$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.mft File: 607EB065616BF1A985E6E549EC540E1C94E94819.mft (raw, json) Hash identifier: VsgIxcv9U2Bs8fL9XJLCruKDQCLkepeo5tWWycLRnC8= Subject key identifier: FC:E3:02:22:62:1E:F6:20:01:F1:55:0F:B9:9B:4A:F3:4E:53:A6:45 Authority key identifier: 60:7E:B0:65:61:6B:F1:A9:85:E6:E5:49:EC:54:0E:1C:94:E9:48:19 Certificate issuer: /CN=607EB065616BF1A985E6E549EC540E1C94E94819 Certificate serial: 589B0EB19A68299FDE79F9B1753E7BE14461B038 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/607EB065616BF1A985E6E549EC540E1C94E94819.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 10:59:46 +0000 Manifest this update: Wed 23 Sep 2026 10:54:46 +0000 Manifest next update: Thu 24 Sep 2026 12:57:46 +0000 Files and hashes: 1: 607EB065616BF1A985E6E549EC540E1C94E94819.crl (hash: mZ8D0vKzbYBQt7UfIQ1qfoq8DkN/BgAfofz6hvlhhnE=) 2: 3130332e3132312e3138302e302f32332d3234203d3e20313335343738.roa (hash: jjNj0cEM+Wj64PDL2yAGNM6cCQQfvKyXt4I1SVLIB/E=) 3: 3130332e3132312e3138322e302f32332d3234203d3e20313335343738.roa (hash: 8jyMA8Gmhc97Vi1yoxS8QxZYiktn7eC0pGgFqwBSsy8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.crl rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/607EB065616BF1A985E6E549EC540E1C94E94819.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 12:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:9b:0e:b1:9a:68:29:9f:de:79:f9:b1:75:3e:7b:e1:44:61:b0:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=607EB065616BF1A985E6E549EC540E1C94E94819 Validity Not Before: Sep 23 10:54:46 2026 GMT Not After : Sep 24 12:57:46 2026 GMT Subject: CN=FCE30222621EF62001F1550FB99B4AF34E53A645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:08:e1:88:e6:ff:ed:a7:7f:8d:db:c9:03:45: 20:65:ce:78:83:40:4d:66:40:fd:f4:58:68:fc:95: 90:50:d0:2b:af:0c:73:07:a1:2e:ef:35:89:f3:d1: 7d:3a:0d:4a:f0:a8:73:cb:71:8f:99:50:75:98:88: f4:eb:c1:ae:4e:ef:3e:0f:47:73:cc:fe:49:f0:34: fb:82:4b:0b:ec:2b:e4:4d:00:e9:c3:28:ec:4d:fe: 28:4b:12:c2:dd:c6:c8:0a:a2:84:c1:bb:5f:83:f5: 40:68:6d:e4:f1:51:eb:4a:2b:21:ad:99:ed:b4:32: 67:a9:19:55:11:ab:90:5a:93:52:90:17:53:69:aa: 4f:3c:26:53:50:7c:89:62:65:b6:77:c0:48:da:11: 02:d1:78:de:ea:42:5d:fc:b4:50:e3:9d:6b:aa:ef: 55:b4:74:73:67:e3:34:8e:f4:c3:cb:c0:38:8b:7f: 0c:c1:bf:40:b9:ca:73:26:b1:18:76:eb:59:d3:b8: 5d:cc:f5:bb:d0:54:6e:af:27:3c:a2:27:28:85:09: c1:e2:cd:e3:1b:5c:cd:1a:ee:5b:c4:c1:3b:9e:29: 12:b1:51:c4:e6:7d:aa:17:f7:b2:63:19:9e:32:fe: ac:e2:84:12:cc:4e:72:0a:6e:a8:60:43:69:49:c4: c7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E3:02:22:62:1E:F6:20:01:F1:55:0F:B9:9B:4A:F3:4E:53:A6:45 X509v3 Authority Key Identifier: keyid:60:7E:B0:65:61:6B:F1:A9:85:E6:E5:49:EC:54:0E:1C:94:E9:48:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/607EB065616BF1A985E6E549EC540E1C94E94819.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:18:e1:bf:10:67:ee:74:d1:d5:fc:27:de:de:94:f1:6b:dc: 31:9a:e1:66:eb:29:d3:c0:70:f0:cf:f2:d4:85:e3:40:b2:36: d2:8a:e7:b0:d4:df:96:0f:88:7d:b5:ca:e7:3f:f8:e8:72:f2: 3d:ea:92:50:df:27:3d:78:a2:1a:0c:2b:b1:5a:f4:ed:6d:06: 37:ea:83:75:80:77:5b:a3:10:38:ec:18:63:c5:68:d3:fa:f1: cb:51:6c:29:12:f3:40:88:c2:93:74:f9:8c:12:de:bd:c4:4a: 80:cb:db:a6:bf:0f:04:cc:41:4e:e6:d3:1d:9b:64:92:7c:8c: 5e:50:1e:08:59:f7:18:e1:d0:74:4d:48:09:cd:54:46:4f:40: b1:8c:6f:13:38:a7:a7:0b:df:a4:bb:e7:38:aa:95:d1:42:cb: 06:29:0c:4b:d9:97:4d:1a:4c:8a:d0:1e:a8:cd:00:7a:ff:38: 9a:db:5e:ed:81:2f:0e:58:23:98:d8:d3:29:d8:a0:8d:08:6b: f8:4a:8b:a3:a2:78:3f:77:2d:4a:07:c4:c7:e3:ef:02:d0:f8: d9:65:f1:2e:cf:aa:59:8f:9a:eb:16:15:5c:91:b5:37:06:9b: 20:cc:e8:71:07:23:11:ed:dc:85:4e:47:19:07:10:9c:92:c5: c7:50:8f:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWJsOsZpoKZ/eefmxdT574URhsDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA3RUIwNjU2MTZCRjFBOTg1RTZFNTQ5RUM1NDBFMUM5 NEU5NDgxOTAeFw0yNjA5MjMxMDU0NDZaFw0yNjA5MjQxMjU3NDZaMDMxMTAvBgNV BAMTKEZDRTMwMjIyNjIxRUY2MjAwMUYxNTUwRkI5OUI0QUYzNEU1M0E2NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkCOGI5v/tp3+N28kDRSBlzniD QE1mQP30WGj8lZBQ0CuvDHMHoS7vNYnz0X06DUrwqHPLcY+ZUHWYiPTrwa5O7z4P R3PM/knwNPuCSwvsK+RNAOnDKOxN/ihLEsLdxsgKooTBu1+D9UBobeTxUetKKyGt me20MmepGVURq5Bak1KQF1Npqk88JlNQfIliZbZ3wEjaEQLReN7qQl38tFDjnWuq 71W0dHNn4zSO9MPLwDiLfwzBv0C5ynMmsRh261nTuF3M9bvQVG6vJzyiJyiFCcHi zeMbXM0a7lvEwTueKRKxUcTmfaoX97JjGZ4y/qzihBLMTnIKbqhgQ2lJxMd1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/OMCImIe9iAB8VUPuZtK805TpkUwHwYDVR0j BBgwFoAUYH6wZWFr8amF5uVJ7FQOHJTpSBkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWU4OTVjZWItMjc3Ny00YWQ5LTkyZGItNDg3M2U0ODVjMWY2LzAvNjA3RUIwNjU2 MTZCRjFBOTg1RTZFNTQ5RUM1NDBFMUM5NEU5NDgxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MDdFQjA2NTYxNkJGMUE5ODVFNkU1NDlFQzU0MEUxQzk0RTk0 ODE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWU4OTVjZWItMjc3Ny00YWQ5LTky ZGItNDg3M2U0ODVjMWY2LzAvNjA3RUIwNjU2MTZCRjFBOTg1RTZFNTQ5RUM1NDBF MUM5NEU5NDgxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL4Y4b8QZ+500dX8J97elPFr3DGa4WbrKdPA cPDP8tSF40CyNtKK57DU35YPiH21yuc/+Ohy8j3qklDfJz14ohoMK7Fa9O1tBjfq g3WAd1ujEDjsGGPFaNP68ctRbCkS80CIwpN0+YwS3r3ESoDL26a/DwTMQU7m0x2b ZJJ8jF5QHghZ9xjh0HRNSAnNVEZPQLGMbxM4p6cL36S75ziqldFCywYpDEvZl00a TIrQHqjNAHr/OJrbXu2BLw5YI5jY0ynYoI0Ia/hKi6OieD93LUoHxMfj7wLQ+Nll 8S7PqlmPmusWFVyRtTcGmyDM6HEHIxHt3IVORxkHEJySxcdQjwU= -----END CERTIFICATE-----Generated at Thu Sep 24 04:00:27 2026 by rpki-client