$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.mft File: D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.mft (raw, json) Hash identifier: 9Z0PjDqTtusYNeNwq/IDVJ+0oWf65g8jjp+zrQPCtFk= Subject key identifier: D1:C4:52:CD:D0:A7:FA:E9:86:A2:B4:AF:66:D7:0E:D3:2F:8A:3F:4D Authority key identifier: D7:A0:5D:FF:98:BB:9B:3D:02:F4:B6:13:09:F4:6F:1C:93:67:08:4C Certificate issuer: /CN=D7A05DFF98BB9B3D02F4B61309F46F1C9367084C Certificate serial: 617F70A1CE9AD45E0EDE7BFB2FD78CB10A17EC69 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.mft Manifest number: C1 Signing time: Fri 25 Sep 2026 04:25:51 +0000 Manifest this update: Fri 25 Sep 2026 04:20:51 +0000 Manifest next update: Sat 26 Sep 2026 07:11:51 +0000 Files and hashes: 1: D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.crl (hash: g2HV5apPkbxk6Djtk4MMJSaTQvD8/3w6TNfwmvbBJUU=) 2: 3130332e3137392e3138302e302f32342d3234203d3e20313439333435.roa (hash: MblWuzrOZD28wkceG5+ZPQEBVsmdypcKgkkQ4DKBQmM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.crl rsync://rpki-rsync.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 07:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:7f:70:a1:ce:9a:d4:5e:0e:de:7b:fb:2f:d7:8c:b1:0a:17:ec:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7A05DFF98BB9B3D02F4B61309F46F1C9367084C Validity Not Before: Sep 25 04:20:51 2026 GMT Not After : Sep 26 07:11:51 2026 GMT Subject: CN=D1C452CDD0A7FAE986A2B4AF66D70ED32F8A3F4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:52:45:97:00:c9:7a:46:7b:00:29:4a:fc:5e: ef:1e:f9:36:82:6c:f3:a9:d8:44:b8:7c:51:3f:7c: b6:f6:d3:88:7e:b9:0a:5c:81:c7:e7:35:3b:d5:e3: a2:7b:d5:50:d9:f2:d1:61:ef:42:8c:cb:59:4c:0e: 80:ff:b3:a4:a1:87:f0:5c:71:39:17:4e:6d:dc:b3: ca:5f:9c:e8:44:e2:7d:42:fa:ab:cd:4c:63:18:74: d2:e7:8f:3a:56:f5:b1:1c:62:a8:18:8c:48:0e:2a: 86:4b:53:07:48:8e:79:9e:c5:82:d6:7a:d5:8e:a9: 8b:d8:12:d8:e8:a1:6f:41:16:f8:be:e8:56:5a:ec: c8:09:94:38:87:4b:3c:d2:22:65:4b:dd:55:ee:4b: a7:ee:4b:fa:7c:b7:6d:62:47:ec:3e:41:62:43:32: ee:03:7a:08:5e:31:00:9d:c6:bf:0f:4a:e1:94:73: b7:1c:f1:70:5b:b1:19:cb:c8:67:31:45:fe:5c:83: 1c:a5:b7:fd:cd:b4:e1:1a:6e:86:d4:c5:5e:a2:e0: 78:5f:eb:91:74:e0:ab:40:b0:26:26:ba:a5:97:41: be:cd:6b:97:05:29:cb:85:63:9b:0e:11:cf:e4:01: 23:46:ac:42:70:ab:fb:bc:a6:13:30:15:46:f9:e1: 3e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C4:52:CD:D0:A7:FA:E9:86:A2:B4:AF:66:D7:0E:D3:2F:8A:3F:4D X509v3 Authority Key Identifier: keyid:D7:A0:5D:FF:98:BB:9B:3D:02:F4:B6:13:09:F4:6F:1C:93:67:08:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:36:82:94:86:24:ed:5a:9b:ee:66:d4:cc:70:5b:5a:8f:45: d8:8b:39:24:e7:c1:44:b9:ba:2e:5b:bb:5a:c8:df:42:33:ca: 7a:73:d1:c4:aa:f3:a5:43:54:f8:48:91:37:dd:71:60:cd:9e: 1b:1b:02:b1:de:d5:f9:b9:85:58:69:f9:79:9f:9a:6a:29:29: 52:e2:e2:19:44:67:fb:01:8c:7c:23:f3:00:eb:00:66:36:3f: f9:cd:ce:d1:6c:f2:a8:1b:4d:aa:3a:0a:63:04:5c:d8:4b:6b: a1:87:ad:f0:e4:18:92:18:f3:ab:e6:ff:9a:b3:ce:e6:ea:9e: 6a:1b:a1:5a:b5:44:2c:57:c3:01:45:dc:32:ea:c2:c8:72:3d: ad:73:67:e7:78:e2:7b:06:38:52:31:4c:2e:22:97:66:2f:e8: 9b:40:66:8e:67:e4:63:a7:71:92:9e:d1:2d:ec:71:ef:7b:38: 10:f7:10:ad:19:93:77:62:77:86:94:88:89:3b:1f:9d:67:16: 40:5d:0f:12:28:3e:ab:d7:84:4e:ac:43:e6:b6:51:dd:3f:e1: ac:f5:61:5c:e1:a0:7f:33:a7:61:5b:fa:e4:f9:03:70:4b:c9: 50:d4:4e:fe:90:2c:5d:6e:a2:89:7a:86:cf:dc:30:39:41:2a: d6:0e:a5:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYX9woc6a1F4O3nv7L9eMsQoX7GkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdBMDVERkY5OEJCOUIzRDAyRjRCNjEzMDlGNDZGMUM5 MzY3MDg0QzAeFw0yNjA5MjUwNDIwNTFaFw0yNjA5MjYwNzExNTFaMDMxMTAvBgNV BAMTKEQxQzQ1MkNERDBBN0ZBRTk4NkEyQjRBRjY2RDcwRUQzMkY4QTNGNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiUkWXAMl6RnsAKUr8Xu8e+TaC bPOp2ES4fFE/fLb204h+uQpcgcfnNTvV46J71VDZ8tFh70KMy1lMDoD/s6Shh/Bc cTkXTm3cs8pfnOhE4n1C+qvNTGMYdNLnjzpW9bEcYqgYjEgOKoZLUwdIjnmexYLW etWOqYvYEtjooW9BFvi+6FZa7MgJlDiHSzzSImVL3VXuS6fuS/p8t21iR+w+QWJD Mu4DegheMQCdxr8PSuGUc7cc8XBbsRnLyGcxRf5cgxylt/3NtOEabobUxV6i4Hhf 65F04KtAsCYmuqWXQb7Na5cFKcuFY5sOEc/kASNGrEJwq/u8phMwFUb54T6PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0cRSzdCn+umGorSvZtcO0y+KP00wHwYDVR0j BBgwFoAU16Bd/5i7mz0C9LYTCfRvHJNnCEwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY5M2ZjOGYtYWZjYy00ZGVmLTgwNmYtZjQ0NDkzZDA3YTNmLzAvRDdBMDVERkY5 OEJCOUIzRDAyRjRCNjEzMDlGNDZGMUM5MzY3MDg0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EN0EwNURGRjk4QkI5QjNEMDJGNEI2MTMwOUY0NkYxQzkzNjcw ODRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY5M2ZjOGYtYWZjYy00ZGVmLTgw NmYtZjQ0NDkzZDA3YTNmLzAvRDdBMDVERkY5OEJCOUIzRDAyRjRCNjEzMDlGNDZG MUM5MzY3MDg0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADo2gpSGJO1am+5m1MxwW1qPRdiLOSTnwUS5 ui5bu1rI30Izynpz0cSq86VDVPhIkTfdcWDNnhsbArHe1fm5hVhp+XmfmmopKVLi 4hlEZ/sBjHwj8wDrAGY2P/nNztFs8qgbTao6CmMEXNhLa6GHrfDkGJIY86vm/5qz zubqnmoboVq1RCxXwwFF3DLqwshyPa1zZ+d44nsGOFIxTC4il2Yv6JtAZo5n5GOn cZKe0S3sce97OBD3EK0Zk3did4aUiIk7H51nFkBdDxIoPqvXhE6sQ+a2Ud0/4az1 YVzhoH8zp2Fb+uT5A3BLyVDUTv6QLF1uool6hs/cMDlBKtYOpeo= -----END CERTIFICATE-----Generated at Fri Sep 25 19:22:44 2026 by rpki-client