$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft File: 7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft (raw, json) Hash identifier: wYQ6e6TeJNeaBq3/DEoiPrSdKe0B5QApJ4FfjMGDTdk= Subject key identifier: AD:ED:F7:03:9A:E7:50:C2:C0:6C:38:E9:0C:0C:17:2C:A8:F8:94:24 Authority key identifier: 7D:85:F0:FB:6A:61:D5:D2:2C:8F:36:D6:2F:E9:22:39:45:DA:30:90 Certificate issuer: /CN=7D85F0FB6A61D5D22C8F36D62FE9223945DA3090 Certificate serial: 64E1348A3EB111B1F50F9492C9FF15056B233735 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 14:59:23 +0000 Manifest this update: Thu 24 Sep 2026 14:54:23 +0000 Manifest next update: Fri 25 Sep 2026 17:21:23 +0000 Files and hashes: 1: 7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.crl (hash: vJCQCvSZpwS1VODbZyzrLttHZqMs09SyPVuAMec0BvM=) 2: 3230322e39342e38332e302f32342d3234203d3e203535363732.roa (hash: 02qGuHs8PWiwuegUDxDYjRjxgPk9hr8EhoopovjNuGM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.crl rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:e1:34:8a:3e:b1:11:b1:f5:0f:94:92:c9:ff:15:05:6b:23:37:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D85F0FB6A61D5D22C8F36D62FE9223945DA3090 Validity Not Before: Sep 24 14:54:23 2026 GMT Not After : Sep 25 17:21:23 2026 GMT Subject: CN=ADEDF7039AE750C2C06C38E90C0C172CA8F89424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:48:fb:fe:41:12:a6:47:ce:b1:56:6c:ee:4d: 4a:0e:28:e0:b6:bb:f4:b4:41:a6:ec:39:ed:90:c3: aa:3a:6d:c4:fb:67:84:28:f1:40:89:51:88:b4:3f: 82:65:67:a6:31:e7:7a:41:e3:d3:af:b9:60:d2:bd: 5d:45:ba:59:9a:62:fa:79:39:a1:7c:55:39:b6:a7: 35:f3:04:ae:ee:79:f6:6f:71:08:43:41:2c:ec:11: 5e:2f:8b:90:5e:a5:0f:9b:f2:80:f2:98:68:11:49: 21:05:8e:56:79:da:5c:3b:82:87:5b:c7:02:1b:b0: 9d:29:0c:8e:8b:50:48:39:e0:63:d5:d5:42:e8:9f: c2:ff:ee:69:89:56:91:6b:97:a1:c1:de:1d:ad:8f: 34:28:c9:bd:0a:cc:03:29:cd:c4:0f:f9:07:3f:70: e8:cd:28:54:6a:5b:3c:07:83:1b:a6:52:96:7a:a1: 12:e4:9f:bf:1c:4d:d6:74:4f:a2:68:5a:cf:2f:e5: f4:01:f1:27:49:ee:ba:e9:c4:e2:c1:66:ee:dc:fc: 0d:05:b3:4b:3d:e8:a2:31:c3:7d:e3:36:da:2e:16: f6:68:05:63:52:f8:74:04:86:44:b7:c2:76:6b:87: 77:ec:8e:d6:08:2b:a2:57:8d:27:3f:b5:51:0f:32: cb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:ED:F7:03:9A:E7:50:C2:C0:6C:38:E9:0C:0C:17:2C:A8:F8:94:24 X509v3 Authority Key Identifier: keyid:7D:85:F0:FB:6A:61:D5:D2:2C:8F:36:D6:2F:E9:22:39:45:DA:30:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:88:36:9a:c2:c3:18:96:97:8f:2a:a7:6a:34:af:ec:57:c2: 94:66:db:a5:22:2a:c4:ce:09:6f:08:89:a0:98:ff:f1:ba:2e: 11:6b:07:58:61:2e:c2:ac:c0:f3:4f:ca:58:29:83:92:cb:5a: 3f:d3:73:86:e3:ed:8c:09:cd:98:d3:e9:06:66:a0:0f:ad:a0: 04:3e:2f:95:06:f9:bf:8e:bf:77:f2:a8:0d:13:99:60:bf:89: a2:c8:b2:71:e2:de:3e:96:6d:f3:8d:2f:c1:da:1b:f0:93:ae: 87:a1:88:c2:ea:87:c6:37:d9:b6:0c:01:1f:47:2e:d1:c9:ac: 29:43:66:d3:7f:d1:5d:7a:b0:b9:26:c5:b9:e2:80:0d:b5:05: fc:ec:d0:84:a0:3d:33:6c:17:b0:30:c9:c7:30:02:8b:7f:27: b3:9e:c5:8e:7e:0c:4f:16:1f:74:61:86:a9:66:c6:32:7a:e0: 30:75:5e:a2:ca:ad:f0:43:3c:b0:18:63:39:41:19:be:75:e7: 9e:63:2c:00:23:08:c7:49:38:10:ce:06:3a:fb:2a:62:f1:29: 1d:38:a8:e0:db:69:7c:ef:3a:ad:64:d7:ac:2d:64:d0:5e:a6: 1d:e2:08:1d:fd:9b:86:b3:36:50:86:69:95:78:5a:fd:ff:20: be:dd:8c:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZOE0ij6xEbH1D5SSyf8VBWsjNzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q4NUYwRkI2QTYxRDVEMjJDOEYzNkQ2MkZFOTIyMzk0 NURBMzA5MDAeFw0yNjA5MjQxNDU0MjNaFw0yNjA5MjUxNzIxMjNaMDMxMTAvBgNV BAMTKEFERURGNzAzOUFFNzUwQzJDMDZDMzhFOTBDMEMxNzJDQThGODk0MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMSPv+QRKmR86xVmzuTUoOKOC2 u/S0QabsOe2Qw6o6bcT7Z4Qo8UCJUYi0P4JlZ6Yx53pB49OvuWDSvV1FulmaYvp5 OaF8VTm2pzXzBK7uefZvcQhDQSzsEV4vi5BepQ+b8oDymGgRSSEFjlZ52lw7godb xwIbsJ0pDI6LUEg54GPV1ULon8L/7mmJVpFrl6HB3h2tjzQoyb0KzAMpzcQP+Qc/ cOjNKFRqWzwHgxumUpZ6oRLkn78cTdZ0T6JoWs8v5fQB8SdJ7rrpxOLBZu7c/A0F s0s96KIxw33jNtouFvZoBWNS+HQEhkS3wnZrh3fsjtYIK6JXjSc/tVEPMsttAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUre33A5rnUMLAbDjpDAwXLKj4lCQwHwYDVR0j BBgwFoAUfYXw+2ph1dIsjzbWL+kiOUXaMJAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjhiNDQxYWQtZjFhYS00OGQzLTllZGItYjlhNWQ1Y2U5YmE4LzAvN0Q4NUYwRkI2 QTYxRDVEMjJDOEYzNkQ2MkZFOTIyMzk0NURBMzA5MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDg1RjBGQjZBNjFENUQyMkM4RjM2RDYyRkU5MjIzOTQ1REEz MDkwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjhiNDQxYWQtZjFhYS00OGQzLTll ZGItYjlhNWQ1Y2U5YmE4LzAvN0Q4NUYwRkI2QTYxRDVEMjJDOEYzNkQ2MkZFOTIy Mzk0NURBMzA5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6INprCwxiWl48qp2o0r+xXwpRm26UiKsTO CW8IiaCY//G6LhFrB1hhLsKswPNPylgpg5LLWj/Tc4bj7YwJzZjT6QZmoA+toAQ+ L5UG+b+Ov3fyqA0TmWC/iaLIsnHi3j6WbfONL8HaG/CTroehiMLqh8Y32bYMAR9H LtHJrClDZtN/0V16sLkmxbnigA21Bfzs0ISgPTNsF7AwyccwAot/J7OexY5+DE8W H3RhhqlmxjJ64DB1XqLKrfBDPLAYYzlBGb51555jLAAjCMdJOBDOBjr7KmLxKR04 qODbaXzvOq1k16wtZNBeph3iCB39m4azNlCGaZV4Wv3/IL7djKs= -----END CERTIFICATE-----Generated at Thu Sep 24 22:07:25 2026 by rpki-client