BF7E25905901B7E02D66CC6244A381F7B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 03:09:33 +0000 Manifest this update: Thu 24 Sep 2026 03:04:33 +0000 Manifest next update: Fri 25 Sep 2026 04:39:33 +0000 Files and hashes: 1: 3130332e32392e31302e302f32342d3234203d3e20313431303634.roa (hash: uSk10krPfxdFIHOBpfkxhwhZ1K9QJq18Qw/WrYuUlfQ=) 2: 3130332e32392e31312e302f32342d3234203d3e20313431303634.roa (hash: +AUN4MHHWAUjMgF6xm0EYpBlr5qq8MXy2UpCeEPacA4=) 3: 673062FFFBB87D54B24F800CA71D4C1DD77E2B87.crl (hash: /rn7OZRejvdZtaTGDGQPT3XZ6IKvonGVLYQkNrkDGEc=) 4: 3130332e32392e31302e302f32332d3233203d3e20313431303634.roa (hash: IBUQjMZ5NNzGmdB2zhWUusvHNKo79g9C811Va7sgvlo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.crl rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 04:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:a2:c8:bf:7e:25:90:59:01:b7:e0:2d:66:cc:62:44:a3:81:f7:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=673062FFFBB87D54B24F800CA71D4C1DD77E2B87 Validity Not Before: Sep 24 03:04:33 2026 GMT Not After : Sep 25 04:39:33 2026 GMT Subject: CN=918A64A12D5795A1A104B9C8EBEFF57A6628D1DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:da:d8:77:db:dc:33:9f:39:83:16:b9:69:f8: 7a:f3:42:65:d3:62:14:21:b5:5d:9f:4c:c3:22:97: ad:6f:70:05:4f:99:44:09:c4:ab:7b:97:89:5e:3f: 0b:50:ae:ad:4f:43:70:c4:ff:6c:be:d7:c5:00:6b: 8b:b7:87:b9:49:73:60:5a:3b:b4:d9:59:cc:8f:8f: 0c:59:d0:8f:b9:8b:8b:93:8d:62:5e:d0:73:cd:23: 16:c6:1e:a0:bc:04:5b:94:44:b6:a4:28:bc:e9:59: 51:6f:39:b1:3a:25:c8:24:d2:b8:02:e9:ff:bd:62: 04:b9:e2:46:ce:be:4e:2b:e6:52:be:24:94:ca:73: 09:d5:52:01:ae:3c:48:5e:cb:98:dc:9c:15:f7:df: 15:4e:d9:7e:ae:0d:ad:5e:e6:82:2d:93:8b:21:3d: fe:a5:b1:e6:0f:f4:80:12:ce:de:9c:f2:b8:b5:d4: 4c:48:bb:e7:46:15:f7:24:85:4d:65:0e:f4:3c:9f: cf:2c:83:94:26:75:24:a2:c4:22:19:9e:13:4b:9b: 50:64:f9:44:f3:ec:04:03:fc:c8:1c:79:27:7f:aa: 0e:6a:f5:a7:52:7d:30:29:bb:97:4c:1f:da:f3:84: dc:99:7d:0a:cb:6b:87:34:4e:67:59:42:7e:b6:dd: 9d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8A:64:A1:2D:57:95:A1:A1:04:B9:C8:EB:EF:F5:7A:66:28:D1:DD X509v3 Authority Key Identifier: keyid:67:30:62:FF:FB:B8:7D:54:B2:4F:80:0C:A7:1D:4C:1D:D7:7E:2B:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:46:99:e9:22:30:d4:0c:30:49:fe:3d:ae:52:52:b5:86:d9: 8f:d9:1b:f1:d8:f7:88:3d:88:01:e0:5b:16:34:3a:4a:99:18: 56:46:2e:a5:48:c0:f6:00:0f:2a:50:24:83:f1:5b:57:6a:ae: f6:ee:c6:f2:79:65:09:85:bf:fc:f4:78:a7:d7:0a:5f:1f:47: 93:4d:3c:63:de:2a:eb:47:81:38:b0:e5:00:9b:fa:9c:b0:f4: e6:8f:17:f6:23:4e:1e:e2:89:12:4f:a2:df:53:2a:ec:56:95: 9c:53:86:58:c0:17:c1:ae:66:ba:70:06:10:7b:dd:d5:e4:b7: f9:14:3f:52:b0:a7:fe:5f:8b:b8:06:19:ef:d0:1a:4d:5a:da: 5a:71:6e:76:40:df:d2:5d:69:09:15:69:d9:31:1b:ca:4d:87: 3e:9c:46:64:71:5b:ee:50:b1:27:cc:40:d5:14:50:d1:85:4c: 0f:d6:86:c0:3e:aa:97:e1:de:70:0e:cd:28:6d:5b:df:88:5d: 58:43:66:fa:37:fa:17:1e:e7:ee:54:de:b1:7b:f1:d9:c5:3c: 0d:d6:96:93:18:3a:fa:12:0e:97:85:c6:26:46:90:55:4f:ff: 00:7a:12:3d:7b:b5:a5:79:bb:8a:f6:bf:b8:4f:6d:d5:35:e2: d5:35:a5:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNaLIv34lkFkBt+AtZsxiRKOB97IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjczMDYyRkZGQkI4N0Q1NEIyNEY4MDBDQTcxRDRDMURE NzdFMkI4NzAeFw0yNjA5MjQwMzA0MzNaFw0yNjA5MjUwNDM5MzNaMDMxMTAvBgNV BAMTKDkxOEE2NEExMkQ1Nzk1QTFBMTA0QjlDOEVCRUZGNTdBNjYyOEQxREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ2th329wznzmDFrlp+HrzQmXT YhQhtV2fTMMil61vcAVPmUQJxKt7l4lePwtQrq1PQ3DE/2y+18UAa4u3h7lJc2Ba O7TZWcyPjwxZ0I+5i4uTjWJe0HPNIxbGHqC8BFuURLakKLzpWVFvObE6Jcgk0rgC 6f+9YgS54kbOvk4r5lK+JJTKcwnVUgGuPEhey5jcnBX33xVO2X6uDa1e5oItk4sh Pf6lseYP9IASzt6c8ri11ExIu+dGFfckhU1lDvQ8n88sg5QmdSSixCIZnhNLm1Bk +UTz7AQD/MgceSd/qg5q9adSfTApu5dMH9rzhNyZfQrLa4c0TmdZQn623Z0zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkYpkoS1XlaGhBLnI6+/1emYo0d0wHwYDVR0j BBgwFoAUZzBi//u4fVSyT4AMpx1MHdd+K4cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWE1MzJjNjUtODBiZS00ZmRlLTg3ZDAtMzZjNWJkMjg4Y2Q4LzAvNjczMDYyRkZG QkI4N0Q1NEIyNEY4MDBDQTcxRDRDMURENzdFMkI4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzMwNjJGRkZCQjg3RDU0QjI0RjgwMENBNzFENEMxREQ3N0Uy Qjg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWE1MzJjNjUtODBiZS00ZmRlLTg3 ZDAtMzZjNWJkMjg4Y2Q4LzAvNjczMDYyRkZGQkI4N0Q1NEIyNEY4MDBDQTcxRDRD MURENzdFMkI4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKxGmekiMNQMMEn+Pa5SUrWG2Y/ZG/HY94g9 iAHgWxY0OkqZGFZGLqVIwPYADypQJIPxW1dqrvbuxvJ5ZQmFv/z0eKfXCl8fR5NN PGPeKutHgTiw5QCb+pyw9OaPF/YjTh7iiRJPot9TKuxWlZxThljAF8GuZrpwBhB7 3dXkt/kUP1Kwp/5fi7gGGe/QGk1a2lpxbnZA39JdaQkVadkxG8pNhz6cRmRxW+5Q sSfMQNUUUNGFTA/WhsA+qpfh3nAOzShtW9+IXVhDZvo3+hce5+5U3rF78dnFPA3W lpMYOvoSDpeFxiZGkFVP/wB6Ej17taV5u4r2v7hPbdU14tU1pQ0= -----END CERTIFICATE-----Generated at Thu Sep 24 10:45:48 2026 by rpki-client