$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft File: 8D7E0574648D2E037D2147F409FC002E56E42A23.mft (raw, json) Hash identifier: db0QX98MdU03a0sUSuXY1+40l68rbjlxZFCWd/FADQM= Subject key identifier: E9:D1:54:06:50:F9:A5:22:E8:15:52:7B:13:3A:D0:A9:59:F8:53:C1 Authority key identifier: 8D:7E:05:74:64:8D:2E:03:7D:21:47:F4:09:FC:00:2E:56:E4:2A:23 Certificate issuer: /CN=8D7E0574648D2E037D2147F409FC002E56E42A23 Certificate serial: 7807DBA995B2D714E22CAC8FE65DA95730C39C39 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft Manifest number: C7 Signing time: Mon 28 Sep 2026 20:25:06 +0000 Manifest this update: Mon 28 Sep 2026 20:20:06 +0000 Manifest next update: Wed 30 Sep 2026 00:13:06 +0000 Files and hashes: 1: 8D7E0574648D2E037D2147F409FC002E56E42A23.crl (hash: rbYm7foyXkYJLlz5j/esTmRtxtBF4y1cFokRSDpd5ug=) 2: 3130332e3139312e35322e302f32332d3234203d3e2034383030.roa (hash: Wh9jPiaMLmpVJg4WJmhSTDv7ObmHyLTAXzkGZmow5b0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.crl rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:07:db:a9:95:b2:d7:14:e2:2c:ac:8f:e6:5d:a9:57:30:c3:9c:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D7E0574648D2E037D2147F409FC002E56E42A23 Validity Not Before: Sep 28 20:20:06 2026 GMT Not After : Sep 30 00:13:06 2026 GMT Subject: CN=E9D1540650F9A522E815527B133AD0A959F853C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a9:a2:62:ed:23:ee:65:64:0b:b4:b5:1b:ed: fb:a5:5a:2e:f0:61:43:c9:95:e3:55:a3:b5:4a:02: 2d:8a:7a:da:1f:c5:7b:35:ef:74:e8:76:c5:2b:2d: 3f:00:cd:23:16:53:e5:e0:5f:19:cb:d7:f1:16:8f: 62:90:90:05:f6:5c:b2:b6:75:f9:c5:ac:11:74:e7: 53:fe:fe:85:52:1f:7d:6c:72:09:6d:8a:e1:aa:ab: 94:10:46:b0:b7:03:b8:4d:e9:a6:4e:6f:f9:11:57: 39:4a:9c:61:74:b5:9e:99:b5:62:7c:e1:ee:24:aa: 93:17:6b:90:3b:d3:1d:f3:4c:b8:c5:20:33:4c:44: 73:0e:02:54:01:cc:85:c3:af:bd:a5:f9:31:9e:5c: b9:b8:34:37:32:ac:b7:8d:0b:b1:1f:63:2d:97:27: 3d:39:b8:78:77:e5:fc:95:01:6c:03:d1:26:3a:e7: dc:4f:cc:4d:c2:93:0f:f8:5f:6f:82:7d:3f:d0:57: ba:6e:56:0b:b5:51:bd:a1:6f:fd:e7:9d:af:77:20: 21:85:a2:8b:85:5b:8a:8a:1c:9a:60:57:64:a8:01: 9d:91:cc:70:e4:0e:1a:6d:93:2f:d7:9f:31:6a:fd: c1:56:85:b8:a3:c3:7f:bd:48:48:2a:b1:5b:4c:e8: 13:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D1:54:06:50:F9:A5:22:E8:15:52:7B:13:3A:D0:A9:59:F8:53:C1 X509v3 Authority Key Identifier: keyid:8D:7E:05:74:64:8D:2E:03:7D:21:47:F4:09:FC:00:2E:56:E4:2A:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:30:9a:99:67:4b:44:38:8e:ab:6c:51:23:c5:1a:a0:03:9a: 78:ae:25:8f:35:6a:0f:8d:3a:93:8b:dc:59:73:25:b8:76:fd: 3c:51:30:fb:61:34:c7:fc:7f:35:1f:49:bf:1b:c9:9b:76:2e: 6a:de:4a:d5:1c:0e:d5:23:e0:78:bd:92:27:55:57:f3:c6:8c: 64:d6:cd:72:6f:15:69:04:c0:e9:71:94:0f:fb:cf:ef:63:41: 99:7b:f7:a0:38:39:73:98:2b:d3:44:76:63:a4:ca:51:fd:ab: 6a:48:9c:e4:dc:03:97:13:dd:2b:a4:3d:96:e9:8c:b7:50:cf: 00:5b:11:65:dd:af:80:9a:ed:1b:cb:04:a2:b8:9b:56:70:06: 1a:07:9c:57:8b:8b:0b:ab:bd:9f:0c:40:8e:73:70:28:99:4e: 61:76:ee:2e:34:2b:c5:b3:f3:7e:b2:38:b7:68:2c:20:c0:37: ee:25:b1:bb:49:2b:bf:57:da:a2:c1:81:fb:fc:78:21:16:1a: 95:8f:9e:73:5f:1a:d4:d9:d5:71:9b:0b:4f:49:a0:9b:e7:3f: c1:82:d1:6f:c0:41:e0:f0:38:f6:a8:47:08:a8:d2:16:e9:35: 2c:05:10:3c:3d:5a:ba:73:fe:6e:4c:d9:63:45:78:d8:92:25: d5:c0:7d:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeAfbqZWy1xTiLKyP5l2pVzDDnDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ3RTA1NzQ2NDhEMkUwMzdEMjE0N0Y0MDlGQzAwMkU1 NkU0MkEyMzAeFw0yNjA5MjgyMDIwMDZaFw0yNjA5MzAwMDEzMDZaMDMxMTAvBgNV BAMTKEU5RDE1NDA2NTBGOUE1MjJFODE1NTI3QjEzM0FEMEE5NTlGODUzQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+qaJi7SPuZWQLtLUb7fulWi7w YUPJleNVo7VKAi2KetofxXs173TodsUrLT8AzSMWU+XgXxnL1/EWj2KQkAX2XLK2 dfnFrBF051P+/oVSH31scgltiuGqq5QQRrC3A7hN6aZOb/kRVzlKnGF0tZ6ZtWJ8 4e4kqpMXa5A70x3zTLjFIDNMRHMOAlQBzIXDr72l+TGeXLm4NDcyrLeNC7EfYy2X Jz05uHh35fyVAWwD0SY659xPzE3Ckw/4X2+CfT/QV7puVgu1Ub2hb/3nna93ICGF oouFW4qKHJpgV2SoAZ2RzHDkDhptky/XnzFq/cFWhbijw3+9SEgqsVtM6BN3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6dFUBlD5pSLoFVJ7EzrQqVn4U8EwHwYDVR0j BBgwFoAUjX4FdGSNLgN9IUf0CfwALlbkKiMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDlhZmQzMTUtZjQ3Zi00ZjZhLWI4YjUtNDVhMjI4MGJiYzg1LzAvOEQ3RTA1NzQ2 NDhEMkUwMzdEMjE0N0Y0MDlGQzAwMkU1NkU0MkEyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RDdFMDU3NDY0OEQyRTAzN0QyMTQ3RjQwOUZDMDAyRTU2RTQy QTIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDlhZmQzMTUtZjQ3Zi00ZjZhLWI4 YjUtNDVhMjI4MGJiYzg1LzAvOEQ3RTA1NzQ2NDhEMkUwMzdEMjE0N0Y0MDlGQzAw MkU1NkU0MkEyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8wmplnS0Q4jqtsUSPFGqADmniuJY81ag+N OpOL3FlzJbh2/TxRMPthNMf8fzUfSb8byZt2LmreStUcDtUj4Hi9kidVV/PGjGTW zXJvFWkEwOlxlA/7z+9jQZl796A4OXOYK9NEdmOkylH9q2pInOTcA5cT3SukPZbp jLdQzwBbEWXdr4Ca7RvLBKK4m1ZwBhoHnFeLiwurvZ8MQI5zcCiZTmF27i40K8Wz 836yOLdoLCDAN+4lsbtJK79X2qLBgfv8eCEWGpWPnnNfGtTZ1XGbC09JoJvnP8GC 0W/AQeDwOPaoRwio0hbpNSwFEDw9Wrpz/m5M2WNFeNiSJdXAfSg= -----END CERTIFICATE-----Generated at Mon Sep 28 23:15:22 2026 by rpki-client