$ rpki-client -vvvf rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.mft File: 2111C1DE0964BA3363560863B0A6338C56E44B27.mft (raw, json) Hash identifier: ASkjBXfjy/DbuAsyibEVpiK9NyjcCLY+WVnLAqDNb5Y= Subject key identifier: A9:F9:BE:CC:E4:0B:E1:3E:A4:A4:15:BC:95:2F:18:DE:09:D8:14:B6 Authority key identifier: 21:11:C1:DE:09:64:BA:33:63:56:08:63:B0:A6:33:8C:56:E4:4B:27 Certificate issuer: /CN=2111C1DE0964BA3363560863B0A6338C56E44B27 Certificate serial: 41B69DAA1E7A8F6476AE97E5A873225BC87E0C08 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2111C1DE0964BA3363560863B0A6338C56E44B27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 04:34:08 +0000 Manifest this update: Thu 17 Sep 2026 04:29:08 +0000 Manifest next update: Fri 18 Sep 2026 07:42:08 +0000 Files and hashes: 1: 2111C1DE0964BA3363560863B0A6338C56E44B27.crl (hash: h36ba/SF7iMbXKoebcx7ZO5XaqvwydjKFgWILpGytjY=) 2: 3130332e3136322e3130352e302f32342d3234203d3e20313337333136.roa (hash: reUfW2xUZcOA3UU73tVnYqvdrqLkl2f35VFNF05Zufw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.crl rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2111C1DE0964BA3363560863B0A6338C56E44B27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:b6:9d:aa:1e:7a:8f:64:76:ae:97:e5:a8:73:22:5b:c8:7e:0c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2111C1DE0964BA3363560863B0A6338C56E44B27 Validity Not Before: Sep 17 04:29:08 2026 GMT Not After : Sep 18 07:42:08 2026 GMT Subject: CN=A9F9BECCE40BE13EA4A415BC952F18DE09D814B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5d:67:b7:d3:8c:f8:73:57:f2:79:88:a9:77: 8e:6d:b8:62:63:d9:ad:68:c1:ca:ea:08:60:01:97: 65:a3:54:54:7d:93:46:87:7e:03:c8:a6:d0:3d:97: 83:42:f8:51:ce:31:18:a4:02:12:a6:b8:0f:6e:ac: f9:df:43:fd:9a:fb:2c:3e:89:75:3b:b7:41:1c:83: 28:17:0b:8f:4d:7a:b0:b2:66:c6:f3:6d:c7:08:51: 2f:47:b8:64:5b:57:b0:6c:a1:5d:6f:43:fc:a2:4f: 5a:4d:35:51:0b:10:17:99:6f:62:33:b0:4a:f6:f9: 95:e2:aa:c3:d4:0f:c1:19:1f:5b:ee:fb:ce:84:5e: 5a:5d:70:22:d9:92:48:2f:f0:89:9a:dc:6d:a0:2a: bf:9c:da:ef:c2:c8:a6:f8:d3:26:6d:96:1a:3d:24: 97:b8:7e:5e:9a:81:ed:19:69:5d:60:3f:1e:0a:4d: 0f:93:58:67:91:08:12:b0:cd:40:10:91:4a:ee:08: f5:bc:ea:c9:e0:a9:7a:18:a9:00:1d:51:38:66:f1: 1c:2a:c1:d2:cf:76:b0:ff:1e:21:dc:09:49:79:64: 0f:5f:f2:7b:dd:c8:d5:c4:02:95:a4:e9:90:1c:4e: f2:51:4d:02:ce:30:90:fd:02:15:87:c4:aa:1f:f1: ab:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F9:BE:CC:E4:0B:E1:3E:A4:A4:15:BC:95:2F:18:DE:09:D8:14:B6 X509v3 Authority Key Identifier: keyid:21:11:C1:DE:09:64:BA:33:63:56:08:63:B0:A6:33:8C:56:E4:4B:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2111C1DE0964BA3363560863B0A6338C56E44B27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:45:bd:57:02:e2:78:e0:bb:68:a0:70:ce:11:f4:95:25:7b: ad:cc:8b:6a:b3:ab:d5:d6:88:0a:a0:c4:51:d2:9a:19:55:d5: 4d:26:8a:53:a7:a1:54:09:4a:fa:23:f0:16:6e:af:06:05:f9: 04:7d:e5:8b:2e:f1:6b:1c:c4:ba:98:8e:ff:4b:32:1e:bc:41: a1:57:4f:45:be:ab:d9:7f:cf:e1:9a:83:48:f2:3c:54:dc:b4: b9:de:1d:d4:85:df:17:88:23:f0:9d:db:f8:09:10:78:72:c3: ea:45:c7:db:05:95:a3:f0:73:e7:c7:e6:ac:15:57:b5:7f:88: 89:8b:8c:ac:33:9b:6e:3a:27:af:31:17:f6:8e:60:68:dc:65: 94:70:b0:bc:d6:fe:70:e6:6c:ae:fb:25:09:d1:a7:df:45:28: c2:fd:a4:1e:48:13:3c:93:ef:30:bb:e7:e2:91:15:81:6f:ea: df:78:ac:a0:d4:93:4a:ef:b8:d9:8b:b3:d6:4f:9e:13:1d:2f: 2a:04:ac:e6:aa:50:f6:a7:3c:d3:d6:d9:1f:1e:91:20:23:2a: 5a:be:8d:b5:5c:ff:c2:fd:8b:ef:51:29:64:92:8b:c2:22:ef: 6d:d7:a5:b6:e2:62:e4:ac:2b:79:5c:0c:61:87:f4:cc:d7:ff: 1e:41:6c:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQbadqh56j2R2rpflqHMiW8h+DAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjExMUMxREUwOTY0QkEzMzYzNTYwODYzQjBBNjMzOEM1 NkU0NEIyNzAeFw0yNjA5MTcwNDI5MDhaFw0yNjA5MTgwNzQyMDhaMDMxMTAvBgNV BAMTKEE5RjlCRUNDRTQwQkUxM0VBNEE0MTVCQzk1MkYxOERFMDlEODE0QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnXWe304z4c1fyeYipd45tuGJj 2a1owcrqCGABl2WjVFR9k0aHfgPIptA9l4NC+FHOMRikAhKmuA9urPnfQ/2a+yw+ iXU7t0EcgygXC49NerCyZsbzbccIUS9HuGRbV7BsoV1vQ/yiT1pNNVELEBeZb2Iz sEr2+ZXiqsPUD8EZH1vu+86EXlpdcCLZkkgv8Ima3G2gKr+c2u/CyKb40yZtlho9 JJe4fl6age0ZaV1gPx4KTQ+TWGeRCBKwzUAQkUruCPW86sngqXoYqQAdUThm8Rwq wdLPdrD/HiHcCUl5ZA9f8nvdyNXEApWk6ZAcTvJRTQLOMJD9AhWHxKof8avhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqfm+zOQL4T6kpBW8lS8Y3gnYFLYwHwYDVR0j BBgwFoAUIRHB3glkujNjVghjsKYzjFbkSycwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzcyMjQzNjAtMjQ1ZC00YTFhLWFmMzYtZjliZWZjZGI3MGI3LzAvMjExMUMxREUw OTY0QkEzMzYzNTYwODYzQjBBNjMzOEM1NkU0NEIyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMTExQzFERTA5NjRCQTMzNjM1NjA4NjNCMEE2MzM4QzU2RTQ0 QjI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzcyMjQzNjAtMjQ1ZC00YTFhLWFm MzYtZjliZWZjZGI3MGI3LzAvMjExMUMxREUwOTY0QkEzMzYzNTYwODYzQjBBNjMz OEM1NkU0NEIyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVFvVcC4njgu2igcM4R9JUle63Mi2qzq9XW iAqgxFHSmhlV1U0milOnoVQJSvoj8BZurwYF+QR95Ysu8WscxLqYjv9LMh68QaFX T0W+q9l/z+Gag0jyPFTctLneHdSF3xeII/Cd2/gJEHhyw+pFx9sFlaPwc+fH5qwV V7V/iImLjKwzm246J68xF/aOYGjcZZRwsLzW/nDmbK77JQnRp99FKML9pB5IEzyT 7zC75+KRFYFv6t94rKDUk0rvuNmLs9ZPnhMdLyoErOaqUPanPNPW2R8ekSAjKlq+ jbVc/8L9i+9RKWSSi8Ii723XpbbiYuSsK3lcDGGH9MzX/x5BbMU= -----END CERTIFICATE-----Generated at Thu Sep 17 07:37:15 2026 by rpki-client