$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft File: D7F0443E844F58413FEE61023C66F3C2AF619180.mft (raw, json) Hash identifier: OvTfHkRAcdH+B0HD3EfB5OJ7m86Y5Of/jNnmd5SZBBU= Subject key identifier: 9D:AB:56:DB:E4:CE:20:C5:68:A9:34:8C:D7:0D:D8:2F:CB:8B:3C:9C Authority key identifier: D7:F0:44:3E:84:4F:58:41:3F:EE:61:02:3C:66:F3:C2:AF:61:91:80 Certificate issuer: /CN=D7F0443E844F58413FEE61023C66F3C2AF619180 Certificate serial: 1FDCF1FF03213C2462916AC55E7C5B812AF94A21 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7F0443E844F58413FEE61023C66F3C2AF619180.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft Manifest number: BF Signing time: Wed 23 Sep 2026 23:04:33 +0000 Manifest this update: Wed 23 Sep 2026 22:59:33 +0000 Manifest next update: Fri 25 Sep 2026 02:03:33 +0000 Files and hashes: 1: D7F0443E844F58413FEE61023C66F3C2AF619180.crl (hash: Db6Zaagw+KXSAcJ4ecm7/uMXyVBCqcfPU7gT2t2VpLU=) 2: 3130332e35352e3235342e302f32332d3234203d3e20333936393832.roa (hash: 1gK99x1ItHrvOP2nffQyDA72Y2CbBGzEnTeDW6KjBoY=) 3: 3130332e35352e3235342e302f32342d3234203d3e20333936393832.roa (hash: m9XJT/DbxbJ6+jpB+KGYoQwi9JE9k1D/+aAA0o2JVf0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.crl rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7F0443E844F58413FEE61023C66F3C2AF619180.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:dc:f1:ff:03:21:3c:24:62:91:6a:c5:5e:7c:5b:81:2a:f9:4a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7F0443E844F58413FEE61023C66F3C2AF619180 Validity Not Before: Sep 23 22:59:33 2026 GMT Not After : Sep 25 02:03:33 2026 GMT Subject: CN=9DAB56DBE4CE20C568A9348CD70DD82FCB8B3C9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:84:a4:97:62:22:5b:83:b2:6b:a2:ff:f8:7c: f1:6a:4b:79:19:88:fe:b2:97:55:31:47:0c:f6:1b: d1:a2:a3:3b:e3:93:82:51:ea:96:8b:2a:fc:13:4b: 2d:ce:d1:72:8a:8b:82:b5:ab:f9:5c:9d:e2:fc:91: 3c:2a:4e:83:5a:7f:8e:7c:ba:2b:28:9d:de:43:5b: 33:60:f5:c2:fb:48:8a:02:8c:b1:98:de:01:a6:3a: 7d:a4:41:98:d0:65:c1:52:a3:89:92:24:5e:8f:67: e5:0d:e4:56:3b:32:3c:12:e6:56:7a:50:03:f2:26: 22:4a:80:96:d3:1f:e8:94:27:31:be:80:67:c7:6a: 99:c2:d9:a5:3f:f8:26:a0:0c:72:be:87:fa:89:86: 55:d8:84:6a:f1:b4:06:1e:f8:61:22:ee:58:ac:6f: 2c:b5:87:be:0f:e4:86:e0:ec:8c:c1:8a:fc:06:bb: a5:82:0b:4b:e4:62:48:53:3e:61:f9:38:dd:53:37: 26:ab:24:30:29:9c:a7:a0:4e:0e:5e:1a:e2:63:4b: 41:03:89:ef:f7:4e:c5:e5:88:ff:0c:9e:ed:ce:d2: 66:e2:93:0b:b8:ee:cb:6b:2a:ec:55:c6:e5:3b:d0: 3c:06:56:c3:db:6b:e2:f5:2c:5e:ea:05:23:61:2b: 24:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AB:56:DB:E4:CE:20:C5:68:A9:34:8C:D7:0D:D8:2F:CB:8B:3C:9C X509v3 Authority Key Identifier: keyid:D7:F0:44:3E:84:4F:58:41:3F:EE:61:02:3C:66:F3:C2:AF:61:91:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7F0443E844F58413FEE61023C66F3C2AF619180.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:23:71:1b:dc:fe:9c:c0:e6:28:22:01:8e:be:92:b8:1f:69: 9a:34:3b:26:f6:5c:91:f9:44:eb:a4:ec:c0:df:1a:36:11:1f: 43:1f:a1:85:40:28:72:b7:37:b5:7a:c0:f8:0b:c6:3f:1f:ce: c0:74:74:38:78:b1:3d:a8:31:b5:3c:11:83:53:23:e8:85:71: 4e:9b:1f:20:df:13:9a:03:3b:84:d4:6a:63:85:e7:b2:87:55: 71:ba:7f:af:1d:d5:bd:17:11:22:c2:b7:ee:9c:92:72:ca:4e: 8d:6b:fa:25:53:9e:b4:29:d1:ff:82:e0:7f:c7:71:09:01:87: c5:7b:2e:dc:b2:17:37:9b:50:91:ab:50:9d:f2:cb:05:a8:5c: 74:dd:a2:4a:95:c5:e8:73:42:52:f3:da:8e:43:fb:b4:aa:73: a7:3e:d9:9e:7d:64:4a:ec:a8:41:3d:f8:9c:5c:55:8a:52:f6: 6c:0a:bf:72:02:f2:ec:f6:4d:63:be:4c:77:53:6b:bb:6f:03: c1:5d:5b:bb:62:67:87:be:14:c4:78:21:8e:a4:e6:1f:bb:14: 14:1d:61:4b:66:ce:8a:f3:15:b6:31:82:1f:a9:a3:8f:3c:90: 6f:7d:16:17:16:78:fb:21:a3:c7:0b:3a:07:a4:7d:14:aa:3e: a1:b8:2a:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH9zx/wMhPCRikWrFXnxbgSr5SiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdGMDQ0M0U4NDRGNTg0MTNGRUU2MTAyM0M2NkYzQzJB RjYxOTE4MDAeFw0yNjA5MjMyMjU5MzNaFw0yNjA5MjUwMjAzMzNaMDMxMTAvBgNV BAMTKDlEQUI1NkRCRTRDRTIwQzU2OEE5MzQ4Q0Q3MEREODJGQ0I4QjNDOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3hKSXYiJbg7Jrov/4fPFqS3kZ iP6yl1UxRwz2G9Giozvjk4JR6paLKvwTSy3O0XKKi4K1q/lcneL8kTwqToNaf458 uisond5DWzNg9cL7SIoCjLGY3gGmOn2kQZjQZcFSo4mSJF6PZ+UN5FY7MjwS5lZ6 UAPyJiJKgJbTH+iUJzG+gGfHapnC2aU/+CagDHK+h/qJhlXYhGrxtAYe+GEi7lis byy1h74P5Ibg7IzBivwGu6WCC0vkYkhTPmH5ON1TNyarJDApnKegTg5eGuJjS0ED ie/3TsXliP8Mnu3O0mbikwu47strKuxVxuU70DwGVsPba+L1LF7qBSNhKyTDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnatW2+TOIMVoqTSM1w3YL8uLPJwwHwYDVR0j BBgwFoAU1/BEPoRPWEE/7mECPGbzwq9hkYAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2M2MzZhNDYtMzhmZi00NDk2LTk3MjEtOGMwM2NmMDQ2MzQ1LzAvRDdGMDQ0M0U4 NDRGNTg0MTNGRUU2MTAyM0M2NkYzQzJBRjYxOTE4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EN0YwNDQzRTg0NEY1ODQxM0ZFRTYxMDIzQzY2RjNDMkFGNjE5 MTgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2M2MzZhNDYtMzhmZi00NDk2LTk3 MjEtOGMwM2NmMDQ2MzQ1LzAvRDdGMDQ0M0U4NDRGNTg0MTNGRUU2MTAyM0M2NkYz QzJBRjYxOTE4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgjcRvc/pzA5igiAY6+krgfaZo0Oyb2XJH5 ROuk7MDfGjYRH0MfoYVAKHK3N7V6wPgLxj8fzsB0dDh4sT2oMbU8EYNTI+iFcU6b HyDfE5oDO4TUamOF57KHVXG6f68d1b0XESLCt+6cknLKTo1r+iVTnrQp0f+C4H/H cQkBh8V7LtyyFzebUJGrUJ3yywWoXHTdokqVxehzQlLz2o5D+7Sqc6c+2Z59ZErs qEE9+JxcVYpS9mwKv3IC8uz2TWO+THdTa7tvA8FdW7tiZ4e+FMR4IY6k5h+7FBQd YUtmzorzFbYxgh+po488kG99FhcWePsho8cLOgekfRSqPqG4KtE= -----END CERTIFICATE-----Generated at Thu Sep 24 19:45:47 2026 by rpki-client