$ rpki-client -vvvf rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.mft File: 7B9D20A52D1839E0A747B27E30961527317BE820.mft (raw, json) Hash identifier: ZEH/fj1G3uF3Aybuvii/bvHv3SzpdpBcsL87ArXJWtM= Subject key identifier: AF:B3:80:3F:71:8C:BB:67:01:6C:5F:BE:51:01:77:45:AB:5A:43:9C Authority key identifier: 7B:9D:20:A5:2D:18:39:E0:A7:47:B2:7E:30:96:15:27:31:7B:E8:20 Certificate issuer: /CN=7B9D20A52D1839E0A747B27E30961527317BE820 Certificate serial: 6FCACCEE467FDDC4E3401524F6CDBD3E1831D531 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B9D20A52D1839E0A747B27E30961527317BE820.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.mft Manifest number: D7 Signing time: Sat 10 Oct 2026 08:32:04 +0000 Manifest this update: Sat 10 Oct 2026 08:27:04 +0000 Manifest next update: Sun 11 Oct 2026 08:58:04 +0000 Files and hashes: 1: 3130332e3136392e3232342e302f32342d3234203d3e20313432333534.roa (hash: IMBAva6ocuxkrwvvR0kfzc9aYWdmyeGotwSFXr/8fyM=) 2: 3130332e3136392e3232352e302f32342d3234203d3e20313432333534.roa (hash: HIvBExvjcNL80TSt3Rk5JG3F8xg1VqZTRljgmRS5hK0=) 3: 7B9D20A52D1839E0A747B27E30961527317BE820.crl (hash: mrdHh29x4OpaOUSZo4tXX0IYMVeWMkx/R4fbmUvS8xc=) 4: 3130332e3136392e3232342e302f32332d3233203d3e20313432333534.roa (hash: d5BUk2IHCQz5cnQEHRFcfPlv6TvCXosv3ryqex1uhzo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.crl rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B9D20A52D1839E0A747B27E30961527317BE820.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 04:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:ca:cc:ee:46:7f:dd:c4:e3:40:15:24:f6:cd:bd:3e:18:31:d5:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B9D20A52D1839E0A747B27E30961527317BE820 Validity Not Before: Oct 10 08:27:04 2026 GMT Not After : Oct 11 08:58:04 2026 GMT Subject: CN=AFB3803F718CBB67016C5FBE51017745AB5A439C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:61:a2:fc:67:02:fc:ee:ec:7b:2f:73:31:0b: 21:5a:e7:3e:c6:23:58:99:e2:b0:ba:34:73:2a:c1: e4:ee:32:6e:5d:d6:5d:2f:81:09:b7:1f:f8:30:2e: 57:ae:a6:46:56:15:f9:6c:4b:e4:54:ba:62:af:ca: 0d:84:33:88:3b:36:fe:0e:3e:41:eb:4a:aa:e2:44: 39:f4:a3:4a:26:56:d0:27:37:65:0f:33:e9:66:b9: 44:77:6f:48:51:7e:e0:10:0a:0f:5d:a0:a0:5c:10: cf:eb:56:d6:62:5c:5e:ed:fa:bc:d1:1c:c3:82:33: 59:32:e3:86:c8:23:6e:c9:78:e7:33:8b:dd:e4:39: b6:fc:e7:6b:a1:4e:72:ee:a2:d2:d6:a6:9c:e9:5f: 68:5b:19:6c:74:2a:6c:19:1a:d9:35:f7:52:f0:5e: 20:de:a4:9e:d4:b0:5a:3f:79:60:aa:ef:2c:c6:f9: c6:f6:bd:2c:e9:3a:12:17:c7:84:0e:b1:e1:16:97: 50:86:1d:8d:b1:70:5b:f8:d5:27:c0:f5:ad:0d:cf: 11:80:ba:ef:e0:21:9a:28:ad:6e:26:82:ca:0d:e7: 7e:21:61:40:d2:3e:ff:bf:77:46:2e:7b:3d:a0:b7: e7:c8:72:ab:52:2e:a1:aa:24:f6:96:52:dd:8f:87: 74:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B3:80:3F:71:8C:BB:67:01:6C:5F:BE:51:01:77:45:AB:5A:43:9C X509v3 Authority Key Identifier: keyid:7B:9D:20:A5:2D:18:39:E0:A7:47:B2:7E:30:96:15:27:31:7B:E8:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B9D20A52D1839E0A747B27E30961527317BE820.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e8:15:2d:d1:82:58:39:56:a8:bf:c5:bb:d4:6c:c9:d1:09: 8b:f0:bd:32:78:e5:ce:e2:57:28:36:83:07:29:ea:3b:0c:e6: f5:bd:ff:a9:02:1d:91:23:5b:7f:8c:68:f7:fe:e1:9e:3a:bb: 13:75:ab:ab:f1:f3:d1:d8:3c:c1:e9:fa:13:8d:83:2e:9d:65: 61:69:b3:4e:b6:3d:e5:5b:60:99:03:5f:7b:ac:45:67:40:14: 67:28:8d:97:29:f9:3f:c8:ff:56:2f:fd:55:79:4f:99:d2:7f: d6:8a:d6:0f:10:4b:68:28:b8:b4:0a:c6:2d:53:01:47:a5:cd: f4:4b:3e:af:aa:6f:60:7a:0f:96:84:8b:ae:4d:0f:a4:c5:09: 4e:73:09:ac:3e:7a:ae:fd:32:d3:83:ab:f5:b0:f2:6b:17:10: e1:b0:1a:6b:df:85:1a:09:a4:ea:2e:2f:f9:3e:be:d8:89:a6: b0:f1:c5:fb:89:1a:a1:22:a7:6b:cb:62:8c:6f:12:b9:64:1f: 49:6e:3f:eb:28:46:f2:2a:d2:a6:6f:35:48:fc:81:7c:bf:eb: 22:ba:0d:7e:47:d0:56:45:f9:20:31:e9:88:88:a8:c5:05:11: a4:54:78:6c:54:0f:25:1a:34:bc:45:ca:e2:9e:08:f7:21:d7: 0f:ea:18:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb8rM7kZ/3cTjQBUk9s29Phgx1TEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I5RDIwQTUyRDE4MzlFMEE3NDdCMjdFMzA5NjE1Mjcz MTdCRTgyMDAeFw0yNjEwMTAwODI3MDRaFw0yNjEwMTEwODU4MDRaMDMxMTAvBgNV BAMTKEFGQjM4MDNGNzE4Q0JCNjcwMTZDNUZCRTUxMDE3NzQ1QUI1QTQzOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTYaL8ZwL87ux7L3MxCyFa5z7G I1iZ4rC6NHMqweTuMm5d1l0vgQm3H/gwLleupkZWFflsS+RUumKvyg2EM4g7Nv4O PkHrSqriRDn0o0omVtAnN2UPM+lmuUR3b0hRfuAQCg9doKBcEM/rVtZiXF7t+rzR HMOCM1ky44bII27JeOczi93kObb852uhTnLuotLWppzpX2hbGWx0KmwZGtk191Lw XiDepJ7UsFo/eWCq7yzG+cb2vSzpOhIXx4QOseEWl1CGHY2xcFv41SfA9a0NzxGA uu/gIZoorW4mgsoN534hYUDSPv+/d0Yuez2gt+fIcqtSLqGqJPaWUt2Ph3QPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr7OAP3GMu2cBbF++UQF3RataQ5wwHwYDVR0j BBgwFoAUe50gpS0YOeCnR7J+MJYVJzF76CAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZhZjRkZTUtNTAzNy00OTE3LTlhOTMtMDE5MmM2OTU5YmZiLzAvN0I5RDIwQTUy RDE4MzlFMEE3NDdCMjdFMzA5NjE1MjczMTdCRTgyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QjlEMjBBNTJEMTgzOUUwQTc0N0IyN0UzMDk2MTUyNzMxN0JF ODIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZhZjRkZTUtNTAzNy00OTE3LTlh OTMtMDE5MmM2OTU5YmZiLzAvN0I5RDIwQTUyRDE4MzlFMEE3NDdCMjdFMzA5NjE1 MjczMTdCRTgyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzoFS3Rglg5Vqi/xbvUbMnRCYvwvTJ45c7i Vyg2gwcp6jsM5vW9/6kCHZEjW3+MaPf+4Z46uxN1q6vx89HYPMHp+hONgy6dZWFp s062PeVbYJkDX3usRWdAFGcojZcp+T/I/1Yv/VV5T5nSf9aK1g8QS2gouLQKxi1T AUelzfRLPq+qb2B6D5aEi65ND6TFCU5zCaw+eq79MtODq/Ww8msXEOGwGmvfhRoJ pOouL/k+vtiJprDxxfuJGqEip2vLYoxvErlkH0luP+soRvIq0qZvNUj8gXy/6yK6 DX5H0FZF+SAx6YiIqMUFEaRUeGxUDyUaNLxFyuKeCPch1w/qGMs= -----END CERTIFICATE-----Generated at Sat Oct 10 22:29:46 2026 by rpki-client