$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft File: 7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft (raw, json) Hash identifier: l5Ym0G4pJfAZyVKAlyK1f1k2zyyGK4wXIIRE1DyRU9g= Subject key identifier: BA:D9:FB:FA:7D:E4:FB:5E:AC:17:E3:F0:07:7F:E9:F4:10:C5:CF:19 Authority key identifier: 7D:C6:77:32:0E:CD:4F:9F:A6:1F:D2:17:2F:A0:FF:BF:74:4F:6A:33 Certificate issuer: /CN=7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33 Certificate serial: 6BB603078753E110DA1D078A599AB0C2BBEC9191 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 21:02:06 +0000 Manifest this update: Wed 23 Sep 2026 20:57:06 +0000 Manifest next update: Thu 24 Sep 2026 21:55:06 +0000 Files and hashes: 1: 3130332e3138362e3139322e302f32342d3234203d3e20313439393238.roa (hash: baKMFekyN+9MNlrAI1yXYRuteIC69CJjTfZATjoU5so=) 2: 7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.crl (hash: zzxFm2ZMGacLVRe8MEBJxhWqVJjclrR+yDffKutLoP0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.crl rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:b6:03:07:87:53:e1:10:da:1d:07:8a:59:9a:b0:c2:bb:ec:91:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33 Validity Not Before: Sep 23 20:57:06 2026 GMT Not After : Sep 24 21:55:06 2026 GMT Subject: CN=BAD9FBFA7DE4FB5EAC17E3F0077FE9F410C5CF19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e2:0e:11:94:ea:01:00:77:b8:ed:77:c7:31: d1:7d:8d:23:c0:ce:73:45:03:37:ac:68:b4:97:cc: e1:a4:c6:81:6e:93:78:92:29:e1:59:45:c6:eb:8f: 48:02:88:ba:c1:7b:24:72:f9:e0:f7:b2:3f:19:ce: 86:f7:ec:ae:b6:29:a8:be:44:cb:62:cf:e2:55:fc: dd:f3:15:88:05:f8:e4:cd:eb:65:ec:9b:34:46:ac: fb:ca:05:1a:74:b6:66:1c:c9:6c:17:02:d8:79:af: 37:74:53:00:00:10:c3:5d:e9:b5:e7:29:9d:75:ed: 32:58:76:19:0c:3a:6b:ec:06:e1:a7:bb:bf:b9:48: ff:2a:ca:8a:4f:ff:d2:4f:45:0e:e0:39:c6:dd:c7: 90:b2:49:df:27:a2:61:37:86:1a:4b:f3:22:09:d5: 8c:87:af:24:d6:eb:5b:5c:f0:93:4e:2c:7c:44:bf: 4f:c2:54:b7:60:6b:c9:a8:13:21:10:4b:d3:f8:6f: f0:79:19:bb:65:a3:81:79:2c:f1:87:55:3d:6b:55: e7:99:17:f9:9c:3f:59:81:47:a4:b0:dd:49:0f:4a: e5:06:b2:85:bf:78:1e:ac:d8:1f:e3:4a:0b:5f:d2: 37:1f:31:cf:3d:a4:13:68:ab:03:c0:0d:4e:ce:0c: c9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D9:FB:FA:7D:E4:FB:5E:AC:17:E3:F0:07:7F:E9:F4:10:C5:CF:19 X509v3 Authority Key Identifier: keyid:7D:C6:77:32:0E:CD:4F:9F:A6:1F:D2:17:2F:A0:FF:BF:74:4F:6A:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:7d:d6:dc:a6:67:e8:f5:6b:07:09:6c:59:89:bb:fb:00:aa: bf:aa:98:43:6e:b9:31:1d:41:da:c2:97:24:d1:c0:3f:a1:45: 78:3a:98:5b:70:a1:21:fa:81:92:05:e1:14:7f:6f:a3:86:6a: 6b:f3:57:51:62:f8:a4:3b:fe:48:87:46:53:1d:c6:fe:a4:ae: 4c:e8:c6:b1:6e:7c:80:68:59:f4:c8:72:86:8f:36:10:e9:ea: 6d:c0:3e:f1:df:6f:0d:02:e6:8c:46:aa:24:81:8e:93:5b:91: 47:a5:4c:e9:98:17:cb:37:cc:7a:3a:59:9c:60:5e:1a:77:f1: 95:a1:3d:a3:35:87:30:a9:6c:64:30:88:21:23:f5:76:b8:7f: be:44:ac:ba:5e:48:d1:9f:08:02:6e:b6:ac:cc:43:c6:2d:fa: be:ac:ab:77:aa:69:da:78:46:94:55:a5:19:56:45:70:4a:5a: 6b:ef:05:73:62:3c:26:fc:2a:40:b1:b0:10:51:2d:75:8c:76: b7:b7:db:08:4e:ec:1d:f9:ec:29:94:08:d5:60:dd:4d:46:fd: 2d:b7:84:63:88:ff:83:6c:49:5b:10:4d:f7:11:72:3d:ba:78: 08:2b:b6:f9:9a:25:d5:80:72:ab:ea:f5:b6:02:af:11:de:dc: f2:88:fc:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa7YDB4dT4RDaHQeKWZqwwrvskZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RDNjc3MzIwRUNENEY5RkE2MUZEMjE3MkZBMEZGQkY3 NDRGNkEzMzAeFw0yNjA5MjMyMDU3MDZaFw0yNjA5MjQyMTU1MDZaMDMxMTAvBgNV BAMTKEJBRDlGQkZBN0RFNEZCNUVBQzE3RTNGMDA3N0ZFOUY0MTBDNUNGMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp4g4RlOoBAHe47XfHMdF9jSPA znNFAzesaLSXzOGkxoFuk3iSKeFZRcbrj0gCiLrBeyRy+eD3sj8Zzob37K62Kai+ RMtiz+JV/N3zFYgF+OTN62XsmzRGrPvKBRp0tmYcyWwXAth5rzd0UwAAEMNd6bXn KZ117TJYdhkMOmvsBuGnu7+5SP8qyopP/9JPRQ7gOcbdx5CySd8nomE3hhpL8yIJ 1YyHryTW61tc8JNOLHxEv0/CVLdga8moEyEQS9P4b/B5Gbtlo4F5LPGHVT1rVeeZ F/mcP1mBR6Sw3UkPSuUGsoW/eB6s2B/jSgtf0jcfMc89pBNoqwPADU7ODMktAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUutn7+n3k+16sF+PwB3/p9BDFzxkwHwYDVR0j BBgwFoAUfcZ3Mg7NT5+mH9IXL6D/v3RPajMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM1YTlkZGYtYzEwOS00ZmMxLWEzMGQtOGYwNGI4MzM4MWJlLzAvN0RDNjc3MzIw RUNENEY5RkE2MUZEMjE3MkZBMEZGQkY3NDRGNkEzMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83REM2NzczMjBFQ0Q0RjlGQTYxRkQyMTcyRkEwRkZCRjc0NEY2 QTMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM1YTlkZGYtYzEwOS00ZmMxLWEz MGQtOGYwNGI4MzM4MWJlLzAvN0RDNjc3MzIwRUNENEY5RkE2MUZEMjE3MkZBMEZG QkY3NDRGNkEzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGl91tymZ+j1awcJbFmJu/sAqr+qmENuuTEd QdrClyTRwD+hRXg6mFtwoSH6gZIF4RR/b6OGamvzV1Fi+KQ7/kiHRlMdxv6krkzo xrFufIBoWfTIcoaPNhDp6m3APvHfbw0C5oxGqiSBjpNbkUelTOmYF8s3zHo6WZxg Xhp38ZWhPaM1hzCpbGQwiCEj9Xa4f75ErLpeSNGfCAJutqzMQ8Yt+r6sq3eqadp4 RpRVpRlWRXBKWmvvBXNiPCb8KkCxsBBRLXWMdre32whO7B357CmUCNVg3U1G/S23 hGOI/4NsSVsQTfcRcj26eAgrtvmaJdWAcqvq9bYCrxHe3PKI/OQ= -----END CERTIFICATE-----Generated at Thu Sep 24 03:40:57 2026 by rpki-client