$ rpki-client -vvvf rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft File: B7A0E7998A9F266F3882F19118691CB225356F5D.mft (raw, json) Hash identifier: pOQeddOYdZctZ9rfl1Vu03kLmHGVemUPU6LheBqHGj0= Subject key identifier: 25:12:D2:69:C3:31:CF:38:7C:AE:21:CC:66:0F:5F:B1:F3:E2:0F:D5 Authority key identifier: B7:A0:E7:99:8A:9F:26:6F:38:82:F1:91:18:69:1C:B2:25:35:6F:5D Certificate issuer: /CN=B7A0E7998A9F266F3882F19118691CB225356F5D Certificate serial: 458F4D2EAFDEE69C270D42939BB4A75E96E4CDF7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7A0E7998A9F266F3882F19118691CB225356F5D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft Manifest number: BC Signing time: Sun 20 Sep 2026 05:13:42 +0000 Manifest this update: Sun 20 Sep 2026 05:08:42 +0000 Manifest next update: Mon 21 Sep 2026 06:29:42 +0000 Files and hashes: 1: B7A0E7998A9F266F3882F19118691CB225356F5D.crl (hash: IawtE2MlAhsHFm04ekhJygFUc//BsIL/bxlfqYWUU/U=) 2: 3130332e34372e31312e302f32342d3234203d3e203539323733.roa (hash: i7xKoh7QIZf/wi1EOh2BtN5rz2lc5CUAErnYSBr7+OA=) 3: 3130332e34372e31302e302f32332d3233203d3e203539323733.roa (hash: zUqTI/Bo3fTJZJzitShFowGX98l0p/JLTSiXxFVwOj4=) 4: 3130332e34372e31302e302f32342d3234203d3e203539323733.roa (hash: bqleVr/CtV0kID5GQzDKQocY8p72teKu2kr0m36+c90=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.crl rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7A0E7998A9F266F3882F19118691CB225356F5D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 06:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:8f:4d:2e:af:de:e6:9c:27:0d:42:93:9b:b4:a7:5e:96:e4:cd:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7A0E7998A9F266F3882F19118691CB225356F5D Validity Not Before: Sep 20 05:08:42 2026 GMT Not After : Sep 21 06:29:42 2026 GMT Subject: CN=2512D269C331CF387CAE21CC660F5FB1F3E20FD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a4:93:aa:a0:bf:3a:47:ab:6a:e8:5a:8b:13: d1:3d:09:00:7f:1f:6e:48:71:b8:5a:07:21:c5:34: ae:ca:b6:a3:b1:60:cf:fc:e1:61:f4:54:df:16:ba: f8:3a:f5:c8:de:7f:47:4e:39:f8:3e:05:89:eb:d8: 67:76:42:4d:93:bf:b8:7f:d9:70:80:4a:20:69:3e: d5:c4:1b:5e:a7:0d:7b:e5:9d:21:9e:e6:cb:a8:69: a1:dc:84:d8:99:35:b4:79:d7:ff:10:17:39:bd:3c: e8:14:7a:44:bb:11:ba:e3:8c:5b:c6:80:4e:df:39: 5f:b7:b0:11:a4:d2:76:f4:f8:f7:ea:28:ab:ff:b3: 29:7b:28:68:15:c0:fc:a7:64:b2:b9:60:0c:ac:9e: 78:72:bb:28:ef:14:4a:f6:dc:cc:96:02:36:6b:d3: 22:47:f4:0d:91:8b:38:17:87:09:61:9f:0d:1d:d9: 42:d1:b3:bd:51:4d:f6:8b:ef:22:59:30:b4:90:08: cb:65:24:cc:46:37:0f:91:52:fb:49:a7:42:b4:08: 95:76:1b:bd:dd:2b:2f:2d:77:db:5e:a7:19:87:a8: fe:c0:2e:04:37:15:07:e4:b7:b8:0c:63:3c:2f:2d: 21:97:9c:7d:c2:d5:4d:0b:cb:20:50:b2:2e:c0:a5: 39:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:12:D2:69:C3:31:CF:38:7C:AE:21:CC:66:0F:5F:B1:F3:E2:0F:D5 X509v3 Authority Key Identifier: keyid:B7:A0:E7:99:8A:9F:26:6F:38:82:F1:91:18:69:1C:B2:25:35:6F:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7A0E7998A9F266F3882F19118691CB225356F5D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:c7:ce:a3:95:f8:07:6d:9f:68:52:a3:bb:fe:f0:05:2f:81: 2f:35:49:1d:ae:0f:10:c3:51:ca:89:ed:53:2d:07:7d:89:61: 24:f0:79:4d:ff:39:60:a0:3a:cd:99:ed:36:7a:40:43:ad:14: b8:24:16:c9:2c:80:67:ea:df:53:23:f8:05:a6:d4:6c:30:8d: f8:c8:0b:bd:76:2a:41:fe:81:1c:80:be:37:53:a8:12:34:ee: 73:47:dc:71:9d:8e:3b:0a:5a:c4:d9:75:04:b6:38:c5:0d:f0: b8:87:c6:3e:87:25:10:22:1d:41:0e:77:2d:a0:a7:c0:41:cd: ba:ba:4b:77:1c:c4:a2:43:4f:93:13:18:c7:c5:3b:74:e5:8e: ec:a5:5e:f2:6b:50:c3:f3:30:bd:2d:94:78:2e:73:91:79:d3: 81:20:c2:15:bc:44:1c:f5:f5:80:29:42:f8:ce:f0:3f:08:c0: bf:15:15:3c:c9:62:ae:8b:c4:9d:63:26:1d:f9:68:fc:e0:f2: 39:7d:43:a5:16:a4:74:61:c9:4e:a0:8d:b9:f0:68:1d:4c:4f: 49:a8:16:a4:ff:d7:54:47:b7:6c:77:f0:14:9c:f9:a4:02:bd: d4:c0:68:a0:85:13:f0:33:0e:a4:51:b4:d9:58:a7:11:cd:a5: 82:f0:c6:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURY9NLq/e5pwnDUKTm7SnXpbkzfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdBMEU3OTk4QTlGMjY2RjM4ODJGMTkxMTg2OTFDQjIy NTM1NkY1RDAeFw0yNjA5MjAwNTA4NDJaFw0yNjA5MjEwNjI5NDJaMDMxMTAvBgNV BAMTKDI1MTJEMjY5QzMzMUNGMzg3Q0FFMjFDQzY2MEY1RkIxRjNFMjBGRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZpJOqoL86R6tq6FqLE9E9CQB/ H25IcbhaByHFNK7KtqOxYM/84WH0VN8Wuvg69cjef0dOOfg+BYnr2Gd2Qk2Tv7h/ 2XCASiBpPtXEG16nDXvlnSGe5suoaaHchNiZNbR51/8QFzm9POgUekS7EbrjjFvG gE7fOV+3sBGk0nb0+PfqKKv/syl7KGgVwPynZLK5YAysnnhyuyjvFEr23MyWAjZr 0yJH9A2RizgXhwlhnw0d2ULRs71RTfaL7yJZMLSQCMtlJMxGNw+RUvtJp0K0CJV2 G73dKy8td9tepxmHqP7ALgQ3FQfkt7gMYzwvLSGXnH3C1U0LyyBQsi7ApTnjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJRLSacMxzzh8riHMZg9fsfPiD9UwHwYDVR0j BBgwFoAUt6DnmYqfJm84gvGRGGkcsiU1b10wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjVhNzJlYjktOGU1My00NDcyLWEzNWEtZmVlOGJmMGFmNDZmLzAvQjdBMEU3OTk4 QTlGMjY2RjM4ODJGMTkxMTg2OTFDQjIyNTM1NkY1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0EwRTc5OThBOUYyNjZGMzg4MkYxOTExODY5MUNCMjI1MzU2 RjVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjVhNzJlYjktOGU1My00NDcyLWEz NWEtZmVlOGJmMGFmNDZmLzAvQjdBMEU3OTk4QTlGMjY2RjM4ODJGMTkxMTg2OTFD QjIyNTM1NkY1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHHzqOV+Adtn2hSo7v+8AUvgS81SR2uDxDD UcqJ7VMtB32JYSTweU3/OWCgOs2Z7TZ6QEOtFLgkFsksgGfq31Mj+AWm1GwwjfjI C712KkH+gRyAvjdTqBI07nNH3HGdjjsKWsTZdQS2OMUN8LiHxj6HJRAiHUEOdy2g p8BBzbq6S3ccxKJDT5MTGMfFO3TljuylXvJrUMPzML0tlHguc5F504EgwhW8RBz1 9YApQvjO8D8IwL8VFTzJYq6LxJ1jJh35aPzg8jl9Q6UWpHRhyU6gjbnwaB1MT0mo FqT/11RHt2x38BSc+aQCvdTAaKCFE/AzDqRRtNlYpxHNpYLwxnk= -----END CERTIFICATE-----Generated at Sun Sep 20 23:35:15 2026 by rpki-client