$ rpki-client -vvvf rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft File: 100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft (raw, json) Hash identifier: EJdMo8o6WIB7U2uTR8NcHUtI+z5ke3tRa3ZZK91boRo= Subject key identifier: 97:AB:B5:E6:00:3D:6D:78:76:0E:8C:CA:5A:95:95:2B:A2:82:E0:D9 Authority key identifier: 10:0E:5A:40:86:58:41:D5:6C:5A:B9:D0:CE:E7:21:88:07:7E:FA:A3 Certificate issuer: /CN=100E5A40865841D56C5AB9D0CEE72188077EFAA3 Certificate serial: 0C1729BD3118BCA0C887A231CE21F4749D2FD7D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 19:02:45 +0000 Manifest this update: Wed 16 Sep 2026 18:57:45 +0000 Manifest next update: Thu 17 Sep 2026 20:34:45 +0000 Files and hashes: 1: 100E5A40865841D56C5AB9D0CEE72188077EFAA3.crl (hash: csSDgSo9F1nI0efy7DSgbQRd0EEqAkGy2onvA6ghFjI=) 2: 323030313a6466343a6334303a3a2f34382d3438203d3e20313533303639.roa (hash: qQsYjjc0UOS4U0mqMilyLxWp2Jg/oy/EO/6yTd0J1SE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.crl rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:17:29:bd:31:18:bc:a0:c8:87:a2:31:ce:21:f4:74:9d:2f:d7:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=100E5A40865841D56C5AB9D0CEE72188077EFAA3 Validity Not Before: Sep 16 18:57:45 2026 GMT Not After : Sep 17 20:34:45 2026 GMT Subject: CN=97ABB5E6003D6D78760E8CCA5A95952BA282E0D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:af:fa:30:db:b5:78:63:2d:67:4f:20:46:e6: fd:75:d7:61:a5:33:9c:40:c7:d1:33:87:41:63:f0: f4:9a:4e:7f:6a:b7:58:30:36:bc:63:7b:66:35:bf: db:38:0f:4c:28:a1:9c:02:bf:09:b9:50:21:04:03: c6:6f:d4:bc:06:5d:0f:1f:8e:57:c4:c6:57:7d:cc: 5f:2a:84:81:92:1e:2c:42:d5:f1:dc:2c:8f:54:bf: 65:fc:69:da:bf:a0:05:9f:1e:f7:97:42:89:9e:09: ff:76:ad:39:34:55:0b:88:65:ec:95:42:33:76:39: c9:f2:41:55:a6:c2:87:ac:10:9f:65:47:a6:9d:fc: d2:05:ea:6e:79:10:cc:46:1f:1d:59:f5:eb:7e:89: 09:68:6d:78:88:1c:57:ea:8e:3d:ee:c2:88:46:2b: b0:b0:12:7d:ae:6b:9b:ea:cd:ae:56:35:45:20:2d: 2e:8a:09:a9:a2:0a:e0:ae:40:2e:d1:b6:92:a3:ee: a7:ea:2f:d2:15:bd:14:75:f4:9a:47:a1:ea:1d:a6: 91:10:a6:8d:b5:5e:d4:9e:b4:91:0c:65:ea:1c:ff: 80:1b:af:9e:18:85:eb:a7:0e:f8:b5:83:02:f3:28: 49:e6:d6:92:f4:4a:ae:4e:0e:fa:17:ee:fa:d2:15: d9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AB:B5:E6:00:3D:6D:78:76:0E:8C:CA:5A:95:95:2B:A2:82:E0:D9 X509v3 Authority Key Identifier: keyid:10:0E:5A:40:86:58:41:D5:6C:5A:B9:D0:CE:E7:21:88:07:7E:FA:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:55:62:7e:77:9d:8a:ef:c8:0e:21:2e:51:60:a8:5d:5b:82: f2:5d:e3:be:40:fd:47:91:07:65:a8:5d:8f:4b:13:73:0f:36: 21:0a:ac:08:8f:8f:c2:40:78:ac:32:ba:ad:74:1f:6f:92:ec: 58:1d:d8:63:5d:86:f6:ef:9d:0a:a2:ca:8f:69:41:e5:01:82: e5:df:98:31:5b:e9:81:10:7c:d4:94:1e:9a:10:59:b8:ae:77: ab:e6:9a:b3:34:a2:51:02:05:82:fb:71:94:50:3c:b1:d7:30: 06:be:ac:02:a1:e3:72:7c:65:ec:aa:72:23:5f:43:5c:53:37: 99:1b:45:da:a9:13:71:ce:94:ed:5a:56:26:2f:50:a2:94:5b: 32:58:0a:42:22:88:53:4e:bd:7e:79:50:d3:d5:11:fa:84:7c: 62:1b:a8:45:89:c4:9d:74:d8:f1:28:cf:7f:69:17:76:d1:50: 72:a4:0e:e0:7f:1c:90:1f:89:65:a3:d4:c2:09:d9:e3:f5:7c: fd:8c:90:ed:ae:ca:b1:7c:a9:53:30:af:49:c9:01:d5:e8:20: eb:bd:91:98:04:80:2c:36:cf:60:3c:c8:eb:b2:a4:02:de:90: 0f:22:e3:cf:8a:e2:86:0d:a0:36:3a:d6:6d:87:c8:cc:08:fd: 38:48:2d:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDBcpvTEYvKDIh6IxziH0dJ0v19UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAwRTVBNDA4NjU4NDFENTZDNUFCOUQwQ0VFNzIxODgw NzdFRkFBMzAeFw0yNjA5MTYxODU3NDVaFw0yNjA5MTcyMDM0NDVaMDMxMTAvBgNV BAMTKDk3QUJCNUU2MDAzRDZENzg3NjBFOENDQTVBOTU5NTJCQTI4MkUwRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCir/ow27V4Yy1nTyBG5v1112Gl M5xAx9Ezh0Fj8PSaTn9qt1gwNrxje2Y1v9s4D0wooZwCvwm5UCEEA8Zv1LwGXQ8f jlfExld9zF8qhIGSHixC1fHcLI9Uv2X8adq/oAWfHveXQomeCf92rTk0VQuIZeyV QjN2OcnyQVWmwoesEJ9lR6ad/NIF6m55EMxGHx1Z9et+iQlobXiIHFfqjj3uwohG K7CwEn2ua5vqza5WNUUgLS6KCamiCuCuQC7RtpKj7qfqL9IVvRR19JpHoeodppEQ po21XtSetJEMZeoc/4Abr54YheunDvi1gwLzKEnm1pL0Sq5ODvoX7vrSFdlvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl6u15gA9bXh2DozKWpWVK6KC4NkwHwYDVR0j BBgwFoAUEA5aQIZYQdVsWrnQzuchiAd++qMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjM2NTYxZDQtMjNjOC00YzliLTg5MGUtNGYyNjMyZTUyYzk3LzEvMTAwRTVBNDA4 NjU4NDFENTZDNUFCOUQwQ0VFNzIxODgwNzdFRkFBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDBFNUE0MDg2NTg0MUQ1NkM1QUI5RDBDRUU3MjE4ODA3N0VG QUEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzEvMTAwRTVBNDA4NjU4NDFENTZDNUFCOUQwQ0VFNzIx ODgwNzdFRkFBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBVYn53nYrvyA4hLlFgqF1bgvJd475A/UeR B2WoXY9LE3MPNiEKrAiPj8JAeKwyuq10H2+S7Fgd2GNdhvbvnQqiyo9pQeUBguXf mDFb6YEQfNSUHpoQWbiud6vmmrM0olECBYL7cZRQPLHXMAa+rAKh43J8ZeyqciNf Q1xTN5kbRdqpE3HOlO1aViYvUKKUWzJYCkIiiFNOvX55UNPVEfqEfGIbqEWJxJ10 2PEoz39pF3bRUHKkDuB/HJAfiWWj1MIJ2eP1fP2MkO2uyrF8qVMwr0nJAdXoIOu9 kZgEgCw2z2A8yOuypALekA8i48+K4oYNoDY61m2HyMwI/ThILcU= -----END CERTIFICATE-----Generated at Thu Sep 17 14:42:45 2026 by rpki-client