$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft File: B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft (raw, json) Hash identifier: 4d8/MzVrx2wnzDgZlgNa1ABsyLR82JhF4NHV3Od/FSo= Subject key identifier: 7C:CC:3D:4F:5F:BA:B2:FB:9B:74:58:74:F2:44:FC:32:07:CE:BB:55 Authority key identifier: B7:D5:84:20:DE:53:EA:9E:24:0A:03:F3:E3:E8:1F:3D:74:C0:59:72 Certificate issuer: /CN=B7D58420DE53EA9E240A03F3E3E81F3D74C05972 Certificate serial: 60AD00935F29552698009FECB4836F9C2A3BB390 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft Manifest number: D6 Signing time: Fri 09 Oct 2026 18:25:14 +0000 Manifest this update: Fri 09 Oct 2026 18:20:14 +0000 Manifest next update: Sat 10 Oct 2026 20:38:14 +0000 Files and hashes: 1: 3130332e3132312e3136382e302f32332d3234203d3e20313335343738.roa (hash: JdCU8fnwLyrsbyZUM+2ErkfTDZvbcugmKa8c+7GG/sA=) 2: 3130332e3132312e3137302e302f32332d3234203d3e20313335343738.roa (hash: Tw0jthlgL7LR2s7HS7uvGtTnI6qmhp1zcR5Xc7WR+2U=) 3: B7D58420DE53EA9E240A03F3E3E81F3D74C05972.crl (hash: TkMQnuXiaGbbsX9m/0CIUc73ivclOA3UEr2tD9+i57M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.crl rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 20:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ad:00:93:5f:29:55:26:98:00:9f:ec:b4:83:6f:9c:2a:3b:b3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7D58420DE53EA9E240A03F3E3E81F3D74C05972 Validity Not Before: Oct 9 18:20:14 2026 GMT Not After : Oct 10 20:38:14 2026 GMT Subject: CN=7CCC3D4F5FBAB2FB9B745874F244FC3207CEBB55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:64:5e:89:08:7f:93:c9:e5:90:5b:78:9f:e3: 8f:df:db:50:e3:5d:66:2d:b8:07:2b:dd:1e:3a:75: b2:e7:d1:e7:90:a9:5a:a8:e8:b3:88:92:2b:59:d6: 3f:e8:d1:f4:5c:30:d5:55:0d:ae:22:99:86:87:e1: 14:9a:f5:0b:98:61:7d:ab:eb:4b:17:5b:68:dc:d2: 64:18:15:95:d0:a7:9f:70:70:d0:d8:c1:9c:e7:fa: 5b:ff:0b:20:02:9a:9b:8c:9d:f6:ba:e8:f9:c9:bb: 1c:91:7e:03:54:86:64:6a:42:09:73:d7:1b:35:c4: 70:c0:8c:a9:98:68:52:ad:91:f3:e9:40:df:e5:d6: 63:5b:50:b0:ec:00:01:62:26:15:69:f4:59:51:db: 06:c7:37:24:9e:ef:b0:c3:b7:ce:c1:de:6d:ab:ba: 7e:76:5b:14:c2:c9:d9:15:31:eb:2b:42:d4:1b:91: e6:f2:4d:c6:a5:81:2f:fb:cb:4c:81:65:36:18:9a: 98:6e:39:e2:bd:d8:94:bb:b3:43:2a:11:ca:6f:27: 22:0b:47:08:03:12:a8:e7:49:19:47:7f:44:df:32: 64:36:54:67:77:5a:ff:3a:bb:ac:18:f4:d6:93:bc: b4:66:13:6f:da:b0:47:44:1c:35:9f:06:c1:f0:cf: 11:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CC:3D:4F:5F:BA:B2:FB:9B:74:58:74:F2:44:FC:32:07:CE:BB:55 X509v3 Authority Key Identifier: keyid:B7:D5:84:20:DE:53:EA:9E:24:0A:03:F3:E3:E8:1F:3D:74:C0:59:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:f9:b4:3e:21:27:31:4a:cf:51:fb:5f:ff:15:94:af:3c:7b: 8a:4c:c8:1a:f0:8f:33:64:2a:03:17:a4:6e:64:d4:cb:2b:d8: b9:7c:66:bd:50:99:07:d4:59:26:cc:11:ab:c4:f8:f8:8d:3b: 0e:9f:9b:25:35:b0:ab:9e:b5:df:65:88:99:49:e9:3c:8d:16: 37:51:e5:8e:e0:e9:5d:8d:e9:31:33:6f:c1:e1:8c:d4:f1:63: b0:7c:dc:0b:bc:6b:29:c8:bd:c7:c5:19:3f:69:36:5b:69:45: a2:64:bc:e8:5f:6e:02:cf:95:af:9b:79:e6:d0:19:15:7c:70: 86:1a:ed:43:08:c2:6a:78:f1:16:80:da:f5:ef:d8:35:43:05: 44:cd:73:42:3f:f5:47:f9:ee:c8:d4:42:75:bf:91:a5:a0:96: 04:d8:df:2c:04:86:f2:92:fd:d7:77:c3:92:1d:66:fc:78:a9: 86:4a:d4:a8:90:13:b5:fe:f2:f7:60:4c:b8:8c:9d:21:3c:5d: 82:46:91:09:d4:8b:2a:50:0a:aa:b2:7f:50:b0:90:4e:be:d0: 5f:3a:d3:88:5a:a4:dd:c0:b4:8a:a2:f0:d0:45:50:1a:4f:61: 0b:44:7d:10:47:57:68:75:6a:f8:91:74:1c:ba:bd:84:d2:ae: 6f:83:72:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYK0Ak18pVSaYAJ/stINvnCo7s5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdENTg0MjBERTUzRUE5RTI0MEEwM0YzRTNFODFGM0Q3 NEMwNTk3MjAeFw0yNjEwMDkxODIwMTRaFw0yNjEwMTAyMDM4MTRaMDMxMTAvBgNV BAMTKDdDQ0MzRDRGNUZCQUIyRkI5Qjc0NTg3NEYyNDRGQzMyMDdDRUJCNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKZF6JCH+TyeWQW3if44/f21Dj XWYtuAcr3R46dbLn0eeQqVqo6LOIkitZ1j/o0fRcMNVVDa4imYaH4RSa9QuYYX2r 60sXW2jc0mQYFZXQp59wcNDYwZzn+lv/CyACmpuMnfa66PnJuxyRfgNUhmRqQglz 1xs1xHDAjKmYaFKtkfPpQN/l1mNbULDsAAFiJhVp9FlR2wbHNySe77DDt87B3m2r un52WxTCydkVMesrQtQbkebyTcalgS/7y0yBZTYYmphuOeK92JS7s0MqEcpvJyIL RwgDEqjnSRlHf0TfMmQ2VGd3Wv86u6wY9NaTvLRmE2/asEdEHDWfBsHwzxEhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfMw9T1+6svubdFh08kT8MgfOu1UwHwYDVR0j BBgwFoAUt9WEIN5T6p4kCgPz4+gfPXTAWXIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWE1OGFmMjQtNDYzYi00NGQ4LWI2ZjAtMzliODJiNDU4Zjc1LzAvQjdENTg0MjBE RTUzRUE5RTI0MEEwM0YzRTNFODFGM0Q3NEMwNTk3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0Q1ODQyMERFNTNFQTlFMjQwQTAzRjNFM0U4MUYzRDc0QzA1 OTcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWE1OGFmMjQtNDYzYi00NGQ4LWI2 ZjAtMzliODJiNDU4Zjc1LzAvQjdENTg0MjBERTUzRUE5RTI0MEEwM0YzRTNFODFG M0Q3NEMwNTk3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEj5tD4hJzFKz1H7X/8VlK88e4pMyBrwjzNk KgMXpG5k1Msr2Ll8Zr1QmQfUWSbMEavE+PiNOw6fmyU1sKuetd9liJlJ6TyNFjdR 5Y7g6V2N6TEzb8HhjNTxY7B83Au8aynIvcfFGT9pNltpRaJkvOhfbgLPla+beebQ GRV8cIYa7UMIwmp48RaA2vXv2DVDBUTNc0I/9Uf57sjUQnW/kaWglgTY3ywEhvKS /dd3w5IdZvx4qYZK1KiQE7X+8vdgTLiMnSE8XYJGkQnUiypQCqqyf1CwkE6+0F86 04hapN3AtIqi8NBFUBpPYQtEfRBHV2h1aviRdBy6vYTSrm+DckU= -----END CERTIFICATE-----Generated at Sat Oct 10 12:37:41 2026 by rpki-client