$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft File: D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft (raw, json) Hash identifier: pfQj2VnN+uvUt7Q9S3soTX2tnqB3FEUO79NJt0bkufc= Subject key identifier: 71:7F:B7:E0:68:9C:47:5A:76:93:F6:75:FA:F2:F8:E1:4F:E1:03:E3 Authority key identifier: D2:70:7D:53:E0:7D:53:B0:0A:F1:91:7C:7B:06:CA:FE:0B:48:C1:05 Certificate issuer: /CN=D2707D53E07D53B00AF1917C7B06CAFE0B48C105 Certificate serial: 128B4F478A858E45006F0F642F78D7CBAF22016F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 10:18:25 +0000 Manifest this update: Thu 24 Sep 2026 10:13:25 +0000 Manifest next update: Fri 25 Sep 2026 13:10:25 +0000 Files and hashes: 1: 3130332e37392e3133302e302f32332d3233203d3e20313430343433.roa (hash: z0PNiSkl97AAkKJELLOVf430z2bBk4x4W6fIOoHOGmo=) 2: 3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa (hash: TWEuLcbFsQpYWxLsu1a0ItVks1vfqJFaCCURAAEUNEI=) 3: 3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa (hash: N+OTkKCrsA8j5gwyH0Mpha31q8YHuNMGpdCuA0VgWcY=) 4: D2707D53E07D53B00AF1917C7B06CAFE0B48C105.crl (hash: KJlmJql92XksJwkpWqsqhlVlhWcAWEt52QRzfzRoTpA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.crl rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:8b:4f:47:8a:85:8e:45:00:6f:0f:64:2f:78:d7:cb:af:22:01:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2707D53E07D53B00AF1917C7B06CAFE0B48C105 Validity Not Before: Sep 24 10:13:25 2026 GMT Not After : Sep 25 13:10:25 2026 GMT Subject: CN=717FB7E0689C475A7693F675FAF2F8E14FE103E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d5:92:1d:de:b5:cf:61:f6:00:88:14:62:ab: 20:f8:97:29:e2:dc:84:b1:fe:21:5a:25:f9:72:9b: 19:53:ad:3a:0a:57:b2:dc:58:b7:b7:dd:09:2c:88: 49:e1:61:fe:52:ab:8b:65:60:4c:d7:13:db:4e:b3: 07:ca:dd:e4:fc:7c:5c:64:90:34:a9:01:b0:d2:f9: e4:ba:49:35:4e:65:58:65:f7:55:f9:7c:81:2a:82: c7:9e:8e:d9:5a:00:f5:92:8e:53:61:bc:e5:c6:30: f8:a7:97:ab:92:4f:63:e6:c2:84:16:0a:5b:fc:31: 37:4f:09:6a:65:55:84:a4:9d:55:5e:e0:71:3f:b4: 38:b2:8c:58:29:96:fa:f2:0a:fc:01:82:c7:77:7f: ae:8c:fe:4b:41:6a:8b:0f:5e:f4:b3:e2:d7:d8:ea: bd:59:50:9f:a1:53:e9:7c:aa:28:a4:c0:d9:5d:34: 3f:ab:b2:a9:60:40:dc:1f:1e:d2:be:46:28:40:cb: 18:b8:31:50:48:fb:f2:cc:6b:1a:cd:f5:1c:0f:10: 39:d1:ab:54:3f:a5:a0:5e:5e:e5:b7:26:15:90:47: 9e:b3:23:4a:51:3c:9a:65:6b:90:3f:c5:39:bc:66: f8:62:0c:f2:19:8b:55:3e:61:0e:93:6c:d8:a1:5c: f6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7F:B7:E0:68:9C:47:5A:76:93:F6:75:FA:F2:F8:E1:4F:E1:03:E3 X509v3 Authority Key Identifier: keyid:D2:70:7D:53:E0:7D:53:B0:0A:F1:91:7C:7B:06:CA:FE:0B:48:C1:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:6d:dd:96:68:08:9c:a2:ce:09:08:1b:a6:c9:5d:85:d8:37: 5c:68:07:2c:4f:e9:4b:9a:f0:f6:83:e6:a8:09:7b:ec:dc:62: cc:f4:58:2f:9d:c2:56:45:59:b2:21:bf:32:fb:09:06:90:7d: b7:e2:29:2b:c0:98:b6:dd:79:86:81:9a:fb:bd:1f:35:40:04: f6:6b:36:4c:db:66:49:0c:a2:c1:02:50:ab:f3:35:7e:6f:35: dc:46:1e:70:28:48:ee:68:3c:bf:e5:85:b4:f9:ec:0b:41:56: d6:d8:02:af:c2:11:5d:e7:ab:41:4c:58:5b:ff:35:11:cd:97: e8:af:2d:c1:08:81:dc:89:ac:ca:c9:55:c9:ed:1b:3f:a7:54: 66:a2:37:22:62:14:9f:e4:da:7f:94:2c:b1:31:b8:7f:04:d8: ed:a5:5c:11:94:64:5f:da:55:32:89:52:46:96:f9:bb:13:23: 95:3e:c2:0f:74:c8:e5:5b:bc:00:5f:54:f1:99:3d:36:16:bf: 24:90:8c:53:be:47:4e:4f:d2:41:8d:69:34:3b:9e:20:15:5d: 7c:01:c0:7a:53:7f:53:2e:47:52:cd:4b:9d:7e:cc:ca:05:fd: 5c:05:0b:b8:3d:e7:83:7a:9a:17:8f:9e:4d:2d:73:a9:31:2f: c8:21:d6:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEotPR4qFjkUAbw9kL3jXy68iAW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI3MDdENTNFMDdENTNCMDBBRjE5MTdDN0IwNkNBRkUw QjQ4QzEwNTAeFw0yNjA5MjQxMDEzMjVaFw0yNjA5MjUxMzEwMjVaMDMxMTAvBgNV BAMTKDcxN0ZCN0UwNjg5QzQ3NUE3NjkzRjY3NUZBRjJGOEUxNEZFMTAzRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC41ZId3rXPYfYAiBRiqyD4lyni 3ISx/iFaJflymxlTrToKV7LcWLe33QksiEnhYf5Sq4tlYEzXE9tOswfK3eT8fFxk kDSpAbDS+eS6STVOZVhl91X5fIEqgseejtlaAPWSjlNhvOXGMPinl6uST2PmwoQW Clv8MTdPCWplVYSknVVe4HE/tDiyjFgplvryCvwBgsd3f66M/ktBaosPXvSz4tfY 6r1ZUJ+hU+l8qiikwNldND+rsqlgQNwfHtK+RihAyxi4MVBI+/LMaxrN9RwPEDnR q1Q/paBeXuW3JhWQR56zI0pRPJpla5A/xTm8ZvhiDPIZi1U+YQ6TbNihXPYnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcX+34GicR1p2k/Z1+vL44U/hA+MwHwYDVR0j BBgwFoAU0nB9U+B9U7AK8ZF8ewbK/gtIwQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFlMjQ5MDctYTZmMi00YTU1LWFhNmYtMThjN2RiMTQzZmU4LzAvRDI3MDdENTNF MDdENTNCMDBBRjE5MTdDN0IwNkNBRkUwQjQ4QzEwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjcwN0Q1M0UwN0Q1M0IwMEFGMTkxN0M3QjA2Q0FGRTBCNDhD MTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFlMjQ5MDctYTZmMi00YTU1LWFh NmYtMThjN2RiMTQzZmU4LzAvRDI3MDdENTNFMDdENTNCMDBBRjE5MTdDN0IwNkNB RkUwQjQ4QzEwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFt3ZZoCJyizgkIG6bJXYXYN1xoByxP6Uua 8PaD5qgJe+zcYsz0WC+dwlZFWbIhvzL7CQaQfbfiKSvAmLbdeYaBmvu9HzVABPZr NkzbZkkMosECUKvzNX5vNdxGHnAoSO5oPL/lhbT57AtBVtbYAq/CEV3nq0FMWFv/ NRHNl+ivLcEIgdyJrMrJVcntGz+nVGaiNyJiFJ/k2n+ULLExuH8E2O2lXBGUZF/a VTKJUkaW+bsTI5U+wg90yOVbvABfVPGZPTYWvySQjFO+R05P0kGNaTQ7niAVXXwB wHpTf1MuR1LNS51+zMoF/VwFC7g954N6mhePnk0tc6kxL8gh1sU= -----END CERTIFICATE-----Generated at Fri Sep 25 01:13:17 2026 by rpki-client