$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft File: 7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft (raw, json) Hash identifier: 0PNcQ+A9x99W6AsZl1vB8oozo/el5OF4aJnrKywAzdc= Subject key identifier: 7E:A2:6D:28:01:7B:FF:8B:05:F5:51:2D:A1:47:B5:24:44:79:7F:68 Authority key identifier: 7D:C6:77:32:0E:CD:4F:9F:A6:1F:D2:17:2F:A0:FF:BF:74:4F:6A:33 Certificate issuer: /CN=7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33 Certificate serial: 1F52B4A604AE71A5FF3BCCDEDDF2DD7929559EF2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft Manifest number: BE Signing time: Sun 20 Sep 2026 17:33:43 +0000 Manifest this update: Sun 20 Sep 2026 17:28:43 +0000 Manifest next update: Mon 21 Sep 2026 21:06:43 +0000 Files and hashes: 1: 7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.crl (hash: DU2F/klTj7cFjYrmpsDui48P1G7u7FvQJ2OB9xjRUHU=) 2: 3130332e3138362e3139322e302f32342d3234203d3e20313439393238.roa (hash: baKMFekyN+9MNlrAI1yXYRuteIC69CJjTfZATjoU5so=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.crl rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 21:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:52:b4:a6:04:ae:71:a5:ff:3b:cc:de:dd:f2:dd:79:29:55:9e:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33 Validity Not Before: Sep 20 17:28:43 2026 GMT Not After : Sep 21 21:06:43 2026 GMT Subject: CN=7EA26D28017BFF8B05F5512DA147B52444797F68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0d:16:de:bb:88:6c:da:b0:0d:0e:03:08:8a: 35:00:cd:5c:e0:74:48:c0:39:4a:bd:24:fe:23:28: e4:9e:f5:03:d5:4c:5e:35:a6:03:87:f5:e8:59:a8: 7e:80:b8:c9:8d:6f:7f:33:3e:54:82:ef:37:36:eb: 2b:98:9e:41:0a:8c:32:70:b8:d9:b8:19:d7:c6:43: df:f7:09:5f:a3:f6:b9:0b:89:22:bf:21:0d:96:15: 7d:c9:7a:0e:52:cd:85:9d:4f:8f:de:7d:47:51:23: ef:81:5d:94:ee:ca:f8:f5:85:77:54:cf:5d:58:d3: be:a0:01:10:6d:66:e4:35:e1:92:d8:f0:2a:11:71: 54:b6:b7:3e:44:40:87:31:d2:74:c8:32:a7:ab:d8: b2:68:31:d6:24:5b:a0:9c:41:82:97:ca:07:a4:1e: cc:1e:4c:79:06:bc:e0:e6:ee:f2:cc:f8:48:d5:e4: 6a:88:38:8e:64:2b:98:fe:10:20:05:4b:cc:a6:be: ea:e5:2b:9e:38:81:2d:d6:b8:be:c7:67:c0:39:5c: ab:9e:7a:20:59:95:ea:5c:82:d1:48:e4:59:e8:b1: 9d:61:34:00:94:37:17:70:98:a6:14:78:3c:f3:cc: 5a:34:ac:be:35:e1:34:8e:b6:33:45:5c:66:9c:a8: 72:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A2:6D:28:01:7B:FF:8B:05:F5:51:2D:A1:47:B5:24:44:79:7F:68 X509v3 Authority Key Identifier: keyid:7D:C6:77:32:0E:CD:4F:9F:A6:1F:D2:17:2F:A0:FF:BF:74:4F:6A:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:c3:8c:7e:6c:6c:05:f3:c2:b4:d2:0e:7c:4e:09:ca:91:07: 59:c0:86:b7:e3:6b:71:24:1f:d9:6d:d0:d1:01:f9:92:7e:f7: b7:ee:cf:6b:06:2a:7d:85:a0:b0:4e:4a:32:b8:4e:03:c9:b8: 89:97:e7:b7:95:b5:40:a2:63:09:18:84:c6:0d:76:96:ae:49: f6:af:4a:7b:27:80:d6:52:df:ec:90:e8:6f:fd:7e:2c:c2:38: 29:d1:a4:cd:4b:1d:b6:3a:36:4a:f1:59:e1:66:e9:12:f6:42: 65:67:57:e1:42:cf:dd:0a:94:6f:3d:36:38:84:d6:10:b8:46: 1f:0a:44:b6:20:9a:9c:70:b7:c7:86:2f:cb:46:de:d8:1a:ab: c4:48:74:49:e0:26:49:ed:e3:56:3e:15:b5:d2:be:ed:78:22: a3:b3:12:d7:9c:57:3c:b6:ef:17:ee:fe:e2:61:cb:b0:03:fd: 7c:3d:94:3b:4f:d2:33:40:35:28:63:a4:9a:80:cb:8c:fe:0c: ff:d0:33:45:89:79:01:2c:ee:f9:60:ce:ae:a2:8f:dd:3b:6b: 20:7d:43:16:02:4b:50:ba:36:6c:0f:2d:8b:a5:4b:c3:b0:21: fd:53:16:af:b7:49:62:0e:e3:78:54:16:44:9a:7b:d0:e7:ab: f3:e1:82:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH1K0pgSucaX/O8ze3fLdeSlVnvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RDNjc3MzIwRUNENEY5RkE2MUZEMjE3MkZBMEZGQkY3 NDRGNkEzMzAeFw0yNjA5MjAxNzI4NDNaFw0yNjA5MjEyMTA2NDNaMDMxMTAvBgNV BAMTKDdFQTI2RDI4MDE3QkZGOEIwNUY1NTEyREExNDdCNTI0NDQ3OTdGNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7DRbeu4hs2rANDgMIijUAzVzg dEjAOUq9JP4jKOSe9QPVTF41pgOH9ehZqH6AuMmNb38zPlSC7zc26yuYnkEKjDJw uNm4GdfGQ9/3CV+j9rkLiSK/IQ2WFX3Jeg5SzYWdT4/efUdRI++BXZTuyvj1hXdU z11Y076gARBtZuQ14ZLY8CoRcVS2tz5EQIcx0nTIMqer2LJoMdYkW6CcQYKXygek HsweTHkGvODm7vLM+EjV5GqIOI5kK5j+ECAFS8ymvurlK544gS3WuL7HZ8A5XKue eiBZlepcgtFI5FnosZ1hNACUNxdwmKYUeDzzzFo0rL414TSOtjNFXGacqHLnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfqJtKAF7/4sF9VEtoUe1JER5f2gwHwYDVR0j BBgwFoAUfcZ3Mg7NT5+mH9IXL6D/v3RPajMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM1YTlkZGYtYzEwOS00ZmMxLWEzMGQtOGYwNGI4MzM4MWJlLzAvN0RDNjc3MzIw RUNENEY5RkE2MUZEMjE3MkZBMEZGQkY3NDRGNkEzMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83REM2NzczMjBFQ0Q0RjlGQTYxRkQyMTcyRkEwRkZCRjc0NEY2 QTMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM1YTlkZGYtYzEwOS00ZmMxLWEz MGQtOGYwNGI4MzM4MWJlLzAvN0RDNjc3MzIwRUNENEY5RkE2MUZEMjE3MkZBMEZG QkY3NDRGNkEzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIrDjH5sbAXzwrTSDnxOCcqRB1nAhrfja3Ek H9lt0NEB+ZJ+97fuz2sGKn2FoLBOSjK4TgPJuImX57eVtUCiYwkYhMYNdpauSfav SnsngNZS3+yQ6G/9fizCOCnRpM1LHbY6NkrxWeFm6RL2QmVnV+FCz90KlG89NjiE 1hC4Rh8KRLYgmpxwt8eGL8tG3tgaq8RIdEngJknt41Y+FbXSvu14IqOzEtecVzy2 7xfu/uJhy7AD/Xw9lDtP0jNANShjpJqAy4z+DP/QM0WJeQEs7vlgzq6ij907ayB9 QxYCS1C6NmwPLYulS8OwIf1TFq+3SWIO43hUFkSae9Dnq/Phggw= -----END CERTIFICATE-----Generated at Mon Sep 21 14:24:06 2026 by rpki-client