$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft File: 673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft (raw, json) Hash identifier: PKsT8MO8qaw8VRWgMHvpbLEu3U73P1NjhUfw20iBhfo= Subject key identifier: 4D:0E:8D:3F:1E:6D:DF:45:FC:D7:03:00:12:A6:22:DB:14:6F:00:2D Authority key identifier: 67:30:62:FF:FB:B8:7D:54:B2:4F:80:0C:A7:1D:4C:1D:D7:7E:2B:87 Certificate issuer: /CN=673062FFFBB87D54B24F800CA71D4C1DD77E2B87 Certificate serial: 290D9CCB84BEFA571920538C1BB5CD71DE2237A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 07:22:35 +0000 Manifest this update: Thu 17 Sep 2026 07:17:35 +0000 Manifest next update: Fri 18 Sep 2026 10:27:35 +0000 Files and hashes: 1: 3130332e32392e31302e302f32342d3234203d3e20313431303634.roa (hash: uSk10krPfxdFIHOBpfkxhwhZ1K9QJq18Qw/WrYuUlfQ=) 2: 3130332e32392e31302e302f32332d3233203d3e20313431303634.roa (hash: IBUQjMZ5NNzGmdB2zhWUusvHNKo79g9C811Va7sgvlo=) 3: 673062FFFBB87D54B24F800CA71D4C1DD77E2B87.crl (hash: a6MzlqEWX2uaGmRc5hwYU3TXXaFeZx4wqBqs71D8ydk=) 4: 3130332e32392e31312e302f32342d3234203d3e20313431303634.roa (hash: +AUN4MHHWAUjMgF6xm0EYpBlr5qq8MXy2UpCeEPacA4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.crl rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:0d:9c:cb:84:be:fa:57:19:20:53:8c:1b:b5:cd:71:de:22:37:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=673062FFFBB87D54B24F800CA71D4C1DD77E2B87 Validity Not Before: Sep 17 07:17:35 2026 GMT Not After : Sep 18 10:27:35 2026 GMT Subject: CN=4D0E8D3F1E6DDF45FCD7030012A622DB146F002D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c0:f3:03:df:05:01:94:ee:8c:16:ad:1e:88: 23:6c:01:97:78:64:b9:79:88:b4:f1:58:a8:0e:23: 2b:5b:3a:d3:db:86:99:60:40:42:0b:78:bb:fb:34: be:e7:c3:59:b3:f3:eb:30:3c:7b:9c:35:62:78:6f: e2:b2:55:1a:9e:72:ce:39:1d:77:e0:97:dd:31:33: a8:c9:58:5d:47:83:23:e8:20:03:74:48:50:71:08: 00:fe:35:d5:68:85:a9:d5:44:4a:f4:d1:ab:f4:9e: 1d:ca:0f:99:88:36:bd:86:f9:a5:85:6f:d5:4f:7a: 4e:62:15:84:2e:87:3d:b1:54:36:20:13:2a:38:52: 59:c3:95:8e:da:39:83:09:52:c4:df:ab:a4:e2:fa: f5:30:69:86:a3:59:88:d5:20:b6:22:b7:69:8a:c3: dc:36:db:80:0b:b2:ee:24:a2:0f:60:0b:de:48:f7: 2b:80:70:11:38:d0:b5:e4:86:3f:83:d4:68:f4:1a: b4:c0:0d:b0:e6:57:9e:1f:88:fa:35:4b:3f:32:bb: 83:f4:06:23:9b:25:a7:53:f7:6e:ff:f1:af:83:05: 52:ba:50:12:af:2f:a7:23:01:de:fd:9a:5f:6a:23: 5f:87:f9:38:b4:4b:f0:70:df:02:c5:ef:e7:49:d8: c7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0E:8D:3F:1E:6D:DF:45:FC:D7:03:00:12:A6:22:DB:14:6F:00:2D X509v3 Authority Key Identifier: keyid:67:30:62:FF:FB:B8:7D:54:B2:4F:80:0C:A7:1D:4C:1D:D7:7E:2B:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:7d:ff:35:af:a9:a6:a9:f3:17:de:5d:cb:84:df:73:ee:b3: fc:50:47:48:49:bf:49:8c:12:5a:4b:f9:19:89:1f:1c:9d:8d: 07:e2:5a:8b:c9:8c:8c:3b:7b:65:9c:e2:0e:6f:10:e6:f9:0f: 60:81:e3:bb:49:93:19:aa:2a:68:16:3c:92:1a:4d:bd:2c:95: 57:8a:be:96:1a:cd:57:22:d0:67:d2:b6:4a:1b:49:87:93:15: c1:da:07:f2:ae:c9:3e:48:fa:01:fb:38:2c:d7:de:31:17:87: a3:74:dc:b1:59:0b:df:1e:16:31:6d:de:bc:b9:1a:19:9d:de: a4:d8:17:cc:d7:93:99:a2:cf:5e:db:0a:68:75:3b:d8:dc:47: f1:66:48:69:17:f0:8b:53:bf:4d:43:7b:83:88:f9:44:4c:2d: 3a:07:dd:3a:bf:d0:ab:c6:7c:10:3c:5f:ee:82:ed:88:9c:57: ff:7c:5c:e1:2b:a6:62:75:03:62:62:57:be:cd:e5:23:ee:ca: 72:35:a7:f1:a3:5e:45:0b:e6:9b:88:a8:d9:46:29:59:74:e7: 56:71:ea:90:12:c5:0c:d5:c1:a2:78:7d:15:f1:4e:7e:21:63: 53:30:41:24:2c:e4:bf:d4:86:f5:94:6b:e1:b4:0f:e4:e1:2f: b9:96:c6:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKQ2cy4S++lcZIFOMG7XNcd4iN6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjczMDYyRkZGQkI4N0Q1NEIyNEY4MDBDQTcxRDRDMURE NzdFMkI4NzAeFw0yNjA5MTcwNzE3MzVaFw0yNjA5MTgxMDI3MzVaMDMxMTAvBgNV BAMTKDREMEU4RDNGMUU2RERGNDVGQ0Q3MDMwMDEyQTYyMkRCMTQ2RjAwMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5wPMD3wUBlO6MFq0eiCNsAZd4 ZLl5iLTxWKgOIytbOtPbhplgQEILeLv7NL7nw1mz8+swPHucNWJ4b+KyVRqecs45 HXfgl90xM6jJWF1HgyPoIAN0SFBxCAD+NdVohanVREr00av0nh3KD5mINr2G+aWF b9VPek5iFYQuhz2xVDYgEyo4UlnDlY7aOYMJUsTfq6Ti+vUwaYajWYjVILYit2mK w9w224ALsu4kog9gC95I9yuAcBE40LXkhj+D1Gj0GrTADbDmV54fiPo1Sz8yu4P0 BiObJadT927/8a+DBVK6UBKvL6cjAd79ml9qI1+H+Ti0S/Bw3wLF7+dJ2McXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTQ6NPx5t30X81wMAEqYi2xRvAC0wHwYDVR0j BBgwFoAUZzBi//u4fVSyT4AMpx1MHdd+K4cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWE1MzJjNjUtODBiZS00ZmRlLTg3ZDAtMzZjNWJkMjg4Y2Q4LzAvNjczMDYyRkZG QkI4N0Q1NEIyNEY4MDBDQTcxRDRDMURENzdFMkI4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzMwNjJGRkZCQjg3RDU0QjI0RjgwMENBNzFENEMxREQ3N0Uy Qjg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWE1MzJjNjUtODBiZS00ZmRlLTg3 ZDAtMzZjNWJkMjg4Y2Q4LzAvNjczMDYyRkZGQkI4N0Q1NEIyNEY4MDBDQTcxRDRD MURENzdFMkI4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN59/zWvqaap8xfeXcuE33Pus/xQR0hJv0mM ElpL+RmJHxydjQfiWovJjIw7e2Wc4g5vEOb5D2CB47tJkxmqKmgWPJIaTb0slVeK vpYazVci0GfStkobSYeTFcHaB/KuyT5I+gH7OCzX3jEXh6N03LFZC98eFjFt3ry5 Ghmd3qTYF8zXk5miz17bCmh1O9jcR/FmSGkX8ItTv01De4OI+URMLToH3Tq/0KvG fBA8X+6C7YicV/98XOErpmJ1A2JiV77N5SPuynI1p/GjXkUL5puIqNlGKVl051Zx 6pASxQzVwaJ4fRXxTn4hY1MwQSQs5L/UhvWUa+G0D+ThL7mWxrk= -----END CERTIFICATE-----Generated at Thu Sep 17 12:41:18 2026 by rpki-client