$ rpki-client -vvvf rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft File: 7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft (raw, json) Hash identifier: idq5qvWlrcFvpd2/TSL4OlwzkDqxl4CxHIqjUOCDE5s= Subject key identifier: FB:47:D6:AA:DD:06:BC:92:47:E9:B9:23:AE:27:3C:77:00:6A:32:56 Authority key identifier: 7F:88:97:9F:15:7A:73:BC:13:FC:5A:3D:5B:9C:76:CB:3A:2B:3E:31 Certificate issuer: /CN=7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31 Certificate serial: 68F28033C744F110BFD40B595E7C433E0C62FDE4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 23:55:39 +0000 Manifest this update: Wed 23 Sep 2026 23:50:39 +0000 Manifest next update: Fri 25 Sep 2026 03:10:39 +0000 Files and hashes: 1: 323430353a666134303a3a2f33322d3438203d3e20313430333930.roa (hash: HUZNs1iD5swAwh/g3qINc50EKHQkckdyfTFIx7Aj1lM=) 2: 3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa (hash: 8HCIw7CZYRIarfxox7lXQ/MdAlePE93YlMnPKUyebGg=) 3: 7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.crl (hash: KV6vkf6PdBP1Qs9wQ97wG3Yrbz6ahQy+dJ2OFCD7dik=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.crl rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:f2:80:33:c7:44:f1:10:bf:d4:0b:59:5e:7c:43:3e:0c:62:fd:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31 Validity Not Before: Sep 23 23:50:39 2026 GMT Not After : Sep 25 03:10:39 2026 GMT Subject: CN=FB47D6AADD06BC9247E9B923AE273C77006A3256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:68:dd:de:73:99:35:5c:5c:cb:03:2a:4d:66: aa:40:58:72:68:68:2b:a2:62:b0:1c:ff:92:b9:ab: cc:89:4c:ed:c5:84:6f:92:a0:cc:87:d9:c8:b7:a5: 09:d1:4e:c3:12:38:08:46:27:8c:88:c7:d0:f0:a2: 17:a4:d8:c0:82:e0:5b:c1:2d:bc:f0:97:0b:36:ac: e0:18:1a:54:e4:73:d0:de:a4:86:69:e0:97:21:78: b2:6f:a1:61:30:e5:3e:fd:08:c6:a4:f4:c6:e8:b3: e6:41:e5:32:19:48:e0:28:87:3a:0f:b9:98:c6:d6: 80:0e:67:01:a2:62:61:b6:fb:e7:0d:1f:22:e2:6b: 24:1f:4b:d3:db:c2:ea:cf:67:43:ad:40:36:f4:1b: cb:d1:13:cc:5f:d6:f0:57:73:e8:cb:a8:fa:45:ad: da:a2:72:24:f2:ff:7d:2e:9f:a7:4d:ad:c4:c1:a9: 8c:49:71:92:34:cb:ff:97:f4:ac:3e:7d:e2:fd:f6: 3e:bf:34:10:33:67:d5:56:c8:b8:fe:e0:d1:5f:05: ba:1f:95:db:fe:e0:2f:0d:f0:4a:ae:21:1f:20:d1: 5b:05:7c:64:2f:88:4d:54:cd:42:b3:95:a6:bb:de: d6:1c:49:7c:ad:63:7c:5d:fe:28:40:30:23:19:75: 44:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:47:D6:AA:DD:06:BC:92:47:E9:B9:23:AE:27:3C:77:00:6A:32:56 X509v3 Authority Key Identifier: keyid:7F:88:97:9F:15:7A:73:BC:13:FC:5A:3D:5B:9C:76:CB:3A:2B:3E:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:5b:7c:29:41:56:be:0a:fc:4c:f6:55:07:8c:da:63:f8:27: 4f:20:51:49:99:38:8a:02:f0:6d:dd:5f:f7:24:24:e2:89:66: c5:a4:6b:cb:eb:f3:73:a9:97:e9:3f:60:21:45:ef:51:39:bf: 00:b8:7e:bc:b2:f0:f4:e1:0a:98:99:da:b8:8f:04:99:67:44: e1:1b:6f:91:b9:c0:df:8a:0e:77:c7:81:a4:6a:0a:8a:d8:b8: 2e:3e:5d:9f:67:45:2b:c0:1f:c7:9e:4f:4d:2c:fc:e5:4a:dc: 59:19:9e:b9:ac:b6:10:7d:76:f6:f8:a6:4c:f8:e3:58:f4:78: ed:81:52:0b:47:a6:9d:21:1d:bf:f1:5b:c4:1e:9e:5c:f8:1a: 36:a8:46:3a:4e:cd:a9:18:f3:e6:0e:1e:87:de:46:52:b0:0e: fd:54:fd:e8:30:08:fe:39:2d:fe:36:0b:38:55:1b:87:27:28: 97:0b:6b:e5:5d:3d:37:30:d3:cb:dd:b6:5b:90:ec:7a:1a:ba: d2:76:fe:40:4c:d6:4a:49:fa:2f:03:e8:60:12:e3:de:cd:0e: 9b:16:f0:ba:ff:91:f2:fd:27:b7:fb:ac:a7:c1:b0:2a:a4:54: b3:ca:cc:0a:74:aa:56:2e:45:2a:c2:3d:53:cf:f3:fd:a2:4b: ac:0e:80:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaPKAM8dE8RC/1AtZXnxDPgxi/eQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y4ODk3OUYxNTdBNzNCQzEzRkM1QTNENUI5Qzc2Q0Iz QTJCM0UzMTAeFw0yNjA5MjMyMzUwMzlaFw0yNjA5MjUwMzEwMzlaMDMxMTAvBgNV BAMTKEZCNDdENkFBREQwNkJDOTI0N0U5QjkyM0FFMjczQzc3MDA2QTMyNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUaN3ec5k1XFzLAypNZqpAWHJo aCuiYrAc/5K5q8yJTO3FhG+SoMyH2ci3pQnRTsMSOAhGJ4yIx9Dwohek2MCC4FvB Lbzwlws2rOAYGlTkc9DepIZp4JcheLJvoWEw5T79CMak9Mbos+ZB5TIZSOAohzoP uZjG1oAOZwGiYmG2++cNHyLiayQfS9PbwurPZ0OtQDb0G8vRE8xf1vBXc+jLqPpF rdqiciTy/30un6dNrcTBqYxJcZI0y/+X9Kw+feL99j6/NBAzZ9VWyLj+4NFfBbof ldv+4C8N8EquIR8g0VsFfGQviE1UzUKzlaa73tYcSXytY3xd/ihAMCMZdUT9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+0fWqt0GvJJH6bkjric8dwBqMlYwHwYDVR0j BBgwFoAUf4iXnxV6c7wT/Fo9W5x2yzorPjEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2FmNTAzODMtN2QwNC00N2M4LWFhZWItZjdlNzY2OTM3NzMxLzAvN0Y4ODk3OUYx NTdBNzNCQzEzRkM1QTNENUI5Qzc2Q0IzQTJCM0UzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Rjg4OTc5RjE1N0E3M0JDMTNGQzVBM0Q1QjlDNzZDQjNBMkIz RTMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2FmNTAzODMtN2QwNC00N2M4LWFh ZWItZjdlNzY2OTM3NzMxLzAvN0Y4ODk3OUYxNTdBNzNCQzEzRkM1QTNENUI5Qzc2 Q0IzQTJCM0UzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlbfClBVr4K/Ez2VQeM2mP4J08gUUmZOIoC 8G3dX/ckJOKJZsWka8vr83Opl+k/YCFF71E5vwC4fryy8PThCpiZ2riPBJlnROEb b5G5wN+KDnfHgaRqCorYuC4+XZ9nRSvAH8eeT00s/OVK3FkZnrmsthB9dvb4pkz4 41j0eO2BUgtHpp0hHb/xW8Qenlz4GjaoRjpOzakY8+YOHofeRlKwDv1U/egwCP45 Lf42CzhVG4cnKJcLa+VdPTcw08vdtluQ7HoautJ2/kBM1kpJ+i8D6GAS497NDpsW 8Lr/kfL9J7f7rKfBsCqkVLPKzAp0qlYuRSrCPVPP8/2iS6wOgCk= -----END CERTIFICATE-----Generated at Thu Sep 24 10:10:21 2026 by rpki-client