$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft File: 8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft (raw, json) Hash identifier: FoKlyQqg8iSI4v1AbaZ/KXZuwLBzMzsHVLjYbD/nRtY= Subject key identifier: C8:19:91:E7:0A:13:45:CD:D1:85:F4:E2:A7:7C:FE:AB:79:41:B7:46 Authority key identifier: 85:77:70:2D:61:4C:8C:B8:29:CA:2C:C5:1C:2B:33:74:AC:66:A4:0E Certificate issuer: /CN=8577702D614C8CB829CA2CC51C2B3374AC66A40E Certificate serial: 7EC1EDA6975E45B4D2CD23E80849F092111D2B45 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 04:03:30 +0000 Manifest this update: Thu 17 Sep 2026 03:58:30 +0000 Manifest next update: Fri 18 Sep 2026 07:08:30 +0000 Files and hashes: 1: 3135372e36362e3137312e302f32342d3234203d3e20313532373737.roa (hash: uYXVOfIT7P6Dr33KoZiS4hHMvBugVDHDvO0rydITSy0=) 2: 3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa (hash: ymv/QzmelT0mY8Z1NXChI2j7830jRvZf9HvAHfEuKp0=) 3: 3135372e36362e3137302e302f32332d3233203d3e20313532373737.roa (hash: b9vSoEj12pKvRl6GFlwGqwDqlYjOzNMwdmXHDB/QoPA=) 4: 8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl (hash: KSs5MCoUJBT2pH/fTHES71xqUyxJKvm9MuKyvEphBj4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:08:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:c1:ed:a6:97:5e:45:b4:d2:cd:23:e8:08:49:f0:92:11:1d:2b:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8577702D614C8CB829CA2CC51C2B3374AC66A40E Validity Not Before: Sep 17 03:58:30 2026 GMT Not After : Sep 18 07:08:30 2026 GMT Subject: CN=C81991E70A1345CDD185F4E2A77CFEAB7941B746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1e:5c:e7:cb:24:e3:b9:d6:4f:f1:0f:1c:c4: 45:e4:6d:46:25:1b:2a:d4:8a:64:9d:f6:ed:c0:dc: 70:8e:04:64:b6:54:2e:07:78:39:0b:fa:eb:1e:34: 03:54:f1:fd:9d:12:c9:70:ff:0b:4a:75:61:c4:c2: 31:01:05:8d:8d:82:ce:8a:5f:fb:af:3d:8d:86:64: e6:5c:a5:28:62:5c:be:58:a3:4e:ef:84:b7:90:95: 24:db:af:30:6d:10:bd:2f:78:46:13:a7:9e:91:ca: f5:66:3b:c2:c0:2e:cc:b0:aa:b4:e9:03:2e:91:a5: e0:32:24:a7:89:8c:c3:0c:2a:83:7d:78:0a:b0:1f: 8a:85:42:29:8c:b5:90:50:44:31:30:bc:17:a7:c2: be:86:b5:ce:c7:2d:9d:03:2f:93:bd:cc:cf:77:74: 22:5e:b8:ce:c0:04:fc:65:c4:0b:79:a0:f5:59:34: e1:4e:55:18:a5:97:7e:c3:12:2e:d0:66:48:1f:2d: be:8e:e8:11:4b:12:25:7f:13:01:b3:bb:94:2c:b4: f3:42:90:ec:6f:8d:f2:f3:01:80:8d:01:d9:78:e7: 1f:bb:0a:47:1b:35:c6:32:08:63:df:b8:33:ec:38: 0b:65:16:64:77:d1:78:ec:29:65:cb:6b:fb:00:76: 07:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:19:91:E7:0A:13:45:CD:D1:85:F4:E2:A7:7C:FE:AB:79:41:B7:46 X509v3 Authority Key Identifier: keyid:85:77:70:2D:61:4C:8C:B8:29:CA:2C:C5:1C:2B:33:74:AC:66:A4:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:4a:09:34:23:48:a9:fe:7e:81:8d:ab:e2:4f:c2:ef:89:fa: 3c:76:ff:07:af:7d:cc:c3:2f:02:bd:db:d5:a9:7a:9f:4a:f7: fd:d8:30:dc:65:ca:a7:97:a1:d4:0b:fd:46:2a:a4:d0:54:ae: 2c:ff:0e:89:99:6e:8f:fd:24:f7:02:b1:97:11:4c:57:a8:64: c8:11:9d:90:62:f6:96:96:0e:68:cd:6c:c3:f3:65:b8:43:25: 24:68:00:01:72:18:e3:b7:9c:c2:98:e6:85:3c:e2:36:80:2f: 23:e5:ae:d0:0a:43:4f:a0:f0:db:5f:52:e9:04:9e:d1:54:91: e9:40:c3:90:15:d2:cc:17:e4:22:56:2b:a2:0b:0e:fb:67:5c: ac:3d:06:5e:9b:76:62:bd:5c:65:b7:f0:9e:54:a0:75:6d:e6: db:41:50:54:5f:88:c8:01:61:2f:5e:d4:d9:d1:16:9e:d2:7b: b5:52:aa:a1:b1:77:51:77:53:ea:be:9d:50:8b:77:8d:00:7f: c3:cc:e7:8b:7b:a5:51:4e:7b:02:59:05:ee:86:e5:b2:c2:32: fc:53:94:ea:98:a6:e3:f3:e9:4f:05:d9:60:21:f0:58:60:1d: 43:e3:62:79:e1:60:e1:77:bb:71:30:53:eb:66:fa:d5:48:9e: f9:52:2c:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfsHtppdeRbTSzSPoCEnwkhEdK0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU3NzcwMkQ2MTRDOENCODI5Q0EyQ0M1MUMyQjMzNzRB QzY2QTQwRTAeFw0yNjA5MTcwMzU4MzBaFw0yNjA5MTgwNzA4MzBaMDMxMTAvBgNV BAMTKEM4MTk5MUU3MEExMzQ1Q0REMTg1RjRFMkE3N0NGRUFCNzk0MUI3NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBHlznyyTjudZP8Q8cxEXkbUYl GyrUimSd9u3A3HCOBGS2VC4HeDkL+useNANU8f2dEslw/wtKdWHEwjEBBY2Ngs6K X/uvPY2GZOZcpShiXL5Yo07vhLeQlSTbrzBtEL0veEYTp56RyvVmO8LALsywqrTp Ay6RpeAyJKeJjMMMKoN9eAqwH4qFQimMtZBQRDEwvBenwr6Gtc7HLZ0DL5O9zM93 dCJeuM7ABPxlxAt5oPVZNOFOVRill37DEi7QZkgfLb6O6BFLEiV/EwGzu5QstPNC kOxvjfLzAYCNAdl45x+7CkcbNcYyCGPfuDPsOAtlFmR30XjsKWXLa/sAdgc1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyBmR5woTRc3RhfTip3z+q3lBt0YwHwYDVR0j BBgwFoAUhXdwLWFMjLgpyizFHCszdKxmpA4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU0ODE2MDYtZDVmZC00MTk2LWFiY2QtNThlNmM3NjI0M2M1LzAvODU3NzcwMkQ2 MTRDOENCODI5Q0EyQ0M1MUMyQjMzNzRBQzY2QTQwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84NTc3NzAyRDYxNEM4Q0I4MjlDQTJDQzUxQzJCMzM3NEFDNjZB NDBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU0ODE2MDYtZDVmZC00MTk2LWFi Y2QtNThlNmM3NjI0M2M1LzAvODU3NzcwMkQ2MTRDOENCODI5Q0EyQ0M1MUMyQjMz NzRBQzY2QTQwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlKCTQjSKn+foGNq+JPwu+J+jx2/wevfczD LwK929Wpep9K9/3YMNxlyqeXodQL/UYqpNBUriz/DomZbo/9JPcCsZcRTFeoZMgR nZBi9paWDmjNbMPzZbhDJSRoAAFyGOO3nMKY5oU84jaALyPlrtAKQ0+g8NtfUukE ntFUkelAw5AV0swX5CJWK6ILDvtnXKw9Bl6bdmK9XGW38J5UoHVt5ttBUFRfiMgB YS9e1NnRFp7Se7VSqqGxd1F3U+q+nVCLd40Af8PM54t7pVFOewJZBe6G5bLCMvxT lOqYpuPz6U8F2WAh8FhgHUPjYnnhYOF3u3EwU+tm+tVInvlSLGQ= -----END CERTIFICATE-----Generated at Thu Sep 17 14:30:14 2026 by rpki-client