$ rpki-client -vvvf rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft File: 1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft (raw, json) Hash identifier: 7IngR+TPg9vn2wbYqxxtRAxDMZ7gTxFvjYHWAtVt0AA= Subject key identifier: 02:B2:11:3E:76:3D:9C:73:F8:F3:52:F8:92:91:D1:32:98:E8:2A:37 Authority key identifier: 11:33:57:82:21:40:7D:A4:E6:D6:E1:F7:DD:BD:40:2A:D1:71:42:D1 Certificate issuer: /CN=1133578221407DA4E6D6E1F7DDBD402AD17142D1 Certificate serial: 6639B3384383BDEB60126B3A629B1D348B6596AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1133578221407DA4E6D6E1F7DDBD402AD17142D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 08:18:55 +0000 Manifest this update: Thu 17 Sep 2026 08:13:55 +0000 Manifest next update: Fri 18 Sep 2026 08:57:55 +0000 Files and hashes: 1: 1133578221407DA4E6D6E1F7DDBD402AD17142D1.crl (hash: MpyJIEkCZGQxN7XqUhHb6fSfdfWL3VNgXo/z8DXS9Ys=) 2: 323430343a3630303a3a2f33322d3438203d3e2034383333.roa (hash: oHCuH/wfD5uofyH9qDQzuSNonMRnW2BjZEpAbHvRcj0=) 3: 3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa (hash: Zk2C8S3MwM5h7vXomg1WGWoihsk+uAiRDgp6DvLkrYk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.crl rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1133578221407DA4E6D6E1F7DDBD402AD17142D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:39:b3:38:43:83:bd:eb:60:12:6b:3a:62:9b:1d:34:8b:65:96:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1133578221407DA4E6D6E1F7DDBD402AD17142D1 Validity Not Before: Sep 17 08:13:55 2026 GMT Not After : Sep 18 08:57:55 2026 GMT Subject: CN=02B2113E763D9C73F8F352F89291D13298E82A37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:48:f8:37:b9:33:ca:ce:cd:03:86:89:2a:43: 4d:6f:00:e9:d1:9f:e9:ec:76:7e:09:9c:f7:e7:3c: ce:12:3f:40:43:de:8c:37:42:16:a9:68:a2:36:a5: 19:97:31:1b:98:49:55:ea:50:66:fd:8d:4d:a8:54: 16:3b:1c:3e:15:ae:fd:c0:2d:96:ec:f8:29:1c:14: c0:28:52:8e:0d:8d:6e:84:a1:0f:0b:d8:8e:2f:03: 41:43:b9:ca:06:da:ab:92:57:d3:82:90:81:5d:84: 4b:44:e4:81:21:b1:eb:76:49:36:9b:a7:2a:16:c7: ca:4a:4e:8d:79:04:6e:03:33:36:fd:64:97:c1:96: c0:c4:5e:6a:c9:01:ef:c3:02:92:2f:69:69:c7:57: 10:90:79:2b:dd:1c:88:8f:c4:10:5e:ed:cf:b8:a4: b0:1a:9d:3b:6e:35:47:92:0b:e9:59:0f:e6:86:ea: 0e:47:11:59:e2:c8:c6:e0:50:cf:2e:94:8b:b2:6d: 27:10:da:47:f4:58:45:4a:bc:39:ac:67:2e:34:aa: 83:0f:fd:7a:12:22:8c:08:f6:0d:35:44:20:b9:3d: 7b:e6:fa:eb:00:cc:8b:4c:09:e0:45:b6:cf:7c:01: 4c:d3:d4:86:b6:e9:98:c5:82:58:1e:31:25:4e:a2: 31:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B2:11:3E:76:3D:9C:73:F8:F3:52:F8:92:91:D1:32:98:E8:2A:37 X509v3 Authority Key Identifier: keyid:11:33:57:82:21:40:7D:A4:E6:D6:E1:F7:DD:BD:40:2A:D1:71:42:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1133578221407DA4E6D6E1F7DDBD402AD17142D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:59:6d:c5:31:f8:e5:23:db:d7:b4:b4:a7:76:9d:a5:25:31: 70:12:f6:ca:ff:56:69:35:6f:7b:42:99:55:d6:84:af:be:72: f4:84:1e:4d:22:c1:4d:cb:ce:7d:85:74:04:e8:08:59:c8:93: cc:0e:41:d6:27:78:a0:5e:d6:5e:0c:1b:4b:a1:c5:18:96:9d: 70:5f:74:c7:60:1c:7d:4b:02:df:fa:84:ba:3a:6b:1f:0b:05: cc:3d:48:f3:62:60:39:ec:f3:3f:20:25:da:4e:1e:94:77:5c: df:44:d4:79:1f:7f:0e:b8:8e:c0:fb:db:57:8b:50:3f:76:6f: 0c:db:28:bc:34:29:96:ac:ce:91:aa:ff:d5:28:98:be:16:56: 3b:8d:e3:7d:80:9d:49:0d:c6:bb:ad:06:a2:f0:2d:46:3e:e1: 19:d9:a1:d4:6f:d3:1d:92:cc:03:0d:bf:ea:bb:47:80:66:36: 78:3c:3f:02:dc:32:3e:36:d5:48:a3:60:d2:72:8f:9e:6d:05: 3c:52:dc:89:21:71:9f:a8:fa:08:7b:5a:2e:61:a9:42:8f:68: 6d:88:4b:50:35:a8:be:27:e3:c1:06:21:5d:71:68:83:8a:a3: 30:00:33:de:3b:61:29:f2:d8:29:e9:30:21:29:4a:3c:24:99: 20:63:c0:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZjmzOEODvetgEms6YpsdNItllqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTEzMzU3ODIyMTQwN0RBNEU2RDZFMUY3RERCRDQwMkFE MTcxNDJEMTAeFw0yNjA5MTcwODEzNTVaFw0yNjA5MTgwODU3NTVaMDMxMTAvBgNV BAMTKDAyQjIxMTNFNzYzRDlDNzNGOEYzNTJGODkyOTFEMTMyOThFODJBMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRSPg3uTPKzs0DhokqQ01vAOnR n+nsdn4JnPfnPM4SP0BD3ow3QhapaKI2pRmXMRuYSVXqUGb9jU2oVBY7HD4Vrv3A LZbs+CkcFMAoUo4NjW6EoQ8L2I4vA0FDucoG2quSV9OCkIFdhEtE5IEhset2STab pyoWx8pKTo15BG4DMzb9ZJfBlsDEXmrJAe/DApIvaWnHVxCQeSvdHIiPxBBe7c+4 pLAanTtuNUeSC+lZD+aG6g5HEVniyMbgUM8ulIuybScQ2kf0WEVKvDmsZy40qoMP /XoSIowI9g01RCC5PXvm+usAzItMCeBFts98AUzT1Ia26ZjFglgeMSVOojERAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUArIRPnY9nHP481L4kpHRMpjoKjcwHwYDVR0j BBgwFoAUETNXgiFAfaTm1uH33b1AKtFxQtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZjMWY1MWEtODY0NS00ZWIxLWEyZmYtZTI3YzI0YzhlMGM4LzAvMTEzMzU3ODIy MTQwN0RBNEU2RDZFMUY3RERCRDQwMkFEMTcxNDJEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMTMzNTc4MjIxNDA3REE0RTZENkUxRjdEREJENDAyQUQxNzE0 MkQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZjMWY1MWEtODY0NS00ZWIxLWEy ZmYtZTI3YzI0YzhlMGM4LzAvMTEzMzU3ODIyMTQwN0RBNEU2RDZFMUY3RERCRDQw MkFEMTcxNDJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5ZbcUx+OUj29e0tKd2naUlMXAS9sr/Vmk1 b3tCmVXWhK++cvSEHk0iwU3Lzn2FdAToCFnIk8wOQdYneKBe1l4MG0uhxRiWnXBf dMdgHH1LAt/6hLo6ax8LBcw9SPNiYDns8z8gJdpOHpR3XN9E1Hkffw64jsD721eL UD92bwzbKLw0KZaszpGq/9UomL4WVjuN432AnUkNxrutBqLwLUY+4RnZodRv0x2S zAMNv+q7R4BmNng8PwLcMj421UijYNJyj55tBTxS3IkhcZ+o+gh7Wi5hqUKPaG2I S1A1qL4n48EGIV1xaIOKozAAM947YSny2CnpMCEpSjwkmSBjwEc= -----END CERTIFICATE-----Generated at Thu Sep 17 14:22:18 2026 by rpki-client