$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/7F27536154B06F776D6914F8A4F12A5DE8458BD0.mft File: 7F27536154B06F776D6914F8A4F12A5DE8458BD0.mft (raw, json) Hash identifier: VdwXr8JPbcFrezUNHD/lJNAZc0RBvItg/HZZ0xsevu8= Subject key identifier: 8F:1E:54:4E:5F:4E:88:2C:BE:21:35:E5:11:46:64:FE:97:81:D4:91 Authority key identifier: 7F:27:53:61:54:B0:6F:77:6D:69:14:F8:A4:F1:2A:5D:E8:45:8B:D0 Certificate issuer: /CN=7F27536154B06F776D6914F8A4F12A5DE8458BD0 Certificate serial: 3653CFD033B12658BB1A38A5C01053EA36A9E41A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F27536154B06F776D6914F8A4F12A5DE8458BD0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/7F27536154B06F776D6914F8A4F12A5DE8458BD0.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 04:05:19 +0000 Manifest this update: Fri 25 Sep 2026 04:00:19 +0000 Manifest next update: Sat 26 Sep 2026 06:10:19 +0000 Files and hashes: 1: 3130332e3231302e3232312e302f32342d3234203d3e20313530393433.roa (hash: 5Udd7i3unVPfssV9yLKsZQmnf1JloA1KVW0NBCTNShE=) 2: 7F27536154B06F776D6914F8A4F12A5DE8458BD0.crl (hash: Qk4Kjd/pnBR/95gXIfvIw1EKPN+UejCAtMm+neKOC58=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/7F27536154B06F776D6914F8A4F12A5DE8458BD0.crl rsync://rpki-rsync.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/7F27536154B06F776D6914F8A4F12A5DE8458BD0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F27536154B06F776D6914F8A4F12A5DE8458BD0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 05:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:53:cf:d0:33:b1:26:58:bb:1a:38:a5:c0:10:53:ea:36:a9:e4:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F27536154B06F776D6914F8A4F12A5DE8458BD0 Validity Not Before: Sep 25 04:00:19 2026 GMT Not After : Sep 26 06:10:19 2026 GMT Subject: CN=8F1E544E5F4E882CBE2135E5114664FE9781D491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:55:89:b1:7d:47:49:3b:92:d5:6b:ea:17:b7: 34:93:ea:9b:a2:49:9d:46:e0:ea:70:50:a2:5b:d9: 6e:c9:34:a5:ad:ec:ed:e7:ab:7f:63:c5:40:c3:05: 1c:01:b4:ad:64:8f:d9:39:3b:ec:ba:b5:ee:da:1d: f2:8b:1e:86:9f:0a:18:8c:5e:3f:43:93:05:0f:75: f5:98:18:c4:6d:1a:5b:1b:e9:0b:ec:61:a5:8b:30: 50:ce:48:29:b5:f4:46:ee:98:77:ec:b1:2c:03:ee: 82:28:4f:0b:d3:05:06:b1:07:ac:25:bb:3c:ff:f4: 6d:59:24:02:93:6e:de:f2:78:ba:1e:9e:5b:67:65: a4:85:f1:3a:d1:9a:96:f2:27:80:5f:aa:82:c9:f1: 12:b1:f0:58:91:6c:58:d5:e3:b7:21:de:42:8a:7f: 37:c8:82:71:ef:c9:9e:30:b9:17:7f:2b:fb:e7:8f: 0e:10:fe:01:b5:72:d3:f5:17:ca:e4:2d:cc:de:b7: 51:c6:fc:2c:00:a5:af:d1:82:79:45:a2:41:86:29: fc:ed:81:5d:6e:13:58:ab:0d:cc:8b:68:8d:ef:32: 8a:bb:b2:94:79:2b:0e:cc:8c:fc:0c:27:ac:c9:4e: 21:54:fb:c5:83:fc:54:6a:56:c4:df:fc:ea:38:29: 12:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1E:54:4E:5F:4E:88:2C:BE:21:35:E5:11:46:64:FE:97:81:D4:91 X509v3 Authority Key Identifier: keyid:7F:27:53:61:54:B0:6F:77:6D:69:14:F8:A4:F1:2A:5D:E8:45:8B:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/7F27536154B06F776D6914F8A4F12A5DE8458BD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F27536154B06F776D6914F8A4F12A5DE8458BD0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/7F27536154B06F776D6914F8A4F12A5DE8458BD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:97:13:e4:51:f9:c4:1e:39:06:84:9a:e1:f0:29:81:26:e3: 1c:bf:ee:8e:dd:20:b5:10:05:34:a7:d5:15:84:5b:71:95:cf: 52:c2:50:15:59:10:a4:9b:bb:c3:c7:70:45:70:65:04:88:7f: 81:98:41:54:94:ee:ec:34:47:cd:0b:86:70:64:62:f7:55:92: 83:36:52:71:f2:e4:6d:f6:13:3b:4f:fe:a3:d1:e6:49:c4:2a: b6:bc:e5:86:8c:56:45:23:ca:77:c0:03:c5:60:dd:70:fc:39: 65:69:32:81:72:4f:92:45:cb:3e:48:c2:72:f4:8f:f8:a0:11: 91:ae:a2:4b:68:42:1d:3b:5a:df:f0:0d:9e:2f:7c:32:27:68: b0:25:fd:6a:c8:c9:84:ef:e3:9e:9d:5b:d1:37:5f:50:21:e1: 93:0d:dd:b8:86:c9:8e:9f:81:8e:3f:a4:3b:88:3b:57:df:63: 06:b3:e4:ad:fb:1f:e5:8d:4c:2d:57:9d:83:05:43:12:1b:61: c0:49:2a:85:9d:62:9c:44:d8:63:77:3e:6a:f4:2d:ce:5c:38: 45:0b:f3:09:92:e6:ae:30:33:59:a8:39:f7:c6:8d:7b:87:5f: 2e:8c:5e:52:82:55:51:ba:58:80:ee:2d:36:0a:50:b9:a8:58: 05:b6:c7:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNlPP0DOxJli7GjilwBBT6jap5BowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YyNzUzNjE1NEIwNkY3NzZENjkxNEY4QTRGMTJBNURF ODQ1OEJEMDAeFw0yNjA5MjUwNDAwMTlaFw0yNjA5MjYwNjEwMTlaMDMxMTAvBgNV BAMTKDhGMUU1NDRFNUY0RTg4MkNCRTIxMzVFNTExNDY2NEZFOTc4MUQ0OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOVYmxfUdJO5LVa+oXtzST6pui SZ1G4OpwUKJb2W7JNKWt7O3nq39jxUDDBRwBtK1kj9k5O+y6te7aHfKLHoafChiM Xj9DkwUPdfWYGMRtGlsb6QvsYaWLMFDOSCm19EbumHfssSwD7oIoTwvTBQaxB6wl uzz/9G1ZJAKTbt7yeLoenltnZaSF8TrRmpbyJ4BfqoLJ8RKx8FiRbFjV47ch3kKK fzfIgnHvyZ4wuRd/K/vnjw4Q/gG1ctP1F8rkLczet1HG/CwApa/RgnlFokGGKfzt gV1uE1irDcyLaI3vMoq7spR5Kw7MjPwMJ6zJTiFU+8WD/FRqVsTf/Oo4KRKnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjx5UTl9OiCy+ITXlEUZk/peB1JEwHwYDVR0j BBgwFoAUfydTYVSwb3dtaRT4pPEqXehFi9AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDllZTIwOWEtMTE5My00ZDZmLTlkYmUtODc3N2JiODk4MGFhLzAvN0YyNzUzNjE1 NEIwNkY3NzZENjkxNEY4QTRGMTJBNURFODQ1OEJEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RjI3NTM2MTU0QjA2Rjc3NkQ2OTE0RjhBNEYxMkE1REU4NDU4 QkQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDllZTIwOWEtMTE5My00ZDZmLTlk YmUtODc3N2JiODk4MGFhLzAvN0YyNzUzNjE1NEIwNkY3NzZENjkxNEY4QTRGMTJB NURFODQ1OEJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+XE+RR+cQeOQaEmuHwKYEm4xy/7o7dILUQ BTSn1RWEW3GVz1LCUBVZEKSbu8PHcEVwZQSIf4GYQVSU7uw0R80LhnBkYvdVkoM2 UnHy5G32EztP/qPR5knEKra85YaMVkUjynfAA8Vg3XD8OWVpMoFyT5JFyz5IwnL0 j/igEZGuoktoQh07Wt/wDZ4vfDInaLAl/WrIyYTv456dW9E3X1Ah4ZMN3biGyY6f gY4/pDuIO1ffYwaz5K37H+WNTC1XnYMFQxIbYcBJKoWdYpxE2GN3Pmr0Lc5cOEUL 8wmS5q4wM1moOffGjXuHXy6MXlKCVVG6WIDuLTYKULmoWAW2xzU= -----END CERTIFICATE-----Generated at Fri Sep 25 08:39:36 2026 by rpki-client