$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft File: 7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft (raw, json) Hash identifier: k53ahdtYj/cDNmpyQjuST3bN4tPbz4o6vGsLfhB6OjE= Subject key identifier: 8B:B5:76:88:84:59:4E:19:63:08:DC:00:21:11:D7:15:9E:0B:FF:96 Authority key identifier: 7D:02:02:66:9B:D0:3E:41:99:95:7B:5E:95:EB:FD:C8:A3:B2:38:14 Certificate issuer: /CN=7D0202669BD03E4199957B5E95EBFDC8A3B23814 Certificate serial: 5C6B98FD26A1EC7DF92188550F9B16E19B2F7640 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft Manifest number: C7 Signing time: Sun 27 Sep 2026 21:05:06 +0000 Manifest this update: Sun 27 Sep 2026 21:00:06 +0000 Manifest next update: Tue 29 Sep 2026 00:36:06 +0000 Files and hashes: 1: 7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl (hash: GzjRnwJD5UPxw7vcNKw2cTbqPefdg5hw07YcwGkduJA=) 2: 3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa (hash: 8oVNIEb4TBtSy7unBowYQdxL5C3MJEoVeAhJrnkcXHw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 00:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:6b:98:fd:26:a1:ec:7d:f9:21:88:55:0f:9b:16:e1:9b:2f:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0202669BD03E4199957B5E95EBFDC8A3B23814 Validity Not Before: Sep 27 21:00:06 2026 GMT Not After : Sep 29 00:36:06 2026 GMT Subject: CN=8BB5768884594E196308DC002111D7159E0BFF96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:50:1f:0b:d3:1b:b3:54:21:e0:c4:c2:8b:f4: e1:a3:39:0a:dd:39:5e:aa:bb:d2:a5:10:eb:06:ec: 4a:46:c1:65:dd:c3:3e:f3:19:e7:ca:b7:45:41:70: d3:b3:6c:53:d8:3c:05:cf:fa:67:e0:b9:90:2d:91: 87:e2:68:3f:9a:cf:84:2e:c3:21:64:c3:57:a9:c2: 38:7c:bb:42:5a:8f:0d:b6:50:cc:d7:b6:78:b3:87: 51:cb:49:1e:0d:de:84:65:a8:a9:4e:28:1e:1b:fd: 0a:95:0a:90:c9:fa:e1:de:48:d5:bb:d7:c7:68:f0: ca:0c:a6:9e:10:88:4c:52:ad:17:fc:94:1b:f3:48: 03:2e:1b:c9:86:6d:6f:33:db:06:87:bc:82:9d:a1: ca:e0:2b:b6:8e:33:b1:6f:31:d9:6a:52:fc:5b:f7: cb:d4:33:69:4d:8d:91:92:0b:1a:0e:9a:19:52:fb: c3:81:1f:5b:4a:ea:7b:19:28:2e:7f:80:fb:10:3a: c7:c3:2c:d2:b9:04:c8:91:bf:95:bc:41:6c:7d:e9: 28:4d:19:d6:20:1a:9a:79:c6:66:47:33:4c:1e:6c: 7b:61:c0:0f:c8:90:4b:2f:b2:ac:c0:50:6d:bb:f8: 59:76:b6:52:7a:55:09:90:c0:96:43:e0:ab:fd:45: 35:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B5:76:88:84:59:4E:19:63:08:DC:00:21:11:D7:15:9E:0B:FF:96 X509v3 Authority Key Identifier: keyid:7D:02:02:66:9B:D0:3E:41:99:95:7B:5E:95:EB:FD:C8:A3:B2:38:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:b1:2a:26:d1:ae:33:94:d1:2c:d7:06:d1:53:cd:19:f3:b8: 5c:64:39:36:2d:98:ff:30:20:10:e6:39:e8:0f:51:57:81:47: 03:d5:1d:a7:c8:24:15:c3:fa:ea:5b:14:80:94:d1:15:ed:9e: 5b:cc:d4:9d:95:b4:43:12:ad:60:63:3c:b0:dd:07:b9:e3:d1: 65:40:8d:c8:bb:8c:af:08:34:c1:52:78:ef:c7:98:e1:6b:f7: c5:cb:69:dd:0f:62:dc:d9:fc:96:d3:1a:2b:55:ca:ef:6f:f5: 1b:a3:1c:24:ce:07:70:95:f9:0b:62:23:d2:97:ab:f4:07:d6: 8e:21:ed:ff:78:5b:f2:f0:cb:f2:4d:a4:52:7c:19:cc:c1:be: a0:37:f8:51:13:25:2b:13:ba:72:b6:b9:45:42:db:91:73:dc: 5d:d8:9f:ec:01:32:a1:6c:78:b7:6f:5e:00:aa:95:8b:d6:31: a4:14:16:e1:6c:45:16:d8:c6:da:15:a5:46:5d:c9:1e:4e:38: 06:e1:15:c1:ad:4e:1e:17:af:d2:6a:d4:16:51:08:0f:68:53: 1c:f0:80:68:26:5f:4f:d0:33:d0:6b:ab:f1:ac:5d:10:d4:bc: bf:36:52:46:c4:be:e2:5e:64:09:49:cb:14:02:65:cd:c7:01: 62:bb:0a:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXGuY/Sah7H35IYhVD5sW4ZsvdkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwMjAyNjY5QkQwM0U0MTk5OTU3QjVFOTVFQkZEQzhB M0IyMzgxNDAeFw0yNjA5MjcyMTAwMDZaFw0yNjA5MjkwMDM2MDZaMDMxMTAvBgNV BAMTKDhCQjU3Njg4ODQ1OTRFMTk2MzA4REMwMDIxMTFENzE1OUUwQkZGOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAUB8L0xuzVCHgxMKL9OGjOQrd OV6qu9KlEOsG7EpGwWXdwz7zGefKt0VBcNOzbFPYPAXP+mfguZAtkYfiaD+az4Qu wyFkw1epwjh8u0Jajw22UMzXtnizh1HLSR4N3oRlqKlOKB4b/QqVCpDJ+uHeSNW7 18do8MoMpp4QiExSrRf8lBvzSAMuG8mGbW8z2waHvIKdocrgK7aOM7FvMdlqUvxb 98vUM2lNjZGSCxoOmhlS+8OBH1tK6nsZKC5/gPsQOsfDLNK5BMiRv5W8QWx96ShN GdYgGpp5xmZHM0webHthwA/IkEsvsqzAUG27+Fl2tlJ6VQmQwJZD4Kv9RTWFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi7V2iIRZThljCNwAIRHXFZ4L/5YwHwYDVR0j BBgwFoAUfQICZpvQPkGZlXtelev9yKOyOBQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjllN2EyOGEtNjJmMC00ZDE0LTg3MDItNDAzYTUxOTBlYWUxLzAvN0QwMjAyNjY5 QkQwM0U0MTk5OTU3QjVFOTVFQkZEQzhBM0IyMzgxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDAyMDI2NjlCRDAzRTQxOTk5NTdCNUU5NUVCRkRDOEEzQjIz ODE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjllN2EyOGEtNjJmMC00ZDE0LTg3 MDItNDAzYTUxOTBlYWUxLzAvN0QwMjAyNjY5QkQwM0U0MTk5OTU3QjVFOTVFQkZE QzhBM0IyMzgxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOxKibRrjOU0SzXBtFTzRnzuFxkOTYtmP8w IBDmOegPUVeBRwPVHafIJBXD+upbFICU0RXtnlvM1J2VtEMSrWBjPLDdB7nj0WVA jci7jK8INMFSeO/HmOFr98XLad0PYtzZ/JbTGitVyu9v9RujHCTOB3CV+QtiI9KX q/QH1o4h7f94W/Lwy/JNpFJ8GczBvqA3+FETJSsTunK2uUVC25Fz3F3Yn+wBMqFs eLdvXgCqlYvWMaQUFuFsRRbYxtoVpUZdyR5OOAbhFcGtTh4Xr9Jq1BZRCA9oUxzw gGgmX0/QM9Brq/GsXRDUvL82UkbEvuJeZAlJyxQCZc3HAWK7Chk= -----END CERTIFICATE-----Generated at Mon Sep 28 10:54:47 2026 by rpki-client