$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft File: 7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft (raw, json) Hash identifier: fKKyndXmzaUWeWg9oMaJbBUQztc46AXvwx9sP1C0oTw= Subject key identifier: E4:67:20:6D:FC:4E:B6:03:B2:A4:81:C6:27:6F:2B:D8:1F:D5:5D:97 Authority key identifier: 7B:2D:9E:00:8C:C6:35:19:08:65:EC:64:FD:82:9B:33:BB:A1:EC:0A Certificate issuer: /CN=7B2D9E008CC635190865EC64FD829B33BBA1EC0A Certificate serial: 571DDDD28236F42584380620322A2AEFD32E463B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 15:24:49 +0000 Manifest this update: Thu 24 Sep 2026 15:19:49 +0000 Manifest next update: Fri 25 Sep 2026 16:11:49 +0000 Files and hashes: 1: 3130332e3133312e32392e302f32342d3234203d3e20313338303834.roa (hash: MUH5KpDAgVdYYC+MwQ+aBkJnISkDkljbuMC7PbGyf/c=) 2: 7B2D9E008CC635190865EC64FD829B33BBA1EC0A.crl (hash: Z8k63o4+hFzlOlrRZT+mC743Z45dNdXEVrOW840w04A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.crl rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:1d:dd:d2:82:36:f4:25:84:38:06:20:32:2a:2a:ef:d3:2e:46:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B2D9E008CC635190865EC64FD829B33BBA1EC0A Validity Not Before: Sep 24 15:19:49 2026 GMT Not After : Sep 25 16:11:49 2026 GMT Subject: CN=E467206DFC4EB603B2A481C6276F2BD81FD55D97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f1:40:89:99:a4:72:c6:cc:9f:fc:34:58:21: 49:4a:6c:d4:4f:a2:c6:bd:b3:5b:e3:45:16:cf:d9: a6:41:ce:3d:03:3d:9e:2f:14:71:15:ac:f1:16:ac: 7a:6f:d0:94:8b:79:56:0c:b1:fe:09:f9:19:64:bf: 49:1c:de:20:4b:72:c5:6c:f8:8a:df:5f:83:23:9f: cd:70:6e:f7:2e:02:4c:1d:a6:b3:ac:b0:fa:75:54: f6:ad:78:13:dd:b7:bc:6f:d5:55:88:fa:c1:1e:a6: 26:73:b4:f9:f3:55:61:7e:e6:24:58:84:ef:c1:6c: 3e:e1:26:12:da:61:9c:00:9f:be:73:6a:15:6e:5b: 28:3f:b8:c4:d3:76:11:f5:61:e4:6f:2a:7c:40:15: 7b:89:11:d1:a1:d2:77:31:7b:c4:9e:c6:06:3b:15: 26:9d:71:4a:1d:af:fd:bb:72:d0:2d:08:88:7f:3a: ef:8b:f9:9c:ac:60:9c:12:ab:f9:1b:74:c5:4f:46: a1:9a:27:49:d7:ad:25:1a:4d:5a:fe:ce:d2:94:60: 0b:5f:eb:eb:0d:81:1b:df:ef:09:9a:ac:71:60:ba: 8e:ad:10:4c:ca:81:ca:57:e3:7b:cb:97:42:7f:d5: 6b:45:3f:18:a6:94:b5:1d:47:66:37:c0:07:6c:81: b0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:67:20:6D:FC:4E:B6:03:B2:A4:81:C6:27:6F:2B:D8:1F:D5:5D:97 X509v3 Authority Key Identifier: keyid:7B:2D:9E:00:8C:C6:35:19:08:65:EC:64:FD:82:9B:33:BB:A1:EC:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:5e:ad:d1:0d:34:a9:07:b4:4a:fd:4f:26:ff:a4:a4:bd:57: 58:f7:c9:d1:42:09:8e:89:3a:e4:83:f1:9f:89:97:8c:03:4d: f6:f3:8c:c8:71:3e:64:c3:0e:55:ec:2b:e8:fb:d6:13:a4:bd: f8:7c:73:5f:be:f3:2a:8b:eb:60:5e:a3:91:99:bd:3e:a2:b9: 2f:a4:75:1c:56:85:5b:96:85:3f:f2:60:86:e9:8c:8b:5c:71: 36:b9:be:ac:d4:e8:ee:d6:c4:c7:85:2c:f3:4e:ae:1b:7c:c4: df:18:c7:52:52:ea:71:4d:79:8b:20:7a:5a:3f:94:6a:09:ba: 90:8d:27:fe:42:7e:41:e8:61:3c:86:7d:d4:25:33:f5:3f:74: 7f:15:ef:f2:60:cc:ce:ec:ba:91:1d:16:d4:6f:a1:ab:2b:54: 10:ae:95:ae:ae:e3:b3:ea:d9:ab:58:b8:eb:b6:b4:17:35:86: 08:cc:59:ea:0c:ad:1d:40:67:97:b4:47:d7:57:43:bb:16:1b: 68:64:cd:53:4b:75:4d:bc:ae:ee:82:f9:b0:63:b8:c4:d8:e6: 45:60:99:68:5e:06:85:19:21:f5:06:50:fe:6b:13:ae:e2:b3: da:bd:66:56:fa:11:9c:83:36:4b:4a:1d:9d:1e:b3:6a:c5:49: 89:9b:0c:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVx3d0oI29CWEOAYgMioq79MuRjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IyRDlFMDA4Q0M2MzUxOTA4NjVFQzY0RkQ4MjlCMzNC QkExRUMwQTAeFw0yNjA5MjQxNTE5NDlaFw0yNjA5MjUxNjExNDlaMDMxMTAvBgNV BAMTKEU0NjcyMDZERkM0RUI2MDNCMkE0ODFDNjI3NkYyQkQ4MUZENTVEOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCK8UCJmaRyxsyf/DRYIUlKbNRP osa9s1vjRRbP2aZBzj0DPZ4vFHEVrPEWrHpv0JSLeVYMsf4J+Rlkv0kc3iBLcsVs +IrfX4Mjn81wbvcuAkwdprOssPp1VPateBPdt7xv1VWI+sEepiZztPnzVWF+5iRY hO/BbD7hJhLaYZwAn75zahVuWyg/uMTTdhH1YeRvKnxAFXuJEdGh0ncxe8SexgY7 FSadcUodr/27ctAtCIh/Ou+L+ZysYJwSq/kbdMVPRqGaJ0nXrSUaTVr+ztKUYAtf 6+sNgRvf7wmarHFguo6tEEzKgcpX43vLl0J/1WtFPximlLUdR2Y3wAdsgbBtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5GcgbfxOtgOypIHGJ28r2B/VXZcwHwYDVR0j BBgwFoAUey2eAIzGNRkIZexk/YKbM7uh7AowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDU0NGU5NTEtM2QwOC00NThhLWE0NGEtNTI5ZDM4N2QyNmIxLzAvN0IyRDlFMDA4 Q0M2MzUxOTA4NjVFQzY0RkQ4MjlCMzNCQkExRUMwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QjJEOUUwMDhDQzYzNTE5MDg2NUVDNjRGRDgyOUIzM0JCQTFF QzBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDU0NGU5NTEtM2QwOC00NThhLWE0 NGEtNTI5ZDM4N2QyNmIxLzAvN0IyRDlFMDA4Q0M2MzUxOTA4NjVFQzY0RkQ4MjlC MzNCQkExRUMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5erdENNKkHtEr9Tyb/pKS9V1j3ydFCCY6J OuSD8Z+Jl4wDTfbzjMhxPmTDDlXsK+j71hOkvfh8c1++8yqL62Beo5GZvT6iuS+k dRxWhVuWhT/yYIbpjItccTa5vqzU6O7WxMeFLPNOrht8xN8Yx1JS6nFNeYsgelo/ lGoJupCNJ/5CfkHoYTyGfdQlM/U/dH8V7/JgzM7supEdFtRvoasrVBCula6u47Pq 2atYuOu2tBc1hgjMWeoMrR1AZ5e0R9dXQ7sWG2hkzVNLdU28ru6C+bBjuMTY5kVg mWheBoUZIfUGUP5rE67is9q9Zlb6EZyDNktKHZ0es2rFSYmbDI8= -----END CERTIFICATE-----Generated at Fri Sep 25 01:01:11 2026 by rpki-client