$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.mft File: 7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.mft (raw, json) Hash identifier: lPUFDGu6jyqPwubEzkqNnCiRuz1Xac3iNIDpEtS1jhY= Subject key identifier: C5:8F:72:95:B1:CD:12:CD:B8:4A:DE:45:6E:4A:AE:B2:F8:25:16:88 Authority key identifier: 7D:51:3C:A0:27:0A:04:6B:FF:27:E9:C4:9D:A0:E9:90:3C:DD:2C:0C Certificate issuer: /CN=7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C Certificate serial: 2D99D14E339FCB5A9669230F41494C4E80AB4E44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 14:07:18 +0000 Manifest this update: Sat 26 Sep 2026 14:02:18 +0000 Manifest next update: Sun 27 Sep 2026 17:24:18 +0000 Files and hashes: 1: 7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.crl (hash: rMJYTN0CH8dmvgiUtXl1CHq5ZazKbyXxCfdx5VpJzrc=) 2: 3130332e3134372e31302e302f32332d3234203d3e20313339393435.roa (hash: GymIgmPh7c7AFMEkOazrLmR+HafDOGSOnyaAyUzJOWU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.crl rsync://rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:99:d1:4e:33:9f:cb:5a:96:69:23:0f:41:49:4c:4e:80:ab:4e:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C Validity Not Before: Sep 26 14:02:18 2026 GMT Not After : Sep 27 17:24:18 2026 GMT Subject: CN=C58F7295B1CD12CDB84ADE456E4AAEB2F8251688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d0:dd:66:00:86:d1:d1:b0:a6:e9:5b:2d:fa: 19:c0:fa:bc:bc:06:2a:ea:3b:f9:27:eb:71:e2:9f: 40:50:0a:b2:d2:d5:ec:31:48:29:ba:22:a9:0b:15: 90:8f:65:fe:01:ea:1e:a3:ed:c3:eb:bb:13:f0:3f: 9c:d1:fc:65:34:d2:a1:f2:6d:f1:70:0c:38:0f:bf: 71:48:00:52:cf:b6:45:b5:b6:96:2e:7d:34:67:f2: 7d:a7:4d:d6:7f:53:e8:87:c7:37:43:b9:07:69:58: 02:03:5d:2b:f5:bd:98:0b:c6:22:a2:ee:de:ea:d6: 63:a5:b5:e9:0d:35:6b:17:b9:0f:ff:8d:d3:1b:45: 81:fd:f9:50:fb:31:af:a9:46:e6:73:c8:a3:ed:43: 5d:bc:c5:76:aa:a9:b5:d4:10:78:69:b9:51:4e:0d: 87:23:b3:53:b3:a0:89:09:76:cf:96:4e:3f:46:e1: a6:52:68:70:f8:56:28:1d:2e:41:a9:f0:64:02:f6: 9a:03:d5:43:1f:10:7e:0a:a1:8b:cd:41:60:bb:34: 52:d0:d0:1d:2b:59:af:fa:4e:db:e4:b4:df:a3:0b: e3:88:81:f2:15:71:ba:a5:54:83:69:60:7d:3f:0b: 81:7f:59:c7:c1:b8:8c:d5:37:3f:b1:15:c2:5c:c3: 0f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8F:72:95:B1:CD:12:CD:B8:4A:DE:45:6E:4A:AE:B2:F8:25:16:88 X509v3 Authority Key Identifier: keyid:7D:51:3C:A0:27:0A:04:6B:FF:27:E9:C4:9D:A0:E9:90:3C:DD:2C:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:44:7d:9e:2a:db:d7:a2:fd:8c:7b:9c:51:18:95:d9:eb:43: 63:5e:34:70:cf:bb:c3:a6:d5:a2:28:a4:37:35:ab:6e:0f:82: 55:dd:c1:0e:2c:b7:6c:2f:30:7b:44:49:2c:4e:48:b4:cd:3f: 14:4e:9e:66:6b:9f:e1:7f:55:0e:b2:db:2b:9a:6e:0b:ab:40: e5:47:c6:16:f9:ce:df:64:b7:4b:42:7c:5c:eb:6f:dc:f8:1b: df:6e:c7:05:0f:b7:b8:bb:a5:97:bd:fe:aa:d8:55:4e:88:b6: 61:4b:bc:b5:ea:d1:49:a0:39:cb:3e:55:12:9d:2c:89:fa:0c: f4:e0:ea:00:c6:37:ce:04:ea:7b:e6:e2:ff:a3:24:d6:7f:25: 9c:ba:ca:a0:c0:79:e3:27:26:cc:ea:98:06:ab:ad:1a:04:02: 63:62:35:fc:e8:71:04:49:41:70:12:2a:6a:7b:19:cf:da:2b: 98:0a:ff:73:20:da:cf:47:ea:f4:64:f4:89:c7:aa:8d:98:f8: c7:84:a7:2a:76:e2:45:8a:9c:e6:42:00:3b:91:9c:82:14:71: 6d:d6:02:73:b8:dd:63:4d:e2:bc:7d:51:fb:a9:b8:ae:6a:b0: 5a:01:18:1e:0a:71:32:ee:5b:e2:ad:84:fd:b0:84:10:af:5c: 0f:db:b0:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULZnRTjOfy1qWaSMPQUlMToCrTkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MTNDQTAyNzBBMDQ2QkZGMjdFOUM0OURBMEU5OTAz Q0REMkMwQzAeFw0yNjA5MjYxNDAyMThaFw0yNjA5MjcxNzI0MThaMDMxMTAvBgNV BAMTKEM1OEY3Mjk1QjFDRDEyQ0RCODRBREU0NTZFNEFBRUIyRjgyNTE2ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX0N1mAIbR0bCm6Vst+hnA+ry8 BirqO/kn63Hin0BQCrLS1ewxSCm6IqkLFZCPZf4B6h6j7cPruxPwP5zR/GU00qHy bfFwDDgPv3FIAFLPtkW1tpYufTRn8n2nTdZ/U+iHxzdDuQdpWAIDXSv1vZgLxiKi 7t7q1mOltekNNWsXuQ//jdMbRYH9+VD7Ma+pRuZzyKPtQ128xXaqqbXUEHhpuVFO DYcjs1OzoIkJds+WTj9G4aZSaHD4VigdLkGp8GQC9poD1UMfEH4KoYvNQWC7NFLQ 0B0rWa/6TtvktN+jC+OIgfIVcbqlVINpYH0/C4F/WcfBuIzVNz+xFcJcww9hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxY9ylbHNEs24St5FbkqusvglFogwHwYDVR0j BBgwFoAUfVE8oCcKBGv/J+nEnaDpkDzdLAwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTU2MmNmM2QtZDlmNy00OGE5LTkxNTktOWYwZDdhNDc2NzkwLzAvN0Q1MTNDQTAy NzBBMDQ2QkZGMjdFOUM0OURBMEU5OTAzQ0REMkMwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDUxM0NBMDI3MEEwNDZCRkYyN0U5QzQ5REEwRTk5MDNDREQy QzBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTU2MmNmM2QtZDlmNy00OGE5LTkx NTktOWYwZDdhNDc2NzkwLzAvN0Q1MTNDQTAyNzBBMDQ2QkZGMjdFOUM0OURBMEU5 OTAzQ0REMkMwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpEfZ4q29ei/Yx7nFEYldnrQ2NeNHDPu8Om 1aIopDc1q24PglXdwQ4st2wvMHtESSxOSLTNPxROnmZrn+F/VQ6y2yuabgurQOVH xhb5zt9kt0tCfFzrb9z4G99uxwUPt7i7pZe9/qrYVU6ItmFLvLXq0UmgOcs+VRKd LIn6DPTg6gDGN84E6nvm4v+jJNZ/JZy6yqDAeeMnJszqmAarrRoEAmNiNfzocQRJ QXASKmp7Gc/aK5gK/3Mg2s9H6vRk9InHqo2Y+MeEpyp24kWKnOZCADuRnIIUcW3W AnO43WNN4rx9UfupuK5qsFoBGB4KcTLuW+KthP2whBCvXA/bsK4= -----END CERTIFICATE-----Generated at Sat Sep 26 18:17:09 2026 by rpki-client