$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft File: 7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft (raw, json) Hash identifier: Z0AF2ew0Pwp0K3zMxJg5BOcKqErnpka1RGEpUpCiCB8= Subject key identifier: 5A:FA:83:DE:50:99:AD:DF:BF:AB:95:3F:70:81:CF:CC:00:E3:AF:EE Authority key identifier: 7D:2A:02:CF:AA:CD:51:FA:2E:B1:D7:AE:C7:0E:CD:81:04:47:5F:53 Certificate issuer: /CN=7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53 Certificate serial: 66C907A38020B0CCB8A26CFCDA4D0F4C1D795DA1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft Manifest number: BD Signing time: Mon 21 Sep 2026 06:50:02 +0000 Manifest this update: Mon 21 Sep 2026 06:45:02 +0000 Manifest next update: Tue 22 Sep 2026 07:10:02 +0000 Files and hashes: 1: 323030313a6466313a316263303a3a2f34382d3438203d3e20313431393339.roa (hash: nFLDPD776WE/L2X/jlMFqVRg6eI7I+qoNOVFN/HkArY=) 2: 3130332e3136342e3139322e302f32332d3234203d3e20313431393339.roa (hash: caZbilaazkpxqRWhkCpM9BxKghMhKlcvJxCPrxBN/3Q=) 3: 7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.crl (hash: nvDWSOjxAZemXeNecLjWsdgRBPWVKaeiT9mpxjsnqpI=) 4: 3130332e3136342e3139322e302f32342d3234203d3e20313431393339.roa (hash: FuJt3vcY9L09+RmWxid8u8pgisIt7rO49/5ndQMSY6Q=) 5: 3130332e3136342e3139332e302f32342d3234203d3e20313431393339.roa (hash: VOmlgkQp1tgA9VYOLX2CHv85GyyaVqqf5FgzdISInaI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.crl rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c9:07:a3:80:20:b0:cc:b8:a2:6c:fc:da:4d:0f:4c:1d:79:5d:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53 Validity Not Before: Sep 21 06:45:02 2026 GMT Not After : Sep 22 07:10:02 2026 GMT Subject: CN=5AFA83DE5099ADDFBFAB953F7081CFCC00E3AFEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:99:a4:77:43:27:8c:5a:db:90:f8:18:55:fe: ed:1c:d2:d0:dd:2c:44:1f:1e:43:2e:74:ff:1d:b6: 97:94:eb:aa:85:c7:36:4b:89:f5:6e:fd:5b:9a:d5: 55:d5:e0:a4:c1:fe:b1:35:7e:a8:78:d1:8e:c3:e4: 86:5a:7c:d6:64:44:16:9a:c8:50:d7:7b:27:6e:0a: 81:e8:60:df:be:ed:07:c1:16:3a:94:ab:a2:ae:ec: 38:56:1a:b7:33:c4:0e:b5:01:8f:3e:dd:18:b5:9b: 91:be:98:e9:ec:9d:a4:6e:c2:65:d9:cd:49:78:ed: c6:83:3e:dd:49:c6:d4:e5:65:f2:5e:07:fd:5a:a9: ab:73:b9:42:06:03:da:45:7a:81:6b:ed:a0:8d:6e: 5c:2c:a3:c5:fd:29:00:ad:4c:5e:2e:f3:e8:12:f2: cd:9a:d9:e4:12:c9:a1:eb:46:81:0b:3f:e9:98:c3: 4e:32:ce:3e:3f:26:6d:82:ca:d0:3e:87:7c:35:a1: 0f:40:ee:57:05:4c:c1:27:00:a3:bd:77:20:44:67: a6:e5:1a:80:29:1c:25:80:8e:31:09:3c:78:07:0f: bf:20:bb:59:59:4b:0a:26:81:1b:18:14:7f:b0:5a: e7:aa:1e:64:22:f9:3c:a0:5f:71:47:3c:8d:21:36: 46:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FA:83:DE:50:99:AD:DF:BF:AB:95:3F:70:81:CF:CC:00:E3:AF:EE X509v3 Authority Key Identifier: keyid:7D:2A:02:CF:AA:CD:51:FA:2E:B1:D7:AE:C7:0E:CD:81:04:47:5F:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:57:06:0f:b3:5d:09:08:01:36:e6:9c:50:76:35:c2:74:3e: c3:72:8c:a6:6d:73:43:eb:05:33:60:fd:34:0f:4c:aa:80:9a: 24:c8:92:b8:be:9f:e8:e3:df:3a:af:a2:c0:3a:31:6a:eb:bc: 30:f8:3e:55:67:f3:9f:08:2f:5c:f1:f8:39:d7:48:04:d6:63: 12:dd:41:69:c3:d1:ab:1a:4c:c9:5c:23:49:5b:29:63:5f:e8: 93:f1:8d:9f:43:7d:f7:8f:4a:b2:3b:df:7d:d6:f2:81:f0:b7: 90:c1:1a:49:fa:26:b0:d7:3d:96:0a:93:da:94:de:32:5f:31: 4f:f8:f8:51:e3:9f:84:8a:db:f7:3b:fd:05:c2:6c:8c:dc:d8: e5:a3:f0:91:c0:48:06:57:e8:df:7e:e4:ac:89:44:29:d6:a8: 6a:2f:d5:1b:b2:22:b4:57:b6:ba:8a:ae:7a:b6:67:ee:3a:3c: 58:aa:07:10:9e:dc:4b:7b:ca:f4:1c:c4:e3:34:2d:98:07:0c: 4c:d5:fe:0d:60:e4:f0:52:d0:6f:ec:66:32:c3:a7:08:1c:a5: 67:5f:c1:97:d4:52:c9:05:1a:5e:b9:92:26:ac:0e:6a:c6:2b: 1c:f0:d0:94:51:69:13:c3:3b:ba:85:10:99:b8:0b:7f:84:de: 04:be:76:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZskHo4AgsMy4omz82k0PTB15XaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QyQTAyQ0ZBQUNENTFGQTJFQjFEN0FFQzcwRUNEODEw NDQ3NUY1MzAeFw0yNjA5MjEwNjQ1MDJaFw0yNjA5MjIwNzEwMDJaMDMxMTAvBgNV BAMTKDVBRkE4M0RFNTA5OUFEREZCRkFCOTUzRjcwODFDRkNDMDBFM0FGRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5maR3QyeMWtuQ+BhV/u0c0tDd LEQfHkMudP8dtpeU66qFxzZLifVu/Vua1VXV4KTB/rE1fqh40Y7D5IZafNZkRBaa yFDXeyduCoHoYN++7QfBFjqUq6Ku7DhWGrczxA61AY8+3Ri1m5G+mOnsnaRuwmXZ zUl47caDPt1JxtTlZfJeB/1aqatzuUIGA9pFeoFr7aCNblwso8X9KQCtTF4u8+gS 8s2a2eQSyaHrRoELP+mYw04yzj4/Jm2CytA+h3w1oQ9A7lcFTMEnAKO9dyBEZ6bl GoApHCWAjjEJPHgHD78gu1lZSwomgRsYFH+wWueqHmQi+TygX3FHPI0hNkbFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWvqD3lCZrd+/q5U/cIHPzADjr+4wHwYDVR0j BBgwFoAUfSoCz6rNUfousdeuxw7NgQRHX1MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmJhNDhlNGUtZmM5NS00YWNmLWJlYWMtZDkzYTBmNjk0NDIxLzAvN0QyQTAyQ0ZB QUNENTFGQTJFQjFEN0FFQzcwRUNEODEwNDQ3NUY1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDJBMDJDRkFBQ0Q1MUZBMkVCMUQ3QUVDNzBFQ0Q4MTA0NDc1 RjUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJhNDhlNGUtZmM5NS00YWNmLWJl YWMtZDkzYTBmNjk0NDIxLzAvN0QyQTAyQ0ZBQUNENTFGQTJFQjFEN0FFQzcwRUNE ODEwNDQ3NUY1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxXBg+zXQkIATbmnFB2NcJ0PsNyjKZtc0Pr BTNg/TQPTKqAmiTIkri+n+jj3zqvosA6MWrrvDD4PlVn858IL1zx+DnXSATWYxLd QWnD0asaTMlcI0lbKWNf6JPxjZ9DffePSrI7333W8oHwt5DBGkn6JrDXPZYKk9qU 3jJfMU/4+FHjn4SK2/c7/QXCbIzc2OWj8JHASAZX6N9+5KyJRCnWqGov1RuyIrRX trqKrnq2Z+46PFiqBxCe3Et7yvQcxOM0LZgHDEzV/g1g5PBS0G/sZjLDpwgcpWdf wZfUUskFGl65kiasDmrGKxzw0JRRaRPDO7qFEJm4C3+E3gS+diY= -----END CERTIFICATE-----Generated at Mon Sep 21 17:57:10 2026 by rpki-client