$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft File: C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft (raw, json) Hash identifier: apNTrwd4ucHM616PuvWx+tZPBWaq7d+dyjupgF0/jXc= Subject key identifier: A7:D9:28:D7:C2:5A:8D:AF:9D:B4:D5:56:23:75:66:DB:61:4F:29:4A Authority key identifier: C1:04:37:21:37:74:C7:C2:BB:5B:C9:BA:76:49:B7:2D:76:46:F8:1C Certificate issuer: /CN=C10437213774C7C2BB5BC9BA7649B72D7646F81C Certificate serial: 55851F925857817C93B647CBE0C5ED8C52C01C68 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 08:08:41 +0000 Manifest this update: Thu 17 Sep 2026 08:03:41 +0000 Manifest next update: Fri 18 Sep 2026 11:20:41 +0000 Files and hashes: 1: 3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa (hash: 3Tzs+hQ+b22vv80zUD8FcOM/x7RDc2pjQFIIYIEE2b4=) 2: C10437213774C7C2BB5BC9BA7649B72D7646F81C.crl (hash: XWM1erWDayZrti4QJ/pIQGGr+gZ0iG9jOW3qty+k0bI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.crl rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:85:1f:92:58:57:81:7c:93:b6:47:cb:e0:c5:ed:8c:52:c0:1c:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C10437213774C7C2BB5BC9BA7649B72D7646F81C Validity Not Before: Sep 17 08:03:41 2026 GMT Not After : Sep 18 11:20:41 2026 GMT Subject: CN=A7D928D7C25A8DAF9DB4D556237566DB614F294A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b1:2b:6e:a0:b0:36:c8:4f:6a:d3:3b:57:0b: d6:eb:d8:1e:27:3e:fc:1f:db:2f:95:79:20:dd:55: 8a:44:6a:e0:5a:17:44:38:44:6d:62:52:a1:ee:51: 1f:ed:cd:c4:10:4d:ff:7d:25:e7:bc:80:f5:00:cf: 60:4a:15:cb:03:68:a4:66:f3:c2:1d:18:20:f9:b9: 69:45:4e:07:0e:48:c1:30:00:1d:78:51:af:95:90: 95:4f:6f:fb:bd:da:57:0e:2f:63:66:3a:4e:ba:ff: 2b:85:ab:c5:69:52:c4:77:46:52:3d:21:63:4c:bf: 74:52:a4:3e:ee:a3:84:80:2d:bc:9b:6c:e5:c1:38: fd:5e:97:4b:d9:e6:96:f5:6d:b3:85:4b:1a:2f:38: 3f:5c:a5:a7:8a:c5:9e:32:44:39:ba:36:9a:0b:19: 46:76:ee:d4:f5:98:80:ec:ac:b8:7c:7b:f7:12:6b: 2e:10:50:ee:40:d8:e4:59:92:f3:51:6a:fe:5d:51: 0a:b6:0f:4f:50:d9:f0:f9:0f:c3:8b:ea:7f:b6:68: c0:8f:ca:88:d2:88:27:a0:f8:eb:e3:41:2c:20:be: da:df:44:45:ed:68:27:00:98:42:ec:19:92:60:24: 4f:20:f8:a1:e4:5c:18:6e:b0:bd:97:74:46:da:8c: a5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D9:28:D7:C2:5A:8D:AF:9D:B4:D5:56:23:75:66:DB:61:4F:29:4A X509v3 Authority Key Identifier: keyid:C1:04:37:21:37:74:C7:C2:BB:5B:C9:BA:76:49:B7:2D:76:46:F8:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:26:db:ec:11:96:ed:5b:c4:f1:36:13:16:76:8d:06:8b:9f: c9:a0:ea:81:2c:7e:ca:7b:05:67:bc:e5:9e:19:e1:d7:0c:96: 5f:a8:f8:49:5c:8f:67:01:5a:dc:ec:26:27:1c:ff:4c:9f:fd: aa:d9:72:3b:20:f8:09:1a:79:0d:62:9e:cc:01:8e:be:9c:5e: 1e:10:06:3c:2d:64:b6:e1:f5:38:b4:57:f6:bc:44:46:1e:28: f4:12:32:da:f4:ad:25:59:b2:89:20:9e:ab:5d:28:aa:39:ee: aa:04:f9:a9:de:ca:a7:d8:b1:de:39:18:0f:4d:9f:e6:6a:0d: 2f:f3:01:80:81:15:2a:1e:22:9a:e9:5a:ec:94:32:31:89:0c: d8:cc:38:a0:65:0d:72:04:a0:71:6d:53:e0:fd:b8:c4:c6:73: 9c:91:1e:d9:ef:a5:72:9e:b6:5a:66:2e:49:3d:9a:35:6d:c0: 4d:5a:cf:e7:d5:d3:8a:b1:1e:b8:79:1d:ec:2f:67:74:30:88: a2:80:7f:52:e4:d3:1d:1e:75:55:e9:96:b0:92:6d:e4:97:22: 62:b0:3f:a2:12:72:22:5e:7b:5b:09:d8:de:4f:8e:43:7f:68: 19:49:8e:d8:bc:80:dc:eb:7f:14:bd:45:54:20:ed:e4:4e:a1: 86:3b:f6:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVYUfklhXgXyTtkfL4MXtjFLAHGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzEwNDM3MjEzNzc0QzdDMkJCNUJDOUJBNzY0OUI3MkQ3 NjQ2RjgxQzAeFw0yNjA5MTcwODAzNDFaFw0yNjA5MTgxMTIwNDFaMDMxMTAvBgNV BAMTKEE3RDkyOEQ3QzI1QThEQUY5REI0RDU1NjIzNzU2NkRCNjE0RjI5NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKsStuoLA2yE9q0ztXC9br2B4n Pvwf2y+VeSDdVYpEauBaF0Q4RG1iUqHuUR/tzcQQTf99Jee8gPUAz2BKFcsDaKRm 88IdGCD5uWlFTgcOSMEwAB14Ua+VkJVPb/u92lcOL2NmOk66/yuFq8VpUsR3RlI9 IWNMv3RSpD7uo4SALbybbOXBOP1el0vZ5pb1bbOFSxovOD9cpaeKxZ4yRDm6NpoL GUZ27tT1mIDsrLh8e/cSay4QUO5A2ORZkvNRav5dUQq2D09Q2fD5D8OL6n+2aMCP yojSiCeg+OvjQSwgvtrfREXtaCcAmELsGZJgJE8g+KHkXBhusL2XdEbajKXFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp9ko18Jaja+dtNVWI3Vm22FPKUowHwYDVR0j BBgwFoAUwQQ3ITd0x8K7W8m6dkm3LXZG+BwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDBhOGNlNmMtODI5MC00YjlkLTlhZWQtMDc1NGQzZmQ4ZDMyLzAvQzEwNDM3MjEz Nzc0QzdDMkJCNUJDOUJBNzY0OUI3MkQ3NjQ2RjgxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMTA0MzcyMTM3NzRDN0MyQkI1QkM5QkE3NjQ5QjcyRDc2NDZG ODFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDBhOGNlNmMtODI5MC00YjlkLTlh ZWQtMDc1NGQzZmQ4ZDMyLzAvQzEwNDM3MjEzNzc0QzdDMkJCNUJDOUJBNzY0OUI3 MkQ3NjQ2RjgxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkm2+wRlu1bxPE2ExZ2jQaLn8mg6oEsfsp7 BWe85Z4Z4dcMll+o+Elcj2cBWtzsJicc/0yf/arZcjsg+AkaeQ1inswBjr6cXh4Q BjwtZLbh9Ti0V/a8REYeKPQSMtr0rSVZsokgnqtdKKo57qoE+aneyqfYsd45GA9N n+ZqDS/zAYCBFSoeIprpWuyUMjGJDNjMOKBlDXIEoHFtU+D9uMTGc5yRHtnvpXKe tlpmLkk9mjVtwE1az+fV04qxHrh5HewvZ3QwiKKAf1Lk0x0edVXplrCSbeSXImKw P6ISciJee1sJ2N5PjkN/aBlJjti8gNzrfxS9RVQg7eROoYY79os= -----END CERTIFICATE-----Generated at Thu Sep 17 12:20:05 2026 by rpki-client