$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft File: 7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft (raw, json) Hash identifier: bIkgKNqHDAt3h1F0s+0yfgDdrjt7GnDeXxoxvW47UFc= Subject key identifier: 6F:2B:4C:4B:6A:17:BB:57:6B:FB:55:ED:99:A2:DB:65:40:03:66:1B Authority key identifier: 7A:F1:08:B3:E0:EB:B7:9F:6C:3A:BB:EC:A3:43:74:29:49:4C:92:96 Certificate issuer: /CN=7AF108B3E0EBB79F6C3ABBECA3437429494C9296 Certificate serial: 5F237C368BFE7F5596A3F11C440BDAF6457683C2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 05:37:45 +0000 Manifest this update: Thu 24 Sep 2026 05:32:45 +0000 Manifest next update: Fri 25 Sep 2026 06:27:45 +0000 Files and hashes: 1: 7AF108B3E0EBB79F6C3ABBECA3437429494C9296.crl (hash: Iah5QYABaKsHTRxL+zya28napPRS5ooJeby5onwOsSg=) 2: 3130332e36372e38322e302f32332d3234203d3e20313532303131.roa (hash: OI2+L8kOyx+uXkdHVQ3bQvjHZ5kkvK0ATomJcIp9VW0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.crl rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:23:7c:36:8b:fe:7f:55:96:a3:f1:1c:44:0b:da:f6:45:76:83:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7AF108B3E0EBB79F6C3ABBECA3437429494C9296 Validity Not Before: Sep 24 05:32:45 2026 GMT Not After : Sep 25 06:27:45 2026 GMT Subject: CN=6F2B4C4B6A17BB576BFB55ED99A2DB654003661B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:53:b0:8d:8c:8a:de:93:61:f1:fa:b8:3c:ef: 2e:37:08:05:4a:aa:7d:e6:49:16:bf:0b:ab:6e:c8: 9e:c5:80:d7:12:36:0f:20:9b:d4:2f:6f:10:dd:bd: b7:d3:6f:0e:b3:ec:6f:ff:34:60:df:fd:a8:18:ec: be:ca:ae:30:7d:f3:f6:d6:70:3c:5c:20:07:9a:99: 66:87:bc:72:5f:26:df:9c:6c:2c:3d:9c:68:be:d1: 07:cd:2a:37:f7:ab:3d:78:85:e0:55:f8:e8:06:44: 37:9b:21:f6:a8:23:d2:c1:a9:45:c8:29:9d:36:71: 8a:ab:c5:b5:40:9e:0c:6d:4d:f3:5f:f7:c8:e3:27: ab:7d:81:ff:09:19:9a:06:53:e9:c4:ff:29:30:ee: 0b:f5:be:05:f5:4f:7b:6f:cb:ff:b1:20:78:b7:be: 46:ae:27:59:f6:38:c0:8f:52:5b:38:b2:02:ca:4d: cc:c9:95:bc:3d:7f:41:4e:0c:7c:0b:3b:8e:b4:b0: 43:07:8c:c1:d4:85:ea:78:0c:de:72:90:ee:08:aa: 60:c7:52:08:ac:0d:62:02:84:08:3a:15:af:04:9d: fc:ab:c4:a2:ff:3e:6a:55:d5:90:87:a7:5d:e0:58: 81:c9:5d:b0:ee:c4:0a:28:40:17:dd:6f:74:a6:39: f0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:2B:4C:4B:6A:17:BB:57:6B:FB:55:ED:99:A2:DB:65:40:03:66:1B X509v3 Authority Key Identifier: keyid:7A:F1:08:B3:E0:EB:B7:9F:6C:3A:BB:EC:A3:43:74:29:49:4C:92:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:35:66:b4:27:3e:13:0f:ce:67:c3:02:56:9d:7d:58:75:9a: 60:5f:55:85:c6:14:31:c4:85:8f:e4:da:f5:f0:78:f7:5d:06: c5:f2:09:d3:68:fc:62:27:e5:a4:0b:ad:1b:cf:41:d2:34:97: dd:b1:9b:05:6f:09:e0:8c:04:8c:8f:46:0f:53:01:c2:cd:03: 4f:43:6d:c8:9d:61:bc:98:12:55:06:d0:0b:d1:84:eb:ff:d1: ce:a7:c3:0c:0d:8c:8e:b8:f8:34:bc:b3:01:24:10:9b:29:58: 84:55:9f:2e:9f:7c:41:02:ff:e4:94:d1:eb:9b:05:0f:7a:7e: 68:a7:7e:cb:69:c4:e8:c7:4d:b4:b9:ed:e4:55:7e:d4:15:9a: 8a:ab:12:25:91:48:17:89:df:f0:01:99:03:55:cf:f8:cd:d1: 1b:0f:eb:30:67:3d:8e:64:8b:7f:68:1d:8d:1a:62:a1:06:ad: 49:f7:ba:26:1c:92:e5:e0:ef:02:6e:a2:af:80:76:31:c6:d2: 65:a7:88:32:a0:68:8f:c0:c9:43:df:e2:1c:09:d7:4d:f7:e5: f3:ef:7b:06:a5:61:06:15:e6:e4:86:3f:7c:d7:ac:38:db:42: 54:da:0e:5a:91:be:e2:ac:29:e8:d8:8f:ff:5d:2a:3f:87:f7: 08:74:21:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXyN8Nov+f1WWo/EcRAva9kV2g8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FGMTA4QjNFMEVCQjc5RjZDM0FCQkVDQTM0Mzc0Mjk0 OTRDOTI5NjAeFw0yNjA5MjQwNTMyNDVaFw0yNjA5MjUwNjI3NDVaMDMxMTAvBgNV BAMTKDZGMkI0QzRCNkExN0JCNTc2QkZCNTVFRDk5QTJEQjY1NDAwMzY2MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaU7CNjIrek2Hx+rg87y43CAVK qn3mSRa/C6tuyJ7FgNcSNg8gm9QvbxDdvbfTbw6z7G//NGDf/agY7L7KrjB98/bW cDxcIAeamWaHvHJfJt+cbCw9nGi+0QfNKjf3qz14heBV+OgGRDebIfaoI9LBqUXI KZ02cYqrxbVAngxtTfNf98jjJ6t9gf8JGZoGU+nE/ykw7gv1vgX1T3tvy/+xIHi3 vkauJ1n2OMCPUls4sgLKTczJlbw9f0FODHwLO460sEMHjMHUhep4DN5ykO4IqmDH UgisDWIChAg6Fa8EnfyrxKL/PmpV1ZCHp13gWIHJXbDuxAooQBfdb3SmOfBfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbytMS2oXu1dr+1XtmaLbZUADZhswHwYDVR0j BBgwFoAUevEIs+Drt59sOrvso0N0KUlMkpYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmQ2ZTE0N2YtMTMwNC00ZTY5LTk1MWMtODkzMTBkZmU4NTllLzAvN0FGMTA4QjNF MEVCQjc5RjZDM0FCQkVDQTM0Mzc0Mjk0OTRDOTI5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QUYxMDhCM0UwRUJCNzlGNkMzQUJCRUNBMzQzNzQyOTQ5NEM5 Mjk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmQ2ZTE0N2YtMTMwNC00ZTY5LTk1 MWMtODkzMTBkZmU4NTllLzAvN0FGMTA4QjNFMEVCQjc5RjZDM0FCQkVDQTM0Mzc0 Mjk0OTRDOTI5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQ1ZrQnPhMPzmfDAladfVh1mmBfVYXGFDHE hY/k2vXwePddBsXyCdNo/GIn5aQLrRvPQdI0l92xmwVvCeCMBIyPRg9TAcLNA09D bcidYbyYElUG0AvRhOv/0c6nwwwNjI64+DS8swEkEJspWIRVny6ffEEC/+SU0eub BQ96fminfstpxOjHTbS57eRVftQVmoqrEiWRSBeJ3/ABmQNVz/jN0RsP6zBnPY5k i39oHY0aYqEGrUn3uiYckuXg7wJuoq+AdjHG0mWniDKgaI/AyUPf4hwJ10335fPv ewalYQYV5uSGP3zXrDjbQlTaDlqRvuKsKejYj/9dKj+H9wh0IZo= -----END CERTIFICATE-----Generated at Thu Sep 24 06:50:35 2026 by rpki-client