$ rpki-client -vvvf rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.mft File: 7637E963EF709E2BBD39881202E68EA7BA09EB64.mft (raw, json) Hash identifier: s4M1IUVBBppwI85XlHqthbIJGT1p3TQRzwBWhXuTAZE= Subject key identifier: 22:9D:ED:F5:26:BF:C2:F3:EC:C4:0A:DD:CD:12:BC:BC:45:7F:A8:D5 Authority key identifier: 76:37:E9:63:EF:70:9E:2B:BD:39:88:12:02:E6:8E:A7:BA:09:EB:64 Certificate issuer: /CN=7637E963EF709E2BBD39881202E68EA7BA09EB64 Certificate serial: 1D60F126BE4ACBE7A0D9559170D0BDC9737FA9C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 07:37:58 +0000 Manifest this update: Thu 17 Sep 2026 07:32:58 +0000 Manifest next update: Fri 18 Sep 2026 09:08:58 +0000 Files and hashes: 1: 3130332e3232372e3234302e302f32322d3234203d3e203539323738.roa (hash: jDwYR0eXqs/UReeXAyA7K2tU1AiHfANmWKIdRhF2du0=) 2: 323430323a363938303a313030303a3a2f34382d3438203d3e203539323738.roa (hash: nWI4uIvaFgK4Hk7GaUoKI1TVheMwIL3XscjU5iDUJX4=) 3: 323430323a363938303a343030303a3a2f34382d3438203d3e203539323738.roa (hash: VcEziwvajBz0ScjFh/mK+RRpNiyAva/gnfSzmxA7gy8=) 4: 323430323a363938303a333030303a3a2f34382d3438203d3e203539323738.roa (hash: Yr07K6DWQdF2XKTnmuR+IZeyvkTjOYoZ4wAJOdd5cXc=) 5: 7637E963EF709E2BBD39881202E68EA7BA09EB64.crl (hash: f5EpJSfe4vD9SOE8TiqqcJguwUKaqqkWhXAOJn3EZ3g=) 6: 323430323a363938303a323030303a3a2f34382d3438203d3e203539323738.roa (hash: SGR/VUMdxBsuFmwp4lsUWkYdYAOdn6A4y8vkO6Hv4pk=) 7: 3130332e35382e3136302e302f32322d3234203d3e203539323738.roa (hash: OGWj7w+3IXgMzGQNophA491Hc35+yTJ0Ol+4T3sD95Q=) 8: 323430323a363938303a3a2f33322d3438203d3e203539323738.roa (hash: aRqarVDmeezXJU+Pwuv00vHqWnKaxtDs6IZN+swCI28=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.crl rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:60:f1:26:be:4a:cb:e7:a0:d9:55:91:70:d0:bd:c9:73:7f:a9:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7637E963EF709E2BBD39881202E68EA7BA09EB64 Validity Not Before: Sep 17 07:32:58 2026 GMT Not After : Sep 18 09:08:58 2026 GMT Subject: CN=229DEDF526BFC2F3ECC40ADDCD12BCBC457FA8D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:61:59:cc:d2:97:94:67:15:ff:c2:a3:9f:97: 40:e7:89:5d:40:ce:a6:ba:fe:45:04:8c:8c:e4:71: 12:16:8c:50:73:11:a0:3e:11:53:af:bc:ca:0f:4c: af:63:b5:7d:96:a5:4c:ee:38:91:8e:2f:6c:29:8b: b3:90:01:2e:0e:48:72:66:54:5c:93:d2:21:29:db: b6:7c:13:e9:3c:8d:d7:cc:40:1b:fc:db:ed:38:ad: 00:96:0f:b4:e7:15:97:9c:23:d0:07:41:ab:2f:aa: 5c:e4:2f:da:c2:3d:f3:45:ea:bb:76:56:cc:6a:0f: 83:b0:07:68:65:d1:ec:dc:f2:c0:67:5b:db:17:f5: d1:6c:db:af:1a:42:30:c4:55:9f:a9:61:c9:85:92: 18:1d:eb:9b:46:5d:7c:26:ec:dc:4a:43:f0:62:95: f6:a4:52:f7:56:8d:7a:10:37:2e:0b:5e:1d:1d:fa: 4f:80:2b:df:0d:02:41:aa:c0:aa:3c:68:99:0e:5a: d6:6f:22:ab:f9:62:04:72:7b:81:19:cf:5a:2d:29: 68:34:1c:7d:e9:59:c9:9f:80:1e:bc:09:14:ac:3c: 8e:d1:fb:56:4e:64:a6:77:41:41:46:d5:2b:25:10: 7d:28:43:fb:7f:9f:18:34:96:d1:c2:97:b2:35:d3: a2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9D:ED:F5:26:BF:C2:F3:EC:C4:0A:DD:CD:12:BC:BC:45:7F:A8:D5 X509v3 Authority Key Identifier: keyid:76:37:E9:63:EF:70:9E:2B:BD:39:88:12:02:E6:8E:A7:BA:09:EB:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:7c:1d:ba:82:76:22:c7:d0:39:18:6f:af:56:79:35:11:e1: 18:5c:2b:12:4c:ca:8a:d5:81:de:46:f2:17:7f:36:f0:2a:c5: 9e:cd:65:0d:ba:52:2d:07:15:81:54:cf:f3:44:04:c1:c0:bc: a9:5b:da:98:ec:55:6c:cc:e0:93:44:27:9b:7b:4a:d0:03:9a: b7:b6:54:c4:60:6a:4d:4e:fa:42:a3:49:b8:fd:68:19:ab:39: d6:27:3a:eb:71:2a:f4:35:ec:1c:6e:56:0d:5f:f9:af:95:f6: 33:28:47:35:db:98:ee:15:64:a2:44:f3:f6:e2:41:92:42:18: f4:70:18:5f:b1:32:6f:92:ed:77:28:e8:a3:b3:cd:3f:fe:a2: 7a:cb:06:24:4e:17:cd:35:92:2e:55:3c:fd:20:45:a9:1a:d8: 40:b9:a2:21:38:7b:06:1f:fa:b7:8b:57:01:ee:4f:b4:06:ee: d4:ae:f8:6e:ac:5c:f6:7f:24:04:57:46:0a:27:8a:22:21:61: 56:56:9b:9f:f8:68:6a:88:f1:9c:bd:8f:ae:2e:df:21:b4:36: 63:bc:78:0b:58:a8:86:db:0c:f0:91:2f:b6:7b:94:3d:63:04: d7:7d:f5:62:3d:77:55:fa:b0:e0:30:4c:df:7f:cd:c5:fa:49: 20:8c:cb:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHWDxJr5Ky+eg2VWRcNC9yXN/qcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzYzN0U5NjNFRjcwOUUyQkJEMzk4ODEyMDJFNjhFQTdC QTA5RUI2NDAeFw0yNjA5MTcwNzMyNThaFw0yNjA5MTgwOTA4NThaMDMxMTAvBgNV BAMTKDIyOURFREY1MjZCRkMyRjNFQ0M0MEFERENEMTJCQ0JDNDU3RkE4RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsYVnM0peUZxX/wqOfl0DniV1A zqa6/kUEjIzkcRIWjFBzEaA+EVOvvMoPTK9jtX2WpUzuOJGOL2wpi7OQAS4OSHJm VFyT0iEp27Z8E+k8jdfMQBv82+04rQCWD7TnFZecI9AHQasvqlzkL9rCPfNF6rt2 VsxqD4OwB2hl0ezc8sBnW9sX9dFs268aQjDEVZ+pYcmFkhgd65tGXXwm7NxKQ/Bi lfakUvdWjXoQNy4LXh0d+k+AK98NAkGqwKo8aJkOWtZvIqv5YgRye4EZz1otKWg0 HH3pWcmfgB68CRSsPI7R+1ZOZKZ3QUFG1SslEH0oQ/t/nxg0ltHCl7I106LlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIp3t9Sa/wvPsxArdzRK8vEV/qNUwHwYDVR0j BBgwFoAUdjfpY+9wniu9OYgSAuaOp7oJ62QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWYxYzc5ZjEtMjY0ZS00MjNmLTllMDgtMGIyOTAwZGE2OTQ5LzAvNzYzN0U5NjNF RjcwOUUyQkJEMzk4ODEyMDJFNjhFQTdCQTA5RUI2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NjM3RTk2M0VGNzA5RTJCQkQzOTg4MTIwMkU2OEVBN0JBMDlF QjY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWYxYzc5ZjEtMjY0ZS00MjNmLTll MDgtMGIyOTAwZGE2OTQ5LzAvNzYzN0U5NjNFRjcwOUUyQkJEMzk4ODEyMDJFNjhF QTdCQTA5RUI2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFR8HbqCdiLH0DkYb69WeTUR4RhcKxJMyorV gd5G8hd/NvAqxZ7NZQ26Ui0HFYFUz/NEBMHAvKlb2pjsVWzM4JNEJ5t7StADmre2 VMRgak1O+kKjSbj9aBmrOdYnOutxKvQ17BxuVg1f+a+V9jMoRzXbmO4VZKJE8/bi QZJCGPRwGF+xMm+S7Xco6KOzzT/+onrLBiROF801ki5VPP0gRaka2EC5oiE4ewYf +reLVwHuT7QG7tSu+G6sXPZ/JARXRgoniiIhYVZWm5/4aGqI8Zy9j64u3yG0NmO8 eAtYqIbbDPCRL7Z7lD1jBNd99WI9d1X6sOAwTN9/zcX6SSCMy6k= -----END CERTIFICATE-----Generated at Thu Sep 17 15:20:44 2026 by rpki-client