$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.mft File: C771ADE0100457DC61EB95A71BB4E63885DC542F.mft (raw, json) Hash identifier: LWaK+GiOb/daAUZdNIEz5pvdhLxNtRghDR1gIe4hXck= Subject key identifier: 65:6F:EA:8A:D2:AC:E7:CA:8E:C5:8D:B1:16:3D:B5:C3:F1:0E:49:8F Authority key identifier: C7:71:AD:E0:10:04:57:DC:61:EB:95:A7:1B:B4:E6:38:85:DC:54:2F Certificate issuer: /CN=C771ADE0100457DC61EB95A71BB4E63885DC542F Certificate serial: 2DB8A25850419AAB090C9123C80CDCB07206C09E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C771ADE0100457DC61EB95A71BB4E63885DC542F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 20:21:08 +0000 Manifest this update: Wed 23 Sep 2026 20:16:08 +0000 Manifest next update: Thu 24 Sep 2026 22:19:08 +0000 Files and hashes: 1: 3130332e3135312e37322e302f32332d3234203d3e20313430343039.roa (hash: cnrnucshQjB1HR7ilM8foFskZiCRkLLcdgQGq/I0/j4=) 2: C771ADE0100457DC61EB95A71BB4E63885DC542F.crl (hash: evvSrKjGxCjiNwabRn4pUI9EpTAkbDvVccEWsr/bYLw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.crl rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C771ADE0100457DC61EB95A71BB4E63885DC542F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b8:a2:58:50:41:9a:ab:09:0c:91:23:c8:0c:dc:b0:72:06:c0:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C771ADE0100457DC61EB95A71BB4E63885DC542F Validity Not Before: Sep 23 20:16:08 2026 GMT Not After : Sep 24 22:19:08 2026 GMT Subject: CN=656FEA8AD2ACE7CA8EC58DB1163DB5C3F10E498F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:af:b1:bc:fa:3b:1b:0d:4b:71:2c:7b:7b:07: 47:29:0e:46:1f:01:68:33:e3:0f:5a:1f:85:a6:1d: 0f:7e:ab:a8:6f:e9:45:ce:47:dd:2e:1a:60:f7:2a: 61:20:d7:c6:99:65:78:43:ee:ed:10:be:0b:b0:7d: 51:58:4a:e8:23:0d:5c:2a:7a:a7:62:ab:8a:dd:7b: 0d:0d:5c:4a:fd:88:ec:d4:38:ab:e6:6c:ff:34:15: 2b:4a:03:42:15:2a:c6:c7:d2:da:29:83:97:90:41: 08:0b:a0:0e:ba:f0:a4:a9:e6:8c:05:b4:00:2e:30: a1:33:45:34:f1:66:27:89:79:b2:d4:b7:fd:01:45: c4:58:8c:ce:ea:30:e9:1e:10:1e:b6:00:c8:44:53: 45:57:e9:26:b9:e0:00:54:e9:83:25:3f:1e:1a:aa: eb:09:a0:cc:8b:87:c3:92:cc:fa:c8:06:6b:d8:00: 2e:d2:b5:f3:f1:86:8a:f8:33:a1:7e:8b:9e:52:18: 6c:83:a4:af:98:7e:d7:76:10:5f:c6:52:fd:0e:ea: b4:d1:14:8c:cf:34:14:88:d6:f2:d7:6d:7b:61:d1: 37:9a:fb:39:2b:0e:ba:6c:d7:34:8c:cc:89:48:b8: 0d:bb:30:12:c5:77:25:f9:ee:e8:5e:13:ab:4b:4d: ed:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6F:EA:8A:D2:AC:E7:CA:8E:C5:8D:B1:16:3D:B5:C3:F1:0E:49:8F X509v3 Authority Key Identifier: keyid:C7:71:AD:E0:10:04:57:DC:61:EB:95:A7:1B:B4:E6:38:85:DC:54:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C771ADE0100457DC61EB95A71BB4E63885DC542F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:0d:02:75:71:d4:79:67:f1:c4:3f:88:d2:a0:c1:1f:22:e1: ae:16:ec:50:bb:8d:09:81:be:b1:de:31:3a:9a:c6:e6:ad:1f: be:fb:20:46:ee:ee:69:dd:8c:6e:99:a5:8d:32:f3:d8:11:db: 49:cb:2d:4e:53:32:43:63:fb:e8:6e:17:32:7b:49:64:bf:0b: 13:50:1b:d5:62:9b:a5:e7:90:de:96:cf:f1:c9:c0:af:70:0e: c7:56:94:0f:41:fc:dd:a2:8a:3a:8b:34:b0:0c:1c:34:17:d2: f8:a0:1d:4b:72:f1:92:6a:ce:5f:6d:4f:06:4c:f1:6b:b5:4c: 24:23:da:87:b4:b5:74:0b:90:9a:81:15:1b:48:88:28:e3:f3: 53:35:a3:6d:c5:df:90:7f:22:14:26:45:cf:43:c3:f1:5d:95: df:25:e1:e3:65:e0:8a:ee:b2:69:fa:0d:af:20:29:fb:f0:67: 1c:c4:0a:b6:12:ef:a2:2f:41:04:bf:16:82:db:d1:1a:ad:f2: 35:ce:37:d5:a5:7f:0b:de:2f:3b:08:10:e4:3e:f5:25:7e:4b: 77:c1:87:e8:c9:a0:bd:74:9b:46:12:b3:39:5c:3a:ee:03:ea: 23:c8:8c:8d:10:ad:8b:7b:8e:db:bd:5b:3d:d8:66:00:e4:d3: 54:3d:f9:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULbiiWFBBmqsJDJEjyAzcsHIGwJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc3MUFERTAxMDA0NTdEQzYxRUI5NUE3MUJCNEU2Mzg4 NURDNTQyRjAeFw0yNjA5MjMyMDE2MDhaFw0yNjA5MjQyMjE5MDhaMDMxMTAvBgNV BAMTKDY1NkZFQThBRDJBQ0U3Q0E4RUM1OERCMTE2M0RCNUMzRjEwRTQ5OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAr7G8+jsbDUtxLHt7B0cpDkYf AWgz4w9aH4WmHQ9+q6hv6UXOR90uGmD3KmEg18aZZXhD7u0QvguwfVFYSugjDVwq eqdiq4rdew0NXEr9iOzUOKvmbP80FStKA0IVKsbH0topg5eQQQgLoA668KSp5owF tAAuMKEzRTTxZieJebLUt/0BRcRYjM7qMOkeEB62AMhEU0VX6Sa54ABU6YMlPx4a qusJoMyLh8OSzPrIBmvYAC7StfPxhor4M6F+i55SGGyDpK+Yftd2EF/GUv0O6rTR FIzPNBSI1vLXbXth0Tea+zkrDrps1zSMzIlIuA27MBLFdyX57uheE6tLTe03AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZW/qitKs58qOxY2xFj21w/EOSY8wHwYDVR0j BBgwFoAUx3Gt4BAEV9xh65WnG7TmOIXcVC8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWQ0Y2ZmZTAtMWY5NC00M2QyLTgxZWUtODAwMzBiNWMzNzQ2LzAvQzc3MUFERTAx MDA0NTdEQzYxRUI5NUE3MUJCNEU2Mzg4NURDNTQyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzcxQURFMDEwMDQ1N0RDNjFFQjk1QTcxQkI0RTYzODg1REM1 NDJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWQ0Y2ZmZTAtMWY5NC00M2QyLTgx ZWUtODAwMzBiNWMzNzQ2LzAvQzc3MUFERTAxMDA0NTdEQzYxRUI5NUE3MUJCNEU2 Mzg4NURDNTQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFYNAnVx1Hln8cQ/iNKgwR8i4a4W7FC7jQmB vrHeMTqaxuatH777IEbu7mndjG6ZpY0y89gR20nLLU5TMkNj++huFzJ7SWS/CxNQ G9Vim6XnkN6Wz/HJwK9wDsdWlA9B/N2iijqLNLAMHDQX0vigHUty8ZJqzl9tTwZM 8Wu1TCQj2oe0tXQLkJqBFRtIiCjj81M1o23F35B/IhQmRc9Dw/Fdld8l4eNl4Iru smn6Da8gKfvwZxzECrYS76IvQQS/FoLb0Rqt8jXON9WlfwveLzsIEOQ+9SV+S3fB h+jJoL10m0YSszlcOu4D6iPIjI0QrYt7jtu9Wz3YZgDk01Q9+Z4= -----END CERTIFICATE-----Generated at Thu Sep 24 06:10:12 2026 by rpki-client