$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft File: 7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft (raw, json) Hash identifier: Ej0dO88QJWp0w4j8DTsN9XtHaNZjutg/7rGxl+hjHDU= Subject key identifier: 49:35:B9:50:45:75:14:1E:20:C4:A8:98:94:0A:A3:C4:16:3E:03:98 Authority key identifier: 7B:2D:9E:00:8C:C6:35:19:08:65:EC:64:FD:82:9B:33:BB:A1:EC:0A Certificate issuer: /CN=7B2D9E008CC635190865EC64FD829B33BBA1EC0A Certificate serial: 1CEF0AB8B4D43D04DC8735751EAC4DB4D27DBE63 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 22:28:48 +0000 Manifest this update: Wed 23 Sep 2026 22:23:48 +0000 Manifest next update: Thu 24 Sep 2026 23:21:48 +0000 Files and hashes: 1: 7B2D9E008CC635190865EC64FD829B33BBA1EC0A.crl (hash: Sufe/GsCega4FcNMq3o+EgtkJTqBw7TDj3pHYv5AgxY=) 2: 3130332e3133312e32392e302f32342d3234203d3e20313338303834.roa (hash: MUH5KpDAgVdYYC+MwQ+aBkJnISkDkljbuMC7PbGyf/c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.crl rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ef:0a:b8:b4:d4:3d:04:dc:87:35:75:1e:ac:4d:b4:d2:7d:be:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B2D9E008CC635190865EC64FD829B33BBA1EC0A Validity Not Before: Sep 23 22:23:48 2026 GMT Not After : Sep 24 23:21:48 2026 GMT Subject: CN=4935B9504575141E20C4A898940AA3C4163E0398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:24:1c:76:6e:eb:13:6e:15:2b:47:3b:91:4c: 43:51:f9:1a:12:44:71:4b:1a:22:db:38:f0:3f:ca: 6e:b1:0b:01:2c:7b:39:ea:6c:f7:32:07:16:27:93: 9d:85:ff:5a:88:9f:cb:db:4a:cf:08:24:ee:cf:96: f3:6d:44:4f:97:35:b4:61:e3:95:21:b3:ea:7a:01: d9:c8:2a:6c:72:37:11:39:13:cc:d5:4f:ed:81:c0: e4:56:f6:c8:5f:73:da:09:a0:f0:20:91:d3:c4:c1: 88:bc:c6:3d:c9:39:e5:2d:2f:a1:a5:27:49:f6:9e: 7b:10:b1:54:e2:b5:e8:c3:78:5c:3c:0d:f3:90:c8: 2a:e8:4a:4d:54:25:26:b6:5b:8e:da:84:33:f1:28: 9b:ff:d4:f3:82:f4:9b:80:2a:08:f2:ea:51:f7:c3: 88:dc:84:44:a6:f9:b3:f3:ab:c4:a7:de:ae:bd:37: 22:74:9b:34:4a:8b:66:eb:87:e7:db:b3:98:54:22: 81:6f:b9:29:2e:13:b9:18:19:5e:90:ab:f9:1c:88: 3f:b0:06:92:ce:f1:c5:df:25:56:1d:ed:a7:95:f3: a5:05:ee:43:3c:97:a6:00:d9:09:76:cd:44:1d:a4: 0a:d2:a3:7d:9a:c9:44:d8:31:bc:f4:e6:04:87:3a: 9a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:35:B9:50:45:75:14:1E:20:C4:A8:98:94:0A:A3:C4:16:3E:03:98 X509v3 Authority Key Identifier: keyid:7B:2D:9E:00:8C:C6:35:19:08:65:EC:64:FD:82:9B:33:BB:A1:EC:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:cc:6f:3e:11:69:b7:55:b9:5f:c8:a0:50:5a:3e:e0:64:09: 0b:9a:3f:bd:bf:2f:b4:cd:e0:d6:67:1a:1c:e2:50:2e:c4:1c: 9e:a0:95:cb:5a:10:13:de:87:03:7f:f6:68:2a:e0:e4:a3:e1: 57:2d:09:98:9d:55:d3:33:b9:63:af:e5:ed:f6:be:e8:e7:5e: 5c:d8:7f:45:35:ba:c7:de:cb:ad:fc:c5:40:4a:1a:28:4a:74: 90:de:df:c0:61:05:62:6c:b9:a7:12:17:c5:62:b8:e7:e5:76: 22:43:d5:11:79:e5:9b:6c:33:24:b3:93:db:fe:9a:d7:67:35: 5c:1b:90:ea:3e:20:ff:cf:05:f7:4b:24:f5:56:71:86:61:7d: 09:f6:f8:05:be:e2:7a:f6:01:36:24:5a:23:74:84:b8:03:39: a7:23:70:c3:a1:b7:82:ad:85:f4:47:64:96:79:8e:6c:01:ad: a1:08:c5:10:34:0f:7d:d0:5f:07:4f:b4:cc:d0:4d:de:4c:f2: 3b:b2:09:8e:1c:8a:7b:58:57:f6:72:d7:1a:3b:43:93:86:c6: 63:66:5c:9f:f6:7c:f5:d4:2a:a6:81:c8:5c:46:1b:a3:9d:ff: 5d:76:7a:95:12:4c:16:66:c2:29:d4:11:08:27:a2:b8:4e:70: c9:91:4c:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHO8KuLTUPQTchzV1HqxNtNJ9vmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IyRDlFMDA4Q0M2MzUxOTA4NjVFQzY0RkQ4MjlCMzNC QkExRUMwQTAeFw0yNjA5MjMyMjIzNDhaFw0yNjA5MjQyMzIxNDhaMDMxMTAvBgNV BAMTKDQ5MzVCOTUwNDU3NTE0MUUyMEM0QTg5ODk0MEFBM0M0MTYzRTAzOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEJBx2busTbhUrRzuRTENR+RoS RHFLGiLbOPA/ym6xCwEseznqbPcyBxYnk52F/1qIn8vbSs8IJO7PlvNtRE+XNbRh 45Uhs+p6AdnIKmxyNxE5E8zVT+2BwORW9shfc9oJoPAgkdPEwYi8xj3JOeUtL6Gl J0n2nnsQsVTitejDeFw8DfOQyCroSk1UJSa2W47ahDPxKJv/1POC9JuAKgjy6lH3 w4jchESm+bPzq8Sn3q69NyJ0mzRKi2brh+fbs5hUIoFvuSkuE7kYGV6Qq/kciD+w BpLO8cXfJVYd7aeV86UF7kM8l6YA2Ql2zUQdpArSo32ayUTYMbz05gSHOpqLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSTW5UEV1FB4gxKiYlAqjxBY+A5gwHwYDVR0j BBgwFoAUey2eAIzGNRkIZexk/YKbM7uh7AowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDU0NGU5NTEtM2QwOC00NThhLWE0NGEtNTI5ZDM4N2QyNmIxLzAvN0IyRDlFMDA4 Q0M2MzUxOTA4NjVFQzY0RkQ4MjlCMzNCQkExRUMwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QjJEOUUwMDhDQzYzNTE5MDg2NUVDNjRGRDgyOUIzM0JCQTFF QzBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDU0NGU5NTEtM2QwOC00NThhLWE0 NGEtNTI5ZDM4N2QyNmIxLzAvN0IyRDlFMDA4Q0M2MzUxOTA4NjVFQzY0RkQ4MjlC MzNCQkExRUMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACrMbz4RabdVuV/IoFBaPuBkCQuaP72/L7TN 4NZnGhziUC7EHJ6glctaEBPehwN/9mgq4OSj4VctCZidVdMzuWOv5e32vujnXlzY f0U1usfey638xUBKGihKdJDe38BhBWJsuacSF8ViuOfldiJD1RF55ZtsMySzk9v+ mtdnNVwbkOo+IP/PBfdLJPVWcYZhfQn2+AW+4nr2ATYkWiN0hLgDOacjcMOht4Kt hfRHZJZ5jmwBraEIxRA0D33QXwdPtMzQTd5M8juyCY4cintYV/Zy1xo7Q5OGxmNm XJ/2fPXUKqaByFxGG6Od/112epUSTBZmwinUEQgnorhOcMmRTMg= -----END CERTIFICATE-----Generated at Thu Sep 24 05:51:07 2026 by rpki-client