$ rpki-client -vvvf rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft File: 7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft (raw, json) Hash identifier: qhzdrHhgCkVo39B4+LKY/k5mTRNf8NEzcODCwCE3mCY= Subject key identifier: 07:99:9E:01:D6:19:1B:FF:14:3E:E7:0D:F8:3C:5D:58:63:9F:1B:A6 Authority key identifier: 7D:D6:B5:0A:2D:41:EA:EB:84:8E:7C:42:D7:4C:0D:77:D1:30:35:06 Certificate issuer: /CN=7DD6B50A2D41EAEB848E7C42D74C0D77D1303506 Certificate serial: 579898E96B7EEB69C63417E935A6E984B935A0BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 17:57:14 +0000 Manifest this update: Sat 26 Sep 2026 17:52:14 +0000 Manifest next update: Sun 27 Sep 2026 20:52:14 +0000 Files and hashes: 1: 3130332e3231342e3130332e302f32342d3234203d3e203634303237.roa (hash: 5sujLlpuj+APYEuCGGPMp2IaRJT57klQE6sCBEbziO0=) 2: 7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.crl (hash: EQIzEbWHIXscoMoueImXILGz5hdd/4WKZxhdEgQwfJA=) 3: 3130332e3231342e3130322e302f32342d3234203d3e203634303237.roa (hash: Hn5EuMtGipfFtFBXzkyifRq2Ky/xfbDimmF9AiNLLbY=) 4: 3130332e3231342e3130302e302f32342d3234203d3e203634303237.roa (hash: X2e4T35qCspph/xtXp3KyS/o17wZ6E0HRD0EGkuu3j4=) 5: 3130332e3231342e3130312e302f32342d3234203d3e203634303237.roa (hash: e18vtFsO2rq7V5cmuPD5QY+txt6xvfQ7TNg+W5usCFI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.crl rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:98:98:e9:6b:7e:eb:69:c6:34:17:e9:35:a6:e9:84:b9:35:a0:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DD6B50A2D41EAEB848E7C42D74C0D77D1303506 Validity Not Before: Sep 26 17:52:14 2026 GMT Not After : Sep 27 20:52:14 2026 GMT Subject: CN=07999E01D6191BFF143EE70DF83C5D58639F1BA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ed:2e:e3:3f:eb:6a:c4:4d:52:a2:5e:93:45: 20:ff:d2:f8:39:60:a2:b4:08:95:6f:d2:f5:07:45: 60:e1:17:72:1b:84:34:13:f1:0f:46:76:ef:68:93: 96:53:04:05:38:6e:1a:2e:3a:df:c1:86:d1:26:c5: 13:de:73:09:f8:d4:43:c7:0b:c2:58:1d:43:71:53: 7f:ee:22:56:a2:53:d2:7a:43:8a:fb:e8:9e:87:de: 50:bf:d7:16:57:c9:66:d8:57:77:2b:c3:f2:10:be: 49:d9:8d:74:b3:cc:0b:93:f1:43:0c:65:e9:71:12: 9c:bc:b2:c6:d0:c6:5f:1b:62:42:4d:12:9d:b9:d1: fb:4a:2e:53:ca:d2:28:de:00:36:6c:b3:4d:48:33: 61:b6:f4:f8:3c:db:70:84:8a:ca:60:0c:86:cf:c0: 0b:52:64:7c:9a:fa:35:fd:f7:23:70:92:0c:32:fa: c0:cb:8c:8a:2e:ec:69:bd:51:29:43:02:d1:68:ef: b6:33:03:87:8d:80:ec:14:24:36:3c:12:0b:62:e5: 55:b0:35:3a:32:a5:c2:67:a8:1f:d1:cc:af:65:8d: 69:7a:2e:7f:9b:40:d2:12:e8:c5:fd:d3:e7:eb:7c: 56:9c:0e:92:ff:9b:63:2a:cb:54:e3:4f:a5:8d:31: 0f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:99:9E:01:D6:19:1B:FF:14:3E:E7:0D:F8:3C:5D:58:63:9F:1B:A6 X509v3 Authority Key Identifier: keyid:7D:D6:B5:0A:2D:41:EA:EB:84:8E:7C:42:D7:4C:0D:77:D1:30:35:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:93:a3:60:24:12:15:8a:03:90:37:e3:0e:0d:8b:9e:e4:53: 47:3b:be:c6:c8:37:3a:dc:52:3e:e1:3a:55:3d:8f:fa:95:73: 58:76:7b:1d:52:58:ed:a6:2a:95:4e:9a:7b:4a:01:02:65:26: 7f:e0:76:3e:88:16:fa:68:44:1a:84:d1:d5:35:02:af:e5:4c: 81:22:92:8b:3a:68:a2:ce:2b:1f:c3:ae:4b:ec:6b:6f:2e:4e: e9:64:c2:1a:34:c9:9f:77:ee:e6:f8:7f:49:0c:a7:6c:5d:98: 44:36:42:db:9b:d5:2a:ac:ed:81:34:57:67:39:68:26:9f:1b: fd:89:55:49:fd:91:e5:57:c0:8b:ed:2f:9e:b1:63:40:a1:45: 85:d8:e8:53:40:d1:0e:8b:98:97:ce:f1:4d:f3:4b:80:0d:e5: 91:ee:a4:02:22:2e:ba:dd:9b:5b:be:c5:df:24:c9:e7:47:09: f8:26:a5:47:c8:bc:03:34:53:90:9c:1d:f9:ce:ed:bc:87:7f: 92:8d:56:e6:2c:ab:cf:64:31:6f:22:9d:e1:05:c2:a8:fb:27: 9c:fa:ba:43:2c:6b:1e:e0:50:4e:0c:53:39:8a:87:2e:2a:08: f6:1d:8c:8d:a6:c6:90:67:72:8b:8c:16:d6:33:d0:f6:45:c0: e6:0b:c8:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV5iY6Wt+62nGNBfpNabphLk1oLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RENkI1MEEyRDQxRUFFQjg0OEU3QzQyRDc0QzBENzdE MTMwMzUwNjAeFw0yNjA5MjYxNzUyMTRaFw0yNjA5MjcyMDUyMTRaMDMxMTAvBgNV BAMTKDA3OTk5RTAxRDYxOTFCRkYxNDNFRTcwREY4M0M1RDU4NjM5RjFCQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+7S7jP+tqxE1Sol6TRSD/0vg5 YKK0CJVv0vUHRWDhF3IbhDQT8Q9Gdu9ok5ZTBAU4bhouOt/BhtEmxRPecwn41EPH C8JYHUNxU3/uIlaiU9J6Q4r76J6H3lC/1xZXyWbYV3crw/IQvknZjXSzzAuT8UMM ZelxEpy8ssbQxl8bYkJNEp250ftKLlPK0ijeADZss01IM2G29Pg823CEispgDIbP wAtSZHya+jX99yNwkgwy+sDLjIou7Gm9USlDAtFo77YzA4eNgOwUJDY8Egti5VWw NToypcJnqB/RzK9ljWl6Ln+bQNIS6MX90+frfFacDpL/m2Mqy1TjT6WNMQ+NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB5meAdYZG/8UPucN+DxdWGOfG6YwHwYDVR0j BBgwFoAUfda1Ci1B6uuEjnxC10wNd9EwNQYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVlNTE4NzUtNTA4Ny00MjY0LWE4YmQtNDE1NmY1NWJhYWFiLzAvN0RENkI1MEEy RDQxRUFFQjg0OEU3QzQyRDc0QzBENzdEMTMwMzUwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83REQ2QjUwQTJENDFFQUVCODQ4RTdDNDJENzRDMEQ3N0QxMzAz NTA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVlNTE4NzUtNTA4Ny00MjY0LWE4 YmQtNDE1NmY1NWJhYWFiLzAvN0RENkI1MEEyRDQxRUFFQjg0OEU3QzQyRDc0QzBE NzdEMTMwMzUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALyTo2AkEhWKA5A34w4Ni57kU0c7vsbINzrc Uj7hOlU9j/qVc1h2ex1SWO2mKpVOmntKAQJlJn/gdj6IFvpoRBqE0dU1Aq/lTIEi kos6aKLOKx/Drkvsa28uTulkwho0yZ937ub4f0kMp2xdmEQ2Qtub1Sqs7YE0V2c5 aCafG/2JVUn9keVXwIvtL56xY0ChRYXY6FNA0Q6LmJfO8U3zS4AN5ZHupAIiLrrd m1u+xd8kyedHCfgmpUfIvAM0U5CcHfnO7byHf5KNVuYsq89kMW8ineEFwqj7J5z6 ukMsax7gUE4MUzmKhy4qCPYdjI2mxpBncouMFtYz0PZFwOYLyCo= -----END CERTIFICATE-----Generated at Sun Sep 27 08:34:42 2026 by rpki-client