$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft File: 647AC2310971579801DD46D3B271B994E9E436B8.mft (raw, json) Hash identifier: /JxeKAU2nLJ0Fy6xfpkzl8ZgoFx7S8l9umm80FlKWA8= Subject key identifier: 17:8A:41:22:51:82:87:9E:41:81:7B:1A:09:DB:2F:EB:D5:0E:1E:C6 Authority key identifier: 64:7A:C2:31:09:71:57:98:01:DD:46:D3:B2:71:B9:94:E9:E4:36:B8 Certificate issuer: /CN=647AC2310971579801DD46D3B271B994E9E436B8 Certificate serial: 39740B80D34774A1320B752C971583E56389D7D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/647AC2310971579801DD46D3B271B994E9E436B8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 22:52:08 +0000 Manifest this update: Wed 16 Sep 2026 22:47:08 +0000 Manifest next update: Fri 18 Sep 2026 00:19:08 +0000 Files and hashes: 1: 3133382e3235322e3133392e302f32342d3234203d3e20313534333837.roa (hash: yku2OKFmq6fXhF7DFYEYGMGLBbIVUHGQwGNi4OKZMJU=) 2: 647AC2310971579801DD46D3B271B994E9E436B8.crl (hash: n1ln1hH7K7A09F8Zswyq9J9rfAYnlR5HPY9d3HT/tnA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.crl rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/647AC2310971579801DD46D3B271B994E9E436B8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:74:0b:80:d3:47:74:a1:32:0b:75:2c:97:15:83:e5:63:89:d7:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=647AC2310971579801DD46D3B271B994E9E436B8 Validity Not Before: Sep 16 22:47:08 2026 GMT Not After : Sep 18 00:19:08 2026 GMT Subject: CN=178A41225182879E41817B1A09DB2FEBD50E1EC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:42:8c:76:f9:d2:ef:92:02:49:bd:ba:3e:e4: f2:14:0c:df:86:de:78:d3:e5:76:e3:a1:94:b0:9f: 03:2a:2b:4a:6f:15:c0:cc:10:5f:a3:60:be:0c:0d: b1:98:12:ce:d3:81:43:47:55:ef:e4:b3:61:d1:10: 75:a0:95:c9:b7:a8:a2:7d:05:88:cd:81:15:26:4b: 1f:ca:df:c8:08:8d:f6:d2:7a:49:55:59:31:87:fe: 9a:2b:5d:1a:6a:58:fe:47:51:fe:c8:f0:c7:67:e2: 2d:4b:a0:72:ee:c9:7a:2d:e0:ef:22:c0:69:70:83: d3:85:00:f6:80:52:6c:2e:f2:cb:56:80:62:7e:99: 19:ee:5b:88:f6:8c:a8:7c:b0:61:90:da:f8:a0:41: aa:26:5a:2d:ab:7b:61:5d:f3:b6:ae:e2:14:16:f5: a0:a8:87:6c:be:f0:d7:c7:1e:0a:af:84:f5:8d:5b: 47:bf:8d:27:18:4f:5a:56:ad:db:95:e4:80:f4:de: 23:e7:82:61:54:3c:93:b9:d2:f5:c9:c7:ce:0d:8e: 7e:9e:22:59:51:e7:2e:f3:04:0e:2d:52:8b:e9:b7: 44:45:80:53:ed:e3:ef:28:e9:42:d7:1b:43:54:ff: 5e:ce:cd:b1:1a:03:e0:9d:b5:d4:01:c9:0d:34:88: 52:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8A:41:22:51:82:87:9E:41:81:7B:1A:09:DB:2F:EB:D5:0E:1E:C6 X509v3 Authority Key Identifier: keyid:64:7A:C2:31:09:71:57:98:01:DD:46:D3:B2:71:B9:94:E9:E4:36:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/647AC2310971579801DD46D3B271B994E9E436B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:1f:ec:90:c5:1a:c0:3d:e7:33:06:89:bd:c7:72:38:ff:63: f3:43:15:ab:8f:bd:45:78:27:98:61:73:3b:6b:4d:7f:eb:7b: ce:02:a3:49:85:8e:11:4f:ab:f7:37:f1:90:33:86:09:f0:54: 3f:76:41:eb:1b:d8:98:7a:17:13:08:f5:8b:d2:1b:7d:20:4c: ff:d9:b0:84:52:e6:83:c9:81:00:0d:79:b3:f3:4c:35:f6:34: c2:02:54:43:be:97:3f:87:c8:93:e1:93:8d:00:49:d7:cf:57: 33:71:31:bd:ba:b8:15:9b:e7:d3:3f:b9:76:7c:b1:bf:2d:e8: d0:f8:4e:10:5f:f6:3f:95:cf:47:5d:28:b7:42:6b:24:42:33: a4:1d:ca:94:74:7a:28:7e:7b:d5:00:3c:30:bd:36:0d:1f:6a: 7d:19:52:e2:79:5d:12:54:1e:76:d1:46:6a:87:d9:d9:27:f1: 77:8d:61:c4:14:26:43:b6:3a:06:f2:0b:d0:6c:6e:1b:85:18: 26:fb:df:3f:1f:02:a2:e0:99:90:a4:ad:ed:81:46:72:03:90: ea:bc:f3:8b:71:19:97:60:44:76:cb:4b:00:33:16:fc:e8:03: 12:01:3a:54:1f:ff:69:9d:71:33:04:c6:90:ea:fa:f0:2e:7b: fa:8c:38:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOXQLgNNHdKEyC3UslxWD5WOJ19UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ3QUMyMzEwOTcxNTc5ODAxREQ0NkQzQjI3MUI5OTRF OUU0MzZCODAeFw0yNjA5MTYyMjQ3MDhaFw0yNjA5MTgwMDE5MDhaMDMxMTAvBgNV BAMTKDE3OEE0MTIyNTE4Mjg3OUU0MTgxN0IxQTA5REIyRkVCRDUwRTFFQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbQox2+dLvkgJJvbo+5PIUDN+G 3njT5XbjoZSwnwMqK0pvFcDMEF+jYL4MDbGYEs7TgUNHVe/ks2HREHWglcm3qKJ9 BYjNgRUmSx/K38gIjfbSeklVWTGH/porXRpqWP5HUf7I8Mdn4i1LoHLuyXot4O8i wGlwg9OFAPaAUmwu8stWgGJ+mRnuW4j2jKh8sGGQ2vigQaomWi2re2Fd87au4hQW 9aCoh2y+8NfHHgqvhPWNW0e/jScYT1pWrduV5ID03iPngmFUPJO50vXJx84Njn6e IllR5y7zBA4tUovpt0RFgFPt4+8o6ULXG0NU/17OzbEaA+CdtdQByQ00iFJhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF4pBIlGCh55BgXsaCdsv69UOHsYwHwYDVR0j BBgwFoAUZHrCMQlxV5gB3UbTsnG5lOnkNrgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ3OGI1MGItNDQ5Yy00NTRiLTg1MGQtZjIwODAzNzg5YjU4LzAvNjQ3QUMyMzEw OTcxNTc5ODAxREQ0NkQzQjI3MUI5OTRFOUU0MzZCOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82NDdBQzIzMTA5NzE1Nzk4MDFERDQ2RDNCMjcxQjk5NEU5RTQz NkI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ3OGI1MGItNDQ5Yy00NTRiLTg1 MGQtZjIwODAzNzg5YjU4LzAvNjQ3QUMyMzEwOTcxNTc5ODAxREQ0NkQzQjI3MUI5 OTRFOUU0MzZCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIgf7JDFGsA95zMGib3Hcjj/Y/NDFauPvUV4 J5hhcztrTX/re84Co0mFjhFPq/c38ZAzhgnwVD92Qesb2Jh6FxMI9YvSG30gTP/Z sIRS5oPJgQANebPzTDX2NMICVEO+lz+HyJPhk40ASdfPVzNxMb26uBWb59M/uXZ8 sb8t6ND4ThBf9j+Vz0ddKLdCayRCM6QdypR0eih+e9UAPDC9Ng0fan0ZUuJ5XRJU HnbRRmqH2dkn8XeNYcQUJkO2OgbyC9BsbhuFGCb73z8fAqLgmZCkre2BRnIDkOq8 84txGZdgRHbLSwAzFvzoAxIBOlQf/2mdcTMExpDq+vAue/qMOAs= -----END CERTIFICATE-----Generated at Thu Sep 17 11:56:26 2026 by rpki-client