$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft File: 8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft (raw, json) Hash identifier: 27kcTVvuSfs3OoG88hitM1Q2V47cou30izusRNPaLqQ= Subject key identifier: 77:D7:41:04:E9:89:D8:39:18:D4:CA:6A:74:29:24:F4:01:77:54:8C Authority key identifier: 80:76:C5:64:77:B8:FD:54:60:6E:8F:7B:B9:5C:1B:CD:95:32:96:A6 Certificate issuer: /CN=8076C56477B8FD54606E8F7BB95C1BCD953296A6 Certificate serial: 57F33AE816A5117D85BEDACC7AC3B1C90CEF6AAF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft Manifest number: E7 Signing time: Fri 23 Oct 2026 11:28:20 +0000 Manifest this update: Fri 23 Oct 2026 11:23:20 +0000 Manifest next update: Sat 24 Oct 2026 13:42:20 +0000 Files and hashes: 1: AS17885.roa (hash: QDIkXwtnGbligvAEMFVpJlik2NMuLqD9yutNqqC9tvo=) 2: AS139994.roa (hash: yvMW+tHCsBkuY1gG/yGlJ6JOSC3lCz//Xfli/4HGudE=) 3: 8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl (hash: sI3CCGImcNC/Sp8eykAKWP5beg/oP5rWDrOcP0yhxxA=) 4: AS24203.roa (hash: elsc0fS7A3LxkWGHoyme7eZUKOvhFf04i/z5CF+hz8c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 08:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f3:3a:e8:16:a5:11:7d:85:be:da:cc:7a:c3:b1:c9:0c:ef:6a:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8076C56477B8FD54606E8F7BB95C1BCD953296A6 Validity Not Before: Oct 23 11:23:20 2026 GMT Not After : Oct 24 13:42:20 2026 GMT Subject: CN=77D74104E989D83918D4CA6A742924F40177548C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:95:e6:48:e9:f1:31:89:f8:2e:92:fb:b9:b0: b5:88:62:ba:7d:11:8d:95:b0:f6:80:07:b9:ec:05: ad:d7:68:77:d7:df:99:e9:5c:04:14:92:a7:8a:5d: bf:29:6d:eb:60:8a:1b:c7:fc:ee:8f:74:84:bc:95: 80:69:d7:b8:37:08:de:1b:51:1c:3c:bb:6f:54:27: a2:24:fc:03:7b:20:2e:b0:85:1d:0e:bd:50:c4:b7: b8:b9:d9:a3:2a:af:b8:4b:1e:5d:a8:cc:56:d4:a8: 26:50:73:c7:8b:77:b7:5d:c8:94:01:a2:09:4d:d9: d7:f3:6e:1b:58:3d:3c:73:fb:16:4e:9c:51:23:eb: 13:a7:e7:33:41:51:6e:5f:98:4b:4e:0e:25:c4:46: 3f:3a:a3:85:a2:7b:6e:e1:d9:1c:8e:57:e9:9c:c9: ef:be:be:48:57:d7:c2:d2:c5:d0:f7:fb:b8:c5:e1: d0:0f:7c:7c:5a:72:db:ce:ad:7a:3b:9d:72:78:a0: fd:40:d4:b8:38:d0:3f:26:28:9f:7c:3a:dd:be:61: 55:0c:4d:2c:0a:4b:73:9d:26:dc:ed:97:4e:ee:09: 4e:6e:4d:10:ca:55:bb:67:2a:f5:f4:c3:7b:61:2d: 0c:9b:b4:1d:65:f4:30:42:e6:26:8b:a6:8d:2b:73: c7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D7:41:04:E9:89:D8:39:18:D4:CA:6A:74:29:24:F4:01:77:54:8C X509v3 Authority Key Identifier: keyid:80:76:C5:64:77:B8:FD:54:60:6E:8F:7B:B9:5C:1B:CD:95:32:96:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:39:c4:cd:08:45:b4:9d:03:7f:f4:67:18:c5:5a:63:73:09: 72:a9:94:2d:8b:18:46:f8:b1:d3:d3:72:83:3f:eb:7e:8a:6e: c3:5d:31:5c:b4:11:28:d5:c3:92:27:27:82:17:3b:c3:51:db: 94:c3:e1:b2:c7:40:6c:b5:08:01:cf:79:89:bb:8a:69:f6:51: 59:ca:e3:f6:c8:ff:bd:86:1f:6e:bd:fe:4f:b7:82:9e:99:22: 64:b3:9e:3f:2b:d5:93:32:75:a1:f4:d5:bb:02:bd:ee:f5:b1: 99:5d:52:c7:c9:dc:20:2a:15:57:dc:e5:57:4f:53:53:7f:64: ba:33:57:e8:d5:b9:e5:e8:d6:0b:27:b8:eb:06:a6:a7:85:a2: 55:bf:df:d8:ab:e7:0e:85:97:26:be:70:0f:3e:94:0a:a0:ad: bb:de:b0:30:d2:1f:52:91:47:a8:0e:eb:aa:e4:f2:06:d1:ef: a5:13:35:fb:b0:09:97:68:37:59:69:ff:47:ea:8c:1d:77:d0: 22:c3:db:f8:d6:5b:90:51:9f:fe:ad:17:a8:cf:b3:7e:eb:e4: a2:a4:f7:91:14:11:9f:8d:40:52:b6:e2:f3:17:87:67:ee:a5: d0:f2:ca:81:c8:e3:7b:74:28:79:79:bb:82:d1:e4:9c:f3:5e: c5:59:6d:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV/M66BalEX2FvtrMesOxyQzvaq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA3NkM1NjQ3N0I4RkQ1NDYwNkU4RjdCQjk1QzFCQ0Q5 NTMyOTZBNjAeFw0yNjEwMjMxMTIzMjBaFw0yNjEwMjQxMzQyMjBaMDMxMTAvBgNV BAMTKDc3RDc0MTA0RTk4OUQ4MzkxOEQ0Q0E2QTc0MjkyNEY0MDE3NzU0OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYleZI6fExifgukvu5sLWIYrp9 EY2VsPaAB7nsBa3XaHfX35npXAQUkqeKXb8pbetgihvH/O6PdIS8lYBp17g3CN4b URw8u29UJ6Ik/AN7IC6whR0OvVDEt7i52aMqr7hLHl2ozFbUqCZQc8eLd7ddyJQB oglN2dfzbhtYPTxz+xZOnFEj6xOn5zNBUW5fmEtODiXERj86o4Wie27h2RyOV+mc ye++vkhX18LSxdD3+7jF4dAPfHxactvOrXo7nXJ4oP1A1Lg40D8mKJ98Ot2+YVUM TSwKS3OdJtztl07uCU5uTRDKVbtnKvX0w3thLQybtB1l9DBC5iaLpo0rc8elAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd9dBBOmJ2DkY1MpqdCkk9AF3VIwwHwYDVR0j BBgwFoAUgHbFZHe4/VRgbo97uVwbzZUylqYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJkYjFlMGEtYTRlYy00OWRiLWJlODktOGQ3ZTdmYzJjMjI3LzEvODA3NkM1NjQ3 N0I4RkQ1NDYwNkU4RjdCQjk1QzFCQ0Q5NTMyOTZBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MDc2QzU2NDc3QjhGRDU0NjA2RThGN0JCOTVDMUJDRDk1MzI5 NkE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzEvODA3NkM1NjQ3N0I4RkQ1NDYwNkU4RjdCQjk1QzFC Q0Q5NTMyOTZBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJY5xM0IRbSdA3/0ZxjFWmNzCXKplC2LGEb4 sdPTcoM/636KbsNdMVy0ESjVw5InJ4IXO8NR25TD4bLHQGy1CAHPeYm7imn2UVnK 4/bI/72GH269/k+3gp6ZImSznj8r1ZMydaH01bsCve71sZldUsfJ3CAqFVfc5VdP U1N/ZLozV+jVueXo1gsnuOsGpqeFolW/39ir5w6Flya+cA8+lAqgrbvesDDSH1KR R6gO66rk8gbR76UTNfuwCZdoN1lp/0fqjB130CLD2/jWW5BRn/6tF6jPs37r5KKk 95EUEZ+NQFK24vMXh2fupdDyyoHI43t0KHl5u4LR5JzzXsVZba0= -----END CERTIFICATE-----Generated at Sat Oct 24 01:46:44 2026 by rpki-client