$ rpki-client -vvvf rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft File: 7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft (raw, json) Hash identifier: 32WH0KlGZ9kc5TugJs4+LF/RpgsqcokxewMt1OEzcNo= Subject key identifier: 77:1F:CD:2C:F6:33:73:21:C5:89:3B:A5:1B:2F:F0:45:C4:D0:FF:6F Authority key identifier: 70:45:26:2D:5E:CB:D0:80:FD:7E:90:BD:57:C5:CA:C1:47:67:D7:D9 Certificate issuer: /CN=7045262D5ECBD080FD7E90BD57C5CAC14767D7D9 Certificate serial: 68167FF2A65BEC6AC192A34F1209EFA75D0F177A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft Manifest number: BF Signing time: Mon 21 Sep 2026 19:15:20 +0000 Manifest this update: Mon 21 Sep 2026 19:10:20 +0000 Manifest next update: Tue 22 Sep 2026 19:32:20 +0000 Files and hashes: 1: 7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.crl (hash: MtUnUdAHMZsR0LS5xX0jFYAK6b3c6clnQv+R5Fx7GFg=) 2: 323030313a6466353a6338303a3a2f34382d3438203d3e20313431313038.roa (hash: 4bKBlVxqedWSCh5v8weNHekAQ9GKb4xy7LR81Mjy5FE=) 3: 3130332e3135372e32352e302f32342d3234203d3e20313431313038.roa (hash: B2JBhxZBgB0va+fccB3dL51mK3TG1i5CCqVPp24i9Qw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.crl rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 19:32:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:16:7f:f2:a6:5b:ec:6a:c1:92:a3:4f:12:09:ef:a7:5d:0f:17:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7045262D5ECBD080FD7E90BD57C5CAC14767D7D9 Validity Not Before: Sep 21 19:10:20 2026 GMT Not After : Sep 22 19:32:20 2026 GMT Subject: CN=771FCD2CF6337321C5893BA51B2FF045C4D0FF6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8e:e9:c3:26:3d:27:83:9a:e3:b5:ac:c8:cd: 27:ef:8f:b4:e0:a5:39:ab:22:d1:0b:a8:07:44:9e: 78:bc:6b:5a:f0:1b:92:e9:ee:7d:a8:d2:2f:ed:87: 19:7b:03:9d:1d:6b:7b:54:f8:ef:5f:17:09:9b:3f: cc:10:f1:f4:63:e7:b0:89:eb:32:c5:b5:05:cf:0d: c9:6b:b2:57:f0:72:4f:ef:75:a6:90:c2:48:78:b5: 82:93:84:1c:ec:d7:55:3f:18:c6:29:e5:d9:8a:df: 8a:51:10:12:b1:b8:32:f8:5c:cc:ff:ae:31:54:2e: 6e:70:ff:40:43:e8:be:f6:b2:47:12:44:85:16:81: 53:86:5f:67:99:23:b4:ad:cf:d4:29:47:6c:94:e9: 95:24:ce:2e:16:3b:36:2e:af:14:0b:04:a0:6a:29: 81:6b:78:9b:d5:af:2f:eb:87:3d:0c:b2:d1:50:10: c6:ea:72:62:19:b1:24:59:b8:b9:03:78:ee:3d:b8: d3:c1:a3:56:9b:fd:88:f1:28:06:2c:e6:44:4b:9e: 6c:af:c8:0d:74:54:31:d3:8c:16:a2:36:43:ba:f4: b5:11:a4:30:30:71:ca:55:9b:da:ca:da:b6:d7:a7: f8:86:e3:b1:30:cb:14:22:6f:51:97:91:6e:c9:6c: 01:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:1F:CD:2C:F6:33:73:21:C5:89:3B:A5:1B:2F:F0:45:C4:D0:FF:6F X509v3 Authority Key Identifier: keyid:70:45:26:2D:5E:CB:D0:80:FD:7E:90:BD:57:C5:CA:C1:47:67:D7:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:b7:e7:09:ca:f7:db:e6:eb:b0:5c:67:01:6d:fc:be:6c:b0: f9:36:58:d1:58:78:c9:3d:05:c4:9c:d8:83:4f:d3:ad:84:c3: 20:43:9a:7a:d0:d9:7f:0a:b7:c2:88:01:2c:55:f8:95:10:25: e3:15:58:05:7f:e8:ad:8a:96:e3:4f:8a:d8:81:6c:20:f3:c3: ce:68:17:8b:63:cf:b6:f5:c1:73:b2:16:2b:eb:ad:73:49:0b: c1:4a:2c:d6:fa:70:6d:ab:2b:1b:61:ec:b7:45:d7:c7:6f:a2: 0e:69:d3:ef:e2:93:67:58:51:80:47:5b:34:18:88:0f:34:3a: d5:83:d8:98:e4:39:b7:61:24:a0:4a:c4:fb:81:04:34:b4:6c: 2e:63:71:a1:60:03:b5:17:d6:9e:c7:4a:ef:ea:f4:8a:7a:b9: 20:8f:be:38:49:a3:3f:6f:73:70:09:62:f9:2b:d6:65:82:fd: 37:18:bd:e2:fa:c8:e5:24:c5:8c:8e:88:11:67:24:b5:75:ca: 6a:b3:38:53:2e:b9:d3:5e:fb:34:7c:87:db:71:01:b3:7a:47: 73:98:33:8e:7e:d4:ce:a7:d4:42:a0:5d:f0:21:ad:68:b9:cd: c2:e1:57:f1:c0:58:0e:2e:6a:38:c5:da:af:c8:db:e5:12:96: b3:9d:91:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaBZ/8qZb7GrBkqNPEgnvp10PF3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA0NTI2MkQ1RUNCRDA4MEZEN0U5MEJENTdDNUNBQzE0 NzY3RDdEOTAeFw0yNjA5MjExOTEwMjBaFw0yNjA5MjIxOTMyMjBaMDMxMTAvBgNV BAMTKDc3MUZDRDJDRjYzMzczMjFDNTg5M0JBNTFCMkZGMDQ1QzREMEZGNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIjunDJj0ng5rjtazIzSfvj7Tg pTmrItELqAdEnni8a1rwG5Lp7n2o0i/thxl7A50da3tU+O9fFwmbP8wQ8fRj57CJ 6zLFtQXPDclrslfwck/vdaaQwkh4tYKThBzs11U/GMYp5dmK34pREBKxuDL4XMz/ rjFULm5w/0BD6L72skcSRIUWgVOGX2eZI7Stz9QpR2yU6ZUkzi4WOzYurxQLBKBq KYFreJvVry/rhz0MstFQEMbqcmIZsSRZuLkDeO49uNPBo1ab/YjxKAYs5kRLnmyv yA10VDHTjBaiNkO69LURpDAwccpVm9rK2rbXp/iG47EwyxQib1GXkW7JbAFZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdx/NLPYzcyHFiTulGy/wRcTQ/28wHwYDVR0j BBgwFoAUcEUmLV7L0ID9fpC9V8XKwUdn19kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODAxYjc5YWMtMzM1MS00NzA1LThjM2QtNjAyYWRjZDc5YmI3LzAvNzA0NTI2MkQ1 RUNCRDA4MEZEN0U5MEJENTdDNUNBQzE0NzY3RDdEOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MDQ1MjYyRDVFQ0JEMDgwRkQ3RTkwQkQ1N0M1Q0FDMTQ3NjdE N0Q5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODAxYjc5YWMtMzM1MS00NzA1LThj M2QtNjAyYWRjZDc5YmI3LzAvNzA0NTI2MkQ1RUNCRDA4MEZEN0U5MEJENTdDNUNB QzE0NzY3RDdEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHa35wnK99vm67BcZwFt/L5ssPk2WNFYeMk9 BcSc2INP062EwyBDmnrQ2X8Kt8KIASxV+JUQJeMVWAV/6K2KluNPitiBbCDzw85o F4tjz7b1wXOyFivrrXNJC8FKLNb6cG2rKxth7LdF18dvog5p0+/ik2dYUYBHWzQY iA80OtWD2JjkObdhJKBKxPuBBDS0bC5jcaFgA7UX1p7HSu/q9Ip6uSCPvjhJoz9v c3AJYvkr1mWC/TcYveL6yOUkxYyOiBFnJLV1ymqzOFMuudNe+zR8h9txAbN6R3OY M45+1M6n1EKgXfAhrWi5zcLhV/HAWA4uajjF2q/I2+USlrOdkbo= -----END CERTIFICATE-----Generated at Tue Sep 22 05:09:49 2026 by rpki-client