$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft File: B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft (raw, json) Hash identifier: 9x9oK2zjoXsRZ/lDMKMJRAh21qm38PdwfKOzCVNPCDQ= Subject key identifier: 7F:70:EA:FC:2D:AA:18:AE:BC:21:19:87:65:B0:3F:2A:F3:50:A5:51 Authority key identifier: B7:AC:AC:8C:1A:6D:56:7C:70:21:67:C3:BF:5D:55:DC:A8:06:1D:09 Certificate issuer: /CN=B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09 Certificate serial: 45A0EF6DF312301688E064AF2300E97FB720C7BF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 09:33:01 +0000 Manifest this update: Wed 23 Sep 2026 09:28:01 +0000 Manifest next update: Thu 24 Sep 2026 10:23:01 +0000 Files and hashes: 1: B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.crl (hash: p7xIFUBVM07pg5KZ5wrybgAAzdj/qaabWIlRailnxjk=) 2: 3130332e34322e3131372e302f32342d3234203d3e20313431393638.roa (hash: D+vBT8RjuXQRENNs+sRNnv0u+qOPPua7Ci6xauViEhY=) 3: 3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa (hash: LFwbkJ+ntBwxqtVdCPUurrC+Hhb3oO3C1dGEk8iDIYc=) 4: 3130332e34322e3131392e302f32342d3234203d3e203234353139.roa (hash: 3thO/9yyE41CicpFLtHQ75Nw909jV+2QY8QpbmSrjas=) 5: 3130332e34322e3131362e302f32322d3232203d3e203234353139.roa (hash: iaB2BU40NYYT5gzoU2/HVHmJ1OLrV8vuDA/NUX6fKHM=) 6: 3130332e34322e3131382e302f32342d3234203d3e203234353139.roa (hash: UiQg2uhClOmxDzilityVFDsUTcFwNoOe65yL07fwsrE=) 7: 3130332e34322e3131382e302f32332d3233203d3e203234353139.roa (hash: LUmG2PnUdmtlekMQPkmF2jVlBr5BwiDl1Q3zaubpydY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.crl rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:a0:ef:6d:f3:12:30:16:88:e0:64:af:23:00:e9:7f:b7:20:c7:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09 Validity Not Before: Sep 23 09:28:01 2026 GMT Not After : Sep 24 10:23:01 2026 GMT Subject: CN=7F70EAFC2DAA18AEBC21198765B03F2AF350A551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:96:87:c1:7c:9b:6f:21:64:6b:93:55:af:82: 95:8e:78:df:9e:6f:88:c5:5f:ae:55:e9:4a:cf:6f: ad:ae:1b:ff:58:87:33:03:5a:f4:c0:58:55:be:12: 34:51:07:ee:aa:2e:06:f3:7c:48:28:52:7a:f1:a0: ca:55:ae:13:69:04:0f:ef:82:19:dc:23:9f:55:7d: 6d:22:a8:e5:4c:34:a5:0f:71:24:82:13:10:d4:4d: cc:46:58:e9:22:84:02:06:ea:dd:e7:17:54:06:b0: cf:56:ae:ed:9c:c3:8b:83:e7:eb:ad:ef:2b:a0:14: 30:81:80:26:66:13:05:42:e3:eb:bb:75:77:cb:03: c1:ee:8a:90:a3:c2:0d:77:22:7d:f5:c7:74:70:ab: ce:d6:56:f1:6e:07:97:08:af:f2:b5:ec:02:b8:4d: 34:bd:e8:6d:5b:8e:46:cc:6b:a8:b4:13:cd:64:29: ad:b3:81:91:22:ed:00:50:2f:bf:56:b6:db:b4:2a: da:d0:fb:5d:61:39:fe:89:d4:40:8f:a5:d2:65:16: 36:d2:32:a6:1a:04:94:1f:b9:5e:69:19:ff:1f:22: e2:5e:fd:45:ae:13:67:0b:8e:a2:ab:8e:2a:0d:f4: 90:8e:2c:3b:40:a9:5f:d3:a5:92:94:d0:11:84:5a: 1c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:70:EA:FC:2D:AA:18:AE:BC:21:19:87:65:B0:3F:2A:F3:50:A5:51 X509v3 Authority Key Identifier: keyid:B7:AC:AC:8C:1A:6D:56:7C:70:21:67:C3:BF:5D:55:DC:A8:06:1D:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:76:30:8d:64:a6:75:77:4e:02:0c:97:5e:6a:66:e6:8d:3f: 9e:f9:8c:20:06:73:7a:f6:82:4b:c3:a3:63:f6:d1:c8:9e:54: 57:d3:12:39:9d:fe:b8:7b:bb:01:03:bd:6c:23:d1:0f:99:3e: c7:c2:af:aa:68:37:95:2d:71:6b:e4:7f:1e:e3:5b:2b:cd:29: 1c:53:79:79:df:e9:5a:ad:4e:d4:24:05:83:14:03:68:40:a9: d6:9a:20:b7:00:5c:f6:2b:a7:cc:a5:bc:59:3c:08:36:61:f7: 3e:7c:f1:31:df:9f:c6:bd:7f:a9:aa:7e:27:77:88:72:ea:59: 20:1a:ca:50:68:9f:5e:dc:58:09:75:93:21:68:ad:18:df:29: dd:39:f3:58:84:3f:19:18:8a:a0:f0:96:d6:71:38:a5:d6:93: 2a:f1:d5:d3:ab:fb:12:cb:c6:d4:42:76:7a:af:59:47:40:df: c8:75:b6:f9:63:83:dd:8f:11:ef:cd:86:d8:c0:5c:9b:14:14: eb:f1:12:83:b3:f3:60:c2:9b:8f:6a:2f:51:b0:e9:40:83:9a: 8e:ab:70:0f:44:1f:9c:35:69:5d:9c:f3:29:96:5c:f7:e7:6b: 67:8d:3f:86:89:e7:50:73:d1:14:92:2b:36:60:fe:89:fe:c8: 63:17:4c:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURaDvbfMSMBaI4GSvIwDpf7cgx78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdBQ0FDOEMxQTZENTY3QzcwMjE2N0MzQkY1RDU1RENB ODA2MUQwOTAeFw0yNjA5MjMwOTI4MDFaFw0yNjA5MjQxMDIzMDFaMDMxMTAvBgNV BAMTKDdGNzBFQUZDMkRBQTE4QUVCQzIxMTk4NzY1QjAzRjJBRjM1MEE1NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2lofBfJtvIWRrk1WvgpWOeN+e b4jFX65V6UrPb62uG/9YhzMDWvTAWFW+EjRRB+6qLgbzfEgoUnrxoMpVrhNpBA/v ghncI59VfW0iqOVMNKUPcSSCExDUTcxGWOkihAIG6t3nF1QGsM9Wru2cw4uD5+ut 7yugFDCBgCZmEwVC4+u7dXfLA8HuipCjwg13In31x3Rwq87WVvFuB5cIr/K17AK4 TTS96G1bjkbMa6i0E81kKa2zgZEi7QBQL79Wttu0KtrQ+11hOf6J1ECPpdJlFjbS MqYaBJQfuV5pGf8fIuJe/UWuE2cLjqKrjioN9JCOLDtAqV/TpZKU0BGEWhyXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf3Dq/C2qGK68IRmHZbA/KvNQpVEwHwYDVR0j BBgwFoAUt6ysjBptVnxwIWfDv11V3KgGHQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY1ODkzNGQtMWIwMC00NDg5LTkyZWQtMWNhNmRjNGIyOTBmLzAvQjdBQ0FDOEMx QTZENTY3QzcwMjE2N0MzQkY1RDU1RENBODA2MUQwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0FDQUM4QzFBNkQ1NjdDNzAyMTY3QzNCRjVENTVEQ0E4MDYx RDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY1ODkzNGQtMWIwMC00NDg5LTky ZWQtMWNhNmRjNGIyOTBmLzAvQjdBQ0FDOEMxQTZENTY3QzcwMjE2N0MzQkY1RDU1 RENBODA2MUQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACd2MI1kpnV3TgIMl15qZuaNP575jCAGc3r2 gkvDo2P20cieVFfTEjmd/rh7uwEDvWwj0Q+ZPsfCr6poN5UtcWvkfx7jWyvNKRxT eXnf6VqtTtQkBYMUA2hAqdaaILcAXPYrp8ylvFk8CDZh9z588THfn8a9f6mqfid3 iHLqWSAaylBon17cWAl1kyForRjfKd0581iEPxkYiqDwltZxOKXWkyrx1dOr+xLL xtRCdnqvWUdA38h1tvljg92PEe/NhtjAXJsUFOvxEoOz82DCm49qL1Gw6UCDmo6r cA9EH5w1aV2c8ymWXPfna2eNP4aJ51Bz0RSSKzZg/on+yGMXTHo= -----END CERTIFICATE-----Generated at Thu Sep 24 01:06:35 2026 by rpki-client