$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.mft File: 7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.mft (raw, json) Hash identifier: IEfdx4Bdz7Z3rWCrqq5NW+Pq3zJXNUNTx50WkoF2aHc= Subject key identifier: BB:C0:73:5C:C8:C1:BC:72:3F:E5:A3:20:F7:39:83:77:81:69:91:18 Authority key identifier: 7F:5A:37:E4:2E:0F:2B:7D:7D:44:5E:64:D5:8D:13:F9:D4:FF:FA:01 Certificate issuer: /CN=7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01 Certificate serial: 2C5F2AEA860E8D08B0A41E809C2FDC0C8F885BD8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 22:55:04 +0000 Manifest this update: Mon 21 Sep 2026 22:50:04 +0000 Manifest next update: Tue 22 Sep 2026 23:56:04 +0000 Files and hashes: 1: 7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.crl (hash: PXIA6ahvSh5FJp1WVPHVUiNLAwsNXICk019eKnskpJE=) 2: 3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa (hash: iNJDLui3MvH+G4nBQHtpKPOOwaP9++CI/XGWFFMM0oA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.crl rsync://rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:56:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:5f:2a:ea:86:0e:8d:08:b0:a4:1e:80:9c:2f:dc:0c:8f:88:5b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01 Validity Not Before: Sep 21 22:50:04 2026 GMT Not After : Sep 22 23:56:04 2026 GMT Subject: CN=BBC0735CC8C1BC723FE5A320F739837781699118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:85:2d:9d:2b:a5:f1:7c:b7:74:cd:f8:cc:e2: 77:7a:52:30:c2:10:8b:ee:92:d9:3b:b4:33:81:23: 66:12:0f:41:3b:fd:6d:f6:67:b3:54:80:08:cb:e9: bf:c9:52:55:39:4c:75:57:09:79:67:25:ea:a4:d2: 62:c7:6a:0e:e2:cf:2f:0f:e1:53:ef:66:46:ad:76: ef:3f:ae:c7:4b:d1:f0:67:aa:d0:f3:2f:e1:a5:e6: 4f:98:c2:5d:21:a8:a0:69:bc:2c:eb:70:9e:72:a5: 45:70:ef:11:21:cf:ce:fc:d8:92:b9:35:1e:31:76: 33:ff:bc:18:93:99:4b:9c:0b:03:29:88:71:3b:4b: fa:da:b9:4d:ad:aa:55:69:2d:0d:29:94:a4:ff:48: 13:20:0e:0b:61:95:6c:93:31:e1:04:cd:30:3b:c4: f3:0d:c1:03:1f:c0:37:37:c8:c6:65:a4:84:20:a3: ed:a5:d2:63:10:27:e4:d5:5b:21:b1:50:02:b2:19: c1:90:50:e3:43:bb:42:10:36:33:b5:e8:9f:d5:5f: 7b:98:fe:f4:f7:2b:5c:6c:3c:e6:66:99:d7:93:94: 39:e2:8a:7b:52:1b:dd:68:96:00:85:1d:d5:9a:d1: e5:c2:af:86:4a:f9:0b:3d:65:49:db:0e:8a:e1:45: 5a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C0:73:5C:C8:C1:BC:72:3F:E5:A3:20:F7:39:83:77:81:69:91:18 X509v3 Authority Key Identifier: keyid:7F:5A:37:E4:2E:0F:2B:7D:7D:44:5E:64:D5:8D:13:F9:D4:FF:FA:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:5d:ab:f4:d0:94:62:cd:51:75:36:7a:a9:82:f0:50:1e:1a: 27:57:bd:68:de:ec:73:fd:32:a7:f3:08:b7:4d:13:0f:1f:1d: 4f:c7:82:ca:f7:85:86:84:17:99:49:88:30:26:9b:df:2a:e2: 99:06:86:8c:8d:b8:29:8e:55:a7:1c:91:73:dd:d7:d6:43:92: 81:89:3c:15:d7:5a:4b:df:37:a8:f7:77:58:6c:22:02:1e:de: 41:51:ac:db:f2:b6:d6:4d:92:68:00:9a:03:12:75:63:2d:c6: a5:39:e8:14:12:5c:22:c9:5e:43:e8:77:79:b9:00:8a:66:a2: 6f:51:1f:6c:79:b9:62:5c:f0:14:ca:f5:1b:78:d0:0e:b7:d9: cb:76:6e:cc:c6:1a:60:31:46:6c:03:4e:e4:12:76:ab:5d:b3: 24:3e:6c:87:f6:21:75:7e:ca:4d:49:e5:ec:21:f0:b7:42:bb: a5:80:52:4b:bc:eb:ab:ba:f7:a8:8a:98:1a:a1:e5:d1:3c:74: 0a:fb:99:e3:77:3e:bd:15:08:b4:1d:09:7f:e4:3b:fb:61:48: b5:bd:dc:f8:97:ff:42:f4:67:91:fa:8a:0f:20:e7:5f:cd:fd: b0:dc:12:3e:01:83:8a:9a:b3:f7:3d:a4:50:1f:a8:73:60:53: 60:01:39:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULF8q6oYOjQiwpB6AnC/cDI+IW9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y1QTM3RTQyRTBGMkI3RDdENDQ1RTY0RDU4RDEzRjlE NEZGRkEwMTAeFw0yNjA5MjEyMjUwMDRaFw0yNjA5MjIyMzU2MDRaMDMxMTAvBgNV BAMTKEJCQzA3MzVDQzhDMUJDNzIzRkU1QTMyMEY3Mzk4Mzc3ODE2OTkxMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCShS2dK6XxfLd0zfjM4nd6UjDC EIvuktk7tDOBI2YSD0E7/W32Z7NUgAjL6b/JUlU5THVXCXlnJeqk0mLHag7izy8P 4VPvZkatdu8/rsdL0fBnqtDzL+Gl5k+Ywl0hqKBpvCzrcJ5ypUVw7xEhz8782JK5 NR4xdjP/vBiTmUucCwMpiHE7S/rauU2tqlVpLQ0plKT/SBMgDgthlWyTMeEEzTA7 xPMNwQMfwDc3yMZlpIQgo+2l0mMQJ+TVWyGxUAKyGcGQUONDu0IQNjO16J/VX3uY /vT3K1xsPOZmmdeTlDniintSG91olgCFHdWa0eXCr4ZK+Qs9ZUnbDorhRVpbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu8BzXMjBvHI/5aMg9zmDd4FpkRgwHwYDVR0j BBgwFoAUf1o35C4PK319RF5k1Y0T+dT/+gEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWNjYzVmNjQtZWQ2Mi00ODQ4LThjMzgtNDJkZjQ4ZTM0YmI2LzAvN0Y1QTM3RTQy RTBGMkI3RDdENDQ1RTY0RDU4RDEzRjlENEZGRkEwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RjVBMzdFNDJFMEYyQjdEN0Q0NDVFNjRENThEMTNGOUQ0RkZG QTAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWNjYzVmNjQtZWQ2Mi00ODQ4LThj MzgtNDJkZjQ4ZTM0YmI2LzAvN0Y1QTM3RTQyRTBGMkI3RDdENDQ1RTY0RDU4RDEz RjlENEZGRkEwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9dq/TQlGLNUXU2eqmC8FAeGidXvWje7HP9 MqfzCLdNEw8fHU/Hgsr3hYaEF5lJiDAmm98q4pkGhoyNuCmOVacckXPd19ZDkoGJ PBXXWkvfN6j3d1hsIgIe3kFRrNvyttZNkmgAmgMSdWMtxqU56BQSXCLJXkPod3m5 AIpmom9RH2x5uWJc8BTK9Rt40A632ct2bszGGmAxRmwDTuQSdqtdsyQ+bIf2IXV+ yk1J5ewh8LdCu6WAUku866u696iKmBqh5dE8dAr7meN3Pr0VCLQdCX/kO/thSLW9 3PiX/0L0Z5H6ig8g51/N/bDcEj4Bg4qas/c9pFAfqHNgU2ABOXM= -----END CERTIFICATE-----Generated at Tue Sep 22 13:08:38 2026 by rpki-client