$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft File: 7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft (raw, json) Hash identifier: nX2LBfW3WntogiUpfEzrTIbIm8mxoADps/PH3stdzS4= Subject key identifier: 35:00:14:3B:88:93:7D:09:BF:64:94:4E:8F:3C:69:00:78:90:FF:52 Authority key identifier: 7A:BD:2B:E2:09:FC:E2:A3:6F:A3:E5:CD:86:4B:F7:0F:6B:C6:5E:E4 Certificate issuer: /CN=7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4 Certificate serial: 04C557A05EDA749D4F2A2F3E1B4752411C11729E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 19:15:18 +0000 Manifest this update: Mon 21 Sep 2026 19:10:18 +0000 Manifest next update: Tue 22 Sep 2026 23:14:18 +0000 Files and hashes: 1: 3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa (hash: Gp5/rWdRIu6ScqVU154gXkTtG4fAxGJvRR3MmRVopqg=) 2: 3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa (hash: zpN+ZUQARf85utjXtSfFSa/KkTvAdeU606KS8jCMD5U=) 3: 7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.crl (hash: vgQM1RU/DgXRyICRMtb80DzWFANIMxvQQudzaiR1CE4=) 4: 3130332e3235352e3136342e302f32342d3234203d3e20313531393934.roa (hash: XAlXWmMjaTIgPpDDe6g4p0/8EhTXLUGxpCwgLN6Nis0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.crl rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:14:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c5:57:a0:5e:da:74:9d:4f:2a:2f:3e:1b:47:52:41:1c:11:72:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4 Validity Not Before: Sep 21 19:10:18 2026 GMT Not After : Sep 22 23:14:18 2026 GMT Subject: CN=3500143B88937D09BF64944E8F3C69007890FF52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:eb:8c:fb:aa:46:41:f5:3b:ff:b0:a4:db:64: 6d:97:2f:1a:59:21:0a:58:a1:82:c2:8e:cd:44:60: 9e:0c:8b:df:a9:6f:9e:d6:c9:8b:ed:1e:2b:ce:36: 59:e2:f4:e1:c5:54:cc:e9:e6:b4:16:69:51:8d:c5: 0b:d5:3c:04:09:7c:4b:e6:4d:59:8c:54:f1:98:36: 58:ac:2b:7a:f2:fc:f9:5a:1e:43:74:27:3f:02:d4: 3d:17:57:b2:26:4a:c8:60:9c:b4:ab:60:de:ca:cd: 7a:34:ab:62:f7:b6:a6:d8:21:86:6b:0e:03:36:c5: 70:6b:51:37:72:b7:7a:a0:82:bb:e3:b7:7a:50:a9: 23:70:74:18:63:55:82:62:c4:fb:61:e7:c3:8e:98: db:5d:2d:4c:e3:25:ad:c9:ee:d7:00:07:9e:d3:f4: c4:97:6e:06:bd:ba:92:8c:a2:cb:49:29:d0:f5:92: 05:0e:46:16:57:8e:33:f8:7f:0a:58:30:ac:52:e6: 83:ce:de:04:db:ea:ca:fb:49:77:25:a4:df:e8:96: a3:72:ee:55:9b:5a:ae:a8:56:fc:aa:33:4a:a8:ab: 64:23:77:24:83:62:c9:6e:93:80:c8:dd:53:99:05: be:8c:45:bd:6d:2c:1c:e5:42:54:d4:23:23:45:fe: 63:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:00:14:3B:88:93:7D:09:BF:64:94:4E:8F:3C:69:00:78:90:FF:52 X509v3 Authority Key Identifier: keyid:7A:BD:2B:E2:09:FC:E2:A3:6F:A3:E5:CD:86:4B:F7:0F:6B:C6:5E:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:f4:4b:b1:1c:46:98:c6:7d:53:27:80:71:35:51:e9:77:32: 3c:1f:df:7a:3e:3a:fb:ab:4d:c1:19:9d:dd:ed:eb:81:0b:fe: e6:b3:36:83:c5:48:6f:26:f5:8c:86:0d:29:e7:19:a2:1c:ef: 52:86:6b:27:66:3a:53:ef:41:af:20:cd:64:31:f7:52:17:7d: 77:27:7e:65:b8:97:b2:6e:35:0e:dd:c4:9a:dd:bc:a9:7c:44: f9:5a:e6:65:db:44:93:3d:a8:3e:04:b6:38:f9:d6:1a:4e:ec: 4e:c9:9d:54:8a:08:0c:15:be:ce:71:dd:d3:a0:5d:30:a4:36: ca:a2:c1:b2:58:de:e4:79:64:14:69:20:1f:ba:c3:35:f2:9d: 47:8b:11:9d:be:c1:4e:8d:3e:4d:d5:5c:17:4f:61:ba:4e:8f: 8d:b4:7e:c6:a6:15:fe:e2:d6:46:67:d4:c5:a2:e7:fe:c2:d5: 89:7a:29:a3:c3:f9:ca:8d:10:69:98:72:85:0b:e9:46:eb:d6: db:b0:8a:85:86:8d:89:d8:ef:88:3b:5e:91:f4:22:5a:ff:b9: e3:92:ca:43:82:87:01:a4:b4:52:8d:ef:3f:36:49:af:67:ca: c4:ef:fe:da:87:19:d8:2c:ce:9f:41:36:3b:13:b5:27:9d:42: db:d1:9e:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBMVXoF7adJ1PKi8+G0dSQRwRcp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FCRDJCRTIwOUZDRTJBMzZGQTNFNUNEODY0QkY3MEY2 QkM2NUVFNDAeFw0yNjA5MjExOTEwMThaFw0yNjA5MjIyMzE0MThaMDMxMTAvBgNV BAMTKDM1MDAxNDNCODg5MzdEMDlCRjY0OTQ0RThGM0M2OTAwNzg5MEZGNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC564z7qkZB9Tv/sKTbZG2XLxpZ IQpYoYLCjs1EYJ4Mi9+pb57WyYvtHivONlni9OHFVMzp5rQWaVGNxQvVPAQJfEvm TVmMVPGYNlisK3ry/PlaHkN0Jz8C1D0XV7ImSshgnLSrYN7KzXo0q2L3tqbYIYZr DgM2xXBrUTdyt3qggrvjt3pQqSNwdBhjVYJixPth58OOmNtdLUzjJa3J7tcAB57T 9MSXbga9upKMostJKdD1kgUORhZXjjP4fwpYMKxS5oPO3gTb6sr7SXclpN/olqNy 7lWbWq6oVvyqM0qoq2QjdySDYsluk4DI3VOZBb6MRb1tLBzlQlTUIyNF/mPNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNQAUO4iTfQm/ZJROjzxpAHiQ/1IwHwYDVR0j BBgwFoAUer0r4gn84qNvo+XNhkv3D2vGXuQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M0N2VmNWMtNWJiYS00Y2QxLThkYzktMTczZTI3NTFmNGY0LzAvN0FCRDJCRTIw OUZDRTJBMzZGQTNFNUNEODY0QkY3MEY2QkM2NUVFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QUJEMkJFMjA5RkNFMkEzNkZBM0U1Q0Q4NjRCRjcwRjZCQzY1 RUU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M0N2VmNWMtNWJiYS00Y2QxLThk YzktMTczZTI3NTFmNGY0LzAvN0FCRDJCRTIwOUZDRTJBMzZGQTNFNUNEODY0QkY3 MEY2QkM2NUVFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANb0S7EcRpjGfVMngHE1Uel3Mjwf33o+Ovur TcEZnd3t64EL/uazNoPFSG8m9YyGDSnnGaIc71KGaydmOlPvQa8gzWQx91IXfXcn fmW4l7JuNQ7dxJrdvKl8RPla5mXbRJM9qD4Etjj51hpO7E7JnVSKCAwVvs5x3dOg XTCkNsqiwbJY3uR5ZBRpIB+6wzXynUeLEZ2+wU6NPk3VXBdPYbpOj420fsamFf7i 1kZn1MWi5/7C1Yl6KaPD+cqNEGmYcoUL6Ubr1tuwioWGjYnY74g7XpH0Ilr/ueOS ykOChwGktFKN7z82Sa9nysTv/tqHGdgszp9BNjsTtSedQtvRnus= -----END CERTIFICATE-----Generated at Tue Sep 22 02:12:19 2026 by rpki-client