$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.mft File: C7B88124E27943001DCBEF12B94411DF803E6864.mft (raw, json) Hash identifier: iiJmVi64FAdAjBgZ4zELCXHxMbWHq2ZWjs73Wfew0uM= Subject key identifier: E9:47:C5:EF:D0:37:5D:39:FE:52:D4:14:59:E8:7B:09:0A:74:76:34 Authority key identifier: C7:B8:81:24:E2:79:43:00:1D:CB:EF:12:B9:44:11:DF:80:3E:68:64 Certificate issuer: /CN=C7B88124E27943001DCBEF12B94411DF803E6864 Certificate serial: 3FFFFD7C3597E928F9AF54B834AD8787F7B82A6D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7B88124E27943001DCBEF12B94411DF803E6864.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 07:50:21 +0000 Manifest this update: Thu 24 Sep 2026 07:45:21 +0000 Manifest next update: Fri 25 Sep 2026 10:47:21 +0000 Files and hashes: 1: 3130332e3134332e3139342e302f32342d3234203d3e20313339343135.roa (hash: VbZP5AlQJHoYGRcuhEjAa8Ztq6z5yJJSceEmBD6UPnQ=) 2: C7B88124E27943001DCBEF12B94411DF803E6864.crl (hash: 4/3B+TEMIZn7USZTnsvNisvykpN+Em1rnlV0b1VFkmc=) 3: 3130332e3134332e3139352e302f32342d3234203d3e20313339343135.roa (hash: nkkFu7O3K8B/AyuvsEsau+DSlTgImFo/RgKno+4L8tw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.crl rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7B88124E27943001DCBEF12B94411DF803E6864.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ff:fd:7c:35:97:e9:28:f9:af:54:b8:34:ad:87:87:f7:b8:2a:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7B88124E27943001DCBEF12B94411DF803E6864 Validity Not Before: Sep 24 07:45:21 2026 GMT Not After : Sep 25 10:47:21 2026 GMT Subject: CN=E947C5EFD0375D39FE52D41459E87B090A747634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:31:cf:e1:d2:26:dc:96:36:73:4e:4b:15:20: 48:c3:5c:77:c6:8e:65:5e:b1:bd:62:8b:b6:f0:d6: 87:4b:11:dd:6f:ae:3d:f7:82:55:ab:e7:6d:56:18: 3b:5c:94:29:b2:d7:b3:a2:17:2b:be:08:55:52:3f: 9d:b8:fb:b6:cd:ae:fb:10:49:85:55:a0:f3:5b:e6: ad:82:08:4d:d3:5a:f2:fb:58:5e:d5:6f:85:54:b2: a1:f8:51:79:24:9f:ea:e7:54:70:e2:8a:5f:6a:29: 1d:64:3a:e9:1c:76:14:dd:54:ea:32:3f:8c:81:a3: 39:e4:d2:96:09:a7:a2:6c:c0:38:0e:35:06:92:85: fe:3b:ee:58:55:0d:90:24:05:f3:a9:74:49:79:00: 40:11:56:a8:c8:c5:f7:85:78:8f:56:65:04:fe:0c: df:fd:3d:da:9b:43:3c:40:ad:aa:66:0f:84:de:f6: e1:b9:19:18:2f:32:db:ff:3d:63:8f:18:d3:d1:d4: b1:26:0a:41:d1:11:a0:bc:a9:46:97:4b:b5:7c:f5: 19:cf:a9:b5:94:6e:59:f4:60:ef:fa:e9:cd:92:f7: 66:54:fc:e0:45:5c:bb:f6:ae:a0:39:06:ef:41:af: 10:27:e8:8d:7d:b0:df:ef:9c:0b:d8:ec:5b:23:24: 63:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:47:C5:EF:D0:37:5D:39:FE:52:D4:14:59:E8:7B:09:0A:74:76:34 X509v3 Authority Key Identifier: keyid:C7:B8:81:24:E2:79:43:00:1D:CB:EF:12:B9:44:11:DF:80:3E:68:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7B88124E27943001DCBEF12B94411DF803E6864.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:7c:44:df:74:68:0a:15:b4:e5:05:23:bd:92:ed:25:cd:ce: 81:f3:d5:c8:b8:20:38:99:06:83:8a:20:cb:36:03:28:4c:17: a4:e7:d0:d8:ec:d7:08:dd:a5:9b:fa:e1:01:ee:00:eb:64:24: 21:d4:6c:a2:76:64:53:31:89:31:e3:0d:22:a1:8c:5b:98:eb: b7:2f:08:65:17:fa:f7:6e:4e:4c:99:3a:35:3b:4a:6e:23:10: a5:30:06:2a:e9:f6:fe:75:4e:56:2e:c5:fa:79:79:d0:41:3a: 50:b2:e1:a1:75:3e:0d:d0:19:b8:29:ab:df:3f:b3:4b:77:ad: 85:97:2f:24:5e:55:a3:3d:cd:01:74:47:1d:04:83:fa:33:0a: ee:84:c5:98:4f:4b:90:01:00:24:84:5f:95:5c:4c:ef:95:4d: 0a:f0:29:58:ae:ad:26:b1:09:e5:40:9e:36:74:86:3b:aa:a2: f3:92:84:72:bc:e5:79:0f:c6:9d:b9:51:b9:a8:e0:a1:d8:9f: c3:eb:b5:51:3f:0b:bb:ff:c5:f9:55:cb:e7:45:b4:36:01:3b: 8f:f8:b6:51:04:3f:18:d2:00:7a:1e:62:fa:1e:ff:d8:70:9e: df:8f:c3:b8:df:56:26:db:fa:06:08:35:a6:14:87:33:57:8f: 41:a7:5b:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP//9fDWX6Sj5r1S4NK2Hh/e4Km0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdCODgxMjRFMjc5NDMwMDFEQ0JFRjEyQjk0NDExREY4 MDNFNjg2NDAeFw0yNjA5MjQwNzQ1MjFaFw0yNjA5MjUxMDQ3MjFaMDMxMTAvBgNV BAMTKEU5NDdDNUVGRDAzNzVEMzlGRTUyRDQxNDU5RTg3QjA5MEE3NDc2MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbMc/h0ibcljZzTksVIEjDXHfG jmVesb1ii7bw1odLEd1vrj33glWr521WGDtclCmy17OiFyu+CFVSP524+7bNrvsQ SYVVoPNb5q2CCE3TWvL7WF7Vb4VUsqH4UXkkn+rnVHDiil9qKR1kOukcdhTdVOoy P4yBoznk0pYJp6JswDgONQaShf477lhVDZAkBfOpdEl5AEARVqjIxfeFeI9WZQT+ DN/9PdqbQzxArapmD4Te9uG5GRgvMtv/PWOPGNPR1LEmCkHREaC8qUaXS7V89RnP qbWUbln0YO/66c2S92ZU/OBFXLv2rqA5Bu9BrxAn6I19sN/vnAvY7FsjJGPRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6UfF79A3XTn+UtQUWeh7CQp0djQwHwYDVR0j BBgwFoAUx7iBJOJ5QwAdy+8SuUQR34A+aGQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjJlMDZmNzItMTMyMy00ZmJkLWIyNmUtOWVkOWE5YWRkODgwLzAvQzdCODgxMjRF Mjc5NDMwMDFEQ0JFRjEyQjk0NDExREY4MDNFNjg2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DN0I4ODEyNEUyNzk0MzAwMURDQkVGMTJCOTQ0MTFERjgwM0U2 ODY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjJlMDZmNzItMTMyMy00ZmJkLWIy NmUtOWVkOWE5YWRkODgwLzAvQzdCODgxMjRFMjc5NDMwMDFEQ0JFRjEyQjk0NDEx REY4MDNFNjg2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJ8RN90aAoVtOUFI72S7SXNzoHz1ci4IDiZ BoOKIMs2AyhMF6Tn0Njs1wjdpZv64QHuAOtkJCHUbKJ2ZFMxiTHjDSKhjFuY67cv CGUX+vduTkyZOjU7Sm4jEKUwBirp9v51TlYuxfp5edBBOlCy4aF1Pg3QGbgpq98/ s0t3rYWXLyReVaM9zQF0Rx0Eg/ozCu6ExZhPS5ABACSEX5VcTO+VTQrwKViurSax CeVAnjZ0hjuqovOShHK85XkPxp25Ubmo4KHYn8PrtVE/C7v/xflVy+dFtDYBO4/4 tlEEPxjSAHoeYvoe/9hwnt+Pw7jfVibb+gYINaYUhzNXj0GnWyc= -----END CERTIFICATE-----Generated at Thu Sep 24 11:44:16 2026 by rpki-client