$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.mft File: D67DDCB46CF40B52641F71BF7756DFA29F4159A2.mft (raw, json) Hash identifier: ubBzjtVBl6CPgaF4E01sPgqVGPWLmuWv64hlnCzsvGY= Subject key identifier: 49:D8:B3:4F:DA:05:62:44:91:C2:38:EA:71:F0:2C:6F:72:49:88:96 Authority key identifier: D6:7D:DC:B4:6C:F4:0B:52:64:1F:71:BF:77:56:DF:A2:9F:41:59:A2 Certificate issuer: /CN=D67DDCB46CF40B52641F71BF7756DFA29F4159A2 Certificate serial: 074941C07023A1AFBA0112A66D3BDAA80CF58B62 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 12:52:03 +0000 Manifest this update: Wed 23 Sep 2026 12:47:03 +0000 Manifest next update: Thu 24 Sep 2026 16:36:03 +0000 Files and hashes: 1: 3232322e3136352e3139322e302f31382d3234203d3e203234323037.roa (hash: XrQbHF8ES5i2bpLQRbTUE7Wl3M4ZUVmyaoRlPolZS6Y=) 2: D67DDCB46CF40B52641F71BF7756DFA29F4159A2.crl (hash: wJwYU6DIQv7QeLGecNkWMrOrLjeiXVUCnT8lNoNLxSY=) 3: 3230332e3135332e3131322e302f32312d3234203d3e203234323037.roa (hash: Lw1DMZ5kJp5ICeFivj5ZZ60njB9OoQuGFsGq8+auMdU=) 4: 323430343a663630303a3a2f33322d3438203d3e203234323037.roa (hash: O3BW4/+vpeYZOrGXcLGA8HAU1zfqrZRISOMkRbThX6s=) 5: 3230332e3135332e39362e302f32302d3234203d3e203234323037.roa (hash: AhfkSgsUfVbnlwjYQF5FXALegxkl9ZVed7BF03/fBz8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.crl rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:36:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:49:41:c0:70:23:a1:af:ba:01:12:a6:6d:3b:da:a8:0c:f5:8b:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D67DDCB46CF40B52641F71BF7756DFA29F4159A2 Validity Not Before: Sep 23 12:47:03 2026 GMT Not After : Sep 24 16:36:03 2026 GMT Subject: CN=49D8B34FDA05624491C238EA71F02C6F72498896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:77:67:24:85:a6:8e:1c:c3:82:a3:4e:8c:f3: 7b:d0:f7:d5:65:b2:92:bd:ae:c3:d5:da:21:3b:c8: b6:40:2b:28:63:ab:65:52:68:cd:be:83:3e:f9:ce: 2d:a5:7b:ea:3c:c2:eb:04:0a:2d:2a:c1:d4:af:1a: 30:ef:9d:47:b1:a5:be:69:7d:46:d2:23:f7:ba:d4: 81:56:7f:33:80:98:50:a5:ad:bd:24:c9:02:fb:ab: 66:02:ad:9a:65:72:c3:04:11:6f:93:e8:6d:e2:a4: e0:19:a8:3a:e9:ce:bb:1d:6a:39:93:b1:5c:e1:e4: 59:67:27:c0:07:bd:c9:5b:f7:5a:9b:e4:f9:bc:c6: 81:95:ce:80:eb:86:af:7d:56:f7:5b:2c:8b:1b:9f: db:8e:ee:20:47:42:74:32:26:fe:52:ab:09:2e:f9: 7f:2b:51:7b:f2:63:a9:f6:05:c1:8f:6b:65:6a:a8: 40:de:3c:d9:71:6b:ed:09:27:c7:0d:e7:73:f3:2d: cf:6f:02:41:e1:84:93:2a:07:a7:92:19:0c:f3:d1: 77:78:a3:8c:71:51:ed:6b:56:b1:e6:c1:57:cb:bd: 42:3b:fe:99:04:1c:b2:38:cb:ea:23:f6:f1:d4:52: 00:36:87:85:0a:7f:e6:25:07:86:3c:a2:6e:cc:f7: 78:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D8:B3:4F:DA:05:62:44:91:C2:38:EA:71:F0:2C:6F:72:49:88:96 X509v3 Authority Key Identifier: keyid:D6:7D:DC:B4:6C:F4:0B:52:64:1F:71:BF:77:56:DF:A2:9F:41:59:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:23:f4:86:c7:dc:ac:77:4b:31:b1:66:8e:93:30:fb:c0:89: a1:aa:81:50:48:54:01:42:83:78:bc:2d:fd:f8:5a:d9:5d:3a: 31:94:74:c3:6c:9c:a8:dd:0f:5c:4f:51:3f:69:01:b1:28:62: 92:56:20:b5:8e:10:a2:f8:5f:c9:3f:db:82:65:09:ff:1e:49: 40:d4:9c:9f:34:75:94:a4:16:b4:d4:9b:72:0a:0c:b9:11:cb: 68:21:08:76:7d:9f:20:05:a3:88:ae:78:8c:4a:60:a1:a0:ad: c2:60:12:4e:93:27:06:31:b0:32:bd:1b:c4:ae:14:c8:c5:f7: 43:0e:1d:ad:5a:cd:80:6d:55:69:a6:d0:fe:b4:11:0c:0d:da: b0:15:38:77:8a:5f:d9:3d:46:a9:df:6b:96:35:dc:bd:b7:f0: 1b:15:3a:cf:35:57:eb:63:01:26:40:6d:c4:ac:b8:6e:be:be: 8b:89:8b:e4:e6:53:9e:2e:c8:a6:cc:0f:23:84:63:17:11:95: e2:82:1b:9d:ca:7b:f9:7b:64:97:cf:b3:03:80:cc:0d:46:5d: 1e:ad:c2:4d:15:b8:c1:23:b6:5f:40:53:96:0a:d6:ec:05:4e: 26:c7:a1:64:ab:4d:77:32:79:69:49:a2:9d:fc:64:64:88:85: 4a:53:f5:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB0lBwHAjoa+6ARKmbTvaqAz1i2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY3RERDQjQ2Q0Y0MEI1MjY0MUY3MUJGNzc1NkRGQTI5 RjQxNTlBMjAeFw0yNjA5MjMxMjQ3MDNaFw0yNjA5MjQxNjM2MDNaMDMxMTAvBgNV BAMTKDQ5RDhCMzRGREEwNTYyNDQ5MUMyMzhFQTcxRjAyQzZGNzI0OTg4OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXd2ckhaaOHMOCo06M83vQ99Vl spK9rsPV2iE7yLZAKyhjq2VSaM2+gz75zi2le+o8wusECi0qwdSvGjDvnUexpb5p fUbSI/e61IFWfzOAmFClrb0kyQL7q2YCrZplcsMEEW+T6G3ipOAZqDrpzrsdajmT sVzh5FlnJ8AHvclb91qb5Pm8xoGVzoDrhq99VvdbLIsbn9uO7iBHQnQyJv5Sqwku +X8rUXvyY6n2BcGPa2VqqEDePNlxa+0JJ8cN53PzLc9vAkHhhJMqB6eSGQzz0Xd4 o4xxUe1rVrHmwVfLvUI7/pkEHLI4y+oj9vHUUgA2h4UKf+YlB4Y8om7M93jVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSdizT9oFYkSRwjjqcfAsb3JJiJYwHwYDVR0j BBgwFoAU1n3ctGz0C1JkH3G/d1bfop9BWaIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmM3ZTgwODEtNjNhZi00OWU3LTk2NDYtNzZjMjVhNWU5N2NhLzAvRDY3RERDQjQ2 Q0Y0MEI1MjY0MUY3MUJGNzc1NkRGQTI5RjQxNTlBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjdERENCNDZDRjQwQjUyNjQxRjcxQkY3NzU2REZBMjlGNDE1 OUEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmM3ZTgwODEtNjNhZi00OWU3LTk2 NDYtNzZjMjVhNWU5N2NhLzAvRDY3RERDQjQ2Q0Y0MEI1MjY0MUY3MUJGNzc1NkRG QTI5RjQxNTlBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHEj9IbH3Kx3SzGxZo6TMPvAiaGqgVBIVAFC g3i8Lf34WtldOjGUdMNsnKjdD1xPUT9pAbEoYpJWILWOEKL4X8k/24JlCf8eSUDU nJ80dZSkFrTUm3IKDLkRy2ghCHZ9nyAFo4iueIxKYKGgrcJgEk6TJwYxsDK9G8Su FMjF90MOHa1azYBtVWmm0P60EQwN2rAVOHeKX9k9Rqnfa5Y13L238BsVOs81V+tj ASZAbcSsuG6+vouJi+TmU54uyKbMDyOEYxcRleKCG53Ke/l7ZJfPswOAzA1GXR6t wk0VuMEjtl9AU5YK1uwFTibHoWSrTXcyeWlJop38ZGSIhUpT9bA= -----END CERTIFICATE-----Generated at Thu Sep 24 03:40:31 2026 by rpki-client