$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft File: 000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft (raw, json) Hash identifier: Jm9YNotlRM8zY46aXC6xVu1ztUBIklnUK7NfyEvoEhs= Subject key identifier: 2E:D0:A2:E5:6D:5B:48:5C:DA:14:36:62:43:52:45:CF:CD:D5:F0:53 Authority key identifier: 00:0E:7B:7E:BF:54:3F:37:AC:F1:13:75:D2:84:62:A8:D3:88:4A:2C Certificate issuer: /CN=000E7B7EBF543F37ACF11375D28462A8D3884A2C Certificate serial: 28271177B31D3FF3591E957DA12DBD930C41B79A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000E7B7EBF543F37ACF11375D28462A8D3884A2C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft Manifest number: C4 Signing time: Sat 26 Sep 2026 01:26:57 +0000 Manifest this update: Sat 26 Sep 2026 01:21:57 +0000 Manifest next update: Sun 27 Sep 2026 03:01:57 +0000 Files and hashes: 1: 000E7B7EBF543F37ACF11375D28462A8D3884A2C.crl (hash: yKWTdUn45gTb+tvPJpxHH4sry3tMgboJlELawO9LoBw=) 2: 3130332e3138322e37382e302f32342d3234203d3e20313439363635.roa (hash: KYaeVRiuR7REacNL+jOc17uQNgw/wuM1lcqqpw6kOjQ=) 3: 3130332e3138322e37392e302f32342d3234203d3e20313439363635.roa (hash: wNmcHEP7INI2aFk4SmiaXDxMKbebGinF42Oo0vPEfiI=) 4: 3130332e3138322e37382e302f32332d3234203d3e20313439363635.roa (hash: sBUWSQhH/+kN71t/+kxa/DRZ1SSem+XB/ohn5pBy7QU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.crl rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000E7B7EBF543F37ACF11375D28462A8D3884A2C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:27:11:77:b3:1d:3f:f3:59:1e:95:7d:a1:2d:bd:93:0c:41:b7:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=000E7B7EBF543F37ACF11375D28462A8D3884A2C Validity Not Before: Sep 26 01:21:57 2026 GMT Not After : Sep 27 03:01:57 2026 GMT Subject: CN=2ED0A2E56D5B485CDA143662435245CFCDD5F053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6c:2e:50:64:16:eb:d9:d3:3e:aa:a4:db:70: 2c:91:44:99:c5:05:0b:6b:63:f7:b6:73:37:c5:47: b4:ae:1d:8a:35:f1:63:76:0d:87:88:96:b1:38:d6: 22:e7:b3:03:cd:f9:ef:2f:fa:73:71:f1:71:a4:d7: f4:6a:ec:e1:6e:bf:63:a0:f5:a9:83:a2:31:d2:7c: 4c:49:e9:6d:2e:90:13:4b:fb:89:a3:a8:bc:ef:8e: f0:0d:42:64:15:ec:18:ea:8c:d9:01:09:1d:9a:1c: 0f:ca:70:72:4b:f4:e8:b9:ec:23:35:ea:9f:c3:9f: 1b:4d:43:ec:0b:a4:12:29:ee:27:4d:75:1f:65:cc: e7:f9:1c:c6:f1:bc:5e:e6:d5:16:c1:30:c7:b4:6e: 66:88:e6:50:e5:9a:2f:35:c5:94:a5:b9:ee:fd:17: 9c:c5:bb:4e:db:d1:d9:ee:0f:b6:ca:7f:df:1c:7f: 54:e0:f8:af:05:cf:c8:19:f2:1d:02:0c:57:57:9e: 9a:27:d1:91:dd:4f:88:7d:d1:0d:dd:aa:5a:03:94: 14:d0:10:ef:56:d5:ed:a5:30:31:0b:24:4e:da:d2: ef:e3:63:24:8b:d3:21:45:76:fe:c0:e4:ac:62:d6: 23:42:76:b9:11:e5:56:59:64:af:e2:8c:d8:63:41: e8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D0:A2:E5:6D:5B:48:5C:DA:14:36:62:43:52:45:CF:CD:D5:F0:53 X509v3 Authority Key Identifier: keyid:00:0E:7B:7E:BF:54:3F:37:AC:F1:13:75:D2:84:62:A8:D3:88:4A:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000E7B7EBF543F37ACF11375D28462A8D3884A2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:83:08:0a:32:2b:dc:b4:dc:e7:ea:95:41:7f:89:6a:07:b1: 3b:48:9f:97:06:72:5b:35:02:00:bd:2f:70:de:40:d7:b7:53: 00:21:78:ba:2d:d4:81:49:ef:31:29:1c:f9:cb:8e:44:be:df: de:b0:14:06:b2:2d:16:8b:20:f4:97:f4:68:de:ed:26:ac:be: 20:cd:18:dc:43:ec:80:06:60:23:5d:4a:16:0c:fe:12:75:95: a7:ae:f3:e7:8c:1c:73:d4:5a:78:7e:ca:49:a5:2a:00:40:bd: 2f:de:40:1c:e3:5c:0c:19:bb:7a:87:90:30:d8:69:be:91:e0: 44:25:ac:31:4e:21:56:3a:38:a3:9e:46:cd:41:3e:32:de:f7: 65:7e:dc:99:bc:d1:c5:55:37:ad:3a:82:f5:a1:82:91:74:32: a0:c3:50:93:87:bc:79:1b:47:53:20:fb:16:93:76:9d:d1:f5: c9:90:36:50:86:b3:40:a3:d3:3c:49:7c:2f:3c:2a:c1:e6:92: 90:9b:c6:82:d2:54:a6:1a:7c:5e:4a:9f:53:5c:7a:5c:d1:66: 75:f6:79:e9:0c:d3:37:0a:e9:9d:5b:d5:8a:a0:fc:95:10:13: d2:2d:da:c5:5d:58:cd:74:52:93:2b:cc:d2:3b:b2:50:f6:6a: 69:46:89:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKCcRd7MdP/NZHpV9oS29kwxBt5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDAwRTdCN0VCRjU0M0YzN0FDRjExMzc1RDI4NDYyQThE Mzg4NEEyQzAeFw0yNjA5MjYwMTIxNTdaFw0yNjA5MjcwMzAxNTdaMDMxMTAvBgNV BAMTKDJFRDBBMkU1NkQ1QjQ4NUNEQTE0MzY2MjQzNTI0NUNGQ0RENUYwNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnbC5QZBbr2dM+qqTbcCyRRJnF BQtrY/e2czfFR7SuHYo18WN2DYeIlrE41iLnswPN+e8v+nNx8XGk1/Rq7OFuv2Og 9amDojHSfExJ6W0ukBNL+4mjqLzvjvANQmQV7BjqjNkBCR2aHA/KcHJL9Oi57CM1 6p/DnxtNQ+wLpBIp7idNdR9lzOf5HMbxvF7m1RbBMMe0bmaI5lDlmi81xZSlue79 F5zFu07b0dnuD7bKf98cf1Tg+K8Fz8gZ8h0CDFdXnpon0ZHdT4h90Q3dqloDlBTQ EO9W1e2lMDELJE7a0u/jYySL0yFFdv7A5Kxi1iNCdrkR5VZZZK/ijNhjQehDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULtCi5W1bSFzaFDZiQ1JFz83V8FMwHwYDVR0j BBgwFoAUAA57fr9UPzes8RN10oRiqNOISiwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjM0YzMzYjgtOWQ0Mi00MjA4LThhYzQtZjE3MmExNDRkODY4LzAvMDAwRTdCN0VC RjU0M0YzN0FDRjExMzc1RDI4NDYyQThEMzg4NEEyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDBFN0I3RUJGNTQzRjM3QUNGMTEzNzVEMjg0NjJBOEQzODg0 QTJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjM0YzMzYjgtOWQ0Mi00MjA4LThh YzQtZjE3MmExNDRkODY4LzAvMDAwRTdCN0VCRjU0M0YzN0FDRjExMzc1RDI4NDYy QThEMzg4NEEyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2DCAoyK9y03OfqlUF/iWoHsTtIn5cGcls1 AgC9L3DeQNe3UwAheLot1IFJ7zEpHPnLjkS+396wFAayLRaLIPSX9Gje7SasviDN GNxD7IAGYCNdShYM/hJ1laeu8+eMHHPUWnh+ykmlKgBAvS/eQBzjXAwZu3qHkDDY ab6R4EQlrDFOIVY6OKOeRs1BPjLe92V+3Jm80cVVN606gvWhgpF0MqDDUJOHvHkb R1Mg+xaTdp3R9cmQNlCGs0Cj0zxJfC88KsHmkpCbxoLSVKYafF5Kn1NcelzRZnX2 eekM0zcK6Z1b1Yqg/JUQE9It2sVdWM10UpMrzNI7slD2amlGiUA= -----END CERTIFICATE-----Generated at Sat Sep 26 07:34:11 2026 by rpki-client