$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft File: 634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft (raw, json) Hash identifier: Si+XuhJyuHpfJlUV/psl2G9giNz+IjqjYNYy9cXaAl0= Subject key identifier: FB:2E:0F:B9:CB:F9:25:8E:9E:BE:30:AE:27:65:68:D4:BF:88:34:D3 Authority key identifier: 63:4D:9D:7B:F8:EF:AA:5C:06:E1:B2:5D:1F:4A:73:93:EA:E2:9C:38 Certificate issuer: /CN=634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38 Certificate serial: 38019B7807948014C9237956FA827E17E37AD18B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 19:29:43 +0000 Manifest this update: Thu 24 Sep 2026 19:24:43 +0000 Manifest next update: Fri 25 Sep 2026 22:04:43 +0000 Files and hashes: 1: 3130332e3133332e33362e302f32342d3234203d3e20313338313333.roa (hash: K/r8+XOLbe3N3PaK9Jky/67CaUJEmno5lG+o29nHH2c=) 2: 634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.crl (hash: pEvNH29ikkpdTybBtbMAeY3sx9uSqkQ4+HL3ksQkoz4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.crl rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:01:9b:78:07:94:80:14:c9:23:79:56:fa:82:7e:17:e3:7a:d1:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38 Validity Not Before: Sep 24 19:24:43 2026 GMT Not After : Sep 25 22:04:43 2026 GMT Subject: CN=FB2E0FB9CBF9258E9EBE30AE276568D4BF8834D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ed:58:13:7a:c8:b8:80:67:ad:55:3c:f7:fe: 9a:e9:86:fd:cd:88:da:07:46:73:10:30:57:c1:26: da:1e:79:6d:c5:4f:8f:45:74:6b:35:c1:d2:8a:49: 4b:cf:60:e8:e1:5b:2b:eb:6e:ac:5c:44:16:d4:f1: 04:cf:95:29:15:60:7c:a2:61:7a:48:27:dc:67:5d: d6:ef:31:85:ac:d1:2c:3b:8f:a6:14:43:0d:ca:40: fb:e1:c8:35:0b:54:33:1b:cc:6a:ad:30:cb:62:03: 7c:cf:bb:c1:8f:11:a7:7c:4b:49:8a:9a:64:7d:f6: 81:86:21:58:ad:c2:c9:c5:2e:5f:8c:75:99:8f:51: 33:a9:dd:dc:28:6e:c8:44:75:66:40:a6:a0:7f:d1: 3e:91:93:55:6e:23:61:57:5e:e4:df:00:0c:ed:8f: 89:d3:7c:57:71:8d:3a:3d:e3:a5:8a:b9:85:eb:11: 6f:9a:ab:e5:58:ae:79:30:30:9f:39:47:f3:5a:09: c5:0f:45:c5:44:ea:51:cd:77:8b:7f:10:bf:3f:38: 40:dd:da:9c:6f:62:96:e3:9e:90:32:d6:8f:c1:86: 31:e4:af:68:96:b6:8d:b9:75:4c:62:68:ed:5f:16: b5:e4:20:12:bd:77:27:b6:15:61:4a:10:c3:ce:bf: 1d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2E:0F:B9:CB:F9:25:8E:9E:BE:30:AE:27:65:68:D4:BF:88:34:D3 X509v3 Authority Key Identifier: keyid:63:4D:9D:7B:F8:EF:AA:5C:06:E1:B2:5D:1F:4A:73:93:EA:E2:9C:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:39:4c:47:16:c0:41:d2:2f:63:e3:17:ca:57:7b:c5:7d:21: 39:6e:cb:9a:26:22:32:f5:82:d5:f7:53:43:31:9f:62:19:43: 96:d4:7c:62:77:19:0c:aa:8d:8b:c9:d7:d3:20:dc:7c:cc:ca: dd:e0:38:72:e5:cb:cf:9a:87:fc:c2:00:4f:c5:46:37:45:65: 05:83:a8:4d:66:82:ca:28:4d:d2:dd:f9:b5:2e:1a:d8:3b:56: 81:21:3e:42:95:f5:c7:2c:6d:f1:b9:72:07:c8:0e:79:de:de: c2:8e:5b:27:2f:a6:d3:55:ce:7e:0b:68:6e:8f:98:42:d2:a2: ce:56:4a:e6:7d:63:01:ca:cc:ce:51:57:a2:ca:69:82:b1:fe: 0b:ec:6e:c1:62:df:25:1b:3e:f7:ed:e3:39:22:49:f1:b9:54: 1e:ff:f8:ae:cb:b7:03:92:b5:bf:e9:8e:58:f2:05:f4:cc:6b: 86:be:de:5d:fc:54:da:4e:f9:17:0b:e5:7e:cf:c0:1c:6c:41: 26:ef:d5:97:ff:96:82:b5:27:3a:76:a6:36:33:32:07:9e:aa: bf:ba:d4:29:22:e9:aa:c5:70:63:b7:34:54:c8:10:56:ec:41: 97:5f:3c:db:2c:0a:4f:4e:2f:ac:f3:45:eb:b5:5b:bb:f7:ec: c8:ab:f7:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOAGbeAeUgBTJI3lW+oJ+F+N60YswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM0RDlEN0JGOEVGQUE1QzA2RTFCMjVEMUY0QTczOTNF QUUyOUMzODAeFw0yNjA5MjQxOTI0NDNaFw0yNjA5MjUyMjA0NDNaMDMxMTAvBgNV BAMTKEZCMkUwRkI5Q0JGOTI1OEU5RUJFMzBBRTI3NjU2OEQ0QkY4ODM0RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC97VgTesi4gGetVTz3/prphv3N iNoHRnMQMFfBJtoeeW3FT49FdGs1wdKKSUvPYOjhWyvrbqxcRBbU8QTPlSkVYHyi YXpIJ9xnXdbvMYWs0Sw7j6YUQw3KQPvhyDULVDMbzGqtMMtiA3zPu8GPEad8S0mK mmR99oGGIVitwsnFLl+MdZmPUTOp3dwobshEdWZApqB/0T6Rk1VuI2FXXuTfAAzt j4nTfFdxjTo946WKuYXrEW+aq+VYrnkwMJ85R/NaCcUPRcVE6lHNd4t/EL8/OEDd 2pxvYpbjnpAy1o/BhjHkr2iWto25dUxiaO1fFrXkIBK9dye2FWFKEMPOvx2NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+y4Pucv5JY6evjCuJ2Vo1L+INNMwHwYDVR0j BBgwFoAUY02de/jvqlwG4bJdH0pzk+rinDgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGY2YmYzN2MtZDhhZC00ZTAzLWEwNmEtNDQwODE1N2NmNTdlLzAvNjM0RDlEN0JG OEVGQUE1QzA2RTFCMjVEMUY0QTczOTNFQUUyOUMzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzREOUQ3QkY4RUZBQTVDMDZFMUIyNUQxRjRBNzM5M0VBRTI5 QzM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGY2YmYzN2MtZDhhZC00ZTAzLWEw NmEtNDQwODE1N2NmNTdlLzAvNjM0RDlEN0JGOEVGQUE1QzA2RTFCMjVEMUY0QTcz OTNFQUUyOUMzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEA5TEcWwEHSL2PjF8pXe8V9ITluy5omIjL1 gtX3U0Mxn2IZQ5bUfGJ3GQyqjYvJ19Mg3HzMyt3gOHLly8+ah/zCAE/FRjdFZQWD qE1mgsooTdLd+bUuGtg7VoEhPkKV9ccsbfG5cgfIDnne3sKOWycvptNVzn4LaG6P mELSos5WSuZ9YwHKzM5RV6LKaYKx/gvsbsFi3yUbPvft4zkiSfG5VB7/+K7LtwOS tb/pjljyBfTMa4a+3l38VNpO+RcL5X7PwBxsQSbv1Zf/loK1Jzp2pjYzMgeeqr+6 1Cki6arFcGO3NFTIEFbsQZdfPNssCk9OL6zzReu1W7v37Mir9xs= -----END CERTIFICATE-----Generated at Thu Sep 24 23:40:02 2026 by rpki-client