$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft File: 7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft (raw, json) Hash identifier: l0gpA+nhN5jt8GzzxZnz0/+9baHhMsCzjJt6daSOkDQ= Subject key identifier: 2C:17:EB:94:27:09:66:D7:2E:10:F5:93:A3:F6:5C:44:64:08:0D:93 Authority key identifier: 7D:C6:77:32:0E:CD:4F:9F:A6:1F:D2:17:2F:A0:FF:BF:74:4F:6A:33 Certificate issuer: /CN=7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33 Certificate serial: 7C6289F1E9D785B3A9619AEC2C3B73ADBFAEBB36 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 00:08:54 +0000 Manifest this update: Thu 17 Sep 2026 00:03:54 +0000 Manifest next update: Fri 18 Sep 2026 00:20:54 +0000 Files and hashes: 1: 7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.crl (hash: MOfHB/k1Qw4hy8+6PAtk67AZHsYnyjRz6joo6ozGY5o=) 2: 3130332e3138362e3139322e302f32342d3234203d3e20313439393238.roa (hash: baKMFekyN+9MNlrAI1yXYRuteIC69CJjTfZATjoU5so=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.crl rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:62:89:f1:e9:d7:85:b3:a9:61:9a:ec:2c:3b:73:ad:bf:ae:bb:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33 Validity Not Before: Sep 17 00:03:54 2026 GMT Not After : Sep 18 00:20:54 2026 GMT Subject: CN=2C17EB94270966D72E10F593A3F65C4464080D93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:06:10:ea:0b:40:74:39:3a:e4:22:51:47:f4: 42:06:8e:d8:83:40:5b:a4:e3:f6:81:d9:59:bf:16: c2:a1:f9:d3:00:20:5c:e8:64:86:04:81:a3:2f:14: e4:c0:3d:7b:25:57:aa:ed:68:83:f7:26:75:a5:6c: 0e:8c:4d:6f:53:c1:e1:5e:ba:b0:ad:fa:c6:0c:37: 14:9b:8e:b7:97:ff:3b:a6:dc:38:42:f7:a7:a1:7f: 12:aa:b9:1c:bf:ad:4b:9b:14:b4:d1:64:f2:8d:e3: 79:d4:35:6b:1b:ad:bc:df:e5:41:00:e2:61:a8:42: a5:d1:32:1d:fa:8e:34:50:d3:5f:2c:07:d6:5d:96: 2e:88:2a:6b:6d:68:87:17:c3:9f:4a:28:b1:81:ea: 6b:b8:a2:c3:09:da:8b:32:b9:e0:32:4e:f9:cd:5f: 14:9b:c0:b5:94:d3:4b:57:5f:d8:58:ba:c0:dd:a7: 23:f1:88:a1:89:ba:9d:54:f1:52:43:28:ac:80:e6: e2:63:b9:e4:78:31:91:6d:82:aa:7e:5b:29:be:52: 9a:62:fa:0b:51:c5:85:6a:31:20:33:02:5d:fe:12: 3f:7e:42:a9:2d:e2:51:d3:0e:44:58:58:e9:de:65: 8f:af:22:7c:1f:16:b8:0a:25:4d:de:0f:7a:bb:58: e6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:17:EB:94:27:09:66:D7:2E:10:F5:93:A3:F6:5C:44:64:08:0D:93 X509v3 Authority Key Identifier: keyid:7D:C6:77:32:0E:CD:4F:9F:A6:1F:D2:17:2F:A0:FF:BF:74:4F:6A:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e0:ff:3a:a4:d0:77:15:c7:a0:1f:2e:1b:cc:90:98:db:6f: 96:08:66:8a:3b:40:61:ef:08:92:4f:5f:82:33:34:87:ea:93: 10:c0:ac:ad:3a:aa:8b:ed:b9:14:db:93:cd:cd:50:e1:fe:83: 9b:ac:0d:c0:a5:d6:60:0c:c7:cb:c5:ed:33:e7:17:8f:d0:94: 01:63:69:17:28:2d:78:bb:ee:3a:26:47:2c:6c:b3:7c:ee:c6: 3a:5d:d2:f8:eb:cd:48:4d:42:79:25:bb:27:78:84:a4:3e:e8: 64:65:af:7d:2b:51:e3:a0:25:e6:f2:ce:db:29:08:47:8e:d0: 22:50:67:d0:2b:53:6e:c0:9d:62:6a:63:5b:f0:8f:d0:21:0b: f0:4a:52:10:8f:3f:08:ef:6f:0a:d3:cb:ea:ca:09:d0:bd:aa: f2:bc:8b:7a:bf:1b:be:18:8e:b8:c7:6e:e5:01:13:f4:b0:9e: e6:04:85:29:00:e4:cd:d7:e9:b0:42:ac:6c:f9:92:5a:bb:6b: ed:7e:62:66:96:20:41:e4:fb:ad:1b:6a:41:e9:86:84:b6:3e: 61:e0:1c:d1:3d:27:50:aa:1a:4d:d1:53:78:74:4f:d1:04:ec: c8:d9:89:91:f8:aa:ef:5c:27:09:85:93:46:2a:de:3c:0b:c0: 8c:ad:22:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfGKJ8enXhbOpYZrsLDtzrb+uuzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RDNjc3MzIwRUNENEY5RkE2MUZEMjE3MkZBMEZGQkY3 NDRGNkEzMzAeFw0yNjA5MTcwMDAzNTRaFw0yNjA5MTgwMDIwNTRaMDMxMTAvBgNV BAMTKDJDMTdFQjk0MjcwOTY2RDcyRTEwRjU5M0EzRjY1QzQ0NjQwODBEOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDBhDqC0B0OTrkIlFH9EIGjtiD QFuk4/aB2Vm/FsKh+dMAIFzoZIYEgaMvFOTAPXslV6rtaIP3JnWlbA6MTW9TweFe urCt+sYMNxSbjreX/zum3DhC96ehfxKquRy/rUubFLTRZPKN43nUNWsbrbzf5UEA 4mGoQqXRMh36jjRQ018sB9Zdli6IKmttaIcXw59KKLGB6mu4osMJ2osyueAyTvnN XxSbwLWU00tXX9hYusDdpyPxiKGJup1U8VJDKKyA5uJjueR4MZFtgqp+Wym+Uppi +gtRxYVqMSAzAl3+Ej9+Qqkt4lHTDkRYWOneZY+vInwfFrgKJU3eD3q7WOYPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULBfrlCcJZtcuEPWTo/ZcRGQIDZMwHwYDVR0j BBgwFoAUfcZ3Mg7NT5+mH9IXL6D/v3RPajMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM1YTlkZGYtYzEwOS00ZmMxLWEzMGQtOGYwNGI4MzM4MWJlLzAvN0RDNjc3MzIw RUNENEY5RkE2MUZEMjE3MkZBMEZGQkY3NDRGNkEzMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83REM2NzczMjBFQ0Q0RjlGQTYxRkQyMTcyRkEwRkZCRjc0NEY2 QTMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM1YTlkZGYtYzEwOS00ZmMxLWEz MGQtOGYwNGI4MzM4MWJlLzAvN0RDNjc3MzIwRUNENEY5RkE2MUZEMjE3MkZBMEZG QkY3NDRGNkEzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrg/zqk0HcVx6AfLhvMkJjbb5YIZoo7QGHv CJJPX4IzNIfqkxDArK06qovtuRTbk83NUOH+g5usDcCl1mAMx8vF7TPnF4/QlAFj aRcoLXi77jomRyxss3zuxjpd0vjrzUhNQnkluyd4hKQ+6GRlr30rUeOgJebyztsp CEeO0CJQZ9ArU27AnWJqY1vwj9AhC/BKUhCPPwjvbwrTy+rKCdC9qvK8i3q/G74Y jrjHbuUBE/SwnuYEhSkA5M3X6bBCrGz5klq7a+1+YmaWIEHk+60bakHphoS2PmHg HNE9J1CqGk3RU3h0T9EE7MjZiZH4qu9cJwmFk0Yq3jwLwIytIgY= -----END CERTIFICATE-----Generated at Thu Sep 17 09:19:14 2026 by rpki-client