$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft File: 7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft (raw, json) Hash identifier: VtJMCZzBrW/stoatH1P4R3vd3Ekz1f6Fhbd3+qGwmBc= Subject key identifier: 48:7E:34:A0:82:2C:8C:5C:AB:18:41:58:15:87:3B:4E:DC:39:90:52 Authority key identifier: 7D:21:9D:B4:8C:DF:74:38:98:A3:6F:EE:74:FA:88:BF:6F:2F:1E:CF Certificate issuer: /CN=7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF Certificate serial: 12CA1819FFFA0AF7BE41CF7C4D0DE72EF5FCE9A2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft Manifest number: BE Signing time: Mon 21 Sep 2026 02:44:50 +0000 Manifest this update: Mon 21 Sep 2026 02:39:50 +0000 Manifest next update: Tue 22 Sep 2026 04:17:50 +0000 Files and hashes: 1: 3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa (hash: a+oamNLoBLA9eXtliwNmRKAm0bPZaIn2IEdVk6cOO3c=) 2: 7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.crl (hash: iPUjNAaNee/n59cB9GmYnHc2N1Z7uUADautaFNRXMhM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.crl rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ca:18:19:ff:fa:0a:f7:be:41:cf:7c:4d:0d:e7:2e:f5:fc:e9:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF Validity Not Before: Sep 21 02:39:50 2026 GMT Not After : Sep 22 04:17:50 2026 GMT Subject: CN=487E34A0822C8C5CAB18415815873B4EDC399052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:73:33:9d:1d:7c:4b:4e:05:80:d0:43:5d:16: 5a:b4:3e:f5:55:c9:53:c8:10:f4:4d:6b:f1:9c:a1: ed:d4:56:aa:87:7c:e2:97:a5:e8:87:15:a6:2e:c7: 25:4a:7a:2a:ea:35:d4:df:a3:72:43:3e:96:66:08: 2c:ee:87:a3:4f:8f:1c:bb:23:03:76:9d:da:6a:8b: 68:26:1a:fa:f8:1e:b6:5e:c7:ec:79:83:ad:89:ce: 42:48:14:4f:ba:1a:e1:ca:da:9b:3b:22:9f:71:38: 73:3e:e3:19:cc:cc:8e:f7:b9:79:a1:7a:40:53:b4: ce:35:35:57:7e:c6:79:a7:4b:0f:26:f1:a5:9d:35: de:0f:ed:10:de:ee:69:2b:58:7f:a6:16:05:2b:e7: 7c:b3:2f:1a:06:8c:f3:65:bf:34:2c:08:4d:41:81: 0f:8e:23:2d:0b:2d:dc:88:4b:a7:4a:4a:93:3f:bf: bb:71:36:11:55:16:83:87:5c:e6:02:45:a2:21:72: f1:02:3b:80:27:22:38:42:6f:98:0d:35:43:ba:0e: b1:82:e3:1a:a0:37:c7:f9:59:a6:b6:f6:c6:d6:ef: 24:b0:36:d5:cb:b6:00:9b:d7:4f:4b:3e:c0:f7:90: 27:6b:fc:85:a0:51:ea:d4:3d:95:3b:9f:37:5e:be: 00:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7E:34:A0:82:2C:8C:5C:AB:18:41:58:15:87:3B:4E:DC:39:90:52 X509v3 Authority Key Identifier: keyid:7D:21:9D:B4:8C:DF:74:38:98:A3:6F:EE:74:FA:88:BF:6F:2F:1E:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:92:40:ba:5a:ef:69:c4:c3:01:d5:ab:bf:bd:7e:a0:74:d0: fa:4c:a6:53:e9:97:84:87:47:73:98:ce:e5:f1:eb:2e:ed:b2: 44:e2:85:ab:ac:d4:f7:88:14:41:c9:95:c8:31:8c:53:c7:47: 40:4e:10:54:15:21:4f:d0:e8:ae:bc:89:73:7e:9f:0d:34:d3: 0c:05:63:a5:79:9c:48:39:69:cb:84:83:50:14:47:d4:00:9d: a3:59:22:80:b9:35:f7:e4:bc:c9:6b:d8:7e:48:90:68:c5:bb: e9:e8:3e:29:0c:59:bc:78:45:47:ab:2b:b9:30:9b:03:e1:22: 65:c7:18:01:fb:3f:38:2d:f8:b9:0a:e7:a8:5e:1a:59:ef:79: e4:9b:6d:f8:e6:2d:ce:b5:7f:12:ca:06:3a:0e:82:14:1e:03: 98:da:0d:64:20:79:91:95:11:fc:de:91:f6:76:ef:9e:18:03: cd:ce:b5:4a:ff:3a:40:3e:3d:de:74:16:a6:27:01:e7:62:b8: 3a:f0:5f:9a:38:ae:b0:b3:a8:3b:a5:3b:c2:85:60:e8:75:b4: 77:2b:bb:54:99:e7:a3:7f:ce:90:b3:4c:a4:70:07:56:a6:c1: a7:06:91:1b:e2:b1:6a:00:55:09:62:3a:78:5c:5d:62:52:8e: e4:92:0a:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEsoYGf/6Cve+Qc98TQ3nLvX86aIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QyMTlEQjQ4Q0RGNzQzODk4QTM2RkVFNzRGQTg4QkY2 RjJGMUVDRjAeFw0yNjA5MjEwMjM5NTBaFw0yNjA5MjIwNDE3NTBaMDMxMTAvBgNV BAMTKDQ4N0UzNEEwODIyQzhDNUNBQjE4NDE1ODE1ODczQjRFREMzOTkwNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxczOdHXxLTgWA0ENdFlq0PvVV yVPIEPRNa/Gcoe3UVqqHfOKXpeiHFaYuxyVKeirqNdTfo3JDPpZmCCzuh6NPjxy7 IwN2ndpqi2gmGvr4HrZex+x5g62JzkJIFE+6GuHK2ps7Ip9xOHM+4xnMzI73uXmh ekBTtM41NVd+xnmnSw8m8aWdNd4P7RDe7mkrWH+mFgUr53yzLxoGjPNlvzQsCE1B gQ+OIy0LLdyIS6dKSpM/v7txNhFVFoOHXOYCRaIhcvECO4AnIjhCb5gNNUO6DrGC 4xqgN8f5Waa29sbW7ySwNtXLtgCb109LPsD3kCdr/IWgUerUPZU7nzdevgCTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSH40oIIsjFyrGEFYFYc7Ttw5kFIwHwYDVR0j BBgwFoAUfSGdtIzfdDiYo2/udPqIv28vHs8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmQyYjRmNzctNzRkMC00Nzk3LWFlZTAtOWVhOTA3NjU0NzMwLzAvN0QyMTlEQjQ4 Q0RGNzQzODk4QTM2RkVFNzRGQTg4QkY2RjJGMUVDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDIxOURCNDhDREY3NDM4OThBMzZGRUU3NEZBODhCRjZGMkYx RUNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmQyYjRmNzctNzRkMC00Nzk3LWFl ZTAtOWVhOTA3NjU0NzMwLzAvN0QyMTlEQjQ4Q0RGNzQzODk4QTM2RkVFNzRGQTg4 QkY2RjJGMUVDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAeSQLpa72nEwwHVq7+9fqB00PpMplPpl4SH R3OYzuXx6y7tskTihaus1PeIFEHJlcgxjFPHR0BOEFQVIU/Q6K68iXN+nw000wwF Y6V5nEg5acuEg1AUR9QAnaNZIoC5NffkvMlr2H5IkGjFu+noPikMWbx4RUerK7kw mwPhImXHGAH7Pzgt+LkK56heGlnveeSbbfjmLc61fxLKBjoOghQeA5jaDWQgeZGV EfzekfZ2754YA83OtUr/OkA+Pd50FqYnAediuDrwX5o4rrCzqDulO8KFYOh1tHcr u1SZ56N/zpCzTKRwB1amwacGkRvisWoAVQliOnhcXWJSjuSSCtI= -----END CERTIFICATE-----Generated at Mon Sep 21 19:40:19 2026 by rpki-client