$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.mft File: 357778A786AA1E6854673B0A6AAAA40B85254E94.mft (raw, json) Hash identifier: HrJfYB7Lnxz5RK5vQ8T+WjzdiPVeA9kARw86/MNztdE= Subject key identifier: 48:54:2D:C7:43:D9:32:1D:A7:9F:32:7F:D8:9A:42:0D:FE:19:61:CA Authority key identifier: 35:77:78:A7:86:AA:1E:68:54:67:3B:0A:6A:AA:A4:0B:85:25:4E:94 Certificate issuer: /CN=357778A786AA1E6854673B0A6AAAA40B85254E94 Certificate serial: 21BB375E7B0775E65967374569AFC60FA3C5987C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/357778A786AA1E6854673B0A6AAAA40B85254E94.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.mft Manifest number: C4 Signing time: Sat 26 Sep 2026 09:51:56 +0000 Manifest this update: Sat 26 Sep 2026 09:46:56 +0000 Manifest next update: Sun 27 Sep 2026 12:04:56 +0000 Files and hashes: 1: 357778A786AA1E6854673B0A6AAAA40B85254E94.crl (hash: VexCdc1VNeTBrTchDGscK0epBbdi+jMAI1Be4WFtH7g=) 2: 3130332e3137342e3137342e302f32342d3234203d3e20313437313031.roa (hash: 5+l8Bv4b+lu/zj1I0m9wF216uhFzz02OufoiSu3ruBk=) 3: 3130332e3137342e3137352e302f32342d3234203d3e20313437313031.roa (hash: 7ETsMsldfe5UrsfaSRsi4x54y8+ydy+yp/J35qzk+sc=) 4: 3130332e3137342e3137342e302f32332d3233203d3e20313437313031.roa (hash: hjalkv3P7i18uJ7S9FBqgBtHEhsf6OEBgP8fNSR+fXY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.crl rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/357778A786AA1E6854673B0A6AAAA40B85254E94.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:bb:37:5e:7b:07:75:e6:59:67:37:45:69:af:c6:0f:a3:c5:98:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357778A786AA1E6854673B0A6AAAA40B85254E94 Validity Not Before: Sep 26 09:46:56 2026 GMT Not After : Sep 27 12:04:56 2026 GMT Subject: CN=48542DC743D9321DA79F327FD89A420DFE1961CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:55:ad:2e:5d:bf:22:9e:d7:fe:a8:bb:27:be: 48:41:d8:de:f9:73:9d:cf:f1:24:99:25:8a:ac:2e: ad:52:52:e2:60:20:23:20:f1:1a:e3:18:4a:87:e2: 77:8f:a7:57:21:be:03:c5:15:5e:ff:a6:53:1e:2a: 0f:99:c3:00:c2:34:f2:6d:40:a0:16:22:7b:3d:c1: f2:24:ce:a0:9c:c1:ee:91:16:bc:26:e9:21:f0:e7: 98:29:a9:7d:b5:76:e5:21:f7:27:fc:0e:05:d4:0e: e7:79:76:cf:21:c3:82:27:b8:62:6d:9c:bb:a6:cb: 29:f5:d9:7c:4a:79:e5:3c:49:d3:1b:bd:c6:06:b9: dd:c9:13:24:da:0a:fc:84:72:dd:57:09:a6:05:21: 8a:13:97:03:52:e6:a6:f3:da:b3:7a:5c:7a:17:e0: b2:b0:ce:09:2c:2c:c9:32:ee:92:34:39:c9:2e:38: 40:0c:b4:d5:c7:dc:33:06:02:d0:d0:32:06:20:03: 6a:28:fb:3c:cb:b9:60:aa:98:18:52:9f:bf:85:1d: 5d:b8:9f:7a:fe:3a:eb:ad:a5:90:84:a9:20:6a:ea: 36:aa:97:64:2d:a9:3c:69:03:80:d8:72:d4:6a:89: da:d4:56:6a:13:8a:d2:92:90:17:fe:8d:b3:a3:79: e5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:54:2D:C7:43:D9:32:1D:A7:9F:32:7F:D8:9A:42:0D:FE:19:61:CA X509v3 Authority Key Identifier: keyid:35:77:78:A7:86:AA:1E:68:54:67:3B:0A:6A:AA:A4:0B:85:25:4E:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/357778A786AA1E6854673B0A6AAAA40B85254E94.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:6d:85:28:b2:af:a1:e3:16:2e:76:8b:67:58:1c:63:a9:16: 37:37:38:5e:2b:10:31:f5:a9:1f:6c:68:37:16:c1:4e:fa:b9: c6:90:5b:fd:bb:2e:a1:2a:4e:40:57:cd:4f:97:c2:97:fa:cc: 47:fc:30:4b:8c:9f:89:46:fe:79:43:01:23:7f:17:86:8d:71: d3:a1:75:e6:9a:d4:ae:67:9c:1b:2f:52:9c:2c:d3:dd:b9:29: e3:f7:8f:7c:46:d4:1f:87:6d:e6:7f:22:1b:40:af:24:0f:98: e5:bc:5a:df:8a:ff:76:c7:3b:76:1b:0b:b3:9b:f4:9c:b1:4a: 2b:31:54:cd:50:5f:b1:36:61:4b:af:61:e5:37:d2:3a:ec:2c: 43:62:47:af:b6:dd:eb:e1:8c:53:2e:7f:3a:eb:82:13:97:53: 57:72:ed:66:8d:cc:e3:0a:92:1f:5b:e6:aa:22:4f:af:55:77: 9b:24:b1:10:aa:59:c3:b5:32:53:99:27:fc:7c:80:99:19:33: 5d:74:eb:f9:63:e2:41:c4:31:ac:93:e8:dd:ee:67:b8:9c:90: 2d:86:52:f8:8e:4c:d3:87:3b:7f:73:2d:35:f1:07:b4:19:d3: db:f3:28:a6:b6:6d:39:bd:1c:f7:ba:7a:30:e8:8d:b7:28:bd: 97:9d:ab:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIbs3XnsHdeZZZzdFaa/GD6PFmHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3Nzc4QTc4NkFBMUU2ODU0NjczQjBBNkFBQUE0MEI4 NTI1NEU5NDAeFw0yNjA5MjYwOTQ2NTZaFw0yNjA5MjcxMjA0NTZaMDMxMTAvBgNV BAMTKDQ4NTQyREM3NDNEOTMyMURBNzlGMzI3RkQ4OUE0MjBERkUxOTYxQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Va0uXb8intf+qLsnvkhB2N75 c53P8SSZJYqsLq1SUuJgICMg8RrjGEqH4nePp1chvgPFFV7/plMeKg+ZwwDCNPJt QKAWIns9wfIkzqCcwe6RFrwm6SHw55gpqX21duUh9yf8DgXUDud5ds8hw4InuGJt nLumyyn12XxKeeU8SdMbvcYGud3JEyTaCvyEct1XCaYFIYoTlwNS5qbz2rN6XHoX 4LKwzgksLMky7pI0OckuOEAMtNXH3DMGAtDQMgYgA2oo+zzLuWCqmBhSn7+FHV24 n3r+OuutpZCEqSBq6jaql2QtqTxpA4DYctRqidrUVmoTitKSkBf+jbOjeeXHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSFQtx0PZMh2nnzJ/2JpCDf4ZYcowHwYDVR0j BBgwFoAUNXd4p4aqHmhUZzsKaqqkC4UlTpQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2E3MGQ0NGUtMGY3MC00NWEzLWFmMDQtODFmNDI5ZGIzYTVkLzAvMzU3Nzc4QTc4 NkFBMUU2ODU0NjczQjBBNkFBQUE0MEI4NTI1NEU5NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNTc3NzhBNzg2QUExRTY4NTQ2NzNCMEE2QUFBQTQwQjg1MjU0 RTk0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2E3MGQ0NGUtMGY3MC00NWEzLWFm MDQtODFmNDI5ZGIzYTVkLzAvMzU3Nzc4QTc4NkFBMUU2ODU0NjczQjBBNkFBQUE0 MEI4NTI1NEU5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlthSiyr6HjFi52i2dYHGOpFjc3OF4rEDH1 qR9saDcWwU76ucaQW/27LqEqTkBXzU+Xwpf6zEf8MEuMn4lG/nlDASN/F4aNcdOh deaa1K5nnBsvUpws0925KeP3j3xG1B+HbeZ/IhtAryQPmOW8Wt+K/3bHO3YbC7Ob 9JyxSisxVM1QX7E2YUuvYeU30jrsLENiR6+23evhjFMufzrrghOXU1dy7WaNzOMK kh9b5qoiT69Vd5sksRCqWcO1MlOZJ/x8gJkZM1106/lj4kHEMayT6N3uZ7ickC2G UviOTNOHO39zLTXxB7QZ09vzKKa2bTm9HPe6ejDojbcovZedq4A= -----END CERTIFICATE-----Generated at Sat Sep 26 18:49:00 2026 by rpki-client