$ rpki-client -vvvf rpki-rsync.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/1767C40EF953BF431D4947D499414812C8AB0D53.mft File: 1767C40EF953BF431D4947D499414812C8AB0D53.mft (raw, json) Hash identifier: /vohCjAJ855ybDj+M/i6iTlo4dgB8rjTSdx+nOREuXk= Subject key identifier: 20:AD:D5:2B:5C:B3:9A:27:7F:D4:0C:9E:22:1E:24:C1:C0:BD:F4:5D Authority key identifier: 17:67:C4:0E:F9:53:BF:43:1D:49:47:D4:99:41:48:12:C8:AB:0D:53 Certificate issuer: /CN=1767C40EF953BF431D4947D499414812C8AB0D53 Certificate serial: 50873FF934F395B95E16DCA88CFE8C3413C0D636 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1767C40EF953BF431D4947D499414812C8AB0D53.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/1767C40EF953BF431D4947D499414812C8AB0D53.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 15:07:52 +0000 Manifest this update: Wed 16 Sep 2026 15:02:52 +0000 Manifest next update: Thu 17 Sep 2026 17:18:52 +0000 Files and hashes: 1: 1767C40EF953BF431D4947D499414812C8AB0D53.crl (hash: ZOaQZEGZTku7Yu92PADpmH3awrJP0RYT8WIwzCw9Y2s=) 2: 3130332e32302e31362e302f32342d3234203d3e20313439393633.roa (hash: 3fUrcuhU6jaeFfZiNtVK08Yeh8OVEIRyrvEdhO9M9Ow=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/1767C40EF953BF431D4947D499414812C8AB0D53.crl rsync://rpki-rsync.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/1767C40EF953BF431D4947D499414812C8AB0D53.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1767C40EF953BF431D4947D499414812C8AB0D53.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:18:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:87:3f:f9:34:f3:95:b9:5e:16:dc:a8:8c:fe:8c:34:13:c0:d6:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1767C40EF953BF431D4947D499414812C8AB0D53 Validity Not Before: Sep 16 15:02:52 2026 GMT Not After : Sep 17 17:18:52 2026 GMT Subject: CN=20ADD52B5CB39A277FD40C9E221E24C1C0BDF45D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d4:8a:30:16:e4:b2:6e:1d:2a:25:7c:86:b1: 2a:95:91:d8:38:be:86:59:b3:8b:f3:2d:9b:f4:2f: c1:55:91:1a:51:48:d6:56:b2:ca:0f:0d:39:33:97: f7:0e:20:1a:a9:dd:6d:c3:cc:6b:12:6a:66:93:0b: d6:d7:3b:38:fe:34:2c:a3:7a:32:ff:5f:5e:e6:2f: 7e:e0:0e:b2:e7:d8:45:a9:ba:a5:e8:a8:5d:1c:82: 6b:90:a9:da:3e:ef:72:03:4a:10:e8:67:f4:3c:73: 19:e1:8b:90:98:b5:85:0d:7e:d2:55:12:1d:a4:3d: 4a:c0:5a:c1:39:a8:7a:16:89:14:3d:a6:24:d3:54: 2f:d5:62:cb:4c:ca:38:37:de:65:cb:dc:cb:9f:40: a6:68:c8:27:cb:5f:84:26:dd:f5:cd:f2:1f:be:8b: 87:6c:0b:42:7c:55:63:05:87:e4:c9:87:5c:69:b8: e2:fa:32:88:f4:aa:89:d3:fb:ea:14:19:18:bb:16: 62:c0:85:d9:4c:d7:17:16:9f:b6:f2:4e:37:dd:f6: 4e:4f:56:e2:21:77:77:70:df:fd:96:ed:6a:ea:c3: d7:e0:bc:46:1c:54:5b:a1:bc:09:2f:1f:ea:3b:6d: 37:8f:74:1b:4a:db:32:7e:fc:b1:ad:4c:88:7b:0e: 0a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AD:D5:2B:5C:B3:9A:27:7F:D4:0C:9E:22:1E:24:C1:C0:BD:F4:5D X509v3 Authority Key Identifier: keyid:17:67:C4:0E:F9:53:BF:43:1D:49:47:D4:99:41:48:12:C8:AB:0D:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/1767C40EF953BF431D4947D499414812C8AB0D53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1767C40EF953BF431D4947D499414812C8AB0D53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/1767C40EF953BF431D4947D499414812C8AB0D53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:92:63:21:bb:05:ab:e2:9c:16:04:d2:1c:9a:cd:d1:6c:b0: de:db:b3:41:68:a3:79:66:bf:4e:1e:9d:7c:69:74:ae:a7:37: 65:24:d3:71:de:ca:88:27:ea:5a:c6:fd:4c:40:e0:fe:bd:59: 4e:a6:46:ac:e2:5b:87:4e:aa:bc:4e:23:75:10:e3:63:bb:f9: 2d:be:4d:54:f1:cb:f7:96:a7:ec:d7:7e:6e:9c:ea:61:0c:b3: 0b:75:d2:4a:23:42:32:ed:70:3e:6c:9a:54:95:d9:5a:98:a3: ee:14:8b:33:9f:8f:04:13:f5:09:cf:c4:8f:68:5d:fe:70:c1: 85:f9:0b:12:75:1d:ad:03:f7:d1:70:e4:86:28:f0:43:a3:72: e4:c9:a0:0a:bb:d2:9b:42:45:67:af:ad:62:77:5c:d2:0f:87: 55:74:b0:50:03:34:4a:7e:f5:df:69:40:40:1f:0a:3e:16:0b: 49:45:42:04:2f:ef:cc:ef:13:66:c8:19:41:68:b3:94:4b:18: 5f:c2:3d:e1:f4:35:31:c9:a6:4e:14:da:06:7b:4f:45:e7:76: 48:bf:90:50:c7:c0:86:1c:df:42:54:48:17:36:4c:3c:d3:00: e1:71:dc:1a:a3:c1:ac:ee:9b:cd:fd:3b:37:4e:f7:32:cf:4b: 1c:e4:1e:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUIc/+TTzlbleFtyojP6MNBPA1jYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc2N0M0MEVGOTUzQkY0MzFENDk0N0Q0OTk0MTQ4MTJD OEFCMEQ1MzAeFw0yNjA5MTYxNTAyNTJaFw0yNjA5MTcxNzE4NTJaMDMxMTAvBgNV BAMTKDIwQURENTJCNUNCMzlBMjc3RkQ0MEM5RTIyMUUyNEMxQzBCREY0NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL1IowFuSybh0qJXyGsSqVkdg4 voZZs4vzLZv0L8FVkRpRSNZWssoPDTkzl/cOIBqp3W3DzGsSamaTC9bXOzj+NCyj ejL/X17mL37gDrLn2EWpuqXoqF0cgmuQqdo+73IDShDoZ/Q8cxnhi5CYtYUNftJV Eh2kPUrAWsE5qHoWiRQ9piTTVC/VYstMyjg33mXL3MufQKZoyCfLX4Qm3fXN8h++ i4dsC0J8VWMFh+TJh1xpuOL6Moj0qonT++oUGRi7FmLAhdlM1xcWn7byTjfd9k5P VuIhd3dw3/2W7Wrqw9fgvEYcVFuhvAkvH+o7bTePdBtK2zJ+/LGtTIh7DgqTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIK3VK1yzmid/1AyeIh4kwcC99F0wHwYDVR0j BBgwFoAUF2fEDvlTv0MdSUfUmUFIEsirDVMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjQzZGI3ZDItYjNmZC00MjE0LWI2YTQtZDAxNjJmOTVlNzJlLzAvMTc2N0M0MEVG OTUzQkY0MzFENDk0N0Q0OTk0MTQ4MTJDOEFCMEQ1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNzY3QzQwRUY5NTNCRjQzMUQ0OTQ3RDQ5OTQxNDgxMkM4QUIw RDUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjQzZGI3ZDItYjNmZC00MjE0LWI2 YTQtZDAxNjJmOTVlNzJlLzAvMTc2N0M0MEVGOTUzQkY0MzFENDk0N0Q0OTk0MTQ4 MTJDOEFCMEQ1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqSYyG7BavinBYE0hyazdFssN7bs0Foo3lm v04enXxpdK6nN2Uk03Heyogn6lrG/UxA4P69WU6mRqziW4dOqrxOI3UQ42O7+S2+ TVTxy/eWp+zXfm6c6mEMswt10kojQjLtcD5smlSV2VqYo+4UizOfjwQT9QnPxI9o Xf5wwYX5CxJ1Ha0D99Fw5IYo8EOjcuTJoAq70ptCRWevrWJ3XNIPh1V0sFADNEp+ 9d9pQEAfCj4WC0lFQgQv78zvE2bIGUFos5RLGF/CPeH0NTHJpk4U2gZ7T0Xndki/ kFDHwIYc30JUSBc2TDzTAOFx3Bqjwazum839OzdO9zLPSxzkHl0= -----END CERTIFICATE-----Generated at Thu Sep 17 05:40:37 2026 by rpki-client