$ rpki-client -vvvf rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft File: 7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft (raw, json) Hash identifier: Jk/S/hvsqCA5MtFU2ZsrVNYoGfy+wCUj+lqbTbt0M5k= Subject key identifier: 5B:25:F8:B5:88:83:C7:7E:10:8E:8C:3B:15:38:16:F5:54:28:D5:38 Authority key identifier: 7F:88:97:9F:15:7A:73:BC:13:FC:5A:3D:5B:9C:76:CB:3A:2B:3E:31 Certificate issuer: /CN=7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31 Certificate serial: 628551330F1C40F43F17FBD4C544A5E667CCAB1B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 12:21:44 +0000 Manifest this update: Tue 22 Sep 2026 12:16:44 +0000 Manifest next update: Wed 23 Sep 2026 14:30:44 +0000 Files and hashes: 1: 323430353a666134303a3a2f33322d3438203d3e20313430333930.roa (hash: HUZNs1iD5swAwh/g3qINc50EKHQkckdyfTFIx7Aj1lM=) 2: 3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa (hash: 8HCIw7CZYRIarfxox7lXQ/MdAlePE93YlMnPKUyebGg=) 3: 7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.crl (hash: UX6p00Vo/N7WswBMWi0PPogj4TnhkMSnoW1ImWSOxs8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.crl rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 14:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:85:51:33:0f:1c:40:f4:3f:17:fb:d4:c5:44:a5:e6:67:cc:ab:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31 Validity Not Before: Sep 22 12:16:44 2026 GMT Not After : Sep 23 14:30:44 2026 GMT Subject: CN=5B25F8B58883C77E108E8C3B153816F55428D538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:40:94:60:ef:87:e4:2a:0e:3a:ed:08:c3:00: 09:18:3c:10:ac:ce:52:c6:6d:36:c6:72:ac:c0:85: 5e:3d:7e:9f:c9:84:fa:12:22:6b:ad:83:84:f4:27: df:84:ba:60:6a:84:ad:24:79:47:14:33:de:bb:86: a9:92:10:e7:03:7e:17:81:21:fb:72:95:87:9d:5d: f3:43:2a:0e:e1:bb:31:fc:f1:05:6f:0f:59:ce:40: 34:ec:25:4d:55:da:0a:aa:b5:fa:23:ac:d5:4c:4a: ce:f9:5f:c6:53:22:72:bf:40:02:e6:61:cf:39:a1: 4c:9c:22:05:1b:37:cc:8d:e9:82:5b:22:2d:9a:1f: 38:7a:99:aa:fc:d4:b6:b0:d5:d1:f6:15:9d:be:6e: b2:c3:68:d2:66:a5:38:fe:b2:98:83:aa:f6:a0:38: a8:be:aa:14:69:28:97:fd:e4:f3:c2:57:05:a9:16: 5a:99:a8:72:61:d1:fa:f7:8f:be:2f:2b:2d:13:62: 3f:54:3d:c1:45:5c:e3:5d:c8:fb:dd:83:d3:02:20: 8d:29:e0:47:0d:d5:90:47:85:f9:b3:bd:98:66:ed: 49:e6:41:bb:a6:88:7e:51:74:38:61:60:83:25:f2: 6d:ac:1e:3d:08:a0:b1:1a:15:b5:ec:f9:ef:db:e7: cb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:25:F8:B5:88:83:C7:7E:10:8E:8C:3B:15:38:16:F5:54:28:D5:38 X509v3 Authority Key Identifier: keyid:7F:88:97:9F:15:7A:73:BC:13:FC:5A:3D:5B:9C:76:CB:3A:2B:3E:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:ef:9b:09:0f:4b:85:ee:c9:ad:18:4c:37:49:8f:73:e8:4d: e4:07:18:79:52:04:5d:c7:5a:3d:46:2d:2e:20:e0:b9:20:c5: 31:f9:07:29:9d:c5:94:6c:e0:e9:0b:06:56:48:64:6f:a7:63: c6:39:b9:f0:b0:22:a5:e5:2b:b1:87:c9:a7:1c:03:4b:26:2a: f6:4c:eb:a2:26:65:d9:d8:bb:36:00:4d:cc:b3:6d:9d:3c:51: 1d:ed:14:41:82:71:8e:ee:fa:92:23:64:84:92:bf:4f:93:d0: 72:0f:87:54:cc:d7:87:17:4a:7d:1b:83:95:e4:8c:ab:a9:fe: 96:fc:c8:99:56:79:9d:1d:46:0c:8c:c7:be:c4:3a:3e:11:46: 40:b3:26:b0:02:ba:1a:88:b2:b1:15:88:f0:69:77:68:e4:50: d8:dd:54:00:5b:6b:ad:f9:99:41:00:66:64:30:45:28:64:4a: 60:d9:bc:f5:1b:0b:38:7b:00:18:23:97:09:0c:41:db:55:a4: 33:b7:c7:03:f8:69:30:59:d0:eb:cf:73:3d:22:9c:f0:17:a7: 27:c5:a0:55:b1:37:d6:6f:a4:05:7b:c1:b3:dd:53:81:23:87: 50:48:0e:ee:2e:0c:1f:e0:1c:0d:f2:0d:b5:21:4d:08:62:99: f4:50:e1:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYoVRMw8cQPQ/F/vUxUSl5mfMqxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y4ODk3OUYxNTdBNzNCQzEzRkM1QTNENUI5Qzc2Q0Iz QTJCM0UzMTAeFw0yNjA5MjIxMjE2NDRaFw0yNjA5MjMxNDMwNDRaMDMxMTAvBgNV BAMTKDVCMjVGOEI1ODg4M0M3N0UxMDhFOEMzQjE1MzgxNkY1NTQyOEQ1MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmQJRg74fkKg467QjDAAkYPBCs zlLGbTbGcqzAhV49fp/JhPoSImutg4T0J9+EumBqhK0keUcUM967hqmSEOcDfheB IftylYedXfNDKg7huzH88QVvD1nOQDTsJU1V2gqqtfojrNVMSs75X8ZTInK/QALm Yc85oUycIgUbN8yN6YJbIi2aHzh6mar81Law1dH2FZ2+brLDaNJmpTj+spiDqvag OKi+qhRpKJf95PPCVwWpFlqZqHJh0fr3j74vKy0TYj9UPcFFXONdyPvdg9MCII0p 4EcN1ZBHhfmzvZhm7UnmQbumiH5RdDhhYIMl8m2sHj0IoLEaFbXs+e/b58trAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWyX4tYiDx34Qjow7FTgW9VQo1TgwHwYDVR0j BBgwFoAUf4iXnxV6c7wT/Fo9W5x2yzorPjEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2FmNTAzODMtN2QwNC00N2M4LWFhZWItZjdlNzY2OTM3NzMxLzAvN0Y4ODk3OUYx NTdBNzNCQzEzRkM1QTNENUI5Qzc2Q0IzQTJCM0UzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Rjg4OTc5RjE1N0E3M0JDMTNGQzVBM0Q1QjlDNzZDQjNBMkIz RTMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2FmNTAzODMtN2QwNC00N2M4LWFh ZWItZjdlNzY2OTM3NzMxLzAvN0Y4ODk3OUYxNTdBNzNCQzEzRkM1QTNENUI5Qzc2 Q0IzQTJCM0UzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTvmwkPS4Xuya0YTDdJj3PoTeQHGHlSBF3H Wj1GLS4g4LkgxTH5BymdxZRs4OkLBlZIZG+nY8Y5ufCwIqXlK7GHyaccA0smKvZM 66ImZdnYuzYATcyzbZ08UR3tFEGCcY7u+pIjZISSv0+T0HIPh1TM14cXSn0bg5Xk jKup/pb8yJlWeZ0dRgyMx77EOj4RRkCzJrACuhqIsrEViPBpd2jkUNjdVABba635 mUEAZmQwRShkSmDZvPUbCzh7ABgjlwkMQdtVpDO3xwP4aTBZ0OvPcz0inPAXpyfF oFWxN9ZvpAV7wbPdU4Ejh1BIDu4uDB/gHA3yDbUhTQhimfRQ4VU= -----END CERTIFICATE-----Generated at Tue Sep 22 19:49:33 2026 by rpki-client