$ rpki-client -vvvf rpki-rsync.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/1767C40EF953BF431D4947D499414812C8AB0D53.mft File: 1767C40EF953BF431D4947D499414812C8AB0D53.mft (raw, json) Hash identifier: kqsmie+wDmW+D2IA2FEOjLA9UsWSWsMDgbZcVxDwqIo= Subject key identifier: 83:DC:33:3E:C4:CC:D7:65:FF:A7:D1:51:18:9C:1B:34:E5:14:2C:73 Authority key identifier: 17:67:C4:0E:F9:53:BF:43:1D:49:47:D4:99:41:48:12:C8:AB:0D:53 Certificate issuer: /CN=1767C40EF953BF431D4947D499414812C8AB0D53 Certificate serial: 13B7C8A3758943A30E09C12629F98BE32B4FA1CE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1767C40EF953BF431D4947D499414812C8AB0D53.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/1767C40EF953BF431D4947D499414812C8AB0D53.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 15:35:06 +0000 Manifest this update: Thu 24 Sep 2026 15:30:06 +0000 Manifest next update: Fri 25 Sep 2026 18:06:06 +0000 Files and hashes: 1: 1767C40EF953BF431D4947D499414812C8AB0D53.crl (hash: uxQ2q8tkwT/PPhG0aT2xbOJUFGoRFxMsKYjoQV2NIkg=) 2: 3130332e32302e31362e302f32342d3234203d3e20313439393633.roa (hash: 3fUrcuhU6jaeFfZiNtVK08Yeh8OVEIRyrvEdhO9M9Ow=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/1767C40EF953BF431D4947D499414812C8AB0D53.crl rsync://rpki-rsync.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/1767C40EF953BF431D4947D499414812C8AB0D53.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1767C40EF953BF431D4947D499414812C8AB0D53.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b7:c8:a3:75:89:43:a3:0e:09:c1:26:29:f9:8b:e3:2b:4f:a1:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1767C40EF953BF431D4947D499414812C8AB0D53 Validity Not Before: Sep 24 15:30:06 2026 GMT Not After : Sep 25 18:06:06 2026 GMT Subject: CN=83DC333EC4CCD765FFA7D151189C1B34E5142C73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:05:04:04:76:1a:8e:66:ea:0d:00:82:0a:d3: 2f:e7:50:22:ce:4c:4a:4f:e0:6c:9a:68:e9:cd:06: 7f:1c:71:e6:5f:0f:38:f9:a6:05:cf:36:70:88:6c: b0:7f:18:66:5f:6a:8c:d4:3d:48:04:74:d1:ad:c4: 5c:6f:bb:be:24:5c:78:e6:79:9c:68:9b:1a:e0:7b: da:01:85:3a:ed:25:4e:6d:a4:a4:c9:e2:5b:58:18: 4d:71:c4:3b:17:e9:c5:cc:7a:88:ef:49:76:d0:4c: 85:98:9c:54:ca:7b:9d:b4:04:c7:fb:cc:30:b2:dc: 3f:3c:06:36:57:19:36:c2:2a:bf:bd:a1:89:3b:3e: ba:b4:a7:20:66:d8:02:a2:9d:f5:0c:ee:29:b2:14: 8e:16:96:67:2a:90:d5:fa:23:1b:4e:a9:7f:b4:b0: ac:fd:3a:29:10:83:61:0e:b1:ba:06:40:44:57:da: 0f:d4:13:81:7d:63:21:0e:87:89:f7:98:fb:8f:41: d7:6b:2c:88:fd:69:2e:a4:67:98:2f:b6:e1:16:ba: 25:b5:c4:ae:3b:51:a5:81:97:10:da:dd:d9:b0:1c: df:fd:ae:05:93:6b:f2:89:6b:8c:a0:4d:5d:75:b4: 10:3c:5c:54:9b:a3:ba:bb:df:96:53:26:b6:e0:84: cf:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DC:33:3E:C4:CC:D7:65:FF:A7:D1:51:18:9C:1B:34:E5:14:2C:73 X509v3 Authority Key Identifier: keyid:17:67:C4:0E:F9:53:BF:43:1D:49:47:D4:99:41:48:12:C8:AB:0D:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/1767C40EF953BF431D4947D499414812C8AB0D53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1767C40EF953BF431D4947D499414812C8AB0D53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/1767C40EF953BF431D4947D499414812C8AB0D53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:16:2e:a3:ef:f1:dc:d0:27:cf:5b:a7:1e:0f:10:10:69:05: ae:f8:98:43:ce:37:4a:18:b6:9a:97:7b:10:10:81:9e:4e:f7: b7:d7:76:0b:a1:5b:e4:24:57:59:86:e3:75:1d:89:71:34:1f: 37:1e:ad:7c:cd:a5:5a:b7:cf:f2:a8:22:67:4f:3c:4b:5a:83: 62:e9:82:ef:8c:81:f1:d2:9f:7f:af:ce:85:d1:e3:2a:05:7a: 61:90:de:60:86:0f:9a:61:4a:c9:e3:44:f5:b7:9f:e5:94:0e: 56:39:9e:81:09:78:f9:6b:35:d5:50:5a:46:c8:84:93:6e:aa: 18:6c:64:fb:a2:d8:3b:ba:d2:eb:a5:9e:9a:da:6d:a4:4c:1f: 6a:30:99:9e:b1:85:0f:ac:1c:d1:7b:a3:f5:6f:40:2a:57:ba: 23:6a:79:7a:44:68:4e:0b:6d:93:37:b1:1b:b3:2a:49:4f:41: 97:0f:a0:97:11:5e:8c:9b:7d:07:cb:2a:79:7c:2a:f8:c3:9d: 6d:79:f1:61:6b:df:78:bd:c1:a1:71:27:18:ef:08:26:49:44: fa:1f:de:b1:9b:dc:5e:d2:d0:da:7f:2b:ac:0e:f4:95:f6:15: 88:51:c8:38:a4:29:2b:ea:be:31:9d:26:50:eb:93:8b:57:aa: a0:97:e2:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE7fIo3WJQ6MOCcEmKfmL4ytPoc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc2N0M0MEVGOTUzQkY0MzFENDk0N0Q0OTk0MTQ4MTJD OEFCMEQ1MzAeFw0yNjA5MjQxNTMwMDZaFw0yNjA5MjUxODA2MDZaMDMxMTAvBgNV BAMTKDgzREMzMzNFQzRDQ0Q3NjVGRkE3RDE1MTE4OUMxQjM0RTUxNDJDNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7BQQEdhqOZuoNAIIK0y/nUCLO TEpP4GyaaOnNBn8cceZfDzj5pgXPNnCIbLB/GGZfaozUPUgEdNGtxFxvu74kXHjm eZxomxrge9oBhTrtJU5tpKTJ4ltYGE1xxDsX6cXMeojvSXbQTIWYnFTKe520BMf7 zDCy3D88BjZXGTbCKr+9oYk7Prq0pyBm2AKinfUM7imyFI4WlmcqkNX6IxtOqX+0 sKz9OikQg2EOsboGQERX2g/UE4F9YyEOh4n3mPuPQddrLIj9aS6kZ5gvtuEWuiW1 xK47UaWBlxDa3dmwHN/9rgWTa/KJa4ygTV11tBA8XFSbo7q735ZTJrbghM/tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg9wzPsTM12X/p9FRGJwbNOUULHMwHwYDVR0j BBgwFoAUF2fEDvlTv0MdSUfUmUFIEsirDVMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjQzZGI3ZDItYjNmZC00MjE0LWI2YTQtZDAxNjJmOTVlNzJlLzAvMTc2N0M0MEVG OTUzQkY0MzFENDk0N0Q0OTk0MTQ4MTJDOEFCMEQ1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNzY3QzQwRUY5NTNCRjQzMUQ0OTQ3RDQ5OTQxNDgxMkM4QUIw RDUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjQzZGI3ZDItYjNmZC00MjE0LWI2 YTQtZDAxNjJmOTVlNzJlLzAvMTc2N0M0MEVGOTUzQkY0MzFENDk0N0Q0OTk0MTQ4 MTJDOEFCMEQ1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8WLqPv8dzQJ89bpx4PEBBpBa74mEPON0oY tpqXexAQgZ5O97fXdguhW+QkV1mG43UdiXE0HzcerXzNpVq3z/KoImdPPEtag2Lp gu+MgfHSn3+vzoXR4yoFemGQ3mCGD5phSsnjRPW3n+WUDlY5noEJePlrNdVQWkbI hJNuqhhsZPui2Du60uulnprabaRMH2owmZ6xhQ+sHNF7o/VvQCpXuiNqeXpEaE4L bZM3sRuzKklPQZcPoJcRXoybfQfLKnl8KvjDnW158WFr33i9waFxJxjvCCZJRPof 3rGb3F7S0Np/K6wO9JX2FYhRyDikKSvqvjGdJlDrk4tXqqCX4mY= -----END CERTIFICATE-----Generated at Thu Sep 24 23:34:50 2026 by rpki-client