$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft File: D7F0443E844F58413FEE61023C66F3C2AF619180.mft (raw, json) Hash identifier: kENdoYhc8laCDyvx4+o1gTx2bIzt2g+Pqu7EBQ3Ere0= Subject key identifier: DA:ED:7D:CB:BC:B1:F8:33:E7:B2:24:FD:6C:82:FC:C6:B1:F9:4D:E2 Authority key identifier: D7:F0:44:3E:84:4F:58:41:3F:EE:61:02:3C:66:F3:C2:AF:61:91:80 Certificate issuer: /CN=D7F0443E844F58413FEE61023C66F3C2AF619180 Certificate serial: 2C3DB9558FA750802A036910E74B4B8263D3C4C3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7F0443E844F58413FEE61023C66F3C2AF619180.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft Manifest number: BD Signing time: Tue 22 Sep 2026 10:24:26 +0000 Manifest this update: Tue 22 Sep 2026 10:19:26 +0000 Manifest next update: Wed 23 Sep 2026 11:18:26 +0000 Files and hashes: 1: D7F0443E844F58413FEE61023C66F3C2AF619180.crl (hash: 8DCMuyJoTe2PypBg4OWui+L9IgsqsPUsBGoJqSO3seQ=) 2: 3130332e35352e3235342e302f32332d3234203d3e20333936393832.roa (hash: 1gK99x1ItHrvOP2nffQyDA72Y2CbBGzEnTeDW6KjBoY=) 3: 3130332e35352e3235342e302f32342d3234203d3e20333936393832.roa (hash: m9XJT/DbxbJ6+jpB+KGYoQwi9JE9k1D/+aAA0o2JVf0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.crl rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7F0443E844F58413FEE61023C66F3C2AF619180.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 11:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:3d:b9:55:8f:a7:50:80:2a:03:69:10:e7:4b:4b:82:63:d3:c4:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7F0443E844F58413FEE61023C66F3C2AF619180 Validity Not Before: Sep 22 10:19:26 2026 GMT Not After : Sep 23 11:18:26 2026 GMT Subject: CN=DAED7DCBBCB1F833E7B224FD6C82FCC6B1F94DE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:84:c9:b9:73:e7:4e:ba:f4:d9:16:a1:52:5c: c7:27:4d:bb:c3:a1:c2:83:3d:d8:d6:67:5e:c1:7c: b7:97:cd:c7:9c:66:86:b1:94:fc:64:db:6b:5d:ca: de:0a:1f:e2:0e:76:0d:24:c2:f5:bb:c1:d9:d3:88: 9e:5d:8f:2b:10:79:25:8d:16:d7:16:ba:f6:c1:4d: cf:cc:ef:44:0a:cb:88:ef:cb:f8:06:0d:87:5b:c7: fe:ff:12:71:ac:19:91:70:c1:8f:1f:b2:cb:88:48: e4:1b:90:58:9a:60:2d:90:3a:be:50:b0:a7:ce:7e: 22:d2:12:ed:ec:fc:1b:3f:24:d0:48:c8:87:1c:27: b0:4c:b9:95:c9:dd:2a:d0:22:b5:b4:98:86:6c:23: 39:2c:0e:42:e8:43:4e:62:37:e7:db:92:27:fb:5f: a1:e6:56:a6:5a:a4:fd:50:62:cf:c2:95:e1:7a:73: 04:f9:d3:df:9f:4d:45:0b:11:10:8d:21:2e:88:6e: 4c:01:f0:a4:08:9f:a7:89:dd:ed:67:88:25:db:9b: 0b:61:60:ed:87:37:ac:b7:70:ab:38:ba:f2:a4:25: a6:92:60:fc:57:55:3c:47:b9:04:7d:9f:15:24:e4: 48:aa:8b:d4:fc:b4:ce:cd:21:79:63:c9:c2:73:f6: d8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:ED:7D:CB:BC:B1:F8:33:E7:B2:24:FD:6C:82:FC:C6:B1:F9:4D:E2 X509v3 Authority Key Identifier: keyid:D7:F0:44:3E:84:4F:58:41:3F:EE:61:02:3C:66:F3:C2:AF:61:91:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7F0443E844F58413FEE61023C66F3C2AF619180.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:7a:1d:c0:66:d2:7a:f6:87:8a:43:e8:e2:2e:6f:ae:de:5d: bd:39:ae:4d:4c:a5:ac:f7:35:2b:b4:36:0b:12:b8:c6:54:10: 2c:cb:47:17:5d:5d:0c:4e:0e:3f:8c:eb:d6:f6:0c:a3:85:29: aa:d4:46:7e:dc:ed:9b:80:b6:78:f0:61:76:2b:1d:e0:9f:d8: c4:0c:a5:02:0c:4c:68:82:13:6c:06:fa:47:da:f2:8f:ed:57: 7e:f9:93:9a:97:b4:a4:c2:84:ae:f9:41:25:30:d4:e7:0f:63: 63:29:cd:86:f3:2d:b9:28:7f:24:e8:96:d1:8f:66:2e:a6:30: ea:b2:5d:45:5b:03:c9:5e:b5:12:e5:3b:c4:37:97:10:d4:c5: cd:48:5c:09:ca:19:d8:ba:82:ef:3f:a2:65:bc:15:78:18:9c: b2:9f:6b:3a:a9:73:ea:3c:a1:1f:6f:d1:5c:c4:b2:9f:5b:f2: 66:46:b9:62:05:16:4d:ed:67:d0:86:1c:97:cb:3e:08:9c:1b: 47:a0:c4:52:b4:16:9b:0d:71:92:22:5f:99:f6:ca:51:75:d1: 32:0f:df:7d:d2:8a:6d:00:6b:1f:d4:3f:0f:aa:a7:5c:a5:65: 6a:12:61:29:80:3f:7f:8f:1f:ab:c1:44:48:fe:a8:a2:0d:2a: c5:1d:af:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULD25VY+nUIAqA2kQ50tLgmPTxMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdGMDQ0M0U4NDRGNTg0MTNGRUU2MTAyM0M2NkYzQzJB RjYxOTE4MDAeFw0yNjA5MjIxMDE5MjZaFw0yNjA5MjMxMTE4MjZaMDMxMTAvBgNV BAMTKERBRUQ3RENCQkNCMUY4MzNFN0IyMjRGRDZDODJGQ0M2QjFGOTRERTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyhMm5c+dOuvTZFqFSXMcnTbvD ocKDPdjWZ17BfLeXzcecZoaxlPxk22tdyt4KH+IOdg0kwvW7wdnTiJ5djysQeSWN FtcWuvbBTc/M70QKy4jvy/gGDYdbx/7/EnGsGZFwwY8fssuISOQbkFiaYC2QOr5Q sKfOfiLSEu3s/Bs/JNBIyIccJ7BMuZXJ3SrQIrW0mIZsIzksDkLoQ05iN+fbkif7 X6HmVqZapP1QYs/CleF6cwT509+fTUULERCNIS6IbkwB8KQIn6eJ3e1niCXbmwth YO2HN6y3cKs4uvKkJaaSYPxXVTxHuQR9nxUk5Eiqi9T8tM7NIXljycJz9tjzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2u19y7yx+DPnsiT9bIL8xrH5TeIwHwYDVR0j BBgwFoAU1/BEPoRPWEE/7mECPGbzwq9hkYAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2M2MzZhNDYtMzhmZi00NDk2LTk3MjEtOGMwM2NmMDQ2MzQ1LzAvRDdGMDQ0M0U4 NDRGNTg0MTNGRUU2MTAyM0M2NkYzQzJBRjYxOTE4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EN0YwNDQzRTg0NEY1ODQxM0ZFRTYxMDIzQzY2RjNDMkFGNjE5 MTgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2M2MzZhNDYtMzhmZi00NDk2LTk3 MjEtOGMwM2NmMDQ2MzQ1LzAvRDdGMDQ0M0U4NDRGNTg0MTNGRUU2MTAyM0M2NkYz QzJBRjYxOTE4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEl6HcBm0nr2h4pD6OIub67eXb05rk1Mpaz3 NSu0NgsSuMZUECzLRxddXQxODj+M69b2DKOFKarURn7c7ZuAtnjwYXYrHeCf2MQM pQIMTGiCE2wG+kfa8o/tV375k5qXtKTChK75QSUw1OcPY2MpzYbzLbkofyToltGP Zi6mMOqyXUVbA8letRLlO8Q3lxDUxc1IXAnKGdi6gu8/omW8FXgYnLKfazqpc+o8 oR9v0VzEsp9b8mZGuWIFFk3tZ9CGHJfLPgicG0egxFK0FpsNcZIiX5n2ylF10TIP 333Sim0Aax/UPw+qp1ylZWoSYSmAP3+PH6vBREj+qKINKsUdr98= -----END CERTIFICATE-----Generated at Tue Sep 22 20:56:45 2026 by rpki-client