$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft File: 07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft (raw, json) Hash identifier: d7VgsGmYrBBqnweo77W/z4/mgdrPHZ7dc6dIzpUAZao= Subject key identifier: 9B:AA:A3:FB:44:E1:35:F8:E0:52:34:43:74:89:5C:BC:74:FC:AD:DD Authority key identifier: 07:AF:34:F2:44:C0:13:D3:93:BA:ED:01:50:A6:52:F2:BF:9F:1A:5D Certificate issuer: /CN=07AF34F244C013D393BAED0150A652F2BF9F1A5D Certificate serial: 5B536ED96E1E617E3A3E5E81ACA436D3C20A1807 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 00:16:00 +0000 Manifest this update: Thu 24 Sep 2026 00:11:00 +0000 Manifest next update: Fri 25 Sep 2026 01:38:00 +0000 Files and hashes: 1: 3130332e3137332e3134302e302f32342d3234203d3e203538343835.roa (hash: rVSTBgAcxMjiphBfXsUD1/ITkO/ZRhpcgBHWKyAe9do=) 2: 3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa (hash: ZInQWIdIz9yreiElsNwlmLmVmB2tNTPmR2V0a4fG3f8=) 3: 07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl (hash: G9THjMumadXPjlrX9juQzBr5nGVDHNNVOYg8Sw48iJ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 01:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:53:6e:d9:6e:1e:61:7e:3a:3e:5e:81:ac:a4:36:d3:c2:0a:18:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07AF34F244C013D393BAED0150A652F2BF9F1A5D Validity Not Before: Sep 24 00:11:00 2026 GMT Not After : Sep 25 01:38:00 2026 GMT Subject: CN=9BAAA3FB44E135F8E052344374895CBC74FCADDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a0:6e:ec:82:cd:a0:18:51:97:76:1a:30:d2: 21:ff:43:4b:58:19:32:cc:ad:e1:ca:87:b4:bb:19: ff:ae:8d:6a:39:3b:bf:25:14:9f:4d:b5:ce:1c:3d: 1e:39:00:73:83:98:eb:5c:f9:e1:5a:4b:08:93:0c: 70:7c:ab:8a:3a:65:c4:d5:10:3a:21:cf:8d:da:14: 0a:26:26:98:e2:91:cc:5c:02:02:81:1d:05:91:e2: f9:0c:e7:0c:9d:e4:95:7e:eb:02:3a:d7:72:64:e5: 5a:4f:71:ab:dd:22:cb:e9:1c:3a:c3:4c:e4:67:c5: 0a:c0:8d:4a:1f:e3:56:b9:ce:e4:b8:d3:81:2b:ba: 9d:c8:b0:ec:65:06:f7:00:fd:ab:c5:5f:a5:c9:4c: f7:11:5b:7a:5a:e2:74:ad:f0:36:0e:ad:98:26:e5: cd:e0:7c:21:a8:9a:db:1d:1c:20:1e:f2:5e:20:e4: a8:ba:9f:3d:c4:6c:7b:ac:3e:db:8e:9f:06:2e:70: 1b:24:14:ce:71:bc:9b:fe:b2:63:7d:fe:80:b7:f4: 67:9b:45:ba:8e:2e:29:0c:13:8a:44:04:4d:e9:ee: 6b:74:96:7d:f5:f7:05:36:6d:fe:a2:9e:6a:2e:d5: 3a:3a:2d:a8:0f:25:04:ca:33:3e:da:0b:33:3a:4a: 15:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AA:A3:FB:44:E1:35:F8:E0:52:34:43:74:89:5C:BC:74:FC:AD:DD X509v3 Authority Key Identifier: keyid:07:AF:34:F2:44:C0:13:D3:93:BA:ED:01:50:A6:52:F2:BF:9F:1A:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:11:b8:15:f1:7e:05:0a:da:9c:39:5c:62:6e:db:98:5b:17: 72:35:31:bc:76:d0:c0:af:67:55:77:5a:cd:f1:c0:f1:89:f7: cb:84:bf:1d:ac:6e:3d:2f:23:03:bb:ba:33:8a:82:20:3b:b3: 02:9d:a7:37:42:97:58:be:7b:4d:c1:33:a8:d0:e1:72:f3:f0: 24:be:1c:a5:36:85:91:3e:d4:c6:7d:77:40:1d:5c:5c:e6:a2: 91:3a:86:d5:1e:b1:e3:3d:d1:35:94:62:4f:10:05:d8:5b:4f: 4d:0b:48:0c:68:fe:fc:b5:6c:d6:04:9c:0a:e9:de:53:39:be: a9:6a:b5:e6:83:ee:8c:23:75:72:2c:1f:f5:5d:3c:6e:8b:41: eb:9a:63:82:0c:0f:1f:46:d7:17:14:4d:ce:ca:80:33:e1:8d: 35:5f:67:2c:28:97:a7:02:88:88:dd:74:eb:0e:6b:03:bb:67: 40:dd:ad:a6:ee:df:cf:40:ce:b9:b1:c7:b1:e6:db:77:1a:4f: 4f:42:e6:e2:ab:e9:5c:bd:ae:17:df:0d:97:df:a7:56:77:0c: 3d:06:87:64:4a:e4:3d:98:36:c4:f4:77:7e:6d:ee:30:aa:59: 28:f3:39:d6:66:d4:1f:3e:64:6c:ab:a9:f8:51:30:22:13:27: ae:8a:93:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW1Nu2W4eYX46Pl6BrKQ208IKGAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDdBRjM0RjI0NEMwMTNEMzkzQkFFRDAxNTBBNjUyRjJC RjlGMUE1RDAeFw0yNjA5MjQwMDExMDBaFw0yNjA5MjUwMTM4MDBaMDMxMTAvBgNV BAMTKDlCQUFBM0ZCNDRFMTM1RjhFMDUyMzQ0Mzc0ODk1Q0JDNzRGQ0FEREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChoG7sgs2gGFGXdhow0iH/Q0tY GTLMreHKh7S7Gf+ujWo5O78lFJ9Ntc4cPR45AHODmOtc+eFaSwiTDHB8q4o6ZcTV EDohz43aFAomJpjikcxcAgKBHQWR4vkM5wyd5JV+6wI613Jk5VpPcavdIsvpHDrD TORnxQrAjUof41a5zuS404Erup3IsOxlBvcA/avFX6XJTPcRW3pa4nSt8DYOrZgm 5c3gfCGomtsdHCAe8l4g5Ki6nz3EbHusPtuOnwYucBskFM5xvJv+smN9/oC39Geb RbqOLikME4pEBE3p7mt0ln319wU2bf6inmou1To6LagPJQTKMz7aCzM6ShWTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm6qj+0ThNfjgUjRDdIlcvHT8rd0wHwYDVR0j BBgwFoAUB6808kTAE9OTuu0BUKZS8r+fGl0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFhYmI1NzgtYjlkYi00YTQ3LThkN2UtMTFhNjM0Mjg5MDE4LzAvMDdBRjM0RjI0 NEMwMTNEMzkzQkFFRDAxNTBBNjUyRjJCRjlGMUE1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wN0FGMzRGMjQ0QzAxM0QzOTNCQUVEMDE1MEE2NTJGMkJGOUYx QTVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFhYmI1NzgtYjlkYi00YTQ3LThk N2UtMTFhNjM0Mjg5MDE4LzAvMDdBRjM0RjI0NEMwMTNEMzkzQkFFRDAxNTBBNjUy RjJCRjlGMUE1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIRuBXxfgUK2pw5XGJu25hbF3I1Mbx20MCv Z1V3Ws3xwPGJ98uEvx2sbj0vIwO7ujOKgiA7swKdpzdCl1i+e03BM6jQ4XLz8CS+ HKU2hZE+1MZ9d0AdXFzmopE6htUeseM90TWUYk8QBdhbT00LSAxo/vy1bNYEnArp 3lM5vqlqteaD7owjdXIsH/VdPG6LQeuaY4IMDx9G1xcUTc7KgDPhjTVfZywol6cC iIjddOsOawO7Z0Ddrabu389Azrmxx7Hm23caT09C5uKr6Vy9rhffDZffp1Z3DD0G h2RK5D2YNsT0d35t7jCqWSjzOdZm1B8+ZGyrqfhRMCITJ66KkxQ= -----END CERTIFICATE-----Generated at Thu Sep 24 10:03:51 2026 by rpki-client