$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft File: D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft (raw, json) Hash identifier: WRcU+fGMu3OQiUGxe7sLScQNGva6cE93Co06989Ftyw= Subject key identifier: B9:08:C1:46:08:96:54:F3:73:9B:D7:61:4E:49:B1:9B:E2:AE:5F:B0 Authority key identifier: D0:07:B7:68:F6:76:B7:86:50:AA:82:8F:A3:D4:B1:BB:E2:8E:ED:3A Certificate issuer: /CN=D007B768F676B78650AA828FA3D4B1BBE28EED3A Certificate serial: 7AD79E49A1D938953BC719712C2ED2BC5FD0F627 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D007B768F676B78650AA828FA3D4B1BBE28EED3A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft Manifest number: BD Signing time: Sun 20 Sep 2026 18:19:27 +0000 Manifest this update: Sun 20 Sep 2026 18:14:27 +0000 Manifest next update: Mon 21 Sep 2026 20:23:27 +0000 Files and hashes: 1: 3130332e3233342e33342e302f32332d3233203d3e20313531353231.roa (hash: v4OcOT72Y+Fw3xPxNhOv5K2oe1NqroMaIJLaKP7M7LE=) 2: 3130332e3233342e33342e302f32342d3234203d3e20313531353231.roa (hash: XXYg212KqJilVz4UQhoA9JNZDN5djYbD/oi5ScwKYIs=) 3: 3130332e3233342e33352e302f32342d3234203d3e20313531353231.roa (hash: osJeCPZtE9R9btD8iw5N1b2W8PoHsZHfReclzn2JK+k=) 4: D007B768F676B78650AA828FA3D4B1BBE28EED3A.crl (hash: Jh+6yGcufMB8wC3BXD7WBcKl9yuRfenvCXJGMAYCYas=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.crl rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D007B768F676B78650AA828FA3D4B1BBE28EED3A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d7:9e:49:a1:d9:38:95:3b:c7:19:71:2c:2e:d2:bc:5f:d0:f6:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D007B768F676B78650AA828FA3D4B1BBE28EED3A Validity Not Before: Sep 20 18:14:27 2026 GMT Not After : Sep 21 20:23:27 2026 GMT Subject: CN=B908C146089654F3739BD7614E49B19BE2AE5FB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:83:64:5f:0e:c9:23:99:e8:b6:30:6b:43:3c: d1:36:c3:73:55:7a:2c:3b:ab:d5:dd:fa:5a:d4:86: ea:a1:ea:96:4c:c1:4b:a5:05:54:73:05:79:b3:80: 0c:6e:10:87:67:40:93:cf:e9:64:79:5d:26:fc:64: 56:e5:90:d5:87:43:59:92:fb:2e:6d:52:1b:23:c8: d0:00:3f:fa:07:a2:69:78:ec:ce:c4:07:48:83:89: 6b:c2:fd:0c:95:ff:01:90:40:c5:e7:63:b1:ed:3f: 48:fe:4c:85:68:21:be:60:7c:b7:1d:cd:b0:ad:21: e7:ad:9e:1b:cd:3e:67:96:2a:af:76:0b:08:7c:77: af:66:6a:ae:c4:25:7f:c9:4e:ee:aa:ff:6b:6f:1b: a8:f0:12:1c:5b:96:4f:60:a7:57:d0:5f:7b:e9:50: ce:28:ab:6e:48:f4:c2:50:2e:3c:63:90:81:51:a4: b9:6b:78:53:38:a4:19:9c:31:99:bf:d1:af:33:94: ec:9a:a8:74:e5:07:9d:11:34:7e:b4:1f:c7:b2:b9: e4:6b:6b:6b:c4:33:54:2a:d1:5f:22:06:7a:89:08: 80:89:ab:cc:e9:17:ad:ba:99:d5:7f:0c:fa:b7:dc: a9:f5:31:3e:28:63:0d:c4:8b:50:b0:9c:57:a7:b4: 86:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:08:C1:46:08:96:54:F3:73:9B:D7:61:4E:49:B1:9B:E2:AE:5F:B0 X509v3 Authority Key Identifier: keyid:D0:07:B7:68:F6:76:B7:86:50:AA:82:8F:A3:D4:B1:BB:E2:8E:ED:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D007B768F676B78650AA828FA3D4B1BBE28EED3A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:4c:9e:b0:48:6d:1a:a6:da:4c:66:31:d4:5c:bb:52:dd:f7: 5d:b5:09:89:57:90:81:8f:89:56:9a:4a:3b:b3:95:08:e4:3d: ef:a0:54:d3:a8:57:9a:b9:62:e1:b9:5d:49:c2:86:77:4c:a4: 70:01:95:4f:64:73:8d:c2:4d:2a:89:87:39:8f:06:5b:cf:dd: 32:f9:d5:8d:ca:b3:b9:95:4f:f6:c8:9b:ea:ff:41:c3:d6:f6: fb:09:31:7c:f4:1d:25:1b:22:fa:c7:bd:05:9a:91:58:36:d6: 6d:de:7a:99:4b:d8:18:ae:b6:bb:b1:f2:29:5e:f8:ca:95:bf: e8:e1:ad:4e:0d:6a:82:a9:fb:f3:a5:88:ea:76:27:7e:6f:53: 4a:cc:86:78:52:e7:68:c6:36:2b:fa:5c:27:50:1d:f9:57:33: 14:c4:b9:66:48:91:d4:93:f5:31:03:04:97:b4:fe:55:b6:80: f6:42:15:51:d6:79:0f:75:08:3a:45:75:19:52:d7:86:a2:2e: 57:96:b2:e6:16:0b:8c:5d:00:48:5f:91:c2:d8:ef:f8:91:ca: 25:2e:6f:3c:cf:4f:11:57:2a:8f:bf:54:76:83:e4:dd:0c:14: 5a:b8:fc:91:1d:2f:eb:54:e8:66:f5:6c:9a:b2:cb:b6:6b:78: ca:4c:36:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeteeSaHZOJU7xxlxLC7SvF/Q9icwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAwN0I3NjhGNjc2Qjc4NjUwQUE4MjhGQTNENEIxQkJF MjhFRUQzQTAeFw0yNjA5MjAxODE0MjdaFw0yNjA5MjEyMDIzMjdaMDMxMTAvBgNV BAMTKEI5MDhDMTQ2MDg5NjU0RjM3MzlCRDc2MTRFNDlCMTlCRTJBRTVGQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCg2RfDskjmei2MGtDPNE2w3NV eiw7q9Xd+lrUhuqh6pZMwUulBVRzBXmzgAxuEIdnQJPP6WR5XSb8ZFblkNWHQ1mS +y5tUhsjyNAAP/oHoml47M7EB0iDiWvC/QyV/wGQQMXnY7HtP0j+TIVoIb5gfLcd zbCtIeetnhvNPmeWKq92Cwh8d69maq7EJX/JTu6q/2tvG6jwEhxblk9gp1fQX3vp UM4oq25I9MJQLjxjkIFRpLlreFM4pBmcMZm/0a8zlOyaqHTlB50RNH60H8eyueRr a2vEM1Qq0V8iBnqJCICJq8zpF626mdV/DPq33Kn1MT4oYw3Ei1CwnFentIYLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuQjBRgiWVPNzm9dhTkmxm+KuX7AwHwYDVR0j BBgwFoAU0Ae3aPZ2t4ZQqoKPo9Sxu+KO7TowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdhNmIyM2ItYzQxZS00NDQ5LWExNDktYmMwYzZjOGIwMTFiLzAvRDAwN0I3NjhG Njc2Qjc4NjUwQUE4MjhGQTNENEIxQkJFMjhFRUQzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMDA3Qjc2OEY2NzZCNzg2NTBBQTgyOEZBM0Q0QjFCQkUyOEVF RDNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdhNmIyM2ItYzQxZS00NDQ5LWEx NDktYmMwYzZjOGIwMTFiLzAvRDAwN0I3NjhGNjc2Qjc4NjUwQUE4MjhGQTNENEIx QkJFMjhFRUQzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJMnrBIbRqm2kxmMdRcu1Ld9121CYlXkIGP iVaaSjuzlQjkPe+gVNOoV5q5YuG5XUnChndMpHABlU9kc43CTSqJhzmPBlvP3TL5 1Y3Ks7mVT/bIm+r/QcPW9vsJMXz0HSUbIvrHvQWakVg21m3eeplL2Biutrux8ile +MqVv+jhrU4NaoKp+/OliOp2J35vU0rMhnhS52jGNiv6XCdQHflXMxTEuWZIkdST 9TEDBJe0/lW2gPZCFVHWeQ91CDpFdRlS14aiLleWsuYWC4xdAEhfkcLY7/iRyiUu bzzPTxFXKo+/VHaD5N0MFFq4/JEdL+tU6Gb1bJqyy7ZreMpMNik= -----END CERTIFICATE-----Generated at Sun Sep 20 23:30:22 2026 by rpki-client