$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.mft File: 07DE2856EE772937B8A7AD863D63341E1041C169.mft (raw, json) Hash identifier: VpUV5vBqrGHf73nNEjZ9r5/Ebddk1rOG/3PjYy3QivM= Subject key identifier: 70:0C:08:84:F0:E7:EF:20:C9:1A:8D:E6:80:9D:09:10:E4:60:76:00 Authority key identifier: 07:DE:28:56:EE:77:29:37:B8:A7:AD:86:3D:63:34:1E:10:41:C1:69 Certificate issuer: /CN=07DE2856EE772937B8A7AD863D63341E1041C169 Certificate serial: 189E10FA0A65B7657A766E49430F63552DBADF00 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/07DE2856EE772937B8A7AD863D63341E1041C169.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 10:23:59 +0000 Manifest this update: Wed 23 Sep 2026 10:18:59 +0000 Manifest next update: Thu 24 Sep 2026 12:22:59 +0000 Files and hashes: 1: 3135372e31352e3134342e302f32332d3233203d3e20313532333736.roa (hash: BaGODEcb9GjhGRZiHNCRqzvhrdvwdr18tYlKlyT9Rpg=) 2: 07DE2856EE772937B8A7AD863D63341E1041C169.crl (hash: 7qlt4xV0bDBCSUYuXakDE4Dkyclk3GTPEAPzcf3T3AM=) 3: 3135372e31352e3134352e302f32342d3234203d3e20313532333736.roa (hash: BjELFCipYQ5Q+BtKi2neiDtQ5aM5iD6aEteAOOyN4vE=) 4: 3135372e31352e3134342e302f32342d3234203d3e20313532333736.roa (hash: xwruyCGg4a4DpEUZcfdSd3a7y9zRV90KgcSqE6gjaBo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.crl rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/07DE2856EE772937B8A7AD863D63341E1041C169.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 12:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:9e:10:fa:0a:65:b7:65:7a:76:6e:49:43:0f:63:55:2d:ba:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07DE2856EE772937B8A7AD863D63341E1041C169 Validity Not Before: Sep 23 10:18:59 2026 GMT Not After : Sep 24 12:22:59 2026 GMT Subject: CN=700C0884F0E7EF20C91A8DE6809D0910E4607600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1d:7b:d0:49:47:23:3c:a7:4e:52:9d:99:8b: a7:f3:ac:96:41:89:06:94:55:bb:2b:09:31:ab:46: af:93:f8:c1:55:10:ea:9c:d4:09:79:2f:86:e7:07: 84:b3:36:be:a1:96:43:19:cb:f5:07:fb:95:68:e9: 05:2a:ff:32:33:fa:a8:6a:32:64:80:a0:14:35:1b: 4f:e3:8c:9d:c5:b0:2a:34:c3:a3:f0:12:d2:a5:74: cb:bc:6d:39:92:6f:a3:d4:8c:6e:7a:76:60:f7:a3: 44:63:e0:30:db:43:74:69:c2:d7:69:5f:e0:46:6f: 6f:71:e4:59:c2:1e:7c:c6:38:ca:c6:05:a8:7a:30: 26:bc:e5:b6:63:03:12:0e:1d:3a:f9:23:91:00:c9: 94:ac:3c:ec:5e:a7:58:12:2a:9b:d3:ee:84:91:19: 14:25:25:5c:97:e7:18:5c:e9:82:13:57:d0:95:48: 07:8f:7b:6b:08:81:da:9d:e7:8a:8c:e9:19:11:bd: a6:8a:f2:cd:11:87:80:14:77:f4:45:db:b3:ff:b1: 71:70:c2:f2:97:4b:7e:4e:29:a1:22:7c:4c:93:c7: e2:80:28:f5:49:df:db:af:09:72:8b:a9:80:93:e3: 3c:53:68:05:0f:e5:b7:33:d1:ac:31:8f:f0:11:41: 71:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0C:08:84:F0:E7:EF:20:C9:1A:8D:E6:80:9D:09:10:E4:60:76:00 X509v3 Authority Key Identifier: keyid:07:DE:28:56:EE:77:29:37:B8:A7:AD:86:3D:63:34:1E:10:41:C1:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/07DE2856EE772937B8A7AD863D63341E1041C169.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:47:f6:89:2c:bd:72:24:58:f9:f3:6c:5d:a6:1c:af:2c:ba: 67:06:9d:79:c1:75:09:b8:51:7a:1e:09:fb:3e:2c:b3:99:cc: 45:6f:1c:50:f3:32:1d:78:c6:7f:b9:bc:d3:7f:33:b4:e1:f0: f5:cd:0f:9d:a7:d7:d5:49:ab:5d:7a:37:aa:62:cc:5a:03:e6: 90:d2:d4:9d:5b:cb:fc:19:f0:af:77:8c:e7:b8:4f:c2:12:9e: 89:5d:bc:df:9b:8c:4a:26:c1:0e:68:75:d3:9d:68:39:b7:5a: ca:d5:64:5e:bb:01:4d:cf:8e:ab:be:9c:7b:e0:8b:4d:d7:c9: e2:87:53:3a:80:44:e3:85:e9:50:29:f4:8c:44:eb:79:e5:18: 4b:c9:3c:6b:32:94:17:c9:45:93:8b:dc:c6:c8:26:92:bb:83: ac:10:4a:04:07:9f:9e:b4:30:d9:bd:26:9e:3e:9b:db:bf:03: 8f:4f:f3:0a:51:c1:2f:c5:ee:88:dc:4b:aa:4d:e6:b4:a5:65: 1f:e5:11:66:eb:0e:61:39:8f:2b:d0:90:1a:88:63:78:3c:38: 44:be:09:ef:7a:d1:c0:9f:90:93:5a:3a:27:e6:73:6d:a6:43: 9d:0e:3d:af:e3:52:05:7a:9f:4e:74:65:a1:4c:e7:33:49:48: 4b:cb:fc:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGJ4Q+gplt2V6dm5JQw9jVS263wAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDdERTI4NTZFRTc3MjkzN0I4QTdBRDg2M0Q2MzM0MUUx MDQxQzE2OTAeFw0yNjA5MjMxMDE4NTlaFw0yNjA5MjQxMjIyNTlaMDMxMTAvBgNV BAMTKDcwMEMwODg0RjBFN0VGMjBDOTFBOERFNjgwOUQwOTEwRTQ2MDc2MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaHXvQSUcjPKdOUp2Zi6fzrJZB iQaUVbsrCTGrRq+T+MFVEOqc1Al5L4bnB4SzNr6hlkMZy/UH+5Vo6QUq/zIz+qhq MmSAoBQ1G0/jjJ3FsCo0w6PwEtKldMu8bTmSb6PUjG56dmD3o0Rj4DDbQ3Rpwtdp X+BGb29x5FnCHnzGOMrGBah6MCa85bZjAxIOHTr5I5EAyZSsPOxep1gSKpvT7oSR GRQlJVyX5xhc6YITV9CVSAePe2sIgdqd54qM6RkRvaaK8s0Rh4AUd/RF27P/sXFw wvKXS35OKaEifEyTx+KAKPVJ39uvCXKLqYCT4zxTaAUP5bcz0awxj/ARQXFxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcAwIhPDn7yDJGo3mgJ0JEORgdgAwHwYDVR0j BBgwFoAUB94oVu53KTe4p62GPWM0HhBBwWkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU2ZWNjYjctZTkxNy00MGY1LWFjZWUtMDNkNjhiZTVmZDk3LzAvMDdERTI4NTZF RTc3MjkzN0I4QTdBRDg2M0Q2MzM0MUUxMDQxQzE2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wN0RFMjg1NkVFNzcyOTM3QjhBN0FEODYzRDYzMzQxRTEwNDFD MTY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU2ZWNjYjctZTkxNy00MGY1LWFj ZWUtMDNkNjhiZTVmZDk3LzAvMDdERTI4NTZFRTc3MjkzN0I4QTdBRDg2M0Q2MzM0 MUUxMDQxQzE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdH9oksvXIkWPnzbF2mHK8sumcGnXnBdQm4 UXoeCfs+LLOZzEVvHFDzMh14xn+5vNN/M7Th8PXND52n19VJq116N6pizFoD5pDS 1J1by/wZ8K93jOe4T8ISnoldvN+bjEomwQ5oddOdaDm3WsrVZF67AU3Pjqu+nHvg i03XyeKHUzqAROOF6VAp9IxE63nlGEvJPGsylBfJRZOL3MbIJpK7g6wQSgQHn560 MNm9Jp4+m9u/A49P8wpRwS/F7ojcS6pN5rSlZR/lEWbrDmE5jyvQkBqIY3g8OES+ Ce960cCfkJNaOifmc22mQ50OPa/jUgV6n050ZaFM5zNJSEvL/AA= -----END CERTIFICATE-----Generated at Wed Sep 23 17:52:31 2026 by rpki-client