$ rpki-client -vvvf rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.mft File: A7FB244B07B590E887183B90A5F474AF8A740E0D.mft (raw, json) Hash identifier: LsXDso98dFYGFz7F/ELbL4HYpm4YshL75HAbJ6vmeig= Subject key identifier: 97:71:60:5C:42:3A:D9:57:D6:5B:98:5B:7D:DE:64:93:26:20:0E:0C Authority key identifier: A7:FB:24:4B:07:B5:90:E8:87:18:3B:90:A5:F4:74:AF:8A:74:0E:0D Certificate issuer: /CN=A7FB244B07B590E887183B90A5F474AF8A740E0D Certificate serial: 771D0FD596766304342BC3E27F1F73275C01FED5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.mft Manifest number: BF Signing time: Mon 21 Sep 2026 14:49:48 +0000 Manifest this update: Mon 21 Sep 2026 14:44:48 +0000 Manifest next update: Tue 22 Sep 2026 17:03:48 +0000 Files and hashes: 1: A7FB244B07B590E887183B90A5F474AF8A740E0D.crl (hash: R2lXYDOilsCMWkbB+wTsStb1+ubGo+MQbY0aGbXhZsY=) 2: 3136302e3139312e36352e302f32342d3234203d3e20313533313438.roa (hash: 1rPPrUPUYQqxaBIZqYAyAxfvcUpoRBq/uR7Dh5JxpYE=) 3: 3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa (hash: O4W7xGyLdg25nBLD06FHdWKOQMvZ4LJiQpV+BuyHkrg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.crl rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 17:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:1d:0f:d5:96:76:63:04:34:2b:c3:e2:7f:1f:73:27:5c:01:fe:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7FB244B07B590E887183B90A5F474AF8A740E0D Validity Not Before: Sep 21 14:44:48 2026 GMT Not After : Sep 22 17:03:48 2026 GMT Subject: CN=9771605C423AD957D65B985B7DDE649326200E0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:90:05:b7:fc:5e:50:78:4f:e6:43:e4:8c:10: 8b:3c:04:c2:aa:6c:da:83:fe:c3:9d:3c:6d:96:e4: eb:0e:4f:b3:ca:3c:11:fd:ae:68:f9:70:f2:11:09: 05:28:e1:31:e9:ef:f9:94:4f:c6:b5:2e:ea:e6:ae: bb:34:73:ef:d4:0e:a7:93:d5:01:78:1f:ef:1e:ab: 3c:e7:71:4b:84:68:37:fe:23:06:3a:99:a7:60:f5: 89:45:24:e1:8e:56:5f:12:dd:7f:ac:7b:8e:95:f8: 31:08:ec:92:a0:78:8d:27:89:77:7d:81:e5:7c:37: 01:a2:84:f4:92:c9:f8:7e:f7:b6:39:d7:76:94:ff: 5d:c1:f1:86:5e:d6:2d:e8:dc:45:7b:25:6a:36:e7: c3:75:f1:d9:8f:8c:c7:15:4b:ce:1f:88:06:f9:47: 73:f3:7f:e9:2a:01:57:85:37:04:29:4f:dc:3d:f3: 42:fa:3e:5a:7b:3c:57:f8:0b:04:19:0e:e0:1f:2d: 2a:0b:56:4c:fb:29:ae:86:b0:fc:a7:47:cb:f7:2b: e1:e1:9e:6d:7b:da:e2:59:58:06:cb:0c:ce:d8:c8: fe:b0:4e:7b:6f:2d:d0:a4:a0:ae:9a:43:b7:e0:63: 65:ca:c0:f5:87:99:3f:2e:77:47:6f:ef:55:f1:95: a9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:71:60:5C:42:3A:D9:57:D6:5B:98:5B:7D:DE:64:93:26:20:0E:0C X509v3 Authority Key Identifier: keyid:A7:FB:24:4B:07:B5:90:E8:87:18:3B:90:A5:F4:74:AF:8A:74:0E:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:7c:5a:28:e6:cf:d0:18:bd:66:f8:ce:2b:64:b2:63:1f:1e: d1:b0:e3:34:6e:2e:f7:66:1f:89:7b:5d:e4:e8:f3:cd:1d:02: 8b:71:5e:71:69:7b:43:d4:40:b1:0b:14:12:0e:bc:a3:d0:20: 30:13:0b:e7:69:04:93:65:15:31:fc:c4:9e:d2:43:19:1e:51: e4:da:0b:8c:f4:75:1b:c7:e3:fe:e6:4c:cd:7c:fd:c9:9d:c6: 86:51:0e:69:3d:67:3d:0c:d3:a8:18:f9:50:fe:2f:af:7e:bb: e1:b5:0f:ca:a2:70:21:9b:53:89:24:48:23:8d:f2:9a:6b:a3: 43:68:e5:0f:87:f3:6e:5b:5b:14:6e:6f:76:9f:94:79:d1:23: 72:b9:7a:35:d3:f9:26:43:86:f6:5b:f5:9e:4d:f6:20:7b:53: 42:a2:05:32:8b:d7:11:57:44:87:55:dd:14:76:1b:92:b1:34: ca:64:88:4b:7e:1d:07:60:c7:a4:b2:f7:f7:c9:76:ac:36:9b: 81:ca:e7:14:64:7c:80:c0:0c:8e:b1:00:f1:54:a9:e3:f1:31: 0e:23:8b:b8:4b:7b:20:ea:ae:02:89:64:3c:d6:e7:7f:cf:ff: 3b:43:e8:1c:43:fb:d9:f7:cf:f8:a8:ee:1f:fb:89:14:77:88: 13:d7:59:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdx0P1ZZ2YwQ0K8Pifx9zJ1wB/tUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdGQjI0NEIwN0I1OTBFODg3MTgzQjkwQTVGNDc0QUY4 QTc0MEUwRDAeFw0yNjA5MjExNDQ0NDhaFw0yNjA5MjIxNzAzNDhaMDMxMTAvBgNV BAMTKDk3NzE2MDVDNDIzQUQ5NTdENjVCOTg1QjdEREU2NDkzMjYyMDBFMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgkAW3/F5QeE/mQ+SMEIs8BMKq bNqD/sOdPG2W5OsOT7PKPBH9rmj5cPIRCQUo4THp7/mUT8a1Lurmrrs0c+/UDqeT 1QF4H+8eqzzncUuEaDf+IwY6madg9YlFJOGOVl8S3X+se46V+DEI7JKgeI0niXd9 geV8NwGihPSSyfh+97Y513aU/13B8YZe1i3o3EV7JWo258N18dmPjMcVS84fiAb5 R3Pzf+kqAVeFNwQpT9w980L6Plp7PFf4CwQZDuAfLSoLVkz7Ka6GsPynR8v3K+Hh nm172uJZWAbLDM7YyP6wTntvLdCkoK6aQ7fgY2XKwPWHmT8ud0dv71XxlalHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl3FgXEI62VfWW5hbfd5kkyYgDgwwHwYDVR0j BBgwFoAUp/skSwe1kOiHGDuQpfR0r4p0Dg0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjgyYTliZDktMTY2Zi00NTNlLWIzYzAtZTZiM2VmOTJhNTQwLzAvQTdGQjI0NEIw N0I1OTBFODg3MTgzQjkwQTVGNDc0QUY4QTc0MEUwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BN0ZCMjQ0QjA3QjU5MEU4ODcxODNCOTBBNUY0NzRBRjhBNzQw RTBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjgyYTliZDktMTY2Zi00NTNlLWIz YzAtZTZiM2VmOTJhNTQwLzAvQTdGQjI0NEIwN0I1OTBFODg3MTgzQjkwQTVGNDc0 QUY4QTc0MEUwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACl8Wijmz9AYvWb4zitksmMfHtGw4zRuLvdm H4l7XeTo880dAotxXnFpe0PUQLELFBIOvKPQIDATC+dpBJNlFTH8xJ7SQxkeUeTa C4z0dRvH4/7mTM18/cmdxoZRDmk9Zz0M06gY+VD+L69+u+G1D8qicCGbU4kkSCON 8ppro0No5Q+H825bWxRub3aflHnRI3K5ejXT+SZDhvZb9Z5N9iB7U0KiBTKL1xFX RIdV3RR2G5KxNMpkiEt+HQdgx6Sy9/fJdqw2m4HK5xRkfIDADI6xAPFUqePxMQ4j i7hLeyDqrgKJZDzW53/P/ztD6BxD+9n3z/io7h/7iRR3iBPXWV4= -----END CERTIFICATE-----Generated at Tue Sep 22 12:18:31 2026 by rpki-client