$ rpki-client -vvvf rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft File: B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft (raw, json) Hash identifier: ubvdw1EK8nsENyuCZCKTVeGabnOa++GlSzAqJgoxMVE= Subject key identifier: 6A:B9:9B:E8:2E:14:2F:8D:39:49:76:12:D9:8D:8F:3C:E8:78:2A:77 Authority key identifier: B7:B8:8E:63:A9:66:6B:D2:EC:77:AD:E3:2E:08:5A:C5:87:7A:84:C0 Certificate issuer: /CN=B7B88E63A9666BD2EC77ADE32E085AC5877A84C0 Certificate serial: 3794825E22A30F1E9F885FA68AECEA71D263A4CA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft Manifest number: BF Signing time: Mon 21 Sep 2026 19:25:29 +0000 Manifest this update: Mon 21 Sep 2026 19:20:29 +0000 Manifest next update: Tue 22 Sep 2026 20:15:29 +0000 Files and hashes: 1: 3130332e3130322e3136372e302f32342d3234203d3e20313335343634.roa (hash: Ly2+eHMG54yQYmvS+CQqaN+EkIOuz7zp9N0bR1H1740=) 2: 3130332e3130322e3137372e302f32342d3234203d3e20313335343634.roa (hash: lSZEpn9P8SXdF4oANlJgFtpdNX8qaO0HeGHCAr1aP7E=) 3: B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl (hash: k7gv2lZfNaC4PWXWp1+hZYXGoO7Rq7jQZXIn3GxK0vw=) 4: 3130332e37302e36382e302f32342d3234203d3e20313335343634.roa (hash: 7qm6JzeL/7hHG1DAohfubeGddIvVsEzpvxGKto8u6kI=) 5: 3130332e3130322e3137362e302f32342d3234203d3e20313335343634.roa (hash: +co2KhnhkyS+dd2WpG/hxO+d+62en7egKYIfJt2xtsw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 20:15:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:94:82:5e:22:a3:0f:1e:9f:88:5f:a6:8a:ec:ea:71:d2:63:a4:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7B88E63A9666BD2EC77ADE32E085AC5877A84C0 Validity Not Before: Sep 21 19:20:29 2026 GMT Not After : Sep 22 20:15:29 2026 GMT Subject: CN=6AB99BE82E142F8D39497612D98D8F3CE8782A77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:40:65:d3:f6:7d:87:4d:4d:05:e9:a1:10:6b: 49:80:13:7c:dc:68:de:cd:6a:7f:67:11:30:e9:b9: 16:ab:fb:38:50:90:d6:4f:47:77:52:79:2e:4c:70: 43:c8:b0:8a:35:3c:91:2d:4c:a8:33:3b:23:3c:15: 06:f9:0f:28:54:5f:4c:0a:31:48:bd:b9:4b:e2:08: 41:0d:d9:0d:66:c2:29:52:42:e8:b8:ce:42:8c:25: f9:1c:00:d5:6e:4e:f9:c1:0f:2e:75:53:e1:f1:60: 77:cf:71:47:ee:9c:87:11:a0:30:a2:1f:a3:c6:e8: 25:fe:71:33:74:f7:d1:2a:a4:f7:88:cf:20:56:80: be:2b:9e:20:34:7c:8c:54:8c:c0:78:d3:d5:e1:59: a2:34:af:f2:78:ed:1e:c6:29:d3:95:b1:f7:ad:4e: 57:b5:fd:ad:e3:02:31:a3:df:6d:a8:1b:17:58:4b: fc:35:25:20:76:e6:71:c7:06:67:c9:cf:8a:2c:01: 71:8d:44:36:83:e9:3f:1d:1d:12:a4:4d:59:f3:7a: 43:fb:02:a5:76:d9:fc:b8:b6:20:c1:b0:c0:a5:21: dd:eb:50:8a:dc:62:64:07:8a:d7:78:3d:34:08:db: ef:31:e3:06:8a:c9:ea:d8:e5:d4:41:91:0e:2b:5f: 58:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B9:9B:E8:2E:14:2F:8D:39:49:76:12:D9:8D:8F:3C:E8:78:2A:77 X509v3 Authority Key Identifier: keyid:B7:B8:8E:63:A9:66:6B:D2:EC:77:AD:E3:2E:08:5A:C5:87:7A:84:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f3:7b:c0:e2:62:fd:64:e3:65:85:8e:9e:37:d8:5a:e4:d8: e0:78:d3:db:4e:91:a2:15:24:e1:43:1d:5e:f8:a3:97:a4:40: c5:4f:10:c2:25:fc:3d:65:1d:d4:30:2b:3a:87:94:70:52:e6: 76:42:6e:a5:66:70:a1:36:44:42:ac:61:a1:31:14:6b:eb:7b: d6:18:86:ac:09:b5:21:67:08:e8:60:30:7e:5c:27:5f:5f:c6: 72:d8:02:70:5c:95:b0:17:e2:34:a4:3d:9a:ca:e4:45:5e:73: 81:d9:3b:ab:75:4c:b3:ee:c5:7f:5e:de:39:e5:98:09:bf:b4: a3:ba:8c:46:0a:30:74:aa:aa:fc:0b:95:2b:59:70:6a:b5:d4: 6b:cf:4a:f2:55:fe:8f:3e:ae:00:c8:09:46:a6:cd:ff:76:03: 55:c0:62:c3:c8:5e:cf:02:4b:1b:02:48:17:39:b2:56:83:7b: 17:09:e0:96:bb:fa:1f:57:c2:37:0a:bc:46:f1:7c:d2:6a:d2: 21:95:f7:a5:6f:6c:d6:fe:64:29:33:f9:8c:f4:75:12:fe:9f: 5e:73:2f:1e:ba:00:5f:b5:69:02:ef:8b:74:23:66:aa:00:5e: 2f:56:86:f0:75:f0:d3:6e:83:21:dc:47:08:4b:db:41:f1:25: 1d:c9:66:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN5SCXiKjDx6fiF+miuzqcdJjpMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdCODhFNjNBOTY2NkJEMkVDNzdBREUzMkUwODVBQzU4 NzdBODRDMDAeFw0yNjA5MjExOTIwMjlaFw0yNjA5MjIyMDE1MjlaMDMxMTAvBgNV BAMTKDZBQjk5QkU4MkUxNDJGOEQzOTQ5NzYxMkQ5OEQ4RjNDRTg3ODJBNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqQGXT9n2HTU0F6aEQa0mAE3zc aN7Nan9nETDpuRar+zhQkNZPR3dSeS5McEPIsIo1PJEtTKgzOyM8FQb5DyhUX0wK MUi9uUviCEEN2Q1mwilSQui4zkKMJfkcANVuTvnBDy51U+HxYHfPcUfunIcRoDCi H6PG6CX+cTN099EqpPeIzyBWgL4rniA0fIxUjMB409XhWaI0r/J47R7GKdOVsfet Tle1/a3jAjGj322oGxdYS/w1JSB25nHHBmfJz4osAXGNRDaD6T8dHRKkTVnzekP7 AqV22fy4tiDBsMClId3rUIrcYmQHitd4PTQI2+8x4waKyerY5dRBkQ4rX1g3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUarmb6C4UL405SXYS2Y2PPOh4KncwHwYDVR0j BBgwFoAUt7iOY6lma9Lsd63jLghaxYd6hMAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTE5YTg1MzgtZGE0My00MTU4LWFiYzItOGU2M2E4ZTQwODk5LzAvQjdCODhFNjNB OTY2NkJEMkVDNzdBREUzMkUwODVBQzU4NzdBODRDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0I4OEU2M0E5NjY2QkQyRUM3N0FERTMyRTA4NUFDNTg3N0E4 NEMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTE5YTg1MzgtZGE0My00MTU4LWFi YzItOGU2M2E4ZTQwODk5LzAvQjdCODhFNjNBOTY2NkJEMkVDNzdBREUzMkUwODVB QzU4NzdBODRDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzze8DiYv1k42WFjp432Frk2OB409tOkaIV JOFDHV74o5ekQMVPEMIl/D1lHdQwKzqHlHBS5nZCbqVmcKE2REKsYaExFGvre9YY hqwJtSFnCOhgMH5cJ19fxnLYAnBclbAX4jSkPZrK5EVec4HZO6t1TLPuxX9e3jnl mAm/tKO6jEYKMHSqqvwLlStZcGq11GvPSvJV/o8+rgDICUamzf92A1XAYsPIXs8C SxsCSBc5slaDexcJ4Ja7+h9XwjcKvEbxfNJq0iGV96VvbNb+ZCkz+Yz0dRL+n15z Lx66AF+1aQLvi3QjZqoAXi9WhvB18NNugyHcRwhL20HxJR3JZlU= -----END CERTIFICATE-----Generated at Tue Sep 22 05:45:50 2026 by rpki-client