$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft File: 7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft (raw, json) Hash identifier: 2OyNJt6ktIoDWhA+Ii154F7fVsiAT3iE6oLqivknHPE= Subject key identifier: 7C:9D:C4:92:76:5E:CB:09:F5:0D:F9:DC:79:CA:09:4E:CC:74:B2:70 Authority key identifier: 7A:BD:2B:E2:09:FC:E2:A3:6F:A3:E5:CD:86:4B:F7:0F:6B:C6:5E:E4 Certificate issuer: /CN=7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4 Certificate serial: 29BFE6253C073DAA97724CF6D10C1020D5C4D244 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 08:01:13 +0000 Manifest this update: Wed 23 Sep 2026 07:56:13 +0000 Manifest next update: Thu 24 Sep 2026 08:23:13 +0000 Files and hashes: 1: 3130332e3235352e3136342e302f32342d3234203d3e20313531393934.roa (hash: XAlXWmMjaTIgPpDDe6g4p0/8EhTXLUGxpCwgLN6Nis0=) 2: 3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa (hash: Gp5/rWdRIu6ScqVU154gXkTtG4fAxGJvRR3MmRVopqg=) 3: 3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa (hash: zpN+ZUQARf85utjXtSfFSa/KkTvAdeU606KS8jCMD5U=) 4: 7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.crl (hash: VdZDT6iU6eSVfAfPdMq97GeZtqNscK+aC+maQ0BBGqI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.crl rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:bf:e6:25:3c:07:3d:aa:97:72:4c:f6:d1:0c:10:20:d5:c4:d2:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4 Validity Not Before: Sep 23 07:56:13 2026 GMT Not After : Sep 24 08:23:13 2026 GMT Subject: CN=7C9DC492765ECB09F50DF9DC79CA094ECC74B270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:41:8b:cc:bf:84:fd:ee:2f:27:bf:25:10:09: eb:62:34:30:10:39:29:73:28:6c:e7:2e:7e:8b:b5: 6f:9b:55:c7:71:ac:f2:86:5a:22:b5:49:79:8e:2e: a1:f7:93:7e:38:92:1c:f7:fa:b9:d3:93:6e:83:7a: 39:3f:09:23:4a:49:15:1d:35:60:da:06:2d:f0:65: cf:4b:10:5e:1f:8b:5a:a7:0d:04:8d:39:98:77:6a: 98:00:be:b4:f5:11:81:ee:b0:5d:3c:a2:be:b0:f1: ba:f2:8c:f9:09:c3:1e:f9:8a:a2:4b:ea:35:3e:75: e8:bf:ec:30:da:c8:80:c0:83:33:f2:5e:a8:a1:4b: df:af:c3:9a:59:50:ef:ee:bf:eb:dc:e0:4c:ba:eb: ff:5c:95:e7:48:83:ee:70:fd:c7:39:cc:da:3d:7b: 7c:48:85:35:06:c1:5e:5f:38:70:bc:3f:39:d5:86: 94:96:b6:84:b6:ea:dc:2d:cc:c6:f5:3c:0f:56:e0: ff:83:ec:85:ee:b4:3c:cc:9a:e7:71:1f:97:64:0f: ce:fa:34:52:b8:5a:29:1a:90:3c:2c:1e:90:b7:83: 35:b5:e3:22:30:27:91:ab:04:f0:42:81:a2:5d:77: d3:e4:4d:13:e6:7d:a5:66:9b:0f:fa:8a:bc:cb:56: 9e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:9D:C4:92:76:5E:CB:09:F5:0D:F9:DC:79:CA:09:4E:CC:74:B2:70 X509v3 Authority Key Identifier: keyid:7A:BD:2B:E2:09:FC:E2:A3:6F:A3:E5:CD:86:4B:F7:0F:6B:C6:5E:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:f6:02:f2:41:c4:e5:0d:1c:eb:93:2e:0d:91:ed:a1:94:82: 2e:1b:30:c8:39:09:0f:8b:a7:65:5e:7a:7c:57:f4:d4:a6:cb: 9a:cb:b1:67:a4:c7:38:5c:1a:2f:6b:a3:97:29:0a:5b:a9:38: ce:d9:63:b7:44:57:a1:30:43:21:95:7a:6f:cf:57:a4:35:b2: 83:df:5f:25:c0:78:34:4e:b0:85:e1:9b:83:d4:02:50:b9:6a: 8b:3c:6f:69:68:34:b2:c2:ff:5d:fc:6d:ba:d9:6a:9d:23:b1: 01:3f:d2:09:e5:7a:fa:b9:6a:5c:3b:5b:12:cc:3f:91:ab:d9: 39:1e:67:05:2f:34:ca:07:a9:f1:e0:e7:49:44:1a:7c:9f:cf: 3d:07:de:24:8d:5f:29:55:50:81:59:41:e6:b2:7e:52:4d:01: d3:8e:74:35:69:35:e3:1d:22:01:60:8e:e6:54:2f:b5:ce:71: ac:d7:97:d6:8c:01:91:07:5a:0f:41:64:f2:a2:19:11:26:b1: 23:39:b5:55:7b:46:70:67:44:2c:64:47:03:88:7e:03:bc:cf: a6:cc:8b:85:50:1e:e5:c1:3b:bd:12:0e:ff:d5:4e:c8:78:f4: 2a:f2:1a:86:d9:1a:a0:80:16:31:30:f8:b5:9e:14:2f:15:be: 09:7c:75:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKb/mJTwHPaqXckz20QwQINXE0kQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FCRDJCRTIwOUZDRTJBMzZGQTNFNUNEODY0QkY3MEY2 QkM2NUVFNDAeFw0yNjA5MjMwNzU2MTNaFw0yNjA5MjQwODIzMTNaMDMxMTAvBgNV BAMTKDdDOURDNDkyNzY1RUNCMDlGNTBERjlEQzc5Q0EwOTRFQ0M3NEIyNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4QYvMv4T97i8nvyUQCetiNDAQ OSlzKGznLn6LtW+bVcdxrPKGWiK1SXmOLqH3k344khz3+rnTk26Dejk/CSNKSRUd NWDaBi3wZc9LEF4fi1qnDQSNOZh3apgAvrT1EYHusF08or6w8bryjPkJwx75iqJL 6jU+dei/7DDayIDAgzPyXqihS9+vw5pZUO/uv+vc4Ey66/9cledIg+5w/cc5zNo9 e3xIhTUGwV5fOHC8PznVhpSWtoS26twtzMb1PA9W4P+D7IXutDzMmudxH5dkD876 NFK4WikakDwsHpC3gzW14yIwJ5GrBPBCgaJdd9PkTRPmfaVmmw/6irzLVp7zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfJ3EknZeywn1DfncecoJTsx0snAwHwYDVR0j BBgwFoAUer0r4gn84qNvo+XNhkv3D2vGXuQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M0N2VmNWMtNWJiYS00Y2QxLThkYzktMTczZTI3NTFmNGY0LzAvN0FCRDJCRTIw OUZDRTJBMzZGQTNFNUNEODY0QkY3MEY2QkM2NUVFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QUJEMkJFMjA5RkNFMkEzNkZBM0U1Q0Q4NjRCRjcwRjZCQzY1 RUU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M0N2VmNWMtNWJiYS00Y2QxLThk YzktMTczZTI3NTFmNGY0LzAvN0FCRDJCRTIwOUZDRTJBMzZGQTNFNUNEODY0QkY3 MEY2QkM2NUVFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAND2AvJBxOUNHOuTLg2R7aGUgi4bMMg5CQ+L p2VeenxX9NSmy5rLsWekxzhcGi9ro5cpClupOM7ZY7dEV6EwQyGVem/PV6Q1soPf XyXAeDROsIXhm4PUAlC5aos8b2loNLLC/138bbrZap0jsQE/0gnlevq5alw7WxLM P5Gr2TkeZwUvNMoHqfHg50lEGnyfzz0H3iSNXylVUIFZQeayflJNAdOOdDVpNeMd IgFgjuZUL7XOcazXl9aMAZEHWg9BZPKiGREmsSM5tVV7RnBnRCxkRwOIfgO8z6bM i4VQHuXBO70SDv/VTsh49CryGobZGqCAFjEw+LWeFC8Vvgl8dRs= -----END CERTIFICATE-----Generated at Wed Sep 23 23:15:55 2026 by rpki-client