$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft File: 7D748C9993BD612EB4DED86D78A542650C0739D2.mft (raw, json) Hash identifier: HcKJd3IqnWIQljUYDzbpKJCTMV4gmxa+wFkrMyh5EAk= Subject key identifier: 21:4D:A7:25:A6:F7:61:8D:AB:69:39:38:D4:DB:B1:59:2D:11:13:40 Authority key identifier: 7D:74:8C:99:93:BD:61:2E:B4:DE:D8:6D:78:A5:42:65:0C:07:39:D2 Certificate issuer: /CN=7D748C9993BD612EB4DED86D78A542650C0739D2 Certificate serial: 16B90D02A168A6B3F38E1BF382E1275988723B77 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D748C9993BD612EB4DED86D78A542650C0739D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft Manifest number: BF Signing time: Tue 22 Sep 2026 00:06:42 +0000 Manifest this update: Tue 22 Sep 2026 00:01:42 +0000 Manifest next update: Wed 23 Sep 2026 01:44:42 +0000 Files and hashes: 1: 7D748C9993BD612EB4DED86D78A542650C0739D2.crl (hash: ZFsF3bvZ7yhWYRcbqfXQgqmHMyfh1eq6jHZ6x7LFigk=) 2: 3130332e35322e31362e302f32322d3234203d3e20313333383131.roa (hash: F4nsqoozGK4NB7nZpkqT2Hnvk+Lf+l5FrVBWD/7xIok=) 3: 3130332e35322e31362e302f32342d3234203d3e20313333383131.roa (hash: nZpFFdv+h1rTWhfuw6ZS6/7x9CDvhNusGoKBRBaU3O4=) 4: 3130332e35322e31392e302f32342d3234203d3e20313333383131.roa (hash: 8hxKIphl2RuDK+xff1DI7cxGB0tqauW81xIpHuvLInE=) 5: 3130332e35322e31372e302f32342d3234203d3e20313333383131.roa (hash: Qng22t+/fZctwuGfY/oz7Ui18hIgTE9U9nLKddDnqOw=) 6: 3130332e35322e31382e302f32342d3234203d3e20313333383131.roa (hash: snzhp1flNHDzfwgs9QpaPIIaMwshl5sSyA4vnDdYKDg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.crl rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D748C9993BD612EB4DED86D78A542650C0739D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 01:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:b9:0d:02:a1:68:a6:b3:f3:8e:1b:f3:82:e1:27:59:88:72:3b:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D748C9993BD612EB4DED86D78A542650C0739D2 Validity Not Before: Sep 22 00:01:42 2026 GMT Not After : Sep 23 01:44:42 2026 GMT Subject: CN=214DA725A6F7618DAB693938D4DBB1592D111340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2b:eb:0f:15:55:c8:d4:ed:a9:92:1e:4b:31: b6:ce:83:9a:57:da:29:8c:9c:97:b9:c0:b9:f2:58: f8:81:34:37:4c:b3:24:5c:d6:5f:5e:94:51:e9:34: e8:d3:21:16:07:31:02:0e:18:05:ff:bd:cd:bc:73: 49:83:44:6a:e7:2b:6c:92:06:7e:11:4f:72:ec:9e: 5f:f0:77:f9:fe:27:49:63:51:a6:cd:60:55:bb:be: 1f:20:61:fb:cd:70:c0:b8:0a:c8:fa:4a:6b:31:b6: 7d:e8:c3:d8:b8:7e:10:9b:f8:54:ad:64:18:7e:91: 9d:ce:d6:2a:f1:b0:e6:ba:bf:34:49:74:62:23:2f: 24:b6:bd:f8:b6:2e:aa:e3:c8:cc:1d:ae:69:34:c1: ad:0c:00:d2:6b:cc:a2:e1:bb:12:55:d8:b3:43:3c: b5:7d:01:11:85:13:d7:7a:fb:10:d6:26:4d:63:76: f7:70:49:04:f1:10:4a:33:08:93:d3:ef:06:34:0a: 6d:57:8d:a3:ca:4e:44:8c:6f:dc:87:f3:ef:da:9b: 08:13:66:f4:bf:f9:6d:1f:57:fe:2c:6b:17:db:90: 1d:9f:46:54:9d:23:16:0d:a6:4b:68:ea:aa:38:fc: 8f:76:8b:92:82:57:db:ce:a9:4f:42:f9:45:4d:a8: 60:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4D:A7:25:A6:F7:61:8D:AB:69:39:38:D4:DB:B1:59:2D:11:13:40 X509v3 Authority Key Identifier: keyid:7D:74:8C:99:93:BD:61:2E:B4:DE:D8:6D:78:A5:42:65:0C:07:39:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D748C9993BD612EB4DED86D78A542650C0739D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:c4:eb:74:ab:76:49:39:3a:55:37:be:55:f1:0e:99:7f:f4: b7:b9:37:46:bf:d3:f1:5b:15:9e:7a:54:c8:b7:5b:b3:ce:39: c7:07:e1:a5:1f:69:ee:15:2f:3f:27:2b:b2:e4:b0:77:3e:ae: df:ed:30:d1:37:63:10:1f:a9:3a:16:7f:5c:7f:ab:5f:0e:5b: 60:2c:28:ae:9b:6a:83:fc:29:94:9a:1b:9b:73:4e:b6:71:0e: 1d:ff:2e:4e:9f:16:1d:41:b6:f0:ee:98:1a:c4:3b:fe:15:87: 7c:04:0a:4c:95:c9:80:ce:27:45:6f:eb:b0:8e:a9:e2:76:59: 5e:fb:c5:ed:2d:7c:3a:24:c7:ec:28:1e:fe:24:de:f1:f8:97: 74:fb:88:a0:d8:f5:cb:23:a3:5e:20:6e:3d:b7:7f:c8:b4:98: 92:ec:93:2e:a9:c5:7c:4d:6a:10:60:28:87:4f:3b:4c:f2:b2: 66:96:71:50:7a:cf:aa:98:5f:d8:53:16:ec:97:41:c9:97:6b: 1e:36:2f:c8:0e:53:4f:77:0f:2d:15:82:c7:de:0b:dc:68:90: a5:a3:44:31:bf:3c:54:54:5c:d8:b3:37:15:e8:1e:4d:94:13: d3:6b:5e:9d:f5:19:1c:6a:0c:ba:f6:41:99:4d:0e:4f:f9:d8: 4c:59:c6:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFrkNAqFoprPzjhvzguEnWYhyO3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q3NDhDOTk5M0JENjEyRUI0REVEODZENzhBNTQyNjUw QzA3MzlEMjAeFw0yNjA5MjIwMDAxNDJaFw0yNjA5MjMwMTQ0NDJaMDMxMTAvBgNV BAMTKDIxNERBNzI1QTZGNzYxOERBQjY5MzkzOEQ0REJCMTU5MkQxMTEzNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLK+sPFVXI1O2pkh5LMbbOg5pX 2imMnJe5wLnyWPiBNDdMsyRc1l9elFHpNOjTIRYHMQIOGAX/vc28c0mDRGrnK2yS Bn4RT3Lsnl/wd/n+J0ljUabNYFW7vh8gYfvNcMC4Csj6Smsxtn3ow9i4fhCb+FSt ZBh+kZ3O1irxsOa6vzRJdGIjLyS2vfi2LqrjyMwdrmk0wa0MANJrzKLhuxJV2LND PLV9ARGFE9d6+xDWJk1jdvdwSQTxEEozCJPT7wY0Cm1XjaPKTkSMb9yH8+/amwgT ZvS/+W0fV/4saxfbkB2fRlSdIxYNpkto6qo4/I92i5KCV9vOqU9C+UVNqGCvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIU2nJab3YY2raTk41NuxWS0RE0AwHwYDVR0j BBgwFoAUfXSMmZO9YS603thteKVCZQwHOdIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFkZDdjMGYtMDJkMy00MjE3LTlmYzMtMDA0N2FlMTgzNmRjLzAvN0Q3NDhDOTk5 M0JENjEyRUI0REVEODZENzhBNTQyNjUwQzA3MzlEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDc0OEM5OTkzQkQ2MTJFQjRERUQ4NkQ3OEE1NDI2NTBDMDcz OUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFkZDdjMGYtMDJkMy00MjE3LTlm YzMtMDA0N2FlMTgzNmRjLzAvN0Q3NDhDOTk5M0JENjEyRUI0REVEODZENzhBNTQy NjUwQzA3MzlEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL3E63Srdkk5OlU3vlXxDpl/9Le5N0a/0/Fb FZ56VMi3W7POOccH4aUfae4VLz8nK7LksHc+rt/tMNE3YxAfqToWf1x/q18OW2As KK6baoP8KZSaG5tzTrZxDh3/Lk6fFh1BtvDumBrEO/4Vh3wECkyVyYDOJ0Vv67CO qeJ2WV77xe0tfDokx+woHv4k3vH4l3T7iKDY9csjo14gbj23f8i0mJLsky6pxXxN ahBgKIdPO0zysmaWcVB6z6qYX9hTFuyXQcmXax42L8gOU093Dy0VgsfeC9xokKWj RDG/PFRUXNizNxXoHk2UE9NrXp31GRxqDLr2QZlNDk/52ExZxp4= -----END CERTIFICATE-----Generated at Tue Sep 22 20:00:08 2026 by rpki-client