$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft File: 7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft (raw, json) Hash identifier: k/aumHAwcGM3vsPqdxU+ChRjsoCB4H/f44X6kZJFGZk= Subject key identifier: 75:6D:8A:D4:04:E9:BD:33:72:5C:3A:CB:13:21:6B:90:76:45:6E:C1 Authority key identifier: 7F:2F:D9:D7:9F:60:99:D1:AC:3B:40:66:68:2D:5C:9A:2E:CC:E3:1E Certificate issuer: /CN=7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E Certificate serial: 37C565A361D7F4D8F4696F83DE20A0A4A07ED982 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft Manifest number: BE Signing time: Mon 21 Sep 2026 09:38:28 +0000 Manifest this update: Mon 21 Sep 2026 09:33:28 +0000 Manifest next update: Tue 22 Sep 2026 10:26:28 +0000 Files and hashes: 1: 323030313a6466343a393830303a3a2f34382d3438203d3e203338373735.roa (hash: RhVnpDr+TsXGYur3x46+P5YbFynPSyPec/J9jJ0glE4=) 2: 3230332e33342e3131382e302f32342d3234203d3e203338373735.roa (hash: yB+e13aw4Ak7KRHxYqfHIAAhYIN8+abqPgpkhebxjaM=) 3: 3230332e33342e3131392e302f32342d3234203d3e203338373735.roa (hash: 5w8Q3ENzfSVAdulWtqD1S418kv12p4yit5XWvzxAqJ8=) 4: 7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.crl (hash: 8e6+UY4truskVZGwG7KSoAoTXNUxwYZu6d6ZNkewLTc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.crl rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:c5:65:a3:61:d7:f4:d8:f4:69:6f:83:de:20:a0:a4:a0:7e:d9:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E Validity Not Before: Sep 21 09:33:28 2026 GMT Not After : Sep 22 10:26:28 2026 GMT Subject: CN=756D8AD404E9BD33725C3ACB13216B9076456EC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:92:f5:e6:61:ba:6e:41:83:25:bb:53:3f:44: 76:96:cf:85:2e:ee:54:76:0b:78:de:ee:4a:87:95: 5c:fa:2c:58:0e:5d:e0:5e:f3:23:dd:d1:74:ff:19: d8:0e:6e:6e:f7:81:30:64:24:b8:56:01:2b:1d:f0: 7a:9e:fa:b9:c4:1a:9a:90:76:dc:a6:ad:f4:50:04: 92:f7:70:ba:fc:f3:27:8f:eb:6c:ae:65:20:4e:f3: ad:6f:02:51:c6:4b:5a:f1:b5:bb:1e:e2:4f:db:8c: ab:cc:7a:80:32:6b:9c:7a:8c:17:84:4b:25:53:e8: fa:4c:07:b5:80:d8:c1:b7:20:20:5e:61:9f:48:04: e9:24:43:9a:62:5a:ba:45:fe:62:83:9a:45:05:02: 7d:c1:58:99:75:e2:e0:51:4a:f2:89:a0:ff:bd:eb: 8b:d6:46:b2:3b:f6:88:a3:5d:43:43:e9:36:bc:56: 73:80:95:b2:f3:d2:7f:f9:a7:d5:fe:2b:92:80:2f: 59:e3:2f:aa:b1:bc:99:f7:49:f9:c7:65:b7:26:ab: d5:e6:d7:69:4f:60:fb:c7:44:19:c7:3d:97:bf:96: 3f:f3:7d:e5:20:e4:2a:6b:34:39:a8:fd:13:06:2b: 69:ae:27:a4:5b:a9:fc:1e:c1:fc:b4:e5:66:e4:0a: 0a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6D:8A:D4:04:E9:BD:33:72:5C:3A:CB:13:21:6B:90:76:45:6E:C1 X509v3 Authority Key Identifier: keyid:7F:2F:D9:D7:9F:60:99:D1:AC:3B:40:66:68:2D:5C:9A:2E:CC:E3:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:54:9f:f9:ec:c7:7e:01:f5:41:49:44:dd:2a:a0:cf:ee:03: 10:3b:97:12:7e:ef:34:96:fd:da:41:65:d9:a9:99:2e:d9:44: d0:28:a7:11:99:9f:76:15:e4:a4:4a:4f:68:cc:a3:fe:bf:b0: 87:a3:e4:e9:f5:ec:87:f0:22:97:7e:10:de:f4:58:a5:f9:68: fb:34:b1:f4:13:94:1c:58:78:e1:b5:4f:e9:fa:73:3d:8c:46: d4:63:5e:54:70:f3:87:cf:01:38:e8:6a:31:d3:4b:90:02:9b: dc:64:d4:4f:a8:7c:49:94:47:b6:5c:28:02:b8:3b:58:97:bc: dd:18:cc:d8:bf:f1:72:4b:e2:aa:4c:f5:a5:a5:ff:60:84:a2: 23:f4:62:4e:bf:d2:00:ba:e8:2d:38:8e:32:d1:eb:d5:2e:75: e1:43:1c:c9:76:44:1c:49:50:cc:95:f7:18:6b:2d:bc:6e:e1: 92:4c:c5:8c:a1:c3:b6:bb:fd:c2:db:60:7b:95:62:a3:72:74: 23:50:a6:2a:b5:a9:e8:45:17:dc:e8:32:cf:ea:5c:78:50:25: 98:68:bc:e1:1f:02:4f:71:1b:c9:84:ed:d3:89:1d:94:ee:5c: 8e:00:d4:73:fe:e5:e1:13:62:a1:df:da:e4:7b:6e:92:e5:1f: a1:d3:66:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN8Vlo2HX9Nj0aW+D3iCgpKB+2YIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YyRkQ5RDc5RjYwOTlEMUFDM0I0MDY2NjgyRDVDOUEy RUNDRTMxRTAeFw0yNjA5MjEwOTMzMjhaFw0yNjA5MjIxMDI2MjhaMDMxMTAvBgNV BAMTKDc1NkQ4QUQ0MDRFOUJEMzM3MjVDM0FDQjEzMjE2QjkwNzY0NTZFQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVkvXmYbpuQYMlu1M/RHaWz4Uu 7lR2C3je7kqHlVz6LFgOXeBe8yPd0XT/GdgObm73gTBkJLhWASsd8Hqe+rnEGpqQ dtymrfRQBJL3cLr88yeP62yuZSBO861vAlHGS1rxtbse4k/bjKvMeoAya5x6jBeE SyVT6PpMB7WA2MG3ICBeYZ9IBOkkQ5piWrpF/mKDmkUFAn3BWJl14uBRSvKJoP+9 64vWRrI79oijXUND6Ta8VnOAlbLz0n/5p9X+K5KAL1njL6qxvJn3SfnHZbcmq9Xm 12lPYPvHRBnHPZe/lj/zfeUg5CprNDmo/RMGK2muJ6Rbqfwewfy05WbkCgoXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdW2K1ATpvTNyXDrLEyFrkHZFbsEwHwYDVR0j BBgwFoAUfy/Z159gmdGsO0BmaC1cmi7M4x4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkwNTNkOTYtZGExNy00MDk5LWI3MDctZGEwZWIyYmYwN2JjLzAvN0YyRkQ5RDc5 RjYwOTlEMUFDM0I0MDY2NjgyRDVDOUEyRUNDRTMxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RjJGRDlENzlGNjA5OUQxQUMzQjQwNjY2ODJENUM5QTJFQ0NF MzFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkwNTNkOTYtZGExNy00MDk5LWI3 MDctZGEwZWIyYmYwN2JjLzAvN0YyRkQ5RDc5RjYwOTlEMUFDM0I0MDY2NjgyRDVD OUEyRUNDRTMxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJUn/nsx34B9UFJRN0qoM/uAxA7lxJ+7zSW /dpBZdmpmS7ZRNAopxGZn3YV5KRKT2jMo/6/sIej5On17IfwIpd+EN70WKX5aPs0 sfQTlBxYeOG1T+n6cz2MRtRjXlRw84fPATjoajHTS5ACm9xk1E+ofEmUR7ZcKAK4 O1iXvN0YzNi/8XJL4qpM9aWl/2CEoiP0Yk6/0gC66C04jjLR69UudeFDHMl2RBxJ UMyV9xhrLbxu4ZJMxYyhw7a7/cLbYHuVYqNydCNQpiq1qehFF9zoMs/qXHhQJZho vOEfAk9xG8mE7dOJHZTuXI4A1HP+5eETYqHf2uR7bpLlH6HTZmw= -----END CERTIFICATE-----Generated at Mon Sep 21 19:39:12 2026 by rpki-client