$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.mft File: 2677581645A49D82B36AA830484865F4B9D0FC43.mft (raw, json) Hash identifier: tbKMS4uY4ES9jrQ8KqrHthpiTwEy62CMvFN9fULFTAE= Subject key identifier: EC:F7:89:1A:9C:15:F8:43:54:BF:72:F4:6E:82:51:E1:82:EA:35:D0 Authority key identifier: 26:77:58:16:45:A4:9D:82:B3:6A:A8:30:48:48:65:F4:B9:D0:FC:43 Certificate issuer: /CN=2677581645A49D82B36AA830484865F4B9D0FC43 Certificate serial: 6896ABA9ED643C87836F7CB84754B35E2422B719 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2677581645A49D82B36AA830484865F4B9D0FC43.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.mft Manifest number: BA Signing time: Thu 17 Sep 2026 11:12:23 +0000 Manifest this update: Thu 17 Sep 2026 11:07:23 +0000 Manifest next update: Fri 18 Sep 2026 13:36:23 +0000 Files and hashes: 1: 2677581645A49D82B36AA830484865F4B9D0FC43.crl (hash: 0cfdiB/tsPUOki37U67YUUdfcLOM0kBdQVddFomZ+uY=) 2: 3130332e3130372e3133362e302f32342d3234203d3e20313530393332.roa (hash: ePHUQHjUtQqmubSQINVLXHx5bVCNeo3QJkNOBue6jYg=) 3: 3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa (hash: zMOWhJqH1J6fUN/OnJAxp19ayumIrg3uRIfyARwlsqI=) 4: 3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa (hash: 5qL4Akm0PbHI3eo3BSoRkovQkTSvAIBUTKI6uUAYPHA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.crl rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2677581645A49D82B36AA830484865F4B9D0FC43.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:96:ab:a9:ed:64:3c:87:83:6f:7c:b8:47:54:b3:5e:24:22:b7:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2677581645A49D82B36AA830484865F4B9D0FC43 Validity Not Before: Sep 17 11:07:23 2026 GMT Not After : Sep 18 13:36:23 2026 GMT Subject: CN=ECF7891A9C15F84354BF72F46E8251E182EA35D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ac:5f:8c:48:38:85:d2:50:f3:ef:f6:99:f4: 5e:14:d2:e9:54:19:6b:25:9d:0b:06:2f:20:64:f2: 31:ed:fa:90:e4:b7:0f:71:fa:af:a0:f0:94:0f:22: a8:9c:42:c0:e5:ec:ca:b0:bc:66:3b:28:af:fa:f1: ab:f7:ea:30:09:98:8c:b3:5e:44:7c:32:c8:0b:2f: 84:2f:13:ad:90:29:ef:33:79:3b:d3:10:50:a6:27: 17:98:4e:eb:69:6d:09:e1:2a:43:bd:d9:33:33:d7: e8:67:e2:c6:cf:b4:09:1e:01:a6:2e:d2:6c:b7:0b: 6b:2c:1b:c7:e5:02:92:ce:69:72:a1:28:c6:76:0c: 3d:6a:1e:01:eb:cf:d4:4d:19:04:3d:26:b4:f6:60: 85:6c:f2:86:5d:c1:33:0d:7f:e8:c5:3b:09:9e:0d: 1a:78:cc:5a:88:db:6f:56:fd:8e:5e:30:48:9f:98: 8e:90:6a:a9:ba:98:75:d9:27:29:ca:c4:15:f1:61: d7:90:4b:c2:46:a8:48:46:b8:78:23:f9:b6:99:55: 13:8a:a6:90:60:36:d9:d9:2f:ea:b0:18:52:30:0f: 1b:36:a7:e6:17:e8:a8:32:6d:12:85:3e:b9:dd:9b: 07:83:f5:33:40:b0:8d:a5:cb:c0:f6:fa:9b:65:15: 5e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F7:89:1A:9C:15:F8:43:54:BF:72:F4:6E:82:51:E1:82:EA:35:D0 X509v3 Authority Key Identifier: keyid:26:77:58:16:45:A4:9D:82:B3:6A:A8:30:48:48:65:F4:B9:D0:FC:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2677581645A49D82B36AA830484865F4B9D0FC43.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:0f:ba:ad:df:b5:0c:ac:5e:22:29:ae:26:58:80:38:2c:f2: 27:50:0d:b8:8c:70:df:06:a5:fd:b6:94:72:88:1f:30:4e:40: fd:4e:9a:3a:d8:62:97:51:5b:19:39:49:2c:22:c8:69:8f:91: e4:38:65:6c:ba:52:a6:06:06:35:b1:87:42:1e:13:8b:a6:73: b3:86:c2:a6:7f:4c:71:1e:29:e1:3d:62:0c:af:56:1d:59:a4: 62:f5:56:ec:a2:92:c7:39:6a:71:de:51:bd:d6:5c:97:eb:a6: 77:b6:28:c6:aa:1c:27:65:fd:df:23:16:c9:58:4c:8e:45:37: 36:e7:f0:96:57:a2:c1:c0:79:bf:3f:8d:47:ec:08:c8:2f:1f: 63:77:60:12:e4:7d:d7:95:e6:a3:e3:92:84:ff:39:72:e6:b6: 32:cc:64:42:1c:41:a3:b8:cb:95:7a:93:02:e0:2d:f3:91:a2: 42:bc:16:6e:13:da:25:d5:e1:04:c1:79:cf:23:97:c3:1b:55: 5e:a2:49:98:eb:f9:37:90:22:dc:49:00:72:aa:42:cc:6a:93: ee:7b:ca:89:77:ab:1c:2a:ad:05:91:9b:c2:26:ff:24:d1:bc: 5f:e1:f2:1f:b8:25:88:66:b2:ac:78:9f:55:d0:96:d3:9d:b8: 96:14:fe:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaJarqe1kPIeDb3y4R1SzXiQitxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY3NzU4MTY0NUE0OUQ4MkIzNkFBODMwNDg0ODY1RjRC OUQwRkM0MzAeFw0yNjA5MTcxMTA3MjNaFw0yNjA5MTgxMzM2MjNaMDMxMTAvBgNV BAMTKEVDRjc4OTFBOUMxNUY4NDM1NEJGNzJGNDZFODI1MUUxODJFQTM1RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyrF+MSDiF0lDz7/aZ9F4U0ulU GWslnQsGLyBk8jHt+pDktw9x+q+g8JQPIqicQsDl7MqwvGY7KK/68av36jAJmIyz XkR8MsgLL4QvE62QKe8zeTvTEFCmJxeYTutpbQnhKkO92TMz1+hn4sbPtAkeAaYu 0my3C2ssG8flApLOaXKhKMZ2DD1qHgHrz9RNGQQ9JrT2YIVs8oZdwTMNf+jFOwme DRp4zFqI229W/Y5eMEifmI6Qaqm6mHXZJynKxBXxYdeQS8JGqEhGuHgj+baZVROK ppBgNtnZL+qwGFIwDxs2p+YX6KgybRKFPrndmweD9TNAsI2ly8D2+ptlFV4nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7PeJGpwV+ENUv3L0boJR4YLqNdAwHwYDVR0j BBgwFoAUJndYFkWknYKzaqgwSEhl9LnQ/EMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGFmMzE1OTktOGIwOC00ZmZkLWEwNTYtNzk1ZThhYTBhNTg2LzAvMjY3NzU4MTY0 NUE0OUQ4MkIzNkFBODMwNDg0ODY1RjRCOUQwRkM0My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNjc3NTgxNjQ1QTQ5RDgyQjM2QUE4MzA0ODQ4NjVGNEI5RDBG QzQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGFmMzE1OTktOGIwOC00ZmZkLWEw NTYtNzk1ZThhYTBhNTg2LzAvMjY3NzU4MTY0NUE0OUQ4MkIzNkFBODMwNDg0ODY1 RjRCOUQwRkM0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAPuq3ftQysXiIpriZYgDgs8idQDbiMcN8G pf22lHKIHzBOQP1OmjrYYpdRWxk5SSwiyGmPkeQ4ZWy6UqYGBjWxh0IeE4umc7OG wqZ/THEeKeE9YgyvVh1ZpGL1Vuyiksc5anHeUb3WXJfrpne2KMaqHCdl/d8jFslY TI5FNzbn8JZXosHAeb8/jUfsCMgvH2N3YBLkfdeV5qPjkoT/OXLmtjLMZEIcQaO4 y5V6kwLgLfORokK8Fm4T2iXV4QTBec8jl8MbVV6iSZjr+TeQItxJAHKqQsxqk+57 yol3qxwqrQWRm8Im/yTRvF/h8h+4JYhmsqx4n1XQltOduJYU/tg= -----END CERTIFICATE-----Generated at Thu Sep 17 14:42:19 2026 by rpki-client