$ rpki-client -vvvf rpki-rsync.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/7844F23C52D754615D0DCCF2190967C1B89CF85F.mft File: 7844F23C52D754615D0DCCF2190967C1B89CF85F.mft (raw, json) Hash identifier: h9SDwNwaYodnkDYCXELxcXOOw0kBCi0ES4QBIj7yHUU= Subject key identifier: 2B:3A:8E:E8:20:4C:53:39:B3:61:00:54:87:F7:E3:88:39:99:9A:A4 Authority key identifier: 78:44:F2:3C:52:D7:54:61:5D:0D:CC:F2:19:09:67:C1:B8:9C:F8:5F Certificate issuer: /CN=7844F23C52D754615D0DCCF2190967C1B89CF85F Certificate serial: 61DBACF0F7D93C797AE3243FEEE0A2CCC7239599 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7844F23C52D754615D0DCCF2190967C1B89CF85F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/7844F23C52D754615D0DCCF2190967C1B89CF85F.mft Manifest number: BD Signing time: Sun 20 Sep 2026 19:51:27 +0000 Manifest this update: Sun 20 Sep 2026 19:46:27 +0000 Manifest next update: Mon 21 Sep 2026 23:29:27 +0000 Files and hashes: 1: 7844F23C52D754615D0DCCF2190967C1B89CF85F.crl (hash: zX+i1xgqfJ6MDX3cZlC/04W4/7BL+nSK69cWMpuMi0U=) 2: 3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa (hash: MkT+sF+nybNeeysnued54G0xsj6WfMLE7g6ep+2x6vw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/7844F23C52D754615D0DCCF2190967C1B89CF85F.crl rsync://rpki-rsync.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/7844F23C52D754615D0DCCF2190967C1B89CF85F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7844F23C52D754615D0DCCF2190967C1B89CF85F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 23:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:db:ac:f0:f7:d9:3c:79:7a:e3:24:3f:ee:e0:a2:cc:c7:23:95:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7844F23C52D754615D0DCCF2190967C1B89CF85F Validity Not Before: Sep 20 19:46:27 2026 GMT Not After : Sep 21 23:29:27 2026 GMT Subject: CN=2B3A8EE8204C5339B361005487F7E38839999AA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:47:91:67:f9:9d:21:02:e7:b9:95:c4:1e:13: 5b:33:63:76:45:64:0a:6a:58:46:fc:ed:a0:ce:9d: 19:51:d3:cc:6d:0d:7e:af:0d:8d:4f:c5:87:58:9c: 17:83:53:2a:f5:23:20:e9:27:33:6a:c7:2d:12:80: 6d:f7:3e:b3:27:08:ea:61:9e:16:bf:f9:ad:af:e1: 33:e4:ef:83:39:0b:58:a9:bb:97:87:db:4f:c5:a5: 12:14:e5:3b:61:af:21:88:e8:48:91:bd:96:c9:14: 0b:13:59:3c:4c:f3:4b:1b:6f:f1:f3:01:88:b4:d7: 98:3a:e1:fc:a7:6e:05:1a:5c:9a:5a:1a:49:5b:e6: 15:1d:8b:47:e0:08:00:71:6a:42:02:cd:52:97:81: a9:a7:ba:c4:01:da:de:52:a9:c2:6c:a3:e9:e2:c9: 29:03:90:10:14:82:14:a5:f9:56:42:d8:47:4f:7f: b2:90:16:8d:5f:c7:9a:c7:ce:fa:ec:59:33:bf:da: e9:95:b3:86:b1:e7:f8:67:7d:80:0c:b7:b5:54:7c: 3d:09:70:dd:c9:ad:7c:a4:12:df:7e:9c:48:dc:a9: 15:73:dc:06:7d:bb:4a:c6:cb:44:04:af:5f:a2:d4: 29:9c:1b:20:5a:9d:a0:36:f3:3c:f9:91:30:f6:a1: fc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:3A:8E:E8:20:4C:53:39:B3:61:00:54:87:F7:E3:88:39:99:9A:A4 X509v3 Authority Key Identifier: keyid:78:44:F2:3C:52:D7:54:61:5D:0D:CC:F2:19:09:67:C1:B8:9C:F8:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/7844F23C52D754615D0DCCF2190967C1B89CF85F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7844F23C52D754615D0DCCF2190967C1B89CF85F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/7844F23C52D754615D0DCCF2190967C1B89CF85F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:ff:47:37:b6:77:d3:f1:63:5d:8f:47:8c:db:3d:a9:07:6d: c4:a3:94:d9:69:ad:eb:15:95:ad:89:ac:94:06:f7:e1:1c:4f: ef:99:5c:86:03:1c:f0:e2:a3:0e:00:d8:93:0d:01:1b:4f:d1: 27:23:c7:e9:79:be:42:06:14:3f:48:24:9f:51:dc:ab:17:06: ef:cb:ac:2b:a5:47:28:55:86:0d:78:e2:e8:09:5d:24:82:ca: 15:e4:85:4d:1d:5d:e3:d3:96:a5:59:01:84:1a:ec:c0:67:34: 9a:2e:46:a3:df:3c:42:db:92:00:52:e2:ee:b1:6e:ad:c4:41: 0e:00:c2:13:ce:c9:27:ea:cb:81:f8:bc:80:c4:1e:a8:3d:9d: 4f:64:16:60:16:2f:28:6c:37:83:f8:44:62:3d:33:09:c0:d1: 03:7c:9b:c5:d3:8f:e1:80:fa:0e:39:42:4d:b6:c5:90:7c:7f: 96:43:84:33:8c:a5:ef:65:96:25:59:b4:c2:1a:8e:8b:f9:bc: a7:67:9d:76:9e:82:28:6f:6a:3d:af:4b:bf:49:7d:e3:84:6f: 5a:23:55:54:2a:62:47:4d:6b:62:38:64:d6:0b:50:1b:1b:2e: c6:89:53:33:7a:83:39:a6:4f:f5:5c:f2:04:9e:0e:f7:83:5a: c1:33:75:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYdus8PfZPHl64yQ/7uCizMcjlZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg0NEYyM0M1MkQ3NTQ2MTVEMERDQ0YyMTkwOTY3QzFC ODlDRjg1RjAeFw0yNjA5MjAxOTQ2MjdaFw0yNjA5MjEyMzI5MjdaMDMxMTAvBgNV BAMTKDJCM0E4RUU4MjA0QzUzMzlCMzYxMDA1NDg3RjdFMzg4Mzk5OTlBQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcR5Fn+Z0hAue5lcQeE1szY3ZF ZApqWEb87aDOnRlR08xtDX6vDY1PxYdYnBeDUyr1IyDpJzNqxy0SgG33PrMnCOph nha/+a2v4TPk74M5C1ipu5eH20/FpRIU5TthryGI6EiRvZbJFAsTWTxM80sbb/Hz AYi015g64fynbgUaXJpaGklb5hUdi0fgCABxakICzVKXgamnusQB2t5SqcJso+ni ySkDkBAUghSl+VZC2EdPf7KQFo1fx5rHzvrsWTO/2umVs4ax5/hnfYAMt7VUfD0J cN3JrXykEt9+nEjcqRVz3AZ9u0rGy0QEr1+i1CmcGyBanaA28zz5kTD2ofzBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKzqO6CBMUzmzYQBUh/fjiDmZmqQwHwYDVR0j BBgwFoAUeETyPFLXVGFdDczyGQlnwbic+F8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTZkNjExMzUtNzVlNC00NmM2LWJkZGQtZmJhNjgzNGRjZTQxLzAvNzg0NEYyM0M1 MkQ3NTQ2MTVEMERDQ0YyMTkwOTY3QzFCODlDRjg1Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83ODQ0RjIzQzUyRDc1NDYxNUQwRENDRjIxOTA5NjdDMUI4OUNG ODVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTZkNjExMzUtNzVlNC00NmM2LWJk ZGQtZmJhNjgzNGRjZTQxLzAvNzg0NEYyM0M1MkQ3NTQ2MTVEMERDQ0YyMTkwOTY3 QzFCODlDRjg1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABj/Rze2d9PxY12PR4zbPakHbcSjlNlpresV la2JrJQG9+EcT++ZXIYDHPDiow4A2JMNARtP0Scjx+l5vkIGFD9IJJ9R3KsXBu/L rCulRyhVhg144ugJXSSCyhXkhU0dXePTlqVZAYQa7MBnNJouRqPfPELbkgBS4u6x bq3EQQ4AwhPOySfqy4H4vIDEHqg9nU9kFmAWLyhsN4P4RGI9MwnA0QN8m8XTj+GA +g45Qk22xZB8f5ZDhDOMpe9lliVZtMIajov5vKdnnXaegihvaj2vS79JfeOEb1oj VVQqYkdNa2I4ZNYLUBsbLsaJUzN6gzmmT/Vc8gSeDveDWsEzdSc= -----END CERTIFICATE-----Generated at Mon Sep 21 13:34:28 2026 by rpki-client