$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft File: 01572889DF1075E65143A4EF4BC1D8C749046C13.mft (raw, json) Hash identifier: 5ZARLm4qpw9NtwYoAr2ZUsmLS/7Q3JMluxDZdAdWs6c= Subject key identifier: 76:33:A8:06:F4:24:68:C0:57:53:91:CF:94:E7:5F:84:3E:DE:D2:3D Authority key identifier: 01:57:28:89:DF:10:75:E6:51:43:A4:EF:4B:C1:D8:C7:49:04:6C:13 Certificate issuer: /CN=01572889DF1075E65143A4EF4BC1D8C749046C13 Certificate serial: 679541AE20B269385D340D80C759A2FCF8C47433 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01572889DF1075E65143A4EF4BC1D8C749046C13.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 13:12:11 +0000 Manifest this update: Thu 24 Sep 2026 13:07:11 +0000 Manifest next update: Fri 25 Sep 2026 13:38:11 +0000 Files and hashes: 1: 3130332e3134362e36322e302f32332d3234203d3e20313339343537.roa (hash: fXIslrIHsJvjLRQnP9cWAs1QTJuR4Stfwh7a8LYxHm8=) 2: 01572889DF1075E65143A4EF4BC1D8C749046C13.crl (hash: mD28S5iwrFgoqgkmvI4e0kcdfOq8gEMjhg0WMYzj2mw=) 3: 323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa (hash: oMj1Nm7h+Y4mu9LBu3K/xKLS+Wp19Y5meMISqDSZ+JY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.crl rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01572889DF1075E65143A4EF4BC1D8C749046C13.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:95:41:ae:20:b2:69:38:5d:34:0d:80:c7:59:a2:fc:f8:c4:74:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01572889DF1075E65143A4EF4BC1D8C749046C13 Validity Not Before: Sep 24 13:07:11 2026 GMT Not After : Sep 25 13:38:11 2026 GMT Subject: CN=7633A806F42468C0575391CF94E75F843EDED23D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ce:0c:bb:a1:88:9f:1e:0c:69:40:cf:37:c2: 17:e0:7c:bd:0a:36:f9:30:e0:4c:89:7a:11:d2:4c: 83:34:34:88:15:dc:17:77:2e:c9:3f:50:7f:7f:93: 8f:4c:4b:53:e3:21:b7:03:06:43:fb:0d:13:69:98: 76:6f:9c:a1:1e:a7:97:3b:32:e8:ef:3d:96:bc:b5: c3:18:c4:ed:1f:ea:be:2a:89:98:9c:f3:8c:1c:b2: 8f:1a:50:91:58:d0:62:92:9e:47:b5:72:ff:24:40: 73:e4:dc:5a:89:00:78:af:e7:98:ac:7c:b1:df:44: c6:5c:0a:d7:a0:57:15:53:48:0e:65:b4:0a:35:7f: 28:78:b6:ce:87:9d:08:34:d8:f3:62:7b:d1:04:9a: ff:e0:5b:7e:d9:56:fe:35:d6:27:c5:0b:02:9f:41: 92:8e:1d:11:ea:3e:a4:dc:b8:93:82:55:e7:37:4f: fb:9f:bf:5d:13:39:91:ca:1e:1e:bc:12:be:0d:0b: 80:05:95:80:10:aa:94:f8:b0:dc:fa:d7:cd:e6:c3: 6d:91:fe:a7:4b:d1:7e:27:5f:fb:1f:ec:c6:d3:db: 37:0f:70:96:aa:e5:3e:f8:65:6e:b8:3a:d7:a9:3d: 66:33:6c:23:78:22:83:09:0f:ae:88:b3:1f:31:9d: 0e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:33:A8:06:F4:24:68:C0:57:53:91:CF:94:E7:5F:84:3E:DE:D2:3D X509v3 Authority Key Identifier: keyid:01:57:28:89:DF:10:75:E6:51:43:A4:EF:4B:C1:D8:C7:49:04:6C:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01572889DF1075E65143A4EF4BC1D8C749046C13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:3c:37:a4:f3:97:24:c2:05:65:31:ab:29:9a:f7:d1:fd:ea: 89:66:b3:d7:4b:a8:38:e9:3d:49:e0:4b:45:f2:dd:c7:06:2d: 06:8f:73:18:94:c0:3d:a4:f5:fd:2e:e1:41:d0:42:5e:e4:d1: f7:6a:45:58:7f:12:30:e8:c7:c9:8e:4f:05:8c:a3:82:0f:49: 2b:d4:08:1c:b4:bc:00:f5:70:e5:28:9d:4f:0d:3b:e3:19:2b: ee:d5:ae:23:2f:30:40:d2:f8:d5:89:6e:72:3a:87:cc:dd:87: 10:c9:f3:c1:1b:ed:0c:77:99:70:c4:4f:6a:84:fc:f9:09:be: 00:a2:16:28:09:7c:90:2e:ad:09:d8:a0:74:10:f9:fb:91:42: 45:4f:ca:49:dc:11:11:1e:f8:67:44:59:cf:7e:96:e1:f1:71: 14:7c:2d:3f:9e:fe:b9:13:14:ea:ec:3b:9f:e2:78:11:7b:ea: d0:c3:31:c9:12:ba:f5:04:b5:a9:cd:48:04:5d:a8:6f:54:d0: 76:9b:0b:24:a4:bb:ac:73:c3:3e:b8:30:8a:3f:ed:9f:01:b0: 31:74:64:01:23:83:f2:2e:2a:07:f4:35:c2:46:4a:10:8e:8a: 1e:5f:f9:8b:84:16:0c:80:19:77:0f:c9:39:b9:f5:e2:e4:a5: 6c:76:72:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ5VBriCyaThdNA2Ax1mi/PjEdDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1NzI4ODlERjEwNzVFNjUxNDNBNEVGNEJDMUQ4Qzc0 OTA0NkMxMzAeFw0yNjA5MjQxMzA3MTFaFw0yNjA5MjUxMzM4MTFaMDMxMTAvBgNV BAMTKDc2MzNBODA2RjQyNDY4QzA1NzUzOTFDRjk0RTc1Rjg0M0VERUQyM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJzgy7oYifHgxpQM83whfgfL0K Nvkw4EyJehHSTIM0NIgV3Bd3Lsk/UH9/k49MS1PjIbcDBkP7DRNpmHZvnKEep5c7 MujvPZa8tcMYxO0f6r4qiZic84wcso8aUJFY0GKSnke1cv8kQHPk3FqJAHiv55is fLHfRMZcCtegVxVTSA5ltAo1fyh4ts6HnQg02PNie9EEmv/gW37ZVv411ifFCwKf QZKOHRHqPqTcuJOCVec3T/ufv10TOZHKHh68Er4NC4AFlYAQqpT4sNz6183mw22R /qdL0X4nX/sf7MbT2zcPcJaq5T74ZW64OtepPWYzbCN4IoMJD66Isx8xnQ7NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdjOoBvQkaMBXU5HPlOdfhD7e0j0wHwYDVR0j BBgwFoAUAVcoid8QdeZRQ6TvS8HYx0kEbBMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGVhNzkzNDAtNGRiMi00NThkLTk1ZGQtYWYyMGI0ZmNkYjNkLzAvMDE1NzI4ODlE RjEwNzVFNjUxNDNBNEVGNEJDMUQ4Qzc0OTA0NkMxMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMTU3Mjg4OURGMTA3NUU2NTE0M0E0RUY0QkMxRDhDNzQ5MDQ2 QzEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGVhNzkzNDAtNGRiMi00NThkLTk1 ZGQtYWYyMGI0ZmNkYjNkLzAvMDE1NzI4ODlERjEwNzVFNjUxNDNBNEVGNEJDMUQ4 Qzc0OTA0NkMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADo8N6TzlyTCBWUxqyma99H96olms9dLqDjp PUngS0Xy3ccGLQaPcxiUwD2k9f0u4UHQQl7k0fdqRVh/EjDox8mOTwWMo4IPSSvU CBy0vAD1cOUonU8NO+MZK+7VriMvMEDS+NWJbnI6h8zdhxDJ88Eb7Qx3mXDET2qE /PkJvgCiFigJfJAurQnYoHQQ+fuRQkVPykncEREe+GdEWc9+luHxcRR8LT+e/rkT FOrsO5/ieBF76tDDMckSuvUEtanNSARdqG9U0HabCySku6xzwz64MIo/7Z8BsDF0 ZAEjg/IuKgf0NcJGShCOih5f+YuEFgyAGXcPyTm59eLkpWx2chg= -----END CERTIFICATE-----Generated at Thu Sep 24 17:12:47 2026 by rpki-client