$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft File: 267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft (raw, json) Hash identifier: 7S6jq3XkxKC7RjdA8MghIUxkltf+6813FmyIFxkY1vc= Subject key identifier: 6D:5E:53:40:D5:41:22:C5:E4:0C:A9:A3:37:0C:92:96:FC:8F:9D:14 Authority key identifier: 26:73:81:23:4D:E6:7C:D8:E7:FC:C5:32:54:0C:0B:1A:69:8F:D8:B0 Certificate issuer: /CN=267381234DE67CD8E7FCC532540C0B1A698FD8B0 Certificate serial: 7C391E041BCDC4260E54CE7FD89F8950AB52F29F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/267381234DE67CD8E7FCC532540C0B1A698FD8B0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 04:41:27 +0000 Manifest this update: Thu 24 Sep 2026 04:36:27 +0000 Manifest next update: Fri 25 Sep 2026 05:19:27 +0000 Files and hashes: 1: 3130332e31352e3231342e302f32342d3234203d3e20313335343737.roa (hash: ZyYg2y6us1LQrG7diwKFALUA9hvUN3acAbNTmnkm8fU=) 2: 267381234DE67CD8E7FCC532540C0B1A698FD8B0.crl (hash: YV4EjL0xMa+9RvqtLEBG2POV3iSD/MR3lZKj0VNJv+Q=) 3: 3130332e31352e3231352e302f32342d3234203d3e20313335343737.roa (hash: OOL38iHSy0/NkkysB63GXJ99F6I1QYegNu69it5kV/Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.crl rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/267381234DE67CD8E7FCC532540C0B1A698FD8B0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:19:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:39:1e:04:1b:cd:c4:26:0e:54:ce:7f:d8:9f:89:50:ab:52:f2:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=267381234DE67CD8E7FCC532540C0B1A698FD8B0 Validity Not Before: Sep 24 04:36:27 2026 GMT Not After : Sep 25 05:19:27 2026 GMT Subject: CN=6D5E5340D54122C5E40CA9A3370C9296FC8F9D14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1c:9a:2f:04:45:ee:65:d6:52:2c:08:1e:8c: 61:8b:e8:ca:02:f8:71:5d:ba:bb:d3:da:42:89:1a: ff:15:de:5a:f2:01:b9:35:1b:3f:bd:03:ff:5e:12: 0c:c4:cd:71:e2:d9:36:bb:c9:49:b5:86:e5:9e:58: ab:82:f7:6d:c6:d5:e3:14:f4:bb:0f:ad:69:54:c6: 32:41:00:ed:e7:e9:38:cb:f7:38:f6:eb:20:5c:bb: 47:d4:ba:ed:ff:4d:a6:45:a1:c0:08:84:2f:35:86: f9:3f:95:0f:84:77:73:97:d4:e7:72:17:4b:2c:a7: 72:90:a4:6a:77:c5:a1:38:cd:93:1d:db:a7:99:9b: 50:85:0d:87:a7:65:d7:f8:03:a9:03:d6:38:9d:1c: 07:8a:9f:25:4b:d8:c8:ed:cc:08:49:00:9f:f6:c7: 15:f0:03:58:ca:92:ca:b7:20:b7:50:63:36:f9:39: 73:9c:32:b8:91:33:3b:3e:88:30:a8:ea:ee:12:75: 4f:b9:f3:b2:d1:d1:fa:48:12:29:46:71:6f:4d:82: 7f:d2:54:86:c2:a9:6a:02:0d:6d:72:b7:a1:46:62: 10:7b:30:bf:0d:d6:42:5b:82:ea:44:5f:e8:83:45: b8:4d:be:44:0a:99:ad:3c:00:aa:fb:07:d2:4f:be: 8c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5E:53:40:D5:41:22:C5:E4:0C:A9:A3:37:0C:92:96:FC:8F:9D:14 X509v3 Authority Key Identifier: keyid:26:73:81:23:4D:E6:7C:D8:E7:FC:C5:32:54:0C:0B:1A:69:8F:D8:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/267381234DE67CD8E7FCC532540C0B1A698FD8B0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a2:0f:73:13:bd:06:82:5d:a0:6e:a5:9e:49:a0:70:a5:67: f3:c3:54:44:f0:9b:20:d0:46:c2:00:70:57:d9:9e:21:30:e0: 70:80:42:f8:92:a2:ab:6f:83:5d:23:41:7f:85:48:4e:05:ce: fb:98:24:ea:c4:a6:67:fd:8b:79:cc:9d:b6:07:a3:06:77:29: 38:a0:41:5e:d8:93:bc:46:0d:03:c3:3d:cf:74:65:83:ad:73: 75:92:48:94:6b:26:3a:36:4f:f0:38:bf:b7:e0:51:f0:42:10: fc:ca:e5:27:99:54:09:5a:33:2e:ff:88:b7:7c:8a:34:68:7d: 9c:62:0d:71:37:78:40:ea:26:f1:a1:97:09:79:70:f2:ec:ae: c9:1b:7a:73:03:ea:05:6c:9a:7d:1b:b4:0b:29:b6:49:6d:cc: af:d1:db:07:c1:63:ad:65:1a:90:42:6d:3f:d7:72:97:e1:ff: 0a:9a:82:0c:80:65:9c:73:ff:83:42:6a:ab:18:d1:9a:39:33: 81:bc:4e:db:54:7a:ce:1f:3a:ad:47:d8:4b:bf:c0:6e:60:05: 00:31:bc:d6:b7:83:d8:ab:ef:95:b3:e2:53:dd:83:4c:c1:72: 16:9a:47:eb:ce:1d:a2:f8:0b:75:8e:03:ae:59:98:b2:78:f3: 8c:e2:de:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfDkeBBvNxCYOVM5/2J+JUKtS8p8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY3MzgxMjM0REU2N0NEOEU3RkNDNTMyNTQwQzBCMUE2 OThGRDhCMDAeFw0yNjA5MjQwNDM2MjdaFw0yNjA5MjUwNTE5MjdaMDMxMTAvBgNV BAMTKDZENUU1MzQwRDU0MTIyQzVFNDBDQTlBMzM3MEM5Mjk2RkM4RjlEMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5HJovBEXuZdZSLAgejGGL6MoC +HFdurvT2kKJGv8V3lryAbk1Gz+9A/9eEgzEzXHi2Ta7yUm1huWeWKuC923G1eMU 9LsPrWlUxjJBAO3n6TjL9zj26yBcu0fUuu3/TaZFocAIhC81hvk/lQ+Ed3OX1Ody F0ssp3KQpGp3xaE4zZMd26eZm1CFDYenZdf4A6kD1jidHAeKnyVL2MjtzAhJAJ/2 xxXwA1jKksq3ILdQYzb5OXOcMriRMzs+iDCo6u4SdU+587LR0fpIEilGcW9Ngn/S VIbCqWoCDW1yt6FGYhB7ML8N1kJbgupEX+iDRbhNvkQKma08AKr7B9JPvoyjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbV5TQNVBIsXkDKmjNwySlvyPnRQwHwYDVR0j BBgwFoAUJnOBI03mfNjn/MUyVAwLGmmP2LAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZmNDc2N2QtZTg0Zi00MjEwLTg0MjMtNDA2OTY2MThmMzc3LzAvMjY3MzgxMjM0 REU2N0NEOEU3RkNDNTMyNTQwQzBCMUE2OThGRDhCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNjczODEyMzRERTY3Q0Q4RTdGQ0M1MzI1NDBDMEIxQTY5OEZE OEIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZmNDc2N2QtZTg0Zi00MjEwLTg0 MjMtNDA2OTY2MThmMzc3LzAvMjY3MzgxMjM0REU2N0NEOEU3RkNDNTMyNTQwQzBC MUE2OThGRDhCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2iD3MTvQaCXaBupZ5JoHClZ/PDVETwmyDQ RsIAcFfZniEw4HCAQviSoqtvg10jQX+FSE4FzvuYJOrEpmf9i3nMnbYHowZ3KTig QV7Yk7xGDQPDPc90ZYOtc3WSSJRrJjo2T/A4v7fgUfBCEPzK5SeZVAlaMy7/iLd8 ijRofZxiDXE3eEDqJvGhlwl5cPLsrskbenMD6gVsmn0btAsptkltzK/R2wfBY61l GpBCbT/Xcpfh/wqaggyAZZxz/4NCaqsY0Zo5M4G8TttUes4fOq1H2Eu/wG5gBQAx vNa3g9ir75Wz4lPdg0zBchaaR+vOHaL4C3WOA65ZmLJ484zi3ow= -----END CERTIFICATE-----Generated at Thu Sep 24 18:24:51 2026 by rpki-client