$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.mft File: 1675ADC47F4873145B24769B8134062EEB020A6A.mft (raw, json) Hash identifier: OqHfYRF7RJY3HcB5oEIgU3aFyIrlLfYMyxPhO9EMr4w= Subject key identifier: 64:DD:A6:6F:B6:0E:D4:6C:F1:02:D0:A1:43:5B:E7:A9:C3:E1:77:FA Authority key identifier: 16:75:AD:C4:7F:48:73:14:5B:24:76:9B:81:34:06:2E:EB:02:0A:6A Certificate issuer: /CN=1675ADC47F4873145B24769B8134062EEB020A6A Certificate serial: 72EADC95C58DBC8661C034837F1847CB2A76C58E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1675ADC47F4873145B24769B8134062EEB020A6A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 09:45:43 +0000 Manifest this update: Thu 17 Sep 2026 09:40:43 +0000 Manifest next update: Fri 18 Sep 2026 13:18:43 +0000 Files and hashes: 1: 3135372e31302e3137392e302f32342d3234203d3e20313532333436.roa (hash: /DV6+SaBovRK3v8Zh1bjyOMwbspI86vj5IjrMCFPeu0=) 2: 1675ADC47F4873145B24769B8134062EEB020A6A.crl (hash: EUbbKlMkHzw4dy0t/Tuf5lRW0gskcCbCVwf0qeimvGk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.crl rsync://rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1675ADC47F4873145B24769B8134062EEB020A6A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:ea:dc:95:c5:8d:bc:86:61:c0:34:83:7f:18:47:cb:2a:76:c5:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1675ADC47F4873145B24769B8134062EEB020A6A Validity Not Before: Sep 17 09:40:43 2026 GMT Not After : Sep 18 13:18:43 2026 GMT Subject: CN=64DDA66FB60ED46CF102D0A1435BE7A9C3E177FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d3:6a:09:9e:c1:57:50:f5:94:6f:99:27:85: 53:0f:1b:4e:a1:38:9d:9f:be:09:4e:3d:b2:8a:d6: 47:7d:00:e2:ea:f9:a3:c9:e7:7c:ed:50:0f:8c:ef: 16:fb:7a:e6:3b:a0:a6:1c:47:3d:63:a9:f7:ce:49: a3:41:e7:6e:a5:8a:c6:31:df:58:12:35:7e:07:b1: f6:ba:d4:42:4c:03:f7:7c:5d:d5:82:21:5c:cd:b8: b2:65:d9:01:62:f0:9d:5c:7d:73:e1:09:86:4b:25: c6:ef:0c:66:74:80:28:ea:1b:79:41:0d:f9:17:84: cb:fb:e3:b6:63:11:3d:70:78:92:91:35:81:bf:c0: df:1f:6e:5e:3f:15:19:6b:11:ae:72:50:1d:8a:d3: d4:91:86:ae:a7:53:9e:ac:97:73:1a:cd:c0:24:58: 81:68:f4:c9:9f:89:5b:38:4a:fa:91:c6:36:fb:b2: a1:da:c8:05:19:ce:ef:26:dd:c5:15:52:89:0f:6a: 2f:32:bd:82:32:ea:47:58:da:b0:e4:a8:d0:50:05: db:6d:d4:08:fe:89:cd:06:6f:3e:74:bc:df:39:7f: b2:47:31:71:68:fa:49:bd:cf:2b:67:c2:8f:8e:eb: 83:f2:39:22:7a:f1:b0:4f:93:b5:59:a5:bc:29:4f: 40:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DD:A6:6F:B6:0E:D4:6C:F1:02:D0:A1:43:5B:E7:A9:C3:E1:77:FA X509v3 Authority Key Identifier: keyid:16:75:AD:C4:7F:48:73:14:5B:24:76:9B:81:34:06:2E:EB:02:0A:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1675ADC47F4873145B24769B8134062EEB020A6A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:eb:47:40:ba:39:73:b8:8a:cd:5e:c7:bc:42:11:86:ca:62: 55:c0:9b:f4:c3:5d:2d:59:80:1e:2f:88:a5:f2:11:f4:3e:48: 85:3c:b8:c7:e7:2a:9d:7f:d0:11:d0:e4:ac:1b:89:cf:be:81: 38:3e:ed:f9:c9:32:e3:99:14:dd:e5:3f:f3:13:75:e9:83:aa: fa:01:84:19:d7:a0:2d:62:d9:58:d5:7b:ae:69:2f:84:aa:80: 50:d6:92:05:31:c9:cc:6f:9e:68:ff:29:0e:0d:9f:8f:08:15: 5c:60:25:fd:45:78:b2:80:11:2f:28:51:f4:e2:0e:ff:42:21: 52:ab:44:d5:1f:b7:01:09:d8:be:4e:52:b2:74:30:fd:dd:b1: 7b:0d:e3:8a:54:ee:b1:15:63:01:4b:0c:ee:a4:25:30:70:2c: 96:8b:21:1e:35:b7:a9:a5:10:71:10:59:d5:f7:0a:bc:ae:f9: 54:50:ce:3c:05:4d:85:04:9c:79:8b:44:94:e6:dc:fa:d9:21: be:fa:92:e9:71:62:0e:8c:f6:da:4d:4d:78:29:cb:c7:a2:bf: dc:1b:71:dc:e0:57:7f:db:9a:53:ba:37:61:23:61:dc:f1:33: 56:2b:81:95:da:a7:c4:81:06:79:17:05:73:37:8e:5e:e0:d5: 56:fd:ed:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcurclcWNvIZhwDSDfxhHyyp2xY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3NUFEQzQ3RjQ4NzMxNDVCMjQ3NjlCODEzNDA2MkVF QjAyMEE2QTAeFw0yNjA5MTcwOTQwNDNaFw0yNjA5MTgxMzE4NDNaMDMxMTAvBgNV BAMTKDY0RERBNjZGQjYwRUQ0NkNGMTAyRDBBMTQzNUJFN0E5QzNFMTc3RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz02oJnsFXUPWUb5knhVMPG06h OJ2fvglOPbKK1kd9AOLq+aPJ53ztUA+M7xb7euY7oKYcRz1jqffOSaNB526lisYx 31gSNX4Hsfa61EJMA/d8XdWCIVzNuLJl2QFi8J1cfXPhCYZLJcbvDGZ0gCjqG3lB DfkXhMv747ZjET1weJKRNYG/wN8fbl4/FRlrEa5yUB2K09SRhq6nU56sl3MazcAk WIFo9MmfiVs4SvqRxjb7sqHayAUZzu8m3cUVUokPai8yvYIy6kdY2rDkqNBQBdtt 1Aj+ic0Gbz50vN85f7JHMXFo+km9zytnwo+O64PyOSJ68bBPk7VZpbwpT0DzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZN2mb7YO1GzxAtChQ1vnqcPhd/owHwYDVR0j BBgwFoAUFnWtxH9IcxRbJHabgTQGLusCCmowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YThkYzEzZmYtNWIxMC00NGE2LWI2ZjMtOGYwMzVlNTg5N2Q4LzAvMTY3NUFEQzQ3 RjQ4NzMxNDVCMjQ3NjlCODEzNDA2MkVFQjAyMEE2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xNjc1QURDNDdGNDg3MzE0NUIyNDc2OUI4MTM0MDYyRUVCMDIw QTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYThkYzEzZmYtNWIxMC00NGE2LWI2 ZjMtOGYwMzVlNTg5N2Q4LzAvMTY3NUFEQzQ3RjQ4NzMxNDVCMjQ3NjlCODEzNDA2 MkVFQjAyMEE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACrrR0C6OXO4is1ex7xCEYbKYlXAm/TDXS1Z gB4viKXyEfQ+SIU8uMfnKp1/0BHQ5Kwbic++gTg+7fnJMuOZFN3lP/MTdemDqvoB hBnXoC1i2VjVe65pL4SqgFDWkgUxycxvnmj/KQ4Nn48IFVxgJf1FeLKAES8oUfTi Dv9CIVKrRNUftwEJ2L5OUrJ0MP3dsXsN44pU7rEVYwFLDO6kJTBwLJaLIR41t6ml EHEQWdX3Cryu+VRQzjwFTYUEnHmLRJTm3PrZIb76kulxYg6M9tpNTXgpy8eiv9wb cdzgV3/bmlO6N2EjYdzxM1YrgZXap8SBBnkXBXM3jl7g1Vb97RQ= -----END CERTIFICATE-----Generated at Thu Sep 17 14:27:53 2026 by rpki-client