$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft File: 7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft (raw, json) Hash identifier: lsnie9zL41IvG7NzOwFqdlWaupGujnE7NXjOy5FIcv8= Subject key identifier: 74:CE:64:67:9D:8A:DA:FC:E4:96:68:AA:08:30:19:1A:29:4F:06:08 Authority key identifier: 7F:5C:ED:19:7F:7E:88:09:44:8C:D3:16:88:50:A9:AC:AB:A3:5B:CD Certificate issuer: /CN=7F5CED197F7E8809448CD3168850A9ACABA35BCD Certificate serial: 1FC75668D83EEA3497492C3D51185332C1E5E815 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft Manifest number: BD Signing time: Sun 20 Sep 2026 10:30:06 +0000 Manifest this update: Sun 20 Sep 2026 10:25:06 +0000 Manifest next update: Mon 21 Sep 2026 13:31:06 +0000 Files and hashes: 1: 3135372e36362e3235302e302f32342d3234203d3e20313532373635.roa (hash: e9freSOl6ZanO/adGulxqpvEl7SzFc7wYY3wkhJg4CE=) 2: 7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl (hash: mznIHx4M/uDwIlNv7tqhe4ETC1L/PCGTEZCoXgtMLbU=) 3: 3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa (hash: 0ceXQBT7nQVIUPaueWzFLm7bmqkvnlmzpOPpIKUeokk=) 4: 3135372e36362e3235312e302f32342d3234203d3e20313532373635.roa (hash: 67rdoMV01a3IGZ3053/VOVG/uiaYoOQVt0FRgDL8wn8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 13:31:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:c7:56:68:d8:3e:ea:34:97:49:2c:3d:51:18:53:32:c1:e5:e8:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F5CED197F7E8809448CD3168850A9ACABA35BCD Validity Not Before: Sep 20 10:25:06 2026 GMT Not After : Sep 21 13:31:06 2026 GMT Subject: CN=74CE64679D8ADAFCE49668AA0830191A294F0608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:46:11:2a:5a:97:3e:e8:e8:58:71:19:b1:06: a6:ce:59:3c:57:3f:30:cf:3c:8b:0a:4c:7e:4b:75: aa:d3:a0:a0:ff:e5:88:77:a7:a7:e7:d6:04:e5:e6: c5:f5:08:24:83:cc:aa:a6:6d:13:e9:ab:01:d1:62: be:d8:64:d7:d7:87:bd:26:9c:fc:ba:c3:b9:fe:87: b5:3b:89:d9:08:41:1d:38:15:e2:5c:a0:18:39:ef: 47:8a:94:7b:24:a6:48:a6:67:6d:f6:aa:26:d1:60: 41:5d:58:db:6f:f9:88:5c:c6:6f:f0:14:40:a9:86: 14:23:1a:e6:59:92:13:f7:10:01:d4:aa:4b:dc:0c: 31:3f:a9:bd:85:a7:db:3b:a0:d5:fb:9f:7b:40:9a: f3:e9:37:e7:75:d2:32:ab:7a:70:bd:bb:bf:5e:be: 7f:de:f3:30:dd:9a:66:4d:fe:7b:c9:d0:e5:b4:c6: a0:09:87:f4:b1:79:13:1b:8b:76:75:e4:d6:a1:59: 1b:76:40:13:b4:2d:0c:83:f8:7e:91:d2:c1:85:20: 4a:69:00:83:2f:49:14:d0:00:01:75:6c:2d:79:e9: 85:cb:08:9e:89:ea:ac:7b:78:89:ab:2f:49:a3:14: 77:ed:ee:f8:70:04:20:05:6e:fe:85:83:06:74:60: 37:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:CE:64:67:9D:8A:DA:FC:E4:96:68:AA:08:30:19:1A:29:4F:06:08 X509v3 Authority Key Identifier: keyid:7F:5C:ED:19:7F:7E:88:09:44:8C:D3:16:88:50:A9:AC:AB:A3:5B:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:91:8c:3e:04:8f:05:f3:05:b4:da:03:34:e6:71:39:5d:6d: 37:bb:33:2c:98:6b:28:31:a6:37:ef:c0:4c:45:5d:75:46:40: 7c:ab:be:0c:75:f3:10:ca:59:cd:7f:48:8b:4f:6e:9d:51:92: 33:e4:c2:74:40:61:8b:ed:0c:00:31:96:fa:8a:20:89:e6:58: 91:a4:4d:17:36:e3:f5:33:c9:d9:10:f6:7e:aa:e4:a1:c3:91: d0:a5:b8:f0:95:7f:4a:1e:93:55:af:3a:6d:31:77:53:7d:5c: dd:df:c5:92:ac:39:fa:55:95:a7:0a:1b:c6:2a:71:75:6f:15: 0c:2b:29:b0:18:07:1c:a5:78:61:9e:97:ef:41:4d:95:b7:92: 81:68:5b:43:dc:71:4f:c4:6b:60:46:87:80:bc:8a:6f:4f:fa: 22:50:0a:fe:d3:5d:dd:54:8e:66:e6:53:7b:94:6b:0a:7e:ae: c5:c5:08:f8:ee:33:c3:21:2e:2e:85:3f:75:0f:11:ee:c8:53: e3:2f:59:d4:96:60:ec:b7:b2:30:b5:52:5a:09:f9:7c:6d:18: 09:12:29:4a:82:3a:92:ba:d7:e6:fb:f4:05:12:34:f9:09:63: 3e:7b:c1:24:ae:65:da:8c:7d:f4:6b:5e:9f:c9:a4:9c:bf:dc: 5f:bf:6a:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH8dWaNg+6jSXSSw9URhTMsHl6BUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y1Q0VEMTk3RjdFODgwOTQ0OENEMzE2ODg1MEE5QUNB QkEzNUJDRDAeFw0yNjA5MjAxMDI1MDZaFw0yNjA5MjExMzMxMDZaMDMxMTAvBgNV BAMTKDc0Q0U2NDY3OUQ4QURBRkNFNDk2NjhBQTA4MzAxOTFBMjk0RjA2MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrRhEqWpc+6OhYcRmxBqbOWTxX PzDPPIsKTH5LdarToKD/5Yh3p6fn1gTl5sX1CCSDzKqmbRPpqwHRYr7YZNfXh70m nPy6w7n+h7U7idkIQR04FeJcoBg570eKlHskpkimZ232qibRYEFdWNtv+Yhcxm/w FECphhQjGuZZkhP3EAHUqkvcDDE/qb2Fp9s7oNX7n3tAmvPpN+d10jKrenC9u79e vn/e8zDdmmZN/nvJ0OW0xqAJh/SxeRMbi3Z15NahWRt2QBO0LQyD+H6R0sGFIEpp AIMvSRTQAAF1bC156YXLCJ6J6qx7eImrL0mjFHft7vhwBCAFbv6FgwZ0YDdpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdM5kZ52K2vzklmiqCDAZGilPBggwHwYDVR0j BBgwFoAUf1ztGX9+iAlEjNMWiFCprKujW80wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjEyYmY4NjMtYTFmMC00MmQwLTllM2EtM2Y5ZmY2OWEyZDE1LzAvN0Y1Q0VEMTk3 RjdFODgwOTQ0OENEMzE2ODg1MEE5QUNBQkEzNUJDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83RjVDRUQxOTdGN0U4ODA5NDQ4Q0QzMTY4ODUwQTlBQ0FCQTM1 QkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjEyYmY4NjMtYTFmMC00MmQwLTll M2EtM2Y5ZmY2OWEyZDE1LzAvN0Y1Q0VEMTk3RjdFODgwOTQ0OENEMzE2ODg1MEE5 QUNBQkEzNUJDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+RjD4EjwXzBbTaAzTmcTldbTe7MyyYaygx pjfvwExFXXVGQHyrvgx18xDKWc1/SItPbp1RkjPkwnRAYYvtDAAxlvqKIInmWJGk TRc24/UzydkQ9n6q5KHDkdCluPCVf0oek1WvOm0xd1N9XN3fxZKsOfpVlacKG8Yq cXVvFQwrKbAYBxyleGGel+9BTZW3koFoW0PccU/Ea2BGh4C8im9P+iJQCv7TXd1U jmbmU3uUawp+rsXFCPjuM8MhLi6FP3UPEe7IU+MvWdSWYOy3sjC1UloJ+XxtGAkS KUqCOpK61+b79AUSNPkJYz57wSSuZdqMffRrXp/JpJy/3F+/ag8= -----END CERTIFICATE-----Generated at Mon Sep 21 04:54:19 2026 by rpki-client