$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft File: B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft (raw, json) Hash identifier: LJ1KSQrvtHIdDV+UYA4nxi4f7ZQLVYiGMJ2SzqV+75A= Subject key identifier: 75:D0:B4:BA:EA:82:66:2D:16:D0:9D:A4:75:15:80:4D:44:EA:92:34 Authority key identifier: B7:D0:DD:FE:90:14:6E:06:D3:BE:A1:3C:2C:79:4B:52:7F:31:51:F8 Certificate issuer: /CN=B7D0DDFE90146E06D3BEA13C2C794B527F3151F8 Certificate serial: 243E1A69BDEE893D8C35C2100D4F23C41A2A192E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft Manifest number: BF Signing time: Mon 21 Sep 2026 17:12:52 +0000 Manifest this update: Mon 21 Sep 2026 17:07:52 +0000 Manifest next update: Tue 22 Sep 2026 19:11:52 +0000 Files and hashes: 1: 34332e3234312e3234362e302f32332d3234203d3e20313532303837.roa (hash: ljFouV7ZlSbTbdDcS0zoJf3jqUeKDHqtCtUhcsruCg4=) 2: B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.crl (hash: NZdb/0shPaZCswyM14xxIACFhttTdE31wHkkomCGKBo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.crl rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:3e:1a:69:bd:ee:89:3d:8c:35:c2:10:0d:4f:23:c4:1a:2a:19:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7D0DDFE90146E06D3BEA13C2C794B527F3151F8 Validity Not Before: Sep 21 17:07:52 2026 GMT Not After : Sep 22 19:11:52 2026 GMT Subject: CN=75D0B4BAEA82662D16D09DA47515804D44EA9234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2d:06:80:a6:1a:9f:71:0b:5f:c7:f0:9e:7a: b9:c8:e8:f4:9c:c3:4d:f3:e7:2c:d1:bc:ec:5c:82: 8b:61:5c:47:c3:fd:bb:44:fa:e0:13:63:5f:b1:26: 93:51:2e:39:f5:38:58:42:4a:8f:3a:07:72:8f:bc: b4:e8:ac:e2:26:4a:2c:91:7b:5a:f5:68:65:da:a1: a1:7d:be:9f:de:9b:54:f5:87:07:c1:c8:65:ef:08: b5:5c:20:87:5f:7e:42:f2:76:ac:45:87:0e:19:9a: ec:cd:d0:26:4e:d9:ce:f1:bf:df:c6:89:10:41:ff: 22:b5:c0:a4:8d:1e:9a:5f:28:0e:db:26:41:ae:29: 97:db:7e:21:be:6d:d3:a0:9c:a7:ab:d0:a7:8d:1f: 81:f7:3e:b9:d6:26:89:9a:a1:9b:bc:41:20:61:09: 93:54:1b:de:16:6a:83:02:de:63:f0:46:34:73:ea: 57:bb:bf:e5:9b:bc:46:06:dd:0d:e5:13:f3:ec:06: e6:80:a3:63:92:4b:19:86:79:b1:31:73:4d:a6:e1: 5f:81:91:74:89:1f:1f:96:cc:19:0b:d0:06:33:76: ee:d0:6a:8e:b2:67:68:97:f2:4f:0a:ec:7f:3f:43: 41:cf:c0:97:da:c5:a4:03:54:fb:b8:72:dc:0b:4d: 4a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D0:B4:BA:EA:82:66:2D:16:D0:9D:A4:75:15:80:4D:44:EA:92:34 X509v3 Authority Key Identifier: keyid:B7:D0:DD:FE:90:14:6E:06:D3:BE:A1:3C:2C:79:4B:52:7F:31:51:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d6:40:85:a7:a1:62:b4:7b:33:9a:bd:e7:23:a3:73:ff:ce: 64:cf:25:1f:a0:c1:0d:e7:e6:d4:e9:98:63:75:9b:b8:9b:dd: ed:ff:39:00:1c:58:d4:9e:95:aa:ee:d2:f8:71:ab:23:73:c1: eb:93:47:42:66:9f:9d:16:51:3b:1e:c2:f1:e1:92:bb:3a:e8: 16:be:d0:67:9d:98:58:a3:2b:9c:39:2d:06:56:c6:30:15:a9: 51:c9:d8:6d:26:2e:ac:7c:12:0c:03:89:06:e7:86:c3:01:90: c0:c4:e9:51:9d:2f:f7:a0:28:ff:60:0e:d5:3b:cd:7f:a4:08: cf:c2:e4:9c:e5:ff:c2:a1:af:ba:78:25:6b:e8:d7:09:09:1b: c9:5c:9b:86:85:a4:d2:04:5f:c5:c0:8d:ee:fc:9d:d6:a3:73: 56:0c:80:a4:20:6f:e9:2d:37:e3:0d:3c:d0:e2:ff:f4:c6:e3: a1:15:89:5d:f3:52:96:e2:29:8b:f5:55:d8:2d:13:ec:09:b0: 21:04:86:05:68:65:31:8b:67:08:26:fa:1e:60:26:6d:06:60: e9:e7:57:32:1d:7b:91:67:12:d8:3a:d5:8f:ec:da:f3:fe:49: 76:6d:90:fc:66:71:2c:a9:e7:8d:92:e3:fd:6f:4f:c8:9c:ba: f8:1e:90:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJD4aab3uiT2MNcIQDU8jxBoqGS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdEMERERkU5MDE0NkUwNkQzQkVBMTNDMkM3OTRCNTI3 RjMxNTFGODAeFw0yNjA5MjExNzA3NTJaFw0yNjA5MjIxOTExNTJaMDMxMTAvBgNV BAMTKDc1RDBCNEJBRUE4MjY2MkQxNkQwOURBNDc1MTU4MDRENDRFQTkyMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMLQaAphqfcQtfx/CeernI6PSc w03z5yzRvOxcgothXEfD/btE+uATY1+xJpNRLjn1OFhCSo86B3KPvLTorOImSiyR e1r1aGXaoaF9vp/em1T1hwfByGXvCLVcIIdffkLydqxFhw4ZmuzN0CZO2c7xv9/G iRBB/yK1wKSNHppfKA7bJkGuKZfbfiG+bdOgnKer0KeNH4H3PrnWJomaoZu8QSBh CZNUG94WaoMC3mPwRjRz6le7v+WbvEYG3Q3lE/PsBuaAo2OSSxmGebExc02m4V+B kXSJHx+WzBkL0AYzdu7Qao6yZ2iX8k8K7H8/Q0HPwJfaxaQDVPu4ctwLTUppAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUddC0uuqCZi0W0J2kdRWATUTqkjQwHwYDVR0j BBgwFoAUt9Dd/pAUbgbTvqE8LHlLUn8xUfgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjEwODcxNTktMzBkZC00MWJhLTk5NzktMDM1ODgxMTJhNzgwLzAvQjdEMERERkU5 MDE0NkUwNkQzQkVBMTNDMkM3OTRCNTI3RjMxNTFGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0QwRERGRTkwMTQ2RTA2RDNCRUExM0MyQzc5NEI1MjdGMzE1 MUY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjEwODcxNTktMzBkZC00MWJhLTk5 NzktMDM1ODgxMTJhNzgwLzAvQjdEMERERkU5MDE0NkUwNkQzQkVBMTNDMkM3OTRC NTI3RjMxNTFGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3WQIWnoWK0ezOavecjo3P/zmTPJR+gwQ3n 5tTpmGN1m7ib3e3/OQAcWNSelaru0vhxqyNzweuTR0Jmn50WUTsewvHhkrs66Ba+ 0GedmFijK5w5LQZWxjAVqVHJ2G0mLqx8EgwDiQbnhsMBkMDE6VGdL/egKP9gDtU7 zX+kCM/C5Jzl/8Khr7p4JWvo1wkJG8lcm4aFpNIEX8XAje78ndajc1YMgKQgb+kt N+MNPNDi//TG46EViV3zUpbiKYv1VdgtE+wJsCEEhgVoZTGLZwgm+h5gJm0GYOnn VzIde5FnEtg61Y/s2vP+SXZtkPxmcSyp542S4/1vT8icuvgekBY= -----END CERTIFICATE-----Generated at Mon Sep 21 19:56:16 2026 by rpki-client