$ rpki-client -vvvf rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft File: B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft (raw, json) Hash identifier: 9sdxukqtujGtrNag804zed9m8FDaH0iTOSJ0lCWy5Ag= Subject key identifier: FE:3E:6A:D0:70:09:52:22:41:9A:29:22:9C:2D:12:31:8F:77:BC:C3 Authority key identifier: B7:B8:8E:63:A9:66:6B:D2:EC:77:AD:E3:2E:08:5A:C5:87:7A:84:C0 Certificate issuer: /CN=B7B88E63A9666BD2EC77ADE32E085AC5877A84C0 Certificate serial: 650B98FBD37B5A513BCF2DC01FFBA809041F11FB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 23:04:33 +0000 Manifest this update: Wed 23 Sep 2026 22:59:33 +0000 Manifest next update: Fri 25 Sep 2026 02:36:33 +0000 Files and hashes: 1: 3130332e3130322e3137372e302f32342d3234203d3e20313335343634.roa (hash: lSZEpn9P8SXdF4oANlJgFtpdNX8qaO0HeGHCAr1aP7E=) 2: B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl (hash: BffYD4vUyAH/kIE2ivMuMzhqAR3E9G5yB1f3GNw35bM=) 3: 3130332e37302e36382e302f32342d3234203d3e20313335343634.roa (hash: 7qm6JzeL/7hHG1DAohfubeGddIvVsEzpvxGKto8u6kI=) 4: 3130332e3130322e3136372e302f32342d3234203d3e20313335343634.roa (hash: Ly2+eHMG54yQYmvS+CQqaN+EkIOuz7zp9N0bR1H1740=) 5: 3130332e3130322e3137362e302f32342d3234203d3e20313335343634.roa (hash: +co2KhnhkyS+dd2WpG/hxO+d+62en7egKYIfJt2xtsw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:0b:98:fb:d3:7b:5a:51:3b:cf:2d:c0:1f:fb:a8:09:04:1f:11:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7B88E63A9666BD2EC77ADE32E085AC5877A84C0 Validity Not Before: Sep 23 22:59:33 2026 GMT Not After : Sep 25 02:36:33 2026 GMT Subject: CN=FE3E6AD070095222419A29229C2D12318F77BCC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d7:b9:12:e4:a3:f8:f6:07:24:07:49:eb:cc: bc:61:ef:10:43:5c:63:8f:8b:a3:c9:f8:56:d7:c2: 93:8d:cd:2e:a1:e7:7a:94:37:4a:08:ea:ea:7b:19: 46:b1:1e:a8:6d:d2:65:00:7b:df:0d:2c:2e:7a:4b: 46:45:b0:5a:86:82:8e:bd:7b:8d:cc:4a:d8:ad:c5: ec:18:b7:c9:78:d2:e7:51:33:d7:90:c6:b6:c1:9e: 07:17:c1:c5:3f:64:71:a1:97:57:d6:a3:85:92:d3: e6:ca:45:32:96:51:e0:4c:97:19:65:74:cd:de:fa: a9:da:0d:89:0b:8f:ad:33:4a:fd:3c:8e:aa:fd:fa: f4:14:c2:20:c4:6c:66:98:48:67:09:e4:98:7e:a6: c8:83:10:a5:1d:bd:3b:17:3d:8d:ee:8a:ce:f8:a8: 53:89:8a:20:70:fb:89:bb:58:71:bb:b7:ae:34:7d: 0c:20:d3:1d:ce:2c:f8:92:22:86:1a:48:3e:a3:0b: d7:6e:7b:62:eb:23:e8:e8:48:89:d8:72:97:78:fb: 2b:7c:49:1e:6f:97:07:d6:81:e8:dd:3c:50:83:ec: e5:47:47:d7:1e:86:c9:f1:98:fd:e5:ac:2d:8e:bc: 0f:f1:38:d4:a7:6d:4b:d3:f7:c0:0e:42:9a:e2:c7: 44:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:3E:6A:D0:70:09:52:22:41:9A:29:22:9C:2D:12:31:8F:77:BC:C3 X509v3 Authority Key Identifier: keyid:B7:B8:8E:63:A9:66:6B:D2:EC:77:AD:E3:2E:08:5A:C5:87:7A:84:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:bd:a3:70:16:5a:21:7c:e1:23:7e:07:67:78:3f:9e:91:4e: cf:dd:cf:66:09:84:f9:5f:6c:12:49:3a:da:44:b0:1d:7b:69: a2:60:e0:15:3c:17:07:62:d4:4c:6c:7a:2e:3a:8e:32:5f:a8: 41:a3:8c:3d:5b:90:81:a8:94:97:d1:11:9b:78:4f:db:90:c7: a5:38:c2:e1:23:a2:37:90:b4:55:e2:5d:c8:75:f9:a4:b4:dd: 1f:a4:3a:4b:bb:1b:e5:69:bf:ab:9b:f3:d8:62:2b:fe:f5:74: 7e:77:0c:b5:57:82:f6:ef:5f:3f:4d:92:e2:00:cc:97:88:bd: 49:94:fb:32:aa:05:65:db:77:5d:b1:8d:66:d6:71:fd:c8:e5: 12:7a:c6:59:8c:76:2a:e0:2e:61:60:99:46:7e:af:33:cb:f1: ee:0f:cc:6f:e2:4d:97:0d:c1:45:be:1e:c0:b8:da:72:4e:f1: 88:d0:81:97:e3:95:94:bc:26:c4:a4:89:e6:a2:d7:c5:43:3e: 60:7d:84:3c:85:be:f4:71:f2:09:b1:3b:ea:89:0a:22:70:02: 66:fc:5e:f4:0b:6b:28:07:f0:39:16:0c:14:fd:5e:d8:36:2f: 0e:a9:51:ae:0e:6a:d8:39:58:78:df:0e:88:5a:bf:3a:d7:ae: cb:2b:c5:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZQuY+9N7WlE7zy3AH/uoCQQfEfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdCODhFNjNBOTY2NkJEMkVDNzdBREUzMkUwODVBQzU4 NzdBODRDMDAeFw0yNjA5MjMyMjU5MzNaFw0yNjA5MjUwMjM2MzNaMDMxMTAvBgNV BAMTKEZFM0U2QUQwNzAwOTUyMjI0MTlBMjkyMjlDMkQxMjMxOEY3N0JDQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp17kS5KP49gckB0nrzLxh7xBD XGOPi6PJ+FbXwpONzS6h53qUN0oI6up7GUaxHqht0mUAe98NLC56S0ZFsFqGgo69 e43MStitxewYt8l40udRM9eQxrbBngcXwcU/ZHGhl1fWo4WS0+bKRTKWUeBMlxll dM3e+qnaDYkLj60zSv08jqr9+vQUwiDEbGaYSGcJ5Jh+psiDEKUdvTsXPY3uis74 qFOJiiBw+4m7WHG7t640fQwg0x3OLPiSIoYaSD6jC9due2LrI+joSInYcpd4+yt8 SR5vlwfWgejdPFCD7OVHR9cehsnxmP3lrC2OvA/xONSnbUvT98AOQprix0TRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/j5q0HAJUiJBmikinC0SMY93vMMwHwYDVR0j BBgwFoAUt7iOY6lma9Lsd63jLghaxYd6hMAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTE5YTg1MzgtZGE0My00MTU4LWFiYzItOGU2M2E4ZTQwODk5LzAvQjdCODhFNjNB OTY2NkJEMkVDNzdBREUzMkUwODVBQzU4NzdBODRDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0I4OEU2M0E5NjY2QkQyRUM3N0FERTMyRTA4NUFDNTg3N0E4 NEMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTE5YTg1MzgtZGE0My00MTU4LWFi YzItOGU2M2E4ZTQwODk5LzAvQjdCODhFNjNBOTY2NkJEMkVDNzdBREUzMkUwODVB QzU4NzdBODRDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAC9o3AWWiF84SN+B2d4P56RTs/dz2YJhPlf bBJJOtpEsB17aaJg4BU8Fwdi1Exsei46jjJfqEGjjD1bkIGolJfREZt4T9uQx6U4 wuEjojeQtFXiXch1+aS03R+kOku7G+Vpv6ub89hiK/71dH53DLVXgvbvXz9NkuIA zJeIvUmU+zKqBWXbd12xjWbWcf3I5RJ6xlmMdirgLmFgmUZ+rzPL8e4PzG/iTZcN wUW+HsC42nJO8YjQgZfjlZS8JsSkieai18VDPmB9hDyFvvRx8gmxO+qJCiJwAmb8 XvQLaygH8DkWDBT9Xtg2Lw6pUa4Oatg5WHjfDohavzrXrssrxeQ= -----END CERTIFICATE-----Generated at Thu Sep 24 08:40:24 2026 by rpki-client