$ rpki-client -vvvf rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft File: C687463B31D1E298020BCE05C39C8B4C428C4D37.mft (raw, json) Hash identifier: EulATVVLg3YeTowtfPQpt3/yBrZGsK/Nc2TCXo3OiRk= Subject key identifier: 87:90:2C:8E:A2:B6:45:8E:50:55:3B:19:A2:27:BB:3B:3C:CC:29:F0 Authority key identifier: C6:87:46:3B:31:D1:E2:98:02:0B:CE:05:C3:9C:8B:4C:42:8C:4D:37 Certificate issuer: /CN=C687463B31D1E298020BCE05C39C8B4C428C4D37 Certificate serial: 7DFAACDA3D63F7324CCD2ED5636C3186D5A1564B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 15:38:23 +0000 Manifest this update: Wed 16 Sep 2026 15:33:23 +0000 Manifest next update: Thu 17 Sep 2026 18:56:23 +0000 Files and hashes: 1: C687463B31D1E298020BCE05C39C8B4C428C4D37.crl (hash: kbTK5CogmxgCQKnVoI2HXU9mWBnZX3OT63KW3tzBCw8=) 2: 3130332e34312e3130392e302f32342d3234203d3e203536323536.roa (hash: FMD2KI8vXpC0oPiEKe8NJdG3T8DkuTzlFnyK8zKEONk=) 3: 3130332e32382e32312e302f32342d3234203d3e203536323536.roa (hash: YAhRb5MLLPBq7GLmsdwukjSGrR09NAZjb7/Q0IbDPGs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.crl rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:56:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:fa:ac:da:3d:63:f7:32:4c:cd:2e:d5:63:6c:31:86:d5:a1:56:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C687463B31D1E298020BCE05C39C8B4C428C4D37 Validity Not Before: Sep 16 15:33:23 2026 GMT Not After : Sep 17 18:56:23 2026 GMT Subject: CN=87902C8EA2B6458E50553B19A227BB3B3CCC29F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b4:23:d3:a8:9b:92:39:76:0a:19:46:d6:f0: b0:34:21:12:a8:8c:33:93:c6:37:78:10:92:2f:34: c9:2e:06:cc:d0:56:6d:9d:b1:bb:57:0f:f0:20:ca: a4:f4:33:34:18:97:eb:3d:60:86:85:db:d1:c9:91: f0:b8:39:b1:bb:cc:5b:cf:19:5c:e8:5d:8c:5f:e4: aa:88:00:e3:f9:c9:4c:fc:a8:b5:78:60:83:b6:67: bf:16:da:12:2f:b5:a5:1a:cc:f6:25:fb:9c:3a:5d: 39:4f:24:6c:06:aa:bf:5d:be:05:43:46:66:6a:02: 12:98:27:31:63:0c:7b:38:6a:54:ea:b0:67:40:e9: cb:d8:e7:01:91:30:61:9b:69:42:84:87:88:36:bc: 6a:42:60:0e:09:78:22:bd:3d:53:4e:f5:27:64:45: 6a:e4:e8:85:8a:a8:21:0a:a6:15:b6:fe:5a:6f:b4: 27:d9:83:d5:5a:96:71:b3:68:2f:d2:43:7e:12:bf: ed:32:04:4e:3c:3e:2b:e9:69:1a:53:fb:9a:eb:29: f3:9d:e5:35:7e:9b:c8:63:48:5e:f0:74:52:4a:6a: 31:13:d0:8c:a7:ab:70:1a:44:89:39:97:ba:d8:55: 70:de:b8:4c:79:19:57:fd:9c:6f:ef:92:ed:7a:5d: 28:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:90:2C:8E:A2:B6:45:8E:50:55:3B:19:A2:27:BB:3B:3C:CC:29:F0 X509v3 Authority Key Identifier: keyid:C6:87:46:3B:31:D1:E2:98:02:0B:CE:05:C3:9C:8B:4C:42:8C:4D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b7:a2:f5:5f:f9:e5:e9:80:02:f7:cf:5c:c9:64:43:9d:41: 78:ea:2a:8c:9d:89:c5:0e:05:8c:6a:6e:8f:44:66:80:10:97: 88:aa:e8:f3:0a:30:53:7b:53:a1:ed:78:85:c7:77:31:be:8b: e1:a2:d5:07:8d:b0:6c:92:4c:8a:d8:8c:a4:7e:53:3a:63:ff: 94:44:3a:28:5c:83:ad:db:01:77:bd:e4:fb:2b:0a:09:50:02: fb:0d:85:23:d9:a1:6f:83:80:8d:0e:13:bf:bc:2c:6e:77:ef: 91:b0:fc:fb:d7:7d:ea:4f:e7:2e:90:65:cd:ae:8b:df:fd:aa: cf:55:42:80:b6:ea:4e:d7:d2:ae:df:96:98:c6:47:e0:ed:bd: 10:0f:49:67:42:09:25:61:d4:53:e8:fa:4c:78:7e:f5:39:63: db:e2:e7:72:a6:61:98:84:b2:41:39:80:d1:a9:21:f2:65:f3: 3c:88:7e:ea:0e:48:bd:da:6b:bb:87:ff:e6:29:5e:c4:02:e7: 1b:5f:9e:b8:7e:ff:94:00:cf:db:a2:77:b4:56:70:89:17:07: 68:89:ab:29:f0:9f:86:65:b1:a5:78:63:81:c7:5d:73:c2:9e: 92:38:1a:23:4a:a8:15:e4:ee:50:58:cd:5a:15:e8:5e:49:1f: 2c:43:a2:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUffqs2j1j9zJMzS7VY2wxhtWhVkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY4NzQ2M0IzMUQxRTI5ODAyMEJDRTA1QzM5QzhCNEM0 MjhDNEQzNzAeFw0yNjA5MTYxNTMzMjNaFw0yNjA5MTcxODU2MjNaMDMxMTAvBgNV BAMTKDg3OTAyQzhFQTJCNjQ1OEU1MDU1M0IxOUEyMjdCQjNCM0NDQzI5RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYtCPTqJuSOXYKGUbW8LA0IRKo jDOTxjd4EJIvNMkuBszQVm2dsbtXD/AgyqT0MzQYl+s9YIaF29HJkfC4ObG7zFvP GVzoXYxf5KqIAOP5yUz8qLV4YIO2Z78W2hIvtaUazPYl+5w6XTlPJGwGqr9dvgVD RmZqAhKYJzFjDHs4alTqsGdA6cvY5wGRMGGbaUKEh4g2vGpCYA4JeCK9PVNO9Sdk RWrk6IWKqCEKphW2/lpvtCfZg9ValnGzaC/SQ34Sv+0yBE48PivpaRpT+5rrKfOd 5TV+m8hjSF7wdFJKajET0Iynq3AaRIk5l7rYVXDeuEx5GVf9nG/vku16XShdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh5AsjqK2RY5QVTsZoie7OzzMKfAwHwYDVR0j BBgwFoAUxodGOzHR4pgCC84Fw5yLTEKMTTcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzZjMDAzNzYtMzM1MS00ZmEzLTk3ZWUtNTIzODViYTRkOTAzLzAvQzY4NzQ2M0Iz MUQxRTI5ODAyMEJDRTA1QzM5QzhCNEM0MjhDNEQzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNjg3NDYzQjMxRDFFMjk4MDIwQkNFMDVDMzlDOEI0QzQyOEM0 RDM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzZjMDAzNzYtMzM1MS00ZmEzLTk3 ZWUtNTIzODViYTRkOTAzLzAvQzY4NzQ2M0IzMUQxRTI5ODAyMEJDRTA1QzM5QzhC NEM0MjhDNEQzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEm3ovVf+eXpgAL3z1zJZEOdQXjqKoydicUO BYxqbo9EZoAQl4iq6PMKMFN7U6HteIXHdzG+i+Gi1QeNsGySTIrYjKR+Uzpj/5RE Oihcg63bAXe95PsrCglQAvsNhSPZoW+DgI0OE7+8LG5375Gw/PvXfepP5y6QZc2u i9/9qs9VQoC26k7X0q7flpjGR+DtvRAPSWdCCSVh1FPo+kx4fvU5Y9vi53KmYZiE skE5gNGpIfJl8zyIfuoOSL3aa7uH/+YpXsQC5xtfnrh+/5QAz9uid7RWcIkXB2iJ qynwn4ZlsaV4Y4HHXXPCnpI4GiNKqBXk7lBYzVoV6F5JHyxDoq8= -----END CERTIFICATE-----Generated at Thu Sep 17 11:55:18 2026 by rpki-client