$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft File: D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft (raw, json) Hash identifier: tQLzlpjHqk9Xks10iZM/PM7jJJhmyjHWLWrfgwmBec4= Subject key identifier: 11:00:00:79:3D:7A:30:C6:9A:D7:17:10:79:7B:2F:E6:39:D3:DE:22 Authority key identifier: D3:7E:9E:B2:F9:8E:29:CD:F1:38:65:33:26:66:AE:FB:23:18:4F:EB Certificate issuer: /CN=D37E9EB2F98E29CDF13865332666AEFB23184FEB Certificate serial: 153E8C6880EC23CF6457A6C0896B3F8ECD48BDD2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 21:07:11 +0000 Manifest this update: Wed 23 Sep 2026 21:02:11 +0000 Manifest next update: Thu 24 Sep 2026 23:57:11 +0000 Files and hashes: 1: D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl (hash: qvTDvKElo/OEV2vTz36LCxwKcioiKV/osR70IVcInUo=) 2: 3136302e31392e3134352e302f32342d3234203d3e203435333035.roa (hash: byftjSeCvMFNmeFpkuYeG9YZa2VCV2p6nFeWhRr4XHM=) 3: 3136302e31392e3134342e302f32342d3234203d3e20313532373838.roa (hash: /Ank/NdhTyFolT1yr2gOxvp0mx0tj8KaBVOQP4gcAxk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:3e:8c:68:80:ec:23:cf:64:57:a6:c0:89:6b:3f:8e:cd:48:bd:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D37E9EB2F98E29CDF13865332666AEFB23184FEB Validity Not Before: Sep 23 21:02:11 2026 GMT Not After : Sep 24 23:57:11 2026 GMT Subject: CN=110000793D7A30C69AD71710797B2FE639D3DE22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d2:da:8c:78:fd:9f:55:04:61:b8:a6:26:6b: 68:81:79:db:1d:bb:97:4a:6b:fd:16:68:0f:5f:67: e6:60:d5:61:ec:ac:cf:60:e2:3b:2d:ee:91:64:be: 07:2d:30:20:7f:de:62:64:e2:d4:3b:78:62:cb:dd: d4:c7:de:f0:72:2a:66:97:ba:ed:4d:de:bd:5f:3f: 21:10:82:6a:4f:e7:9a:00:e1:a9:e3:14:4a:9d:fc: 1e:44:f6:02:8c:07:d2:16:52:43:74:a4:9b:c1:16: 7e:df:f6:8f:92:6a:b3:cd:b8:b3:d1:15:61:df:53: 40:cf:f8:ce:b4:36:6b:a5:5a:3b:e7:ba:15:09:50: f4:a8:54:29:bd:ed:de:64:00:1e:2f:e3:01:27:1a: 65:8b:6b:0b:af:ac:b4:c2:6a:92:b7:04:99:e2:14: 79:a5:18:ec:6d:0b:c6:db:a8:6c:5b:aa:0f:82:c0: 93:6a:ac:5e:44:27:a7:60:48:01:3c:7a:8f:de:a0: 74:f9:7a:62:7d:6a:c1:b9:c2:67:a4:7d:3b:3e:84: 52:ed:2c:28:41:40:02:3c:7e:17:0c:8d:cd:1f:22: b4:97:1a:23:32:23:8b:ef:55:7b:ba:27:4b:50:3e: 85:62:b1:c5:24:d9:03:96:f8:45:ed:62:9f:98:0a: d1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:00:00:79:3D:7A:30:C6:9A:D7:17:10:79:7B:2F:E6:39:D3:DE:22 X509v3 Authority Key Identifier: keyid:D3:7E:9E:B2:F9:8E:29:CD:F1:38:65:33:26:66:AE:FB:23:18:4F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:e2:90:6d:c4:14:92:6d:b5:7e:2d:8e:40:54:20:85:2a:d7: ea:72:7e:76:5f:23:90:b3:31:7b:81:fe:79:8a:0b:97:f5:33: 95:b3:69:7a:96:52:d2:d5:d2:55:a9:2c:f2:53:07:68:5c:4b: f6:f7:e6:ae:e3:1d:35:78:1f:ee:56:80:03:be:82:5c:b2:13: 6a:b3:12:9d:b6:0c:94:d7:7f:b6:75:b9:c8:b3:13:c9:e7:48: ae:3e:b5:28:2d:78:70:38:0d:f1:b8:86:9d:74:fd:6e:65:f8: a4:82:bc:7c:b4:c8:07:99:be:e9:59:e9:09:49:d4:03:6a:ee: 02:49:5c:c0:27:b4:a6:69:e8:37:00:7c:c6:09:5e:df:85:e3: ad:74:c4:e1:45:ab:7d:dc:12:20:d5:62:82:0c:54:ac:58:6a: 0a:38:47:40:16:9c:23:66:10:fa:81:ce:24:3d:d4:ce:c5:04: 4d:59:2f:bc:70:93:35:2b:2e:6e:56:7d:e7:a7:b4:4b:1a:83: 24:d3:87:0c:46:00:b3:b6:dd:07:25:18:41:8e:06:f0:64:5a: 62:71:7f:49:11:09:ca:de:d3:37:32:4f:74:da:d7:80:9f:b8: bf:fb:dc:1a:12:de:f1:d7:a2:1e:61:8e:9e:6d:c1:b7:90:b7: 14:2f:74:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFT6MaIDsI89kV6bAiWs/js1IvdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM3RTlFQjJGOThFMjlDREYxMzg2NTMzMjY2NkFFRkIy MzE4NEZFQjAeFw0yNjA5MjMyMTAyMTFaFw0yNjA5MjQyMzU3MTFaMDMxMTAvBgNV BAMTKDExMDAwMDc5M0Q3QTMwQzY5QUQ3MTcxMDc5N0IyRkU2MzlEM0RFMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo0tqMeP2fVQRhuKYma2iBedsd u5dKa/0WaA9fZ+Zg1WHsrM9g4jst7pFkvgctMCB/3mJk4tQ7eGLL3dTH3vByKmaX uu1N3r1fPyEQgmpP55oA4anjFEqd/B5E9gKMB9IWUkN0pJvBFn7f9o+SarPNuLPR FWHfU0DP+M60NmulWjvnuhUJUPSoVCm97d5kAB4v4wEnGmWLawuvrLTCapK3BJni FHmlGOxtC8bbqGxbqg+CwJNqrF5EJ6dgSAE8eo/eoHT5emJ9asG5wmekfTs+hFLt LChBQAI8fhcMjc0fIrSXGiMyI4vvVXu6J0tQPoViscUk2QOW+EXtYp+YCtH/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEQAAeT16MMaa1xcQeXsv5jnT3iIwHwYDVR0j BBgwFoAU036esvmOKc3xOGUzJmau+yMYT+swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTJlNWZmODEtYjA4Mi00MzM0LWFkMjktNTVkYzhkMWU1M2I5LzAvRDM3RTlFQjJG OThFMjlDREYxMzg2NTMzMjY2NkFFRkIyMzE4NEZFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EMzdFOUVCMkY5OEUyOUNERjEzODY1MzMyNjY2QUVGQjIzMTg0 RkVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk MjktNTVkYzhkMWU1M2I5LzAvRDM3RTlFQjJGOThFMjlDREYxMzg2NTMzMjY2NkFF RkIyMzE4NEZFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETikG3EFJJttX4tjkBUIIUq1+pyfnZfI5Cz MXuB/nmKC5f1M5WzaXqWUtLV0lWpLPJTB2hcS/b35q7jHTV4H+5WgAO+glyyE2qz Ep22DJTXf7Z1ucizE8nnSK4+tSgteHA4DfG4hp10/W5l+KSCvHy0yAeZvulZ6QlJ 1ANq7gJJXMAntKZp6DcAfMYJXt+F4610xOFFq33cEiDVYoIMVKxYago4R0AWnCNm EPqBziQ91M7FBE1ZL7xwkzUrLm5WfeentEsagyTThwxGALO23QclGEGOBvBkWmJx f0kRCcre0zcyT3Ta14CfuL/73BoS3vHXoh5hjp5twbeQtxQvdFg= -----END CERTIFICATE-----Generated at Thu Sep 24 02:37:13 2026 by rpki-client