$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.mft File: C7281E70CDFFA77145134C1424E6A649EA797D8A.mft (raw, json) Hash identifier: TJFG2azwjchcQIk57Hsa7+DY7IcAFbf+fay8T71OWS8= Subject key identifier: D3:82:CE:5B:57:62:8F:8A:08:F5:6F:BC:68:B3:9C:01:44:78:F7:0B Authority key identifier: C7:28:1E:70:CD:FF:A7:71:45:13:4C:14:24:E6:A6:49:EA:79:7D:8A Certificate issuer: /CN=C7281E70CDFFA77145134C1424E6A649EA797D8A Certificate serial: 6DB0BD943B086B1D2F88FD877098E8BA5C3E0C00 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7281E70CDFFA77145134C1424E6A649EA797D8A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.mft Manifest number: DD Signing time: Thu 15 Oct 2026 06:17:53 +0000 Manifest this update: Thu 15 Oct 2026 06:12:53 +0000 Manifest next update: Fri 16 Oct 2026 08:09:53 +0000 Files and hashes: 1: 3130332e38302e3233362e302f32322d3234203d3e203634333135.roa (hash: FH9DT+b1XWN3pV6XhdDYXcgO7tOiFoyEXNlC5hXHyTE=) 2: C7281E70CDFFA77145134C1424E6A649EA797D8A.crl (hash: MUsO5DHl6lP0t6uS5W++Rrao7m9ucuEfoRAgqlTtpuo=) 3: 323030313a6466373a316130303a3a2f34382d3438203d3e203634333135.roa (hash: cXKkyqfbSB+TtcjHk1mHx/AJ1vKr+O8y/yaLaZ1+wx8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.crl rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7281E70CDFFA77145134C1424E6A649EA797D8A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 06:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:b0:bd:94:3b:08:6b:1d:2f:88:fd:87:70:98:e8:ba:5c:3e:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7281E70CDFFA77145134C1424E6A649EA797D8A Validity Not Before: Oct 15 06:12:53 2026 GMT Not After : Oct 16 08:09:53 2026 GMT Subject: CN=D382CE5B57628F8A08F56FBC68B39C014478F70B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b4:75:d1:f6:d8:5c:f0:c1:6d:b9:6b:5c:32: ab:0d:b8:e9:4d:92:75:47:a0:ce:1c:0e:93:bd:1a: 0f:83:a4:f5:cb:60:9b:ca:de:36:13:5b:e8:9f:d2: 79:67:f3:33:9a:98:0c:64:58:79:8f:10:a8:b5:4c: 83:c7:e1:5a:ae:d9:09:7d:94:b1:0e:96:1c:92:cc: 85:3b:ee:df:65:4e:ac:6b:13:03:3b:2f:b3:9c:7e: 1a:ad:0a:29:ea:80:f3:43:13:2c:47:2d:ae:42:6f: 5f:4e:a1:7f:88:9f:94:80:88:7e:c8:e8:7f:b8:f2: 0f:03:b3:03:3f:e0:c8:6d:d7:71:b5:b0:3c:a7:28: 61:b5:fc:43:f1:6c:d7:53:cb:61:ea:5d:07:75:53: 2e:6c:20:4e:1e:d5:ad:8a:5c:4b:fa:71:06:3d:dd: 16:eb:02:cd:e0:da:c0:a4:fc:22:d9:2c:91:46:01: 50:f2:87:91:32:57:e6:e3:ed:c0:51:ef:74:11:ec: ee:d4:3c:62:f7:69:0d:4e:56:4a:7b:86:05:f6:51: 3c:ac:fb:d8:7b:bf:8b:52:df:7d:38:f4:1b:ea:77: cd:b0:0a:44:dd:71:dc:2b:18:11:92:b5:48:46:ec: 17:cb:98:0c:19:2d:92:a7:ab:77:a9:6b:cb:69:6c: d2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:82:CE:5B:57:62:8F:8A:08:F5:6F:BC:68:B3:9C:01:44:78:F7:0B X509v3 Authority Key Identifier: keyid:C7:28:1E:70:CD:FF:A7:71:45:13:4C:14:24:E6:A6:49:EA:79:7D:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7281E70CDFFA77145134C1424E6A649EA797D8A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:05:28:77:f0:29:d7:ac:60:7f:76:4b:38:74:61:74:e1:4e: a1:d2:f7:3d:37:08:e8:16:fc:fd:32:53:2e:cc:34:98:62:f8: 09:79:3b:b0:a2:8d:f3:75:03:c0:9e:74:f0:7e:5c:8c:71:ce: 16:48:cb:f1:79:8a:ef:16:55:4e:f1:89:6e:11:aa:5d:a0:fd: 5e:cd:b6:1b:c5:25:87:c7:5b:f4:9e:bc:5c:37:57:c9:ee:d6: 41:8c:13:df:da:b5:d2:c4:8f:de:ef:cc:af:b8:d0:26:81:3b: 9f:23:c8:d0:2b:da:0b:3d:97:d1:a1:84:00:7d:f4:eb:c3:4a: 54:67:75:65:f0:73:6d:67:21:14:c0:2f:16:6e:fe:e4:45:d1: 30:c0:42:6f:51:fd:9c:77:eb:5e:a4:8a:d7:9b:cc:98:89:c7: ae:a9:3d:07:fd:9c:b0:7e:a9:cd:94:1c:1f:f5:de:a8:aa:f9: bd:87:ad:69:b5:7a:4e:a4:b9:3c:57:68:13:79:08:81:e9:ae: c1:09:e7:e2:bc:fa:f3:f8:64:98:02:40:0d:b4:ac:0c:d0:6f: 0c:f3:76:b4:66:7e:45:c9:80:4b:7c:88:f0:d5:68:10:30:95: 35:55:da:66:00:55:72:13:fd:14:11:ca:eb:3c:e3:4d:aa:39: 17:ae:6e:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbbC9lDsIax0viP2HcJjoulw+DAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcyODFFNzBDREZGQTc3MTQ1MTM0QzE0MjRFNkE2NDlF QTc5N0Q4QTAeFw0yNjEwMTUwNjEyNTNaFw0yNjEwMTYwODA5NTNaMDMxMTAvBgNV BAMTKEQzODJDRTVCNTc2MjhGOEEwOEY1NkZCQzY4QjM5QzAxNDQ3OEY3MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCutHXR9thc8MFtuWtcMqsNuOlN knVHoM4cDpO9Gg+DpPXLYJvK3jYTW+if0nln8zOamAxkWHmPEKi1TIPH4Vqu2Ql9 lLEOlhySzIU77t9lTqxrEwM7L7OcfhqtCinqgPNDEyxHLa5Cb19OoX+In5SAiH7I 6H+48g8DswM/4Mht13G1sDynKGG1/EPxbNdTy2HqXQd1Uy5sIE4e1a2KXEv6cQY9 3RbrAs3g2sCk/CLZLJFGAVDyh5EyV+bj7cBR73QR7O7UPGL3aQ1OVkp7hgX2UTys +9h7v4tS33049Bvqd82wCkTdcdwrGBGStUhG7BfLmAwZLZKnq3epa8tpbNJrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU04LOW1dij4oI9W+8aLOcAUR49wswHwYDVR0j BBgwFoAUxygecM3/p3FFE0wUJOamSep5fYowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTk1ZjVmMTEtNTdhZS00YWMzLWEwMzktZTA0NTZiY2NmNDRjLzAvQzcyODFFNzBD REZGQTc3MTQ1MTM0QzE0MjRFNkE2NDlFQTc5N0Q4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzI4MUU3MENERkZBNzcxNDUxMzRDMTQyNEU2QTY0OUVBNzk3 RDhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTk1ZjVmMTEtNTdhZS00YWMzLWEw MzktZTA0NTZiY2NmNDRjLzAvQzcyODFFNzBDREZGQTc3MTQ1MTM0QzE0MjRFNkE2 NDlFQTc5N0Q4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQFKHfwKdesYH92Szh0YXThTqHS9z03COgW /P0yUy7MNJhi+Al5O7CijfN1A8CedPB+XIxxzhZIy/F5iu8WVU7xiW4Rql2g/V7N thvFJYfHW/SevFw3V8nu1kGME9/atdLEj97vzK+40CaBO58jyNAr2gs9l9GhhAB9 9OvDSlRndWXwc21nIRTALxZu/uRF0TDAQm9R/Zx3616kitebzJiJx66pPQf9nLB+ qc2UHB/13qiq+b2HrWm1ek6kuTxXaBN5CIHprsEJ5+K8+vP4ZJgCQA20rAzQbwzz drRmfkXJgEt8iPDVaBAwlTVV2mYAVXIT/RQRyus8402qOReubkE= -----END CERTIFICATE-----Generated at Thu Oct 15 10:30:08 2026 by rpki-client