$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft File: 7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft (raw, json) Hash identifier: zohZ5pq1cfUu0WBWri7TUvlIji4QKNyaQlXaE/HCY68= Subject key identifier: AD:1E:7B:98:41:5E:CE:69:9A:15:21:A8:50:10:4A:9E:A7:C4:3E:9D Authority key identifier: 7D:85:F0:FB:6A:61:D5:D2:2C:8F:36:D6:2F:E9:22:39:45:DA:30:90 Certificate issuer: /CN=7D85F0FB6A61D5D22C8F36D62FE9223945DA3090 Certificate serial: 7B2C4E3D67441D05DA4AB2E713CD4FA0F58DC763 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft Manifest number: BE Signing time: Sun 20 Sep 2026 20:11:54 +0000 Manifest this update: Sun 20 Sep 2026 20:06:54 +0000 Manifest next update: Mon 21 Sep 2026 23:34:54 +0000 Files and hashes: 1: 3230322e39342e38332e302f32342d3234203d3e203535363732.roa (hash: 02qGuHs8PWiwuegUDxDYjRjxgPk9hr8EhoopovjNuGM=) 2: 7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.crl (hash: 9BzsZPOwgj8lyHd/MZLtSOXqL129id3DdN37N9Gssto=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.crl rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 23:34:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:2c:4e:3d:67:44:1d:05:da:4a:b2:e7:13:cd:4f:a0:f5:8d:c7:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D85F0FB6A61D5D22C8F36D62FE9223945DA3090 Validity Not Before: Sep 20 20:06:54 2026 GMT Not After : Sep 21 23:34:54 2026 GMT Subject: CN=AD1E7B98415ECE699A1521A850104A9EA7C43E9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c7:fa:97:df:aa:6d:fd:61:02:49:ac:08:58: 01:db:19:77:b1:d2:ec:f0:8b:e8:78:d7:5c:30:cd: 4c:c2:22:94:27:f0:10:f8:ae:d4:25:49:a2:df:ac: 1a:0d:86:30:f4:8d:9b:e1:39:02:60:b9:20:66:1d: d2:a2:f0:9e:0f:b5:2b:1a:9e:0e:a6:8a:70:4d:0b: 79:ca:76:ff:93:4f:c5:b9:2f:dc:ab:a7:af:f6:99: 35:ad:6c:42:15:ed:6c:26:c9:34:51:01:7b:b5:ea: 93:6f:48:e4:cc:88:7b:4c:a5:d3:f6:c6:6e:27:7c: 4a:35:d1:cd:9b:94:76:16:15:68:1a:a1:f7:4d:4b: 02:86:1b:78:ba:4d:2a:ba:5f:b1:2b:36:27:87:15: 28:93:0f:dd:b8:49:8c:0f:6a:54:ed:e1:f0:a9:9f: 35:72:43:4d:a4:bd:e3:dc:57:c7:91:c8:05:67:a3: b4:f9:fd:52:50:a1:e0:62:61:94:81:20:88:71:73: 09:54:da:a3:3b:4f:18:6c:ab:77:e4:94:12:2a:01: eb:8f:70:51:f5:3f:56:8c:1f:4e:ea:ae:44:b6:e0: 11:57:93:f5:6f:09:f6:27:b7:5e:83:93:e5:e6:03: 1b:ad:76:ab:a5:71:46:61:36:00:03:f9:d4:36:99: cd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:1E:7B:98:41:5E:CE:69:9A:15:21:A8:50:10:4A:9E:A7:C4:3E:9D X509v3 Authority Key Identifier: keyid:7D:85:F0:FB:6A:61:D5:D2:2C:8F:36:D6:2F:E9:22:39:45:DA:30:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:d2:6e:30:5f:d5:28:2f:f3:81:4b:1b:53:1b:84:bc:e2:98: a9:b3:8d:e3:14:cb:5f:8a:af:bd:bd:a1:a6:28:e9:ff:16:c6: 0a:5c:a6:e4:41:8b:5b:f7:08:62:d6:10:37:14:a5:03:57:ec: 0e:c8:d1:0c:cf:9d:b2:22:d7:30:ac:51:55:92:a4:61:5f:73: 7c:c3:12:40:88:e5:ca:d3:d8:e9:9c:0e:47:6b:9e:c7:cc:ac: f0:87:82:e6:33:9e:cf:29:75:af:05:ca:7a:1a:f5:66:05:cc: 01:f5:75:0e:f9:77:2b:71:0c:5c:92:e5:21:9a:27:95:bd:28: a2:c1:d3:95:47:bd:94:7b:e9:f0:90:75:c3:e6:f3:df:77:8c: 0f:ff:13:27:a2:e2:9e:ca:2e:d0:80:c3:0b:dc:1a:7d:94:45: 13:f4:18:4d:df:19:9d:5f:51:bb:53:42:41:81:7a:82:76:1a: a9:3d:a1:b1:7e:26:96:51:b4:a9:c3:7a:ec:1a:f8:93:44:35: 55:f2:c7:85:7a:29:0c:93:d2:fa:fb:13:cc:b6:fc:06:e1:60: bd:98:3f:b6:53:85:94:07:a9:01:97:96:89:93:b9:8f:d7:82: 81:61:3f:06:f4:70:07:94:ae:a8:1f:ea:fb:af:be:45:e5:4b: 25:57:8d:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeyxOPWdEHQXaSrLnE81PoPWNx2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q4NUYwRkI2QTYxRDVEMjJDOEYzNkQ2MkZFOTIyMzk0 NURBMzA5MDAeFw0yNjA5MjAyMDA2NTRaFw0yNjA5MjEyMzM0NTRaMDMxMTAvBgNV BAMTKEFEMUU3Qjk4NDE1RUNFNjk5QTE1MjFBODUwMTA0QTlFQTdDNDNFOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjx/qX36pt/WECSawIWAHbGXex 0uzwi+h411wwzUzCIpQn8BD4rtQlSaLfrBoNhjD0jZvhOQJguSBmHdKi8J4PtSsa ng6minBNC3nKdv+TT8W5L9yrp6/2mTWtbEIV7WwmyTRRAXu16pNvSOTMiHtMpdP2 xm4nfEo10c2blHYWFWgaofdNSwKGG3i6TSq6X7ErNieHFSiTD924SYwPalTt4fCp nzVyQ02kvePcV8eRyAVno7T5/VJQoeBiYZSBIIhxcwlU2qM7Txhsq3fklBIqAeuP cFH1P1aMH07qrkS24BFXk/VvCfYnt16Dk+XmAxutdqulcUZhNgAD+dQ2mc3xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrR57mEFezmmaFSGoUBBKnqfEPp0wHwYDVR0j BBgwFoAUfYXw+2ph1dIsjzbWL+kiOUXaMJAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjhiNDQxYWQtZjFhYS00OGQzLTllZGItYjlhNWQ1Y2U5YmE4LzAvN0Q4NUYwRkI2 QTYxRDVEMjJDOEYzNkQ2MkZFOTIyMzk0NURBMzA5MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDg1RjBGQjZBNjFENUQyMkM4RjM2RDYyRkU5MjIzOTQ1REEz MDkwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjhiNDQxYWQtZjFhYS00OGQzLTll ZGItYjlhNWQ1Y2U5YmE4LzAvN0Q4NUYwRkI2QTYxRDVEMjJDOEYzNkQ2MkZFOTIy Mzk0NURBMzA5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABjSbjBf1Sgv84FLG1MbhLzimKmzjeMUy1+K r729oaYo6f8WxgpcpuRBi1v3CGLWEDcUpQNX7A7I0QzPnbIi1zCsUVWSpGFfc3zD EkCI5crT2OmcDkdrnsfMrPCHguYzns8pda8Fynoa9WYFzAH1dQ75dytxDFyS5SGa J5W9KKLB05VHvZR76fCQdcPm8993jA//Eyei4p7KLtCAwwvcGn2URRP0GE3fGZ1f UbtTQkGBeoJ2Gqk9obF+JpZRtKnDeuwa+JNENVXyx4V6KQyT0vr7E8y2/AbhYL2Y P7ZThZQHqQGXlomTuY/XgoFhPwb0cAeUrqgf6vuvvkXlSyVXjTk= -----END CERTIFICATE-----Generated at Mon Sep 21 13:29:28 2026 by rpki-client