$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.mft File: D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.mft (raw, json) Hash identifier: UXslYaoeyiODqDvEzTpUtf8aehD/w4wNe84KHmKRsp8= Subject key identifier: B0:25:9B:DD:1A:B7:02:87:B5:F2:96:85:BC:08:DE:64:69:E0:67:16 Authority key identifier: D7:A0:5D:FF:98:BB:9B:3D:02:F4:B6:13:09:F4:6F:1C:93:67:08:4C Certificate issuer: /CN=D7A05DFF98BB9B3D02F4B61309F46F1C9367084C Certificate serial: 3BDF5D6FEFD72C6020B8E38B17B5888D071487B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.mft Manifest number: BC Signing time: Mon 21 Sep 2026 07:00:17 +0000 Manifest this update: Mon 21 Sep 2026 06:55:17 +0000 Manifest next update: Tue 22 Sep 2026 08:01:17 +0000 Files and hashes: 1: D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.crl (hash: HfOtf85lyJyf6yt5sq13lX5mrE2IkRQjs8o3fpTuHV0=) 2: 3130332e3137392e3138302e302f32342d3234203d3e20313439333435.roa (hash: MblWuzrOZD28wkceG5+ZPQEBVsmdypcKgkkQ4DKBQmM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.crl rsync://rpki-rsync.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:df:5d:6f:ef:d7:2c:60:20:b8:e3:8b:17:b5:88:8d:07:14:87:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7A05DFF98BB9B3D02F4B61309F46F1C9367084C Validity Not Before: Sep 21 06:55:17 2026 GMT Not After : Sep 22 08:01:17 2026 GMT Subject: CN=B0259BDD1AB70287B5F29685BC08DE6469E06716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3d:4c:af:50:d9:67:80:ab:8f:93:66:9b:0a: a6:54:79:6b:a7:33:29:43:6d:de:d9:ed:ec:be:ef: 07:74:ea:8b:2e:8c:f5:58:e0:8c:4c:68:4c:f2:80: c4:17:ad:e2:90:ac:81:7f:ed:98:81:58:66:09:68: 26:45:d5:f5:e5:67:ce:8b:d9:9c:f7:8d:1e:c4:f7: 7a:53:94:25:aa:4b:4f:b9:59:bf:e5:b2:c6:e8:f1: 53:a6:78:9c:47:02:8b:a2:e1:f0:7b:06:32:91:5c: 49:10:95:9a:8a:fd:f1:2f:3d:33:3d:22:00:de:00: 2b:8b:28:69:88:ea:a3:aa:cf:98:26:0d:43:c3:31: 89:93:14:12:6c:cb:c5:80:f7:7a:f0:2e:00:d4:24: 7d:88:20:41:47:03:16:aa:be:7f:92:c1:b2:62:31: bd:25:46:34:9f:e6:ef:51:28:e5:6a:5f:d1:36:da: a4:0b:08:a3:a4:1d:f3:39:f9:8d:7b:4f:ac:9e:5e: fb:a7:a4:3c:5a:9c:3e:1a:9d:2f:21:12:4f:73:54: 44:8a:bf:d5:05:c1:d8:51:f8:fe:50:12:4b:1d:c0: 86:30:bd:1f:e2:4e:23:2e:5a:e3:8f:26:d2:b8:e6: 21:e4:64:82:ae:bc:6c:30:0e:21:90:3e:1b:ed:b4: 00:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:25:9B:DD:1A:B7:02:87:B5:F2:96:85:BC:08:DE:64:69:E0:67:16 X509v3 Authority Key Identifier: keyid:D7:A0:5D:FF:98:BB:9B:3D:02:F4:B6:13:09:F4:6F:1C:93:67:08:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:b6:26:a6:49:55:b5:76:f1:3f:34:29:61:bb:7d:02:82:fd: a0:81:64:d3:af:0a:90:d9:fa:f6:2e:9a:13:8b:99:2f:41:58: 0f:54:a4:eb:3d:84:79:f0:db:0d:74:43:f7:cd:d3:53:06:cc: 16:b0:dc:38:99:9d:72:3d:08:2d:2a:24:a3:4e:e5:c5:20:b1: 85:68:b4:7b:83:6c:9c:df:73:c9:fc:a8:1e:f2:21:57:10:19: 19:a3:66:20:e4:3b:4a:1c:79:b4:10:e8:d5:26:5f:12:73:f6: b6:51:83:8a:54:df:a1:b0:20:f1:2a:4e:89:01:90:ad:de:fb: c5:ac:e8:d0:66:a5:93:e6:5b:88:b7:8b:32:1f:3b:8e:3d:76: 19:76:e4:31:33:f8:70:80:fd:35:20:8f:d0:0e:b8:f0:01:61: a1:a3:cf:bc:70:2e:11:cb:3a:d0:e2:89:75:9a:f4:e4:24:3c: 62:92:55:0b:3b:2f:5d:f9:aa:71:0d:f3:3b:71:bc:09:1e:c4: 05:d7:8f:9f:83:d8:f7:bf:67:82:6e:43:c7:db:0f:92:9f:c6: 1f:71:a0:16:58:c3:06:97:f2:b4:0a:68:31:73:d2:e4:fb:61: c0:81:93:d0:18:a4:09:4b:17:bf:02:31:f8:e3:d0:b6:c1:5f: e7:7e:cd:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO99db+/XLGAguOOLF7WIjQcUh7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdBMDVERkY5OEJCOUIzRDAyRjRCNjEzMDlGNDZGMUM5 MzY3MDg0QzAeFw0yNjA5MjEwNjU1MTdaFw0yNjA5MjIwODAxMTdaMDMxMTAvBgNV BAMTKEIwMjU5QkREMUFCNzAyODdCNUYyOTY4NUJDMDhERTY0NjlFMDY3MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZPUyvUNlngKuPk2abCqZUeWun MylDbd7Z7ey+7wd06osujPVY4IxMaEzygMQXreKQrIF/7ZiBWGYJaCZF1fXlZ86L 2Zz3jR7E93pTlCWqS0+5Wb/lssbo8VOmeJxHAoui4fB7BjKRXEkQlZqK/fEvPTM9 IgDeACuLKGmI6qOqz5gmDUPDMYmTFBJsy8WA93rwLgDUJH2IIEFHAxaqvn+SwbJi Mb0lRjSf5u9RKOVqX9E22qQLCKOkHfM5+Y17T6yeXvunpDxanD4anS8hEk9zVESK v9UFwdhR+P5QEksdwIYwvR/iTiMuWuOPJtK45iHkZIKuvGwwDiGQPhvttAD/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsCWb3Rq3Aoe18paFvAjeZGngZxYwHwYDVR0j BBgwFoAU16Bd/5i7mz0C9LYTCfRvHJNnCEwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY5M2ZjOGYtYWZjYy00ZGVmLTgwNmYtZjQ0NDkzZDA3YTNmLzAvRDdBMDVERkY5 OEJCOUIzRDAyRjRCNjEzMDlGNDZGMUM5MzY3MDg0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EN0EwNURGRjk4QkI5QjNEMDJGNEI2MTMwOUY0NkYxQzkzNjcw ODRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY5M2ZjOGYtYWZjYy00ZGVmLTgw NmYtZjQ0NDkzZDA3YTNmLzAvRDdBMDVERkY5OEJCOUIzRDAyRjRCNjEzMDlGNDZG MUM5MzY3MDg0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAG2JqZJVbV28T80KWG7fQKC/aCBZNOvCpDZ +vYumhOLmS9BWA9UpOs9hHnw2w10Q/fN01MGzBaw3DiZnXI9CC0qJKNO5cUgsYVo tHuDbJzfc8n8qB7yIVcQGRmjZiDkO0ocebQQ6NUmXxJz9rZRg4pU36GwIPEqTokB kK3e+8Ws6NBmpZPmW4i3izIfO449dhl25DEz+HCA/TUgj9AOuPABYaGjz7xwLhHL OtDiiXWa9OQkPGKSVQs7L135qnEN8ztxvAkexAXXj5+D2Pe/Z4JuQ8fbD5Kfxh9x oBZYwwaX8rQKaDFz0uT7YcCBk9AYpAlLF78CMfjj0LbBX+d+zUY= -----END CERTIFICATE-----Generated at Mon Sep 21 18:22:32 2026 by rpki-client