$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.mft File: 07DE2856EE772937B8A7AD863D63341E1041C169.mft (raw, json) Hash identifier: dySiNXVEmKWvsiVwpiVduT7riETwQYUUoGdaKdqDjMU= Subject key identifier: 6A:50:4E:87:0C:C4:5A:46:58:92:A9:7E:3D:96:A3:E2:2F:89:37:AC Authority key identifier: 07:DE:28:56:EE:77:29:37:B8:A7:AD:86:3D:63:34:1E:10:41:C1:69 Certificate issuer: /CN=07DE2856EE772937B8A7AD863D63341E1041C169 Certificate serial: 3DE7D53A599BEC5902A4C09FAA6E37899C5FA344 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/07DE2856EE772937B8A7AD863D63341E1041C169.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.mft Manifest number: BF Signing time: Mon 21 Sep 2026 04:01:23 +0000 Manifest this update: Mon 21 Sep 2026 03:56:23 +0000 Manifest next update: Tue 22 Sep 2026 07:43:23 +0000 Files and hashes: 1: 3135372e31352e3134342e302f32342d3234203d3e20313532333736.roa (hash: xwruyCGg4a4DpEUZcfdSd3a7y9zRV90KgcSqE6gjaBo=) 2: 07DE2856EE772937B8A7AD863D63341E1041C169.crl (hash: BdcQPJywO17BaJTkSS/yzaH18oYdUGkA6jCbtMYPxqg=) 3: 3135372e31352e3134352e302f32342d3234203d3e20313532333736.roa (hash: BjELFCipYQ5Q+BtKi2neiDtQ5aM5iD6aEteAOOyN4vE=) 4: 3135372e31352e3134342e302f32332d3233203d3e20313532333736.roa (hash: BaGODEcb9GjhGRZiHNCRqzvhrdvwdr18tYlKlyT9Rpg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.crl rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/07DE2856EE772937B8A7AD863D63341E1041C169.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:e7:d5:3a:59:9b:ec:59:02:a4:c0:9f:aa:6e:37:89:9c:5f:a3:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07DE2856EE772937B8A7AD863D63341E1041C169 Validity Not Before: Sep 21 03:56:23 2026 GMT Not After : Sep 22 07:43:23 2026 GMT Subject: CN=6A504E870CC45A465892A97E3D96A3E22F8937AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:86:4f:06:2f:e5:b4:98:4b:e4:ec:b7:4b:ba: 64:eb:f8:d0:37:f3:ab:ad:1c:5c:d0:35:2a:30:61: 0c:80:c3:c0:b2:1a:e1:1e:98:ec:bf:53:3f:5b:d6: 29:a4:91:d8:11:b4:5b:d1:b4:f2:66:a1:97:6f:46: e3:f6:92:13:27:df:09:a6:92:25:c5:a4:6a:47:f6: 7a:6a:4b:34:34:6f:b2:72:bf:62:bc:5e:6e:f2:a3: 09:0a:ed:3d:e6:6a:e0:75:98:2f:6e:78:4e:e9:db: 0a:06:d1:93:3e:1e:46:d9:31:0c:81:0e:95:75:39: 15:b9:a1:be:fd:ea:1d:98:05:bd:b9:53:a8:54:9e: 83:65:b7:b3:1a:84:6d:1d:20:4a:30:23:03:24:d3: e3:23:93:35:11:1b:66:b5:4c:3e:72:7e:2f:95:eb: a3:ad:1f:ee:8f:94:4d:80:9a:9a:ab:cd:08:13:8b: 8b:8b:31:40:a0:47:d1:79:ba:8a:93:9a:de:8d:4c: 85:de:45:16:01:96:08:5d:9e:0b:e9:73:1f:b8:4c: e3:8f:ff:8b:1a:44:da:d2:2b:f0:78:fd:04:08:01: b4:e3:8f:89:51:a4:25:00:ad:93:c9:7e:fa:e9:06: 05:86:9c:20:f2:0a:79:6b:99:4f:9a:59:82:d2:f8: ed:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:50:4E:87:0C:C4:5A:46:58:92:A9:7E:3D:96:A3:E2:2F:89:37:AC X509v3 Authority Key Identifier: keyid:07:DE:28:56:EE:77:29:37:B8:A7:AD:86:3D:63:34:1E:10:41:C1:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/07DE2856EE772937B8A7AD863D63341E1041C169.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:7e:b4:a8:6f:1e:86:f8:87:ca:7e:d2:e7:49:45:20:fa:3b: 12:c2:a2:01:dc:74:a6:1a:7a:18:4a:7a:11:92:e3:81:53:e7: 84:88:fe:dc:99:a7:ef:b5:9f:ab:31:44:d7:6a:21:9b:89:b3: 7f:e8:84:38:34:ed:b3:db:c7:1f:4a:11:01:93:3e:98:a9:65: 62:fe:5e:b0:0c:96:d7:d8:6a:58:50:c1:3d:8e:66:5d:0f:21: ae:3e:04:17:35:58:84:e1:64:71:ec:c1:04:5d:27:31:c7:eb: 6b:24:dc:e7:6f:06:06:7b:6c:47:b9:bf:e3:00:c8:83:ec:51: 8e:93:a8:fb:17:5e:e2:8f:19:f8:a2:89:47:3f:e5:a1:42:df: 7a:29:6a:4a:4e:61:af:f3:92:a7:e5:d2:fd:ac:f5:ec:47:dd: 3d:41:a2:0e:f1:95:ee:41:34:e1:62:02:58:4d:35:76:62:87: 85:45:1a:9a:7c:d6:d3:47:11:52:53:0b:67:a8:61:cb:5a:30: 18:9c:52:80:25:ab:c7:02:0a:cb:f0:4f:ed:1d:d2:25:15:98: d7:72:5f:6b:0a:40:6d:34:95:a3:48:7e:3d:df:cc:a9:9d:32: 7c:46:7c:ed:09:52:2b:44:b1:82:8a:c5:c1:c6:7b:61:00:a0: df:c2:86:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPefVOlmb7FkCpMCfqm43iZxfo0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDdERTI4NTZFRTc3MjkzN0I4QTdBRDg2M0Q2MzM0MUUx MDQxQzE2OTAeFw0yNjA5MjEwMzU2MjNaFw0yNjA5MjIwNzQzMjNaMDMxMTAvBgNV BAMTKDZBNTA0RTg3MENDNDVBNDY1ODkyQTk3RTNEOTZBM0UyMkY4OTM3QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUhk8GL+W0mEvk7LdLumTr+NA3 86utHFzQNSowYQyAw8CyGuEemOy/Uz9b1imkkdgRtFvRtPJmoZdvRuP2khMn3wmm kiXFpGpH9npqSzQ0b7Jyv2K8Xm7yowkK7T3mauB1mC9ueE7p2woG0ZM+HkbZMQyB DpV1ORW5ob796h2YBb25U6hUnoNlt7MahG0dIEowIwMk0+MjkzURG2a1TD5yfi+V 66OtH+6PlE2AmpqrzQgTi4uLMUCgR9F5uoqTmt6NTIXeRRYBlghdngvpcx+4TOOP /4saRNrSK/B4/QQIAbTjj4lRpCUArZPJfvrpBgWGnCDyCnlrmU+aWYLS+O3jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUalBOhwzEWkZYkql+PZaj4i+JN6wwHwYDVR0j BBgwFoAUB94oVu53KTe4p62GPWM0HhBBwWkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU2ZWNjYjctZTkxNy00MGY1LWFjZWUtMDNkNjhiZTVmZDk3LzAvMDdERTI4NTZF RTc3MjkzN0I4QTdBRDg2M0Q2MzM0MUUxMDQxQzE2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wN0RFMjg1NkVFNzcyOTM3QjhBN0FEODYzRDYzMzQxRTEwNDFD MTY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU2ZWNjYjctZTkxNy00MGY1LWFj ZWUtMDNkNjhiZTVmZDk3LzAvMDdERTI4NTZFRTc3MjkzN0I4QTdBRDg2M0Q2MzM0 MUUxMDQxQzE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAl+tKhvHob4h8p+0udJRSD6OxLCogHcdKYa ehhKehGS44FT54SI/tyZp++1n6sxRNdqIZuJs3/ohDg07bPbxx9KEQGTPpipZWL+ XrAMltfYalhQwT2OZl0PIa4+BBc1WIThZHHswQRdJzHH62sk3OdvBgZ7bEe5v+MA yIPsUY6TqPsXXuKPGfiiiUc/5aFC33opakpOYa/zkqfl0v2s9exH3T1Bog7xle5B NOFiAlhNNXZih4VFGpp81tNHEVJTC2eoYctaMBicUoAlq8cCCsvwT+0d0iUVmNdy X2sKQG00laNIfj3fzKmdMnxGfO0JUitEsYKKxcHGe2EAoN/ChtQ= -----END CERTIFICATE-----Generated at Mon Sep 21 15:44:49 2026 by rpki-client