$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft File: 7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft (raw, json) Hash identifier: lqWKXPvZS/Psn4O4xJ1GQ7au1GqomS4L5VCMesSMcPw= Subject key identifier: 46:C0:01:C6:13:E1:9F:FD:16:76:41:FB:70:34:DA:1B:DE:0D:D2:7B Authority key identifier: 7B:90:2E:8E:8A:D0:99:97:B1:25:1A:6E:7F:2B:E5:A7:21:58:A4:31 Certificate issuer: /CN=7B902E8E8AD09997B1251A6E7F2BE5A72158A431 Certificate serial: 3C2875898F9149E30739E6163F0449474D420D83 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft Manifest number: BF Signing time: Tue 22 Sep 2026 14:03:41 +0000 Manifest this update: Tue 22 Sep 2026 13:58:41 +0000 Manifest next update: Wed 23 Sep 2026 16:06:41 +0000 Files and hashes: 1: 7B902E8E8AD09997B1251A6E7F2BE5A72158A431.crl (hash: kXFA+r7ssYsLwE0q5qCq8oU/mfX7kczbYm5Uo87nIw8=) 2: 3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa (hash: 3J7cimsOBRL6lk3NfIu2Oz865ovVtmYYmGTF6KPQxK8=) 3: 3130332e3131392e3233312e302f32342d3234203d3e203634333135.roa (hash: TuwnBmf2SP7FcJG/J9a9UICaP1QA248NXcYAWaFv5gA=) 4: 3130332e3131392e3233302e302f32342d3234203d3e203634333135.roa (hash: bHTkeKBy9Cu2TuHvPF5JnLqJlF4128R9POs1NRnmIUI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.crl rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 16:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:28:75:89:8f:91:49:e3:07:39:e6:16:3f:04:49:47:4d:42:0d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B902E8E8AD09997B1251A6E7F2BE5A72158A431 Validity Not Before: Sep 22 13:58:41 2026 GMT Not After : Sep 23 16:06:41 2026 GMT Subject: CN=46C001C613E19FFD167641FB7034DA1BDE0DD27B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7c:f2:c1:c2:c1:6b:6b:70:d0:a3:de:b4:5c: e9:2c:2d:0f:14:f5:1f:e8:f1:0d:2d:3d:99:89:a7: d1:a2:45:a8:c8:07:3f:e6:04:1e:af:19:56:ed:b8: b3:a0:4d:53:b4:13:51:a7:05:11:04:a4:7a:59:9d: a9:02:02:63:c5:11:54:70:7e:78:9d:a1:d8:08:c8: 15:53:23:0a:2f:a5:12:0c:01:77:5a:bc:23:42:90: 29:11:6e:06:00:55:b1:f5:47:51:8f:1f:04:eb:07: 05:5f:cd:4b:db:74:0a:b9:dc:4f:0e:5b:c4:1d:83: 07:6a:01:28:ca:99:13:4c:48:6c:1b:4e:c2:10:aa: dc:fb:a3:0a:7e:39:fe:da:e2:36:e3:a1:01:65:67: 81:1b:26:d4:e5:65:ce:c6:a4:46:d7:a7:da:da:2f: 4c:91:ee:30:b1:22:72:60:45:c6:28:f2:fa:c0:39: 65:2c:0b:1c:cd:7a:4c:51:55:2e:c2:71:62:a2:e4: 9a:52:f7:83:58:20:18:e4:b8:35:5a:9e:2c:d8:8e: 65:2b:a5:82:a7:b9:0b:ea:3c:dc:cf:40:4f:c9:f8: 17:27:e9:63:45:3c:a7:12:a8:f9:d1:19:cb:13:88: 63:b2:9b:37:1d:b1:27:1b:3f:79:ac:73:0d:cb:e1: 11:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C0:01:C6:13:E1:9F:FD:16:76:41:FB:70:34:DA:1B:DE:0D:D2:7B X509v3 Authority Key Identifier: keyid:7B:90:2E:8E:8A:D0:99:97:B1:25:1A:6E:7F:2B:E5:A7:21:58:A4:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:2d:1d:38:ee:99:15:3c:0f:a8:0d:17:d7:e7:df:e7:95:b2: 68:84:2c:52:fb:a9:8c:a2:16:6b:7c:1c:a6:1b:ba:62:4c:5c: 05:41:bd:08:22:ff:7a:b2:72:5f:1c:88:5b:f0:98:08:72:4d: 27:96:b3:2a:e2:e4:82:5d:94:14:2c:0f:b8:cf:c7:52:c9:80: c6:c9:31:23:11:b3:76:c8:f1:4b:cd:cd:a5:fc:61:3d:6f:69: 22:61:44:62:a6:d4:96:f9:a3:15:a5:d7:a5:b3:29:6f:e7:61: bd:40:30:c6:84:b2:f0:92:ca:9d:f0:f8:3e:81:4a:90:62:a4: df:b6:28:f2:d4:31:fe:ac:16:bd:b7:c7:76:a8:6d:0a:d5:83: 22:68:13:fd:a7:b2:a2:77:51:86:24:a2:ee:6d:e1:71:6c:5d: f9:ae:40:25:b1:52:d5:30:cc:5b:ef:60:37:a8:24:f6:bc:7c: 77:34:8f:7a:eb:d4:78:95:86:cb:1a:fd:79:dc:47:ec:45:fb: fd:0b:72:66:e4:3e:2a:ce:5c:97:fe:ae:2f:90:7f:d0:94:a6: 09:57:76:12:5f:e9:c9:fe:58:ef:50:67:b9:a0:d2:74:1c:00: 98:ab:31:dd:fc:73:1c:ff:e7:f2:c0:da:d3:b6:db:b2:97:ab: 94:33:91:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPCh1iY+RSeMHOeYWPwRJR01CDYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I5MDJFOEU4QUQwOTk5N0IxMjUxQTZFN0YyQkU1QTcy MTU4QTQzMTAeFw0yNjA5MjIxMzU4NDFaFw0yNjA5MjMxNjA2NDFaMDMxMTAvBgNV BAMTKDQ2QzAwMUM2MTNFMTlGRkQxNjc2NDFGQjcwMzREQTFCREUwREQyN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbfPLBwsFra3DQo960XOksLQ8U 9R/o8Q0tPZmJp9GiRajIBz/mBB6vGVbtuLOgTVO0E1GnBREEpHpZnakCAmPFEVRw fnidodgIyBVTIwovpRIMAXdavCNCkCkRbgYAVbH1R1GPHwTrBwVfzUvbdAq53E8O W8QdgwdqASjKmRNMSGwbTsIQqtz7owp+Of7a4jbjoQFlZ4EbJtTlZc7GpEbXp9ra L0yR7jCxInJgRcYo8vrAOWUsCxzNekxRVS7CcWKi5JpS94NYIBjkuDVanizYjmUr pYKnuQvqPNzPQE/J+Bcn6WNFPKcSqPnRGcsTiGOymzcdsScbP3mscw3L4RFTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURsABxhPhn/0WdkH7cDTaG94N0nswHwYDVR0j BBgwFoAUe5AujorQmZexJRpufyvlpyFYpDEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg4M2UzYmUtNTdlMi00MTI1LWEwYzUtOWE5ZWE1MDFiZjA1LzAvN0I5MDJFOEU4 QUQwOTk5N0IxMjUxQTZFN0YyQkU1QTcyMTU4QTQzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QjkwMkU4RThBRDA5OTk3QjEyNTFBNkU3RjJCRTVBNzIxNThB NDMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg4M2UzYmUtNTdlMi00MTI1LWEw YzUtOWE5ZWE1MDFiZjA1LzAvN0I5MDJFOEU4QUQwOTk5N0IxMjUxQTZFN0YyQkU1 QTcyMTU4QTQzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUtHTjumRU8D6gNF9fn3+eVsmiELFL7qYyi Fmt8HKYbumJMXAVBvQgi/3qycl8ciFvwmAhyTSeWsyri5IJdlBQsD7jPx1LJgMbJ MSMRs3bI8UvNzaX8YT1vaSJhRGKm1Jb5oxWl16WzKW/nYb1AMMaEsvCSyp3w+D6B SpBipN+2KPLUMf6sFr23x3aobQrVgyJoE/2nsqJ3UYYkou5t4XFsXfmuQCWxUtUw zFvvYDeoJPa8fHc0j3rr1HiVhssa/XncR+xF+/0LcmbkPirOXJf+ri+Qf9CUpglX dhJf6cn+WO9QZ7mg0nQcAJirMd38cxz/5/LA2tO227KXq5QzkcE= -----END CERTIFICATE-----Generated at Wed Sep 23 06:42:42 2026 by rpki-client