$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/C01EB179D8CA7855A389FF2A44539E68ED646B5C.mft File: C01EB179D8CA7855A389FF2A44539E68ED646B5C.mft (raw, json) Hash identifier: 3BXhk61s3B+Xck+SkGkpEHY1kK9/wr57BUvWgPE947I= Subject key identifier: 7B:59:DE:58:48:BB:6E:4F:9B:1E:94:C2:3B:F7:73:79:A4:28:15:FC Authority key identifier: C0:1E:B1:79:D8:CA:78:55:A3:89:FF:2A:44:53:9E:68:ED:64:6B:5C Certificate issuer: /CN=C01EB179D8CA7855A389FF2A44539E68ED646B5C Certificate serial: 539439787BA693533220BAAF05A9E7CF65104F0B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C01EB179D8CA7855A389FF2A44539E68ED646B5C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/C01EB179D8CA7855A389FF2A44539E68ED646B5C.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 08:34:10 +0000 Manifest this update: Thu 17 Sep 2026 08:29:10 +0000 Manifest next update: Fri 18 Sep 2026 10:13:10 +0000 Files and hashes: 1: 3130332e3131302e382e302f32322d3232203d3e20313331373137.roa (hash: Kg2bdy6dTnZCGuVMJi5no/EOV3EwEAkV5IIyUjha9e4=) 2: 3130332e3131302e382e302f32342d3234203d3e20313331373137.roa (hash: s+lAIuyl1dv1WqDdq41tXGp1HYckaXMlnCxzrakKc3U=) 3: 3130332e3131302e392e302f32342d3234203d3e20313331373137.roa (hash: b4LTEHtBD4cacvWmxSniiJll9o+3QBEIUc2Dmt3tUNE=) 4: 3130332e3131302e31312e302f32342d3234203d3e20313331373137.roa (hash: NKItzYNarKE+TUhJiR9ldWP5b/1HRTlqSNKMooaCjyY=) 5: 3130332e3131302e31302e302f32342d3234203d3e20313331373137.roa (hash: Mpp9OU1lEkyqF3Ggv/Uj91rXdSfC43uVMM30opk/H2Q=) 6: C01EB179D8CA7855A389FF2A44539E68ED646B5C.crl (hash: 9ISWIdcQsXii1ZvBnFPPZ18MdhUS5xiwap274XQ3Bgc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/C01EB179D8CA7855A389FF2A44539E68ED646B5C.crl rsync://rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/C01EB179D8CA7855A389FF2A44539E68ED646B5C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C01EB179D8CA7855A389FF2A44539E68ED646B5C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:94:39:78:7b:a6:93:53:32:20:ba:af:05:a9:e7:cf:65:10:4f:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C01EB179D8CA7855A389FF2A44539E68ED646B5C Validity Not Before: Sep 17 08:29:10 2026 GMT Not After : Sep 18 10:13:10 2026 GMT Subject: CN=7B59DE5848BB6E4F9B1E94C23BF77379A42815FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f2:d0:30:7f:b6:f4:5f:3c:b1:8d:ca:51:f4: d6:d6:da:5c:c3:5e:2f:13:d4:7c:3f:60:b1:cc:0a: bd:43:38:d0:df:6d:e2:f3:ab:d4:42:fb:a6:07:04: 76:1b:d4:bc:23:95:eb:06:e5:be:f2:e5:99:34:97: 09:94:bc:57:b1:db:63:96:ab:f7:5a:2b:0c:c4:34: 63:05:08:f2:37:1a:e7:e1:f3:97:24:e4:84:39:50: 95:5f:41:6e:7a:4c:17:0d:e8:ac:3d:2e:92:97:34: 3c:07:27:05:0c:6b:66:ed:8c:bf:68:97:69:3c:86: 64:eb:d7:cf:99:41:74:6f:3e:4e:11:18:4a:1e:1a: da:d1:3a:d6:d4:53:53:49:e6:fc:8c:83:96:a9:eb: cf:a9:e8:6b:6f:0b:d0:25:82:f1:63:66:8c:82:39: c3:01:00:30:95:c8:ba:9f:d0:b0:ea:21:d3:6f:bc: 3d:0d:53:58:82:16:49:13:f3:65:9b:6b:22:d3:3a: ff:91:5f:f9:59:c4:2b:01:56:00:67:bd:4f:c4:cc: 87:b2:bd:a1:17:5e:0a:f3:0a:a0:3d:5b:60:19:75: e0:9f:d0:4c:42:aa:6e:9d:0f:6c:d8:bb:ba:10:62: 2e:75:0b:1e:7d:66:2e:5f:41:40:7f:b6:53:64:34: 3d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:59:DE:58:48:BB:6E:4F:9B:1E:94:C2:3B:F7:73:79:A4:28:15:FC X509v3 Authority Key Identifier: keyid:C0:1E:B1:79:D8:CA:78:55:A3:89:FF:2A:44:53:9E:68:ED:64:6B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/C01EB179D8CA7855A389FF2A44539E68ED646B5C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C01EB179D8CA7855A389FF2A44539E68ED646B5C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/C01EB179D8CA7855A389FF2A44539E68ED646B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:cd:47:23:3c:8b:b4:f5:18:90:d2:bc:94:3b:ad:12:0c:2e: 4b:05:48:ea:01:f7:f6:b3:0c:53:07:ae:68:64:e4:29:92:f3: 71:96:08:a3:cf:4a:43:23:97:5d:4c:ac:23:eb:2a:f5:04:8c: 47:be:e1:86:51:06:2d:a8:8d:5b:f6:7f:72:73:70:f7:f1:68: e4:53:7e:c3:60:03:8c:35:00:9d:d5:b6:ec:3d:22:5f:66:ea: 56:2a:1e:63:fd:df:f4:70:e1:49:33:cd:b1:6c:cb:d7:23:2a: a1:7c:8c:02:8f:64:2c:87:71:48:d1:bb:00:a9:4b:71:3a:54: ab:1d:1c:cc:4a:85:7c:7b:5f:9d:08:92:af:29:1f:2b:1d:17: 12:69:f8:6f:b5:bb:1d:d5:8d:2b:af:58:a5:bb:de:ea:48:7c: 9a:5d:e7:0a:3d:f7:30:31:7e:ae:fb:bf:25:8a:e6:06:78:86: 13:f8:21:e8:6f:32:51:1a:65:ae:ed:6c:a3:05:57:ab:11:dd: 32:d9:e8:8c:a9:d9:6c:1f:c8:41:fa:c4:b5:ec:e6:9b:f7:41: b4:31:85:82:fc:f5:5c:c5:49:44:fc:a9:7d:1a:f9:1f:88:23: 90:7b:5f:38:ae:d8:7d:03:42:d2:6a:fd:a6:73:58:d8:f9:0f: c4:09:58:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU5Q5eHumk1MyILqvBannz2UQTwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAxRUIxNzlEOENBNzg1NUEzODlGRjJBNDQ1MzlFNjhF RDY0NkI1QzAeFw0yNjA5MTcwODI5MTBaFw0yNjA5MTgxMDEzMTBaMDMxMTAvBgNV BAMTKDdCNTlERTU4NDhCQjZFNEY5QjFFOTRDMjNCRjc3Mzc5QTQyODE1RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu8tAwf7b0XzyxjcpR9NbW2lzD Xi8T1Hw/YLHMCr1DONDfbeLzq9RC+6YHBHYb1LwjlesG5b7y5Zk0lwmUvFex22OW q/daKwzENGMFCPI3Gufh85ck5IQ5UJVfQW56TBcN6Kw9LpKXNDwHJwUMa2btjL9o l2k8hmTr18+ZQXRvPk4RGEoeGtrROtbUU1NJ5vyMg5ap68+p6GtvC9AlgvFjZoyC OcMBADCVyLqf0LDqIdNvvD0NU1iCFkkT82WbayLTOv+RX/lZxCsBVgBnvU/EzIey vaEXXgrzCqA9W2AZdeCf0ExCqm6dD2zYu7oQYi51Cx59Zi5fQUB/tlNkND2BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe1neWEi7bk+bHpTCO/dzeaQoFfwwHwYDVR0j BBgwFoAUwB6xedjKeFWjif8qRFOeaO1ka1wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmRhNzczZGQtOTVhYS00NDdlLTk5M2QtNGNmNGExMjczYjMxLzAvQzAxRUIxNzlE OENBNzg1NUEzODlGRjJBNDQ1MzlFNjhFRDY0NkI1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMDFFQjE3OUQ4Q0E3ODU1QTM4OUZGMkE0NDUzOUU2OEVENjQ2 QjVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmRhNzczZGQtOTVhYS00NDdlLTk5 M2QtNGNmNGExMjczYjMxLzAvQzAxRUIxNzlEOENBNzg1NUEzODlGRjJBNDQ1MzlF NjhFRDY0NkI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXNRyM8i7T1GJDSvJQ7rRIMLksFSOoB9/az DFMHrmhk5CmS83GWCKPPSkMjl11MrCPrKvUEjEe+4YZRBi2ojVv2f3JzcPfxaORT fsNgA4w1AJ3Vtuw9Il9m6lYqHmP93/Rw4UkzzbFsy9cjKqF8jAKPZCyHcUjRuwCp S3E6VKsdHMxKhXx7X50Ikq8pHysdFxJp+G+1ux3VjSuvWKW73upIfJpd5wo99zAx fq77vyWK5gZ4hhP4IehvMlEaZa7tbKMFV6sR3TLZ6Iyp2WwfyEH6xLXs5pv3QbQx hYL89VzFSUT8qX0a+R+II5B7Xziu2H0DQtJq/aZzWNj5D8QJWNE= -----END CERTIFICATE-----Generated at Thu Sep 17 10:46:29 2026 by rpki-client