$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft File: 7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft (raw, json) Hash identifier: l67VZvCCq5V0Fcak2mugAkxxivDh3B9lV5sGCjRQ9PQ= Subject key identifier: 13:C8:D8:C2:7D:8B:EA:13:F5:E3:9B:EE:11:89:9B:C9:09:61:B5:B0 Authority key identifier: 7F:5C:ED:19:7F:7E:88:09:44:8C:D3:16:88:50:A9:AC:AB:A3:5B:CD Certificate issuer: /CN=7F5CED197F7E8809448CD3168850A9ACABA35BCD Certificate serial: 140ADA653C43C29B7B90937296A138F60823033E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 05:42:52 +0000 Manifest this update: Thu 24 Sep 2026 05:37:52 +0000 Manifest next update: Fri 25 Sep 2026 07:55:52 +0000 Files and hashes: 1: 3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa (hash: 0ceXQBT7nQVIUPaueWzFLm7bmqkvnlmzpOPpIKUeokk=) 2: 3135372e36362e3235302e302f32342d3234203d3e20313532373635.roa (hash: e9freSOl6ZanO/adGulxqpvEl7SzFc7wYY3wkhJg4CE=) 3: 7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl (hash: oex4fbOzc4xWjLzYo4xu1GdSCv+1lqbqZeTp4PosdeQ=) 4: 3135372e36362e3235312e302f32342d3234203d3e20313532373635.roa (hash: 67rdoMV01a3IGZ3053/VOVG/uiaYoOQVt0FRgDL8wn8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 07:55:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:0a:da:65:3c:43:c2:9b:7b:90:93:72:96:a1:38:f6:08:23:03:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F5CED197F7E8809448CD3168850A9ACABA35BCD Validity Not Before: Sep 24 05:37:52 2026 GMT Not After : Sep 25 07:55:52 2026 GMT Subject: CN=13C8D8C27D8BEA13F5E39BEE11899BC90961B5B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c3:4b:6a:a8:a7:1a:29:81:ad:a1:50:d1:55: e2:a4:96:6e:16:a3:a8:ac:3a:20:9c:c3:a0:43:98: 09:91:7e:8d:24:9a:a0:85:33:b9:cf:00:e6:a1:f7: 71:c0:df:cc:cb:24:fa:5e:69:08:24:ed:73:aa:b9: 1e:39:01:b1:cf:d3:2a:b9:5d:74:1c:5d:d6:1e:4d: 68:e4:8f:fd:d7:53:dc:0a:f3:98:9e:33:fd:71:cc: a7:93:23:17:dd:79:7b:f8:fa:64:2f:93:4b:d0:5d: 6d:d6:9d:c2:78:2c:ed:1e:69:c0:80:2e:ee:32:87: e1:a4:40:fc:20:fa:15:e4:bb:6f:a5:16:50:f2:16: 97:af:18:08:5f:9e:be:5a:9f:68:25:9b:9a:e4:3c: 33:a6:fc:b3:45:b8:6b:93:be:4b:93:17:08:1e:da: 37:36:b4:6d:f1:bb:93:67:e5:9d:f0:e3:98:b0:dc: 2c:e3:3e:28:0e:e7:51:79:a4:22:56:29:dc:5a:6f: 81:d7:f2:70:00:e6:15:bb:69:cb:ac:87:b0:11:00: e1:f4:19:40:5f:1f:87:23:a7:ba:d8:39:b5:e6:cd: 1f:41:1e:54:8e:24:df:8c:e4:d1:03:8d:e7:02:71: b0:42:eb:4a:bf:24:27:97:27:a0:3b:f9:c8:94:05: 77:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C8:D8:C2:7D:8B:EA:13:F5:E3:9B:EE:11:89:9B:C9:09:61:B5:B0 X509v3 Authority Key Identifier: keyid:7F:5C:ED:19:7F:7E:88:09:44:8C:D3:16:88:50:A9:AC:AB:A3:5B:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:0b:2a:b7:ae:e8:7d:5d:45:d7:67:46:5f:8e:11:de:3f:6c: c2:3d:79:94:f4:8a:38:ca:ab:c9:fb:5a:dc:b7:56:f2:b0:1e: 78:05:42:08:8f:86:64:b6:62:fc:5c:c3:fb:79:0d:a2:6a:74: c4:76:a2:63:e4:3c:bf:5c:2f:c1:39:8a:ec:45:67:9c:7a:65: 87:b5:79:c5:29:20:bc:e1:a3:d6:41:a0:8b:4a:3a:2f:55:db: 00:aa:38:76:6b:af:6e:c2:2b:5a:56:e2:f6:99:8a:4c:ab:b5: 73:74:ef:4c:9b:4e:bc:68:b5:33:01:a1:17:df:d0:5d:38:3c: 8b:af:ea:6d:cf:70:27:2a:d6:11:5b:b3:72:25:d0:73:21:c8: 30:97:da:3f:2c:3f:ed:83:72:e3:4d:61:53:3d:94:b1:ad:77: c9:87:16:78:fc:99:45:05:21:2a:e4:1f:ac:5f:e7:49:df:6b: 43:de:cf:a3:0c:aa:6e:c1:41:cc:3f:65:26:fc:cd:b3:18:f9: 29:51:a1:32:79:ad:eb:35:62:76:0b:b2:0f:bf:bb:27:75:31: e4:48:7e:30:74:87:e0:b8:18:d0:90:59:b7:8a:ea:a3:4a:7a: 95:60:87:6f:b2:d8:0d:d0:1f:5c:b1:13:c8:75:0c:56:b3:69: 06:4b:69:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFAraZTxDwpt7kJNylqE49ggjAz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y1Q0VEMTk3RjdFODgwOTQ0OENEMzE2ODg1MEE5QUNB QkEzNUJDRDAeFw0yNjA5MjQwNTM3NTJaFw0yNjA5MjUwNzU1NTJaMDMxMTAvBgNV BAMTKDEzQzhEOEMyN0Q4QkVBMTNGNUUzOUJFRTExODk5QkM5MDk2MUI1QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqw0tqqKcaKYGtoVDRVeKklm4W o6isOiCcw6BDmAmRfo0kmqCFM7nPAOah93HA38zLJPpeaQgk7XOquR45AbHP0yq5 XXQcXdYeTWjkj/3XU9wK85ieM/1xzKeTIxfdeXv4+mQvk0vQXW3WncJ4LO0eacCA Lu4yh+GkQPwg+hXku2+lFlDyFpevGAhfnr5an2glm5rkPDOm/LNFuGuTvkuTFwge 2jc2tG3xu5Nn5Z3w45iw3CzjPigO51F5pCJWKdxab4HX8nAA5hW7acush7ARAOH0 GUBfH4cjp7rYObXmzR9BHlSOJN+M5NEDjecCcbBC60q/JCeXJ6A7+ciUBXdRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE8jYwn2L6hP145vuEYmbyQlhtbAwHwYDVR0j BBgwFoAUf1ztGX9+iAlEjNMWiFCprKujW80wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjEyYmY4NjMtYTFmMC00MmQwLTllM2EtM2Y5ZmY2OWEyZDE1LzAvN0Y1Q0VEMTk3 RjdFODgwOTQ0OENEMzE2ODg1MEE5QUNBQkEzNUJDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83RjVDRUQxOTdGN0U4ODA5NDQ4Q0QzMTY4ODUwQTlBQ0FCQTM1 QkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjEyYmY4NjMtYTFmMC00MmQwLTll M2EtM2Y5ZmY2OWEyZDE1LzAvN0Y1Q0VEMTk3RjdFODgwOTQ0OENEMzE2ODg1MEE5 QUNBQkEzNUJDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsLKreu6H1dRddnRl+OEd4/bMI9eZT0ijjK q8n7Wty3VvKwHngFQgiPhmS2Yvxcw/t5DaJqdMR2omPkPL9cL8E5iuxFZ5x6ZYe1 ecUpILzho9ZBoItKOi9V2wCqOHZrr27CK1pW4vaZikyrtXN070ybTrxotTMBoRff 0F04PIuv6m3PcCcq1hFbs3Il0HMhyDCX2j8sP+2DcuNNYVM9lLGtd8mHFnj8mUUF ISrkH6xf50nfa0Pez6MMqm7BQcw/ZSb8zbMY+SlRoTJ5res1YnYLsg+/uyd1MeRI fjB0h+C4GNCQWbeK6qNKepVgh2+y2A3QH1yxE8h1DFazaQZLaWI= -----END CERTIFICATE-----Generated at Thu Sep 24 12:59:30 2026 by rpki-client