$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/7815DBBA44B8A2E83FDE40C32BE2A6E59D10A677.mft File: 7815DBBA44B8A2E83FDE40C32BE2A6E59D10A677.mft (raw, json) Hash identifier: hXFnHr8OfrErP2/VeqpIYcaH6++SwITLVtqyBGVQdRQ= Subject key identifier: 9E:DB:96:B3:06:D5:AB:EE:B0:9C:0A:90:0C:89:86:FF:BE:E9:71:33 Authority key identifier: 78:15:DB:BA:44:B8:A2:E8:3F:DE:40:C3:2B:E2:A6:E5:9D:10:A6:77 Certificate issuer: /CN=7815DBBA44B8A2E83FDE40C32BE2A6E59D10A677 Certificate serial: 12AA12CF4F7BE678E31978C6E5ECBBF4D4C4141E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7815DBBA44B8A2E83FDE40C32BE2A6E59D10A677.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/7815DBBA44B8A2E83FDE40C32BE2A6E59D10A677.mft Manifest number: C1 Signing time: Tue 22 Sep 2026 09:38:30 +0000 Manifest this update: Tue 22 Sep 2026 09:33:30 +0000 Manifest next update: Wed 23 Sep 2026 13:05:30 +0000 Files and hashes: 1: 323030313a6466343a336134303a3a2f34382d3438203d3e20313533313132.roa (hash: bKB1+9DVRDsboHXw+3VJPB+BasxR0bz/Ky0FIGacWWE=) 2: 7815DBBA44B8A2E83FDE40C32BE2A6E59D10A677.crl (hash: A+8+gX1R15p1xSnoe+1+xqlA5Cz0xu8SIL2KIVkpvrc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/7815DBBA44B8A2E83FDE40C32BE2A6E59D10A677.crl rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/7815DBBA44B8A2E83FDE40C32BE2A6E59D10A677.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7815DBBA44B8A2E83FDE40C32BE2A6E59D10A677.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 12:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:aa:12:cf:4f:7b:e6:78:e3:19:78:c6:e5:ec:bb:f4:d4:c4:14:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7815DBBA44B8A2E83FDE40C32BE2A6E59D10A677 Validity Not Before: Sep 22 09:33:30 2026 GMT Not After : Sep 23 13:05:30 2026 GMT Subject: CN=9EDB96B306D5ABEEB09C0A900C8986FFBEE97133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:12:01:5a:f4:e8:9d:a7:a0:75:2f:67:82:4e: d5:05:39:7c:75:5b:b1:47:f4:83:91:ae:46:be:82: 26:c0:4d:cb:c8:c5:7f:2b:d4:83:00:3e:f6:60:73: ef:51:4a:3e:c8:f2:09:e7:c1:15:70:fa:1a:0b:5b: fa:8e:c0:8f:04:bd:72:32:82:3c:39:60:ed:c5:7f: 47:60:d8:99:6f:a8:28:b3:60:1f:db:e1:ae:12:64: b2:de:a0:66:e4:e4:60:fd:99:96:df:63:39:54:e8: 99:43:95:ce:f7:14:13:ed:c8:4d:cf:65:88:7f:15: 16:67:8c:de:eb:3c:4c:8a:5f:09:a1:e5:fb:db:4e: 90:05:bd:a7:8b:e0:6a:96:d5:2f:bd:c4:e4:df:82: c2:ac:0f:ba:97:d7:68:a8:3e:fb:97:b4:7a:2a:82: 28:6b:77:d6:f2:d3:e9:4b:32:48:cd:77:ca:ec:8f: 06:7a:60:ed:7e:1a:1b:65:82:78:b5:01:27:1b:6b: 72:6d:13:58:ed:e7:14:3f:18:4f:cf:12:c8:41:a7: 3c:55:eb:e6:32:8a:f9:de:60:4b:af:4f:dc:bf:56: c0:6f:c5:06:62:77:e1:a9:39:16:19:76:cc:be:21: 76:6b:b4:16:15:f7:63:1e:11:1b:8e:5c:4a:ab:e7: 16:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DB:96:B3:06:D5:AB:EE:B0:9C:0A:90:0C:89:86:FF:BE:E9:71:33 X509v3 Authority Key Identifier: keyid:78:15:DB:BA:44:B8:A2:E8:3F:DE:40:C3:2B:E2:A6:E5:9D:10:A6:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/7815DBBA44B8A2E83FDE40C32BE2A6E59D10A677.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7815DBBA44B8A2E83FDE40C32BE2A6E59D10A677.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/7815DBBA44B8A2E83FDE40C32BE2A6E59D10A677.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:6a:c0:7b:8a:5d:10:06:29:c8:30:75:ce:58:dd:1b:93:d0: 36:c9:6b:55:3b:b2:04:23:04:dc:68:22:d4:e6:89:53:37:06: 4c:67:eb:a0:06:23:04:0f:ab:76:d8:ca:3e:80:05:ed:89:e3: c4:80:c5:26:6b:bd:e1:d9:70:ad:98:d0:a2:a2:90:ee:d7:76: ed:a3:96:65:af:c3:0a:4d:ed:e8:ea:8f:78:5a:1b:cf:40:25: d0:00:b5:39:12:87:97:d8:f0:2f:1e:07:69:a1:03:f0:86:7a: 67:4f:4c:3a:3a:87:c1:ed:0e:7f:f3:a1:6d:0e:db:3d:9e:d6: e3:4c:1a:1e:04:8c:2f:5b:26:4f:58:77:53:16:17:fa:99:16: 78:bc:a1:30:cd:87:b6:09:43:56:35:18:ad:3f:e4:dd:b1:dd: 25:69:a0:48:d8:fe:2f:5a:2f:ec:76:e5:5d:cb:07:4a:40:09: 50:c7:a0:72:3d:86:d8:df:3c:ed:a8:4a:6e:b2:a0:83:b8:60: 4e:5b:ed:e7:50:ce:1c:31:3c:f3:69:4a:d2:39:37:39:b2:25: 74:4e:04:60:eb:ce:a5:6f:2d:dc:79:30:82:27:dc:7b:7c:4b: 83:8e:43:66:b0:b1:18:60:73:7e:e3:81:cc:8b:55:78:b8:1e: ea:5e:26:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEqoSz0975njjGXjG5ey79NTEFB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgxNURCQkE0NEI4QTJFODNGREU0MEMzMkJFMkE2RTU5 RDEwQTY3NzAeFw0yNjA5MjIwOTMzMzBaFw0yNjA5MjMxMzA1MzBaMDMxMTAvBgNV BAMTKDlFREI5NkIzMDZENUFCRUVCMDlDMEE5MDBDODk4NkZGQkVFOTcxMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWEgFa9Oidp6B1L2eCTtUFOXx1 W7FH9IORrka+gibATcvIxX8r1IMAPvZgc+9RSj7I8gnnwRVw+hoLW/qOwI8EvXIy gjw5YO3Ff0dg2JlvqCizYB/b4a4SZLLeoGbk5GD9mZbfYzlU6JlDlc73FBPtyE3P ZYh/FRZnjN7rPEyKXwmh5fvbTpAFvaeL4GqW1S+9xOTfgsKsD7qX12ioPvuXtHoq gihrd9by0+lLMkjNd8rsjwZ6YO1+Ghtlgni1AScba3JtE1jt5xQ/GE/PEshBpzxV 6+YyivneYEuvT9y/VsBvxQZid+GpORYZdsy+IXZrtBYV92MeERuOXEqr5xbjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUntuWswbVq+6wnAqQDImG/77pcTMwHwYDVR0j BBgwFoAUeBXbukS4oug/3kDDK+Km5Z0QpncwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQ1NjUxOWUtYWI2MS00OTQzLWIzZTgtMTBiZGQ2MDgwZmRhLzEvNzgxNURCQkE0 NEI4QTJFODNGREU0MEMzMkJFMkE2RTU5RDEwQTY3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83ODE1REJCQTQ0QjhBMkU4M0ZERTQwQzMyQkUyQTZFNTlEMTBB Njc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzEvNzgxNURCQkE0NEI4QTJFODNGREU0MEMzMkJFMkE2 RTU5RDEwQTY3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVqwHuKXRAGKcgwdc5Y3RuT0DbJa1U7sgQj BNxoItTmiVM3Bkxn66AGIwQPq3bYyj6ABe2J48SAxSZrveHZcK2Y0KKikO7Xdu2j lmWvwwpN7ejqj3haG89AJdAAtTkSh5fY8C8eB2mhA/CGemdPTDo6h8HtDn/zoW0O 2z2e1uNMGh4EjC9bJk9Yd1MWF/qZFni8oTDNh7YJQ1Y1GK0/5N2x3SVpoEjY/i9a L+x25V3LB0pACVDHoHI9htjfPO2oSm6yoIO4YE5b7edQzhwxPPNpStI5NzmyJXRO BGDrzqVvLdx5MIIn3Ht8S4OOQ2awsRhgc37jgcyLVXi4HupeJjI= -----END CERTIFICATE-----Generated at Tue Sep 22 14:25:21 2026 by rpki-client