$ rpki-client -vvvf rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft File: 7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft (raw, json) Hash identifier: vexaKA5r6qBKmz8U+8xbxHTnkkY3j9ySxJLRQPpF1kE= Subject key identifier: BC:F3:EA:BC:FB:15:33:2F:82:BE:D9:38:F0:7B:95:B1:BD:DA:C2:B9 Authority key identifier: 7D:D6:B5:0A:2D:41:EA:EB:84:8E:7C:42:D7:4C:0D:77:D1:30:35:06 Certificate issuer: /CN=7DD6B50A2D41EAEB848E7C42D74C0D77D1303506 Certificate serial: 50AC8342716C882301F0490B89461D1859BDBD74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft Manifest number: BF Signing time: Tue 22 Sep 2026 03:05:29 +0000 Manifest this update: Tue 22 Sep 2026 03:00:29 +0000 Manifest next update: Wed 23 Sep 2026 05:53:29 +0000 Files and hashes: 1: 3130332e3231342e3130302e302f32342d3234203d3e203634303237.roa (hash: X2e4T35qCspph/xtXp3KyS/o17wZ6E0HRD0EGkuu3j4=) 2: 3130332e3231342e3130312e302f32342d3234203d3e203634303237.roa (hash: e18vtFsO2rq7V5cmuPD5QY+txt6xvfQ7TNg+W5usCFI=) 3: 7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.crl (hash: 9Zqaj56rv1R05BF469mvV17fHsdlfFhkeCfOlDpAKPU=) 4: 3130332e3231342e3130332e302f32342d3234203d3e203634303237.roa (hash: 5sujLlpuj+APYEuCGGPMp2IaRJT57klQE6sCBEbziO0=) 5: 3130332e3231342e3130322e302f32342d3234203d3e203634303237.roa (hash: Hn5EuMtGipfFtFBXzkyifRq2Ky/xfbDimmF9AiNLLbY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.crl rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ac:83:42:71:6c:88:23:01:f0:49:0b:89:46:1d:18:59:bd:bd:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DD6B50A2D41EAEB848E7C42D74C0D77D1303506 Validity Not Before: Sep 22 03:00:29 2026 GMT Not After : Sep 23 05:53:29 2026 GMT Subject: CN=BCF3EABCFB15332F82BED938F07B95B1BDDAC2B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:55:dd:ec:92:34:cc:e5:0b:15:56:d7:51:07: fc:df:49:8b:64:29:e3:11:38:2f:05:51:de:3d:c7: 23:23:73:e7:55:e8:cc:25:f9:5a:80:87:92:58:4d: 29:65:ee:f9:3b:91:dc:53:c3:6a:5a:b5:16:fd:db: 2b:08:36:3c:f6:45:c4:3a:be:25:24:83:b2:75:81: e2:51:ae:a7:74:b9:ba:30:14:08:b2:51:55:4f:22: 46:92:2f:21:b4:ca:f4:1f:18:cc:57:6a:44:19:1b: 6f:f8:03:63:ff:e3:b5:4d:35:b7:d2:75:d5:fa:11: 6e:a4:1e:c3:c7:2c:30:5d:eb:7f:a8:89:24:33:0e: 16:ea:50:fa:ff:51:a3:1b:1a:71:f9:ab:a6:0b:db: 9d:d1:c1:0e:a1:9b:76:2a:7a:6c:71:fb:e3:e7:ee: 88:b1:6d:a4:7b:f2:4b:bc:a6:ca:2a:41:f8:78:40: f2:38:a5:48:2e:c3:7d:b4:40:dc:54:0e:23:3a:a8: fe:54:70:1f:7c:6d:c7:88:e3:96:37:b6:ad:12:14: 48:c5:2d:08:a3:52:68:ae:f6:08:00:3c:3e:ab:f3: 57:37:67:84:ee:07:c5:7f:6c:eb:58:4d:e0:61:b8: 19:d1:72:bc:7d:b5:5a:2d:5b:29:8c:60:c5:ce:ae: 0d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F3:EA:BC:FB:15:33:2F:82:BE:D9:38:F0:7B:95:B1:BD:DA:C2:B9 X509v3 Authority Key Identifier: keyid:7D:D6:B5:0A:2D:41:EA:EB:84:8E:7C:42:D7:4C:0D:77:D1:30:35:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:6b:f7:4b:02:88:4e:2c:06:4a:00:ea:80:af:3e:2b:b0:d8: 1a:d8:77:42:0d:b4:ad:47:d5:4b:ba:52:8e:71:46:e1:65:0d: dd:13:de:62:4c:9f:71:a9:48:e1:c3:29:47:ca:5b:c6:e1:09: 4c:f6:08:8e:ef:ce:d5:4f:49:24:d8:63:53:f6:ee:01:30:10: 10:12:59:11:6f:f6:a5:d6:81:22:42:32:0d:39:ac:e8:1c:5c: 2b:4b:24:4b:1a:6c:d9:43:1f:67:1f:e6:f4:ce:6a:af:5a:5f: 22:3a:02:79:b2:b3:98:31:e7:83:84:b5:f4:60:43:0c:ac:16: 2d:ee:59:a4:04:e1:93:4a:d7:eb:88:19:db:aa:7d:09:82:0e: c2:72:d8:4f:e8:99:25:86:b8:01:4e:08:3a:1c:c0:99:2d:9b: b9:d2:bb:cd:96:2d:d2:8a:b2:32:6f:b7:ef:83:c8:6e:3c:eb: aa:b0:ed:b4:fa:81:2a:f5:20:b8:04:e2:a8:9b:36:4f:1a:ef: cf:a9:d6:35:07:13:b9:e2:bd:d1:f9:96:03:b3:a5:4b:a6:84: 5f:78:19:20:71:bc:0e:92:bd:f1:05:d9:fa:df:46:6f:51:da: c1:bb:0f:c9:a9:1d:4d:fc:45:bd:a8:8d:7f:c1:af:1f:6f:68: 9a:09:c3:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUKyDQnFsiCMB8EkLiUYdGFm9vXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RENkI1MEEyRDQxRUFFQjg0OEU3QzQyRDc0QzBENzdE MTMwMzUwNjAeFw0yNjA5MjIwMzAwMjlaFw0yNjA5MjMwNTUzMjlaMDMxMTAvBgNV BAMTKEJDRjNFQUJDRkIxNTMzMkY4MkJFRDkzOEYwN0I5NUIxQkREQUMyQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfVd3skjTM5QsVVtdRB/zfSYtk KeMROC8FUd49xyMjc+dV6Mwl+VqAh5JYTSll7vk7kdxTw2patRb92ysINjz2RcQ6 viUkg7J1geJRrqd0ubowFAiyUVVPIkaSLyG0yvQfGMxXakQZG2/4A2P/47VNNbfS ddX6EW6kHsPHLDBd63+oiSQzDhbqUPr/UaMbGnH5q6YL253RwQ6hm3Yqemxx++Pn 7oixbaR78ku8psoqQfh4QPI4pUguw320QNxUDiM6qP5UcB98bceI45Y3tq0SFEjF LQijUmiu9ggAPD6r81c3Z4TuB8V/bOtYTeBhuBnRcrx9tVotWymMYMXOrg1HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvPPqvPsVMy+Cvtk48HuVsb3awrkwHwYDVR0j BBgwFoAUfda1Ci1B6uuEjnxC10wNd9EwNQYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVlNTE4NzUtNTA4Ny00MjY0LWE4YmQtNDE1NmY1NWJhYWFiLzAvN0RENkI1MEEy RDQxRUFFQjg0OEU3QzQyRDc0QzBENzdEMTMwMzUwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83REQ2QjUwQTJENDFFQUVCODQ4RTdDNDJENzRDMEQ3N0QxMzAz NTA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVlNTE4NzUtNTA4Ny00MjY0LWE4 YmQtNDE1NmY1NWJhYWFiLzAvN0RENkI1MEEyRDQxRUFFQjg0OEU3QzQyRDc0QzBE NzdEMTMwMzUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9r90sCiE4sBkoA6oCvPiuw2BrYd0INtK1H 1Uu6Uo5xRuFlDd0T3mJMn3GpSOHDKUfKW8bhCUz2CI7vztVPSSTYY1P27gEwEBAS WRFv9qXWgSJCMg05rOgcXCtLJEsabNlDH2cf5vTOaq9aXyI6Anmys5gx54OEtfRg QwysFi3uWaQE4ZNK1+uIGduqfQmCDsJy2E/omSWGuAFOCDocwJktm7nSu82WLdKK sjJvt++DyG4866qw7bT6gSr1ILgE4qibNk8a78+p1jUHE7nivdH5lgOzpUumhF94 GSBxvA6SvfEF2frfRm9R2sG7D8mpHU38Rb2ojX/Brx9vaJoJwzU= -----END CERTIFICATE-----Generated at Tue Sep 22 11:11:20 2026 by rpki-client