$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft File: 7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft (raw, json) Hash identifier: lF6pH7Z1+t8UnmDTt0Y3S8Imyft7Y4ihl1WpYSdQ6K0= Subject key identifier: 61:F5:14:6F:CB:9A:07:28:9E:A3:5D:F9:B7:70:54:B2:77:AA:B0:1F Authority key identifier: 7B:2D:9E:00:8C:C6:35:19:08:65:EC:64:FD:82:9B:33:BB:A1:EC:0A Certificate issuer: /CN=7B2D9E008CC635190865EC64FD829B33BBA1EC0A Certificate serial: 1ED3823037A3F2C6387814A2428CF2E1775ADC2B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft Manifest number: BC Signing time: Sun 20 Sep 2026 07:51:44 +0000 Manifest this update: Sun 20 Sep 2026 07:46:44 +0000 Manifest next update: Mon 21 Sep 2026 09:26:44 +0000 Files and hashes: 1: 7B2D9E008CC635190865EC64FD829B33BBA1EC0A.crl (hash: Gx5scL555p70nkL3T79KEDmKyvFyC17baasyij8CQmU=) 2: 3130332e3133312e32392e302f32342d3234203d3e20313338303834.roa (hash: MUH5KpDAgVdYYC+MwQ+aBkJnISkDkljbuMC7PbGyf/c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.crl rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 09:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:d3:82:30:37:a3:f2:c6:38:78:14:a2:42:8c:f2:e1:77:5a:dc:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B2D9E008CC635190865EC64FD829B33BBA1EC0A Validity Not Before: Sep 20 07:46:44 2026 GMT Not After : Sep 21 09:26:44 2026 GMT Subject: CN=61F5146FCB9A07289EA35DF9B77054B277AAB01F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3e:50:1e:10:3e:c4:57:b8:ea:44:6c:21:09: 07:8f:07:89:93:fc:4a:32:79:5f:fa:83:28:dd:88: 25:18:2a:72:11:6f:7c:4f:bf:07:b6:2a:1f:6f:f1: b5:be:7c:bb:16:d8:1e:0f:6e:dc:4c:42:61:b1:c1: 7f:8b:ef:99:34:8e:3f:dd:fc:fe:ce:c8:8c:c4:db: 5e:07:58:f5:29:5b:3a:09:90:53:b3:65:86:1b:d6: d9:e2:4e:b5:f4:1d:60:9d:3a:e1:07:0f:76:6e:c9: 5e:72:93:aa:03:9c:22:c6:64:a0:52:cc:b1:d5:34: b7:bf:f4:e8:de:c2:96:86:cf:98:f1:a5:0d:5a:73: 4a:47:50:8f:20:a3:96:2c:d1:21:8a:a2:35:a0:22: d7:bc:1d:21:a0:aa:8b:75:8b:80:5d:3d:e8:56:9b: 47:29:55:ee:a8:cb:95:0c:17:d2:a0:f9:49:88:34: f4:6b:bf:7f:48:13:e9:91:3b:df:0e:7a:ba:0b:d8: c3:47:af:1b:04:48:69:01:53:84:88:6b:44:69:d6: b0:44:59:f2:5e:ec:55:61:62:be:d1:8b:29:dd:5a: e2:24:87:ba:95:c5:dd:b6:8f:35:d4:9f:84:b9:19: 35:8d:64:80:99:d4:a5:74:11:6c:9a:6c:81:ab:f1: a5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F5:14:6F:CB:9A:07:28:9E:A3:5D:F9:B7:70:54:B2:77:AA:B0:1F X509v3 Authority Key Identifier: keyid:7B:2D:9E:00:8C:C6:35:19:08:65:EC:64:FD:82:9B:33:BB:A1:EC:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:0d:e5:2e:47:b7:e6:4b:a9:8f:ab:15:3f:59:44:20:a0:c6: 2d:d6:5c:65:ad:0f:2f:3d:a3:3d:f5:9f:20:9a:65:c1:d2:aa: 61:c2:d9:99:b2:8a:be:e4:80:d5:e1:f4:1a:0c:69:93:f1:0b: c8:2f:84:9d:93:73:c2:05:c0:75:a8:64:e2:a4:06:25:48:8f: 31:3b:c0:57:70:04:66:86:90:7f:d4:18:13:69:62:21:a5:89: 26:ab:41:b4:f0:e4:60:ea:e2:87:16:af:17:67:b5:3a:0e:5e: f9:f6:0a:7d:95:ea:1c:e1:c6:de:d3:ca:24:6e:75:5a:e8:77: f0:99:c6:2a:84:e9:f5:e7:d0:94:cb:03:8a:fd:b7:3e:01:46: 3a:5c:ac:a5:35:06:b4:7a:98:54:75:59:23:92:26:64:8f:cc: 26:eb:a3:08:bc:27:e1:41:56:a2:aa:d3:48:01:32:c8:13:9e: f5:39:a2:82:16:cb:2a:ad:30:dd:4f:6c:54:39:b0:9a:8c:47: 5c:a3:6d:7b:58:a7:e9:94:0f:54:71:42:73:b9:a2:18:f9:3c: dd:2a:69:09:9b:9e:83:8b:2f:d0:1a:2e:85:3e:19:83:32:b2: 68:b5:fa:f2:04:ad:f9:df:8f:e4:ca:17:41:ef:4f:7e:2c:3f: ab:c9:5c:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHtOCMDej8sY4eBSiQozy4Xda3CswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IyRDlFMDA4Q0M2MzUxOTA4NjVFQzY0RkQ4MjlCMzNC QkExRUMwQTAeFw0yNjA5MjAwNzQ2NDRaFw0yNjA5MjEwOTI2NDRaMDMxMTAvBgNV BAMTKDYxRjUxNDZGQ0I5QTA3Mjg5RUEzNURGOUI3NzA1NEIyNzdBQUIwMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZPlAeED7EV7jqRGwhCQePB4mT /EoyeV/6gyjdiCUYKnIRb3xPvwe2Kh9v8bW+fLsW2B4PbtxMQmGxwX+L75k0jj/d /P7OyIzE214HWPUpWzoJkFOzZYYb1tniTrX0HWCdOuEHD3ZuyV5yk6oDnCLGZKBS zLHVNLe/9OjewpaGz5jxpQ1ac0pHUI8go5Ys0SGKojWgIte8HSGgqot1i4BdPehW m0cpVe6oy5UMF9Kg+UmINPRrv39IE+mRO98OeroL2MNHrxsESGkBU4SIa0Rp1rBE WfJe7FVhYr7RiyndWuIkh7qVxd22jzXUn4S5GTWNZICZ1KV0EWyabIGr8aUdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYfUUb8uaByieo135t3BUsneqsB8wHwYDVR0j BBgwFoAUey2eAIzGNRkIZexk/YKbM7uh7AowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDU0NGU5NTEtM2QwOC00NThhLWE0NGEtNTI5ZDM4N2QyNmIxLzAvN0IyRDlFMDA4 Q0M2MzUxOTA4NjVFQzY0RkQ4MjlCMzNCQkExRUMwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QjJEOUUwMDhDQzYzNTE5MDg2NUVDNjRGRDgyOUIzM0JCQTFF QzBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDU0NGU5NTEtM2QwOC00NThhLWE0 NGEtNTI5ZDM4N2QyNmIxLzAvN0IyRDlFMDA4Q0M2MzUxOTA4NjVFQzY0RkQ4MjlC MzNCQkExRUMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgN5S5Ht+ZLqY+rFT9ZRCCgxi3WXGWtDy89 oz31nyCaZcHSqmHC2Zmyir7kgNXh9BoMaZPxC8gvhJ2Tc8IFwHWoZOKkBiVIjzE7 wFdwBGaGkH/UGBNpYiGliSarQbTw5GDq4ocWrxdntToOXvn2Cn2V6hzhxt7TyiRu dVrod/CZxiqE6fXn0JTLA4r9tz4BRjpcrKU1BrR6mFR1WSOSJmSPzCbrowi8J+FB VqKq00gBMsgTnvU5ooIWyyqtMN1PbFQ5sJqMR1yjbXtYp+mUD1RxQnO5ohj5PN0q aQmbnoOLL9AaLoU+GYMysmi1+vIErfnfj+TKF0HvT34sP6vJXAM= -----END CERTIFICATE-----Generated at Mon Sep 21 05:18:37 2026 by rpki-client