$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.mft File: 637A957BABD264BD486DB1ED9AD344531E09DAA9.mft (raw, json) Hash identifier: MZ3xFNAvfSoV6dcsQuGD7Mr99oeP+g/WV0tPVyFi3Vc= Subject key identifier: 90:C1:71:4A:4A:75:46:99:70:34:3D:E5:A9:17:60:1C:73:1B:62:CD Authority key identifier: 63:7A:95:7B:AB:D2:64:BD:48:6D:B1:ED:9A:D3:44:53:1E:09:DA:A9 Certificate issuer: /CN=637A957BABD264BD486DB1ED9AD344531E09DAA9 Certificate serial: 28002CC9A20A6E70F53758F3D2AD1A46F0ECB9C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/637A957BABD264BD486DB1ED9AD344531E09DAA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 13:22:23 +0000 Manifest this update: Thu 24 Sep 2026 13:17:23 +0000 Manifest next update: Fri 25 Sep 2026 15:09:23 +0000 Files and hashes: 1: 3130332e3136302e3133382e302f32332d3234203d3e203338333230.roa (hash: pBvBGLopvQdoZtJVsgZWZ9wA+Pu9rrcY8EO/1TZFlpo=) 2: 637A957BABD264BD486DB1ED9AD344531E09DAA9.crl (hash: R+sL/F9fIsi2XVUDtSK+q4bzXnsvgQ1BsqAlcBYluKE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.crl rsync://rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/637A957BABD264BD486DB1ED9AD344531E09DAA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 15:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:00:2c:c9:a2:0a:6e:70:f5:37:58:f3:d2:ad:1a:46:f0:ec:b9:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637A957BABD264BD486DB1ED9AD344531E09DAA9 Validity Not Before: Sep 24 13:17:23 2026 GMT Not After : Sep 25 15:09:23 2026 GMT Subject: CN=90C1714A4A75469970343DE5A917601C731B62CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:31:f3:95:5d:03:64:79:59:97:01:e6:c4:20: 9e:9a:d8:61:bd:3b:10:30:ec:5a:a3:69:29:39:97: 11:d0:dd:40:67:54:9f:98:a0:5f:c1:c7:f9:f3:dd: f2:78:8d:4a:af:c9:25:f7:77:20:83:dc:48:9e:17: c7:dd:cc:5c:4a:c2:2c:5f:3d:b0:45:89:8d:28:58: 3b:0e:1c:ef:14:e1:83:a6:51:d7:54:e5:69:a1:e5: 7f:93:c3:b1:63:e9:81:e6:2d:fb:0f:ff:7c:dd:b1: 8a:7e:2c:3b:a8:8c:cf:c4:5d:a4:96:79:e0:81:6b: 0c:ca:bf:c9:d9:b8:e5:4f:6e:a7:96:ee:9f:7c:3c: 6c:16:ab:3e:8d:34:e6:96:a2:68:ef:2a:7a:80:bb: a7:b0:7f:b7:d3:2c:eb:4b:69:9d:e4:cd:51:e2:44: f7:31:c9:82:aa:c4:d1:c6:8a:ee:aa:e9:2e:cf:8d: 82:0b:89:8c:79:25:59:64:18:88:dc:3e:df:3c:72: 98:21:0e:5a:d7:d9:04:12:b3:ce:bc:8e:bf:52:96: 6a:99:10:5a:b6:56:0d:39:2d:45:46:df:80:f8:3e: 2a:a1:6b:eb:1e:32:d8:e7:20:ae:36:14:6c:c5:62: 65:31:ae:2f:e1:81:6a:b0:2a:3b:aa:81:ed:c1:e6: b9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C1:71:4A:4A:75:46:99:70:34:3D:E5:A9:17:60:1C:73:1B:62:CD X509v3 Authority Key Identifier: keyid:63:7A:95:7B:AB:D2:64:BD:48:6D:B1:ED:9A:D3:44:53:1E:09:DA:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/637A957BABD264BD486DB1ED9AD344531E09DAA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:44:a6:fa:67:7d:69:32:3a:b6:e0:00:55:9f:8f:b9:26:99: 77:11:a7:f4:a8:35:8b:10:8c:38:18:a7:f8:40:e8:a9:b1:02: e9:cc:66:d8:1b:15:e0:ee:3f:51:33:2e:12:49:8f:0e:90:b5: 25:ba:b2:51:41:5f:70:f3:3a:b4:04:7b:ab:2f:c4:0f:3b:ce: ac:c0:01:3a:84:5f:a0:68:86:4c:95:c9:38:71:54:40:d8:2f: 50:d9:1f:2f:f8:51:0e:12:6e:22:72:45:36:6b:77:8f:52:de: 49:6a:26:74:f1:d5:fb:df:84:d3:8c:fa:3d:4a:21:b3:4a:c5: 0f:36:dd:95:08:3c:f0:5d:d6:a6:8e:d7:9b:18:10:9b:8a:b2: 49:c9:89:1c:7e:62:5b:42:37:eb:fa:28:36:f2:65:65:d7:6b: fe:b1:9c:71:a2:bf:d3:51:00:d2:6d:9a:81:b5:56:2f:90:eb: 73:7d:a8:8f:e8:36:d0:b0:3c:54:21:63:ce:be:92:39:94:3c: 39:aa:71:ba:45:2d:a3:76:b1:0e:f6:4c:67:70:6e:67:4d:fe: ab:d3:9d:3f:43:79:04:fc:d3:23:1f:f7:0e:7b:62:39:2d:44: 20:6f:73:67:10:b5:58:54:f4:ae:53:ca:b3:39:4a:42:1c:47: a5:15:bd:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKAAsyaIKbnD1N1jz0q0aRvDsucUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM3QTk1N0JBQkQyNjRCRDQ4NkRCMUVEOUFEMzQ0NTMx RTA5REFBOTAeFw0yNjA5MjQxMzE3MjNaFw0yNjA5MjUxNTA5MjNaMDMxMTAvBgNV BAMTKDkwQzE3MTRBNEE3NTQ2OTk3MDM0M0RFNUE5MTc2MDFDNzMxQjYyQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzMfOVXQNkeVmXAebEIJ6a2GG9 OxAw7FqjaSk5lxHQ3UBnVJ+YoF/Bx/nz3fJ4jUqvySX3dyCD3EieF8fdzFxKwixf PbBFiY0oWDsOHO8U4YOmUddU5Wmh5X+Tw7Fj6YHmLfsP/3zdsYp+LDuojM/EXaSW eeCBawzKv8nZuOVPbqeW7p98PGwWqz6NNOaWomjvKnqAu6ewf7fTLOtLaZ3kzVHi RPcxyYKqxNHGiu6q6S7PjYILiYx5JVlkGIjcPt88cpghDlrX2QQSs868jr9SlmqZ EFq2Vg05LUVG34D4Piqha+seMtjnIK42FGzFYmUxri/hgWqwKjuqge3B5rlfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkMFxSkp1RplwND3lqRdgHHMbYs0wHwYDVR0j BBgwFoAUY3qVe6vSZL1IbbHtmtNEUx4J2qkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmZkYjE4ZWYtNjU5Zi00YjFlLWEyZTAtYjU4YWY2YjEyNzFmLzAvNjM3QTk1N0JB QkQyNjRCRDQ4NkRCMUVEOUFEMzQ0NTMxRTA5REFBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzdBOTU3QkFCRDI2NEJENDg2REIxRUQ5QUQzNDQ1MzFFMDlE QUE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmZkYjE4ZWYtNjU5Zi00YjFlLWEy ZTAtYjU4YWY2YjEyNzFmLzAvNjM3QTk1N0JBQkQyNjRCRDQ4NkRCMUVEOUFEMzQ0 NTMxRTA5REFBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdEpvpnfWkyOrbgAFWfj7kmmXcRp/SoNYsQ jDgYp/hA6KmxAunMZtgbFeDuP1EzLhJJjw6QtSW6slFBX3DzOrQEe6svxA87zqzA ATqEX6BohkyVyThxVEDYL1DZHy/4UQ4SbiJyRTZrd49S3klqJnTx1fvfhNOM+j1K IbNKxQ823ZUIPPBd1qaO15sYEJuKsknJiRx+YltCN+v6KDbyZWXXa/6xnHGiv9NR ANJtmoG1Vi+Q63N9qI/oNtCwPFQhY86+kjmUPDmqcbpFLaN2sQ72TGdwbmdN/qvT nT9DeQT80yMf9w57YjktRCBvc2cQtVhU9K5TyrM5SkIcR6UVvT4= -----END CERTIFICATE-----Generated at Fri Sep 25 04:51:40 2026 by rpki-client