$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft File: B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft (raw, json) Hash identifier: +8pTwdzfYNoT5swjYawq/SJbc+mURdFV4tKkaKS8LqU= Subject key identifier: C6:1F:AF:D0:B6:6E:D1:96:D4:FD:F9:E6:9F:57:E0:E3:AF:52:08:2C Authority key identifier: B7:D0:DD:FE:90:14:6E:06:D3:BE:A1:3C:2C:79:4B:52:7F:31:51:F8 Certificate issuer: /CN=B7D0DDFE90146E06D3BEA13C2C794B527F3151F8 Certificate serial: 546286D82F9F39C25CDDEF6CDDD8EF83BC1880BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft Manifest number: C9 Signing time: Tue 29 Sep 2026 08:34:55 +0000 Manifest this update: Tue 29 Sep 2026 08:29:55 +0000 Manifest next update: Wed 30 Sep 2026 10:01:55 +0000 Files and hashes: 1: B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.crl (hash: APXlSiwjF6Xy1rAJr1kBCIZnHH7mCYDdj/RKy13VSM0=) 2: 34332e3234312e3234362e302f32332d3234203d3e20313532303837.roa (hash: ljFouV7ZlSbTbdDcS0zoJf3jqUeKDHqtCtUhcsruCg4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.crl rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 10:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:62:86:d8:2f:9f:39:c2:5c:dd:ef:6c:dd:d8:ef:83:bc:18:80:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7D0DDFE90146E06D3BEA13C2C794B527F3151F8 Validity Not Before: Sep 29 08:29:55 2026 GMT Not After : Sep 30 10:01:55 2026 GMT Subject: CN=C61FAFD0B66ED196D4FDF9E69F57E0E3AF52082C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d5:4e:19:35:6f:11:3c:01:f2:bf:47:53:40: ea:49:48:c0:9c:02:81:6d:0f:73:91:c9:d5:e3:f2: 41:f4:72:e2:d5:fa:da:65:30:06:b0:26:c7:7a:71: 2d:3c:08:bb:d7:56:7c:dc:8d:5a:ba:6b:fe:78:95: c0:cd:10:c7:f2:50:3d:cc:91:ea:13:e7:7e:26:28: 93:33:96:f8:c5:3e:ad:e2:71:25:b1:4b:af:0c:dc: 14:32:fe:16:52:e5:e1:4e:79:d5:9a:f3:72:44:5f: 36:65:f0:f1:00:95:67:0a:31:9b:90:25:56:9f:5f: 2d:7a:21:c5:00:8d:1f:4f:51:eb:1c:a7:bd:66:08: 3f:89:9c:2d:23:93:73:ac:06:42:ab:de:67:35:a0: d5:60:74:d9:12:71:a7:75:07:35:05:6e:c5:85:70: 8b:eb:ef:28:28:03:ba:df:66:15:23:76:de:83:25: 17:b2:11:14:81:77:f6:16:b9:39:36:5b:97:cc:64: d2:b2:d7:8a:79:3c:bc:22:e9:65:90:69:59:81:ce: 76:32:9b:ac:d9:58:72:e5:2f:db:cb:51:8e:9f:1c: 49:79:9f:1e:87:9f:bb:57:a9:a9:25:63:7a:a4:2a: b4:5a:f1:d6:1d:41:b6:f1:5b:79:48:ac:a5:10:08: a9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:1F:AF:D0:B6:6E:D1:96:D4:FD:F9:E6:9F:57:E0:E3:AF:52:08:2C X509v3 Authority Key Identifier: keyid:B7:D0:DD:FE:90:14:6E:06:D3:BE:A1:3C:2C:79:4B:52:7F:31:51:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:9f:be:52:b8:7f:f3:2f:7f:f4:2d:06:c2:93:0e:7c:95:86: 61:9e:bf:47:19:0c:f7:57:3b:8f:f2:42:48:27:45:04:92:f7: 40:7a:18:b6:89:1d:56:35:07:3b:40:28:c5:8f:26:44:fa:95: 7c:4f:26:6f:7a:d0:b7:57:41:4a:d6:2c:7b:55:8e:c7:9a:88: 78:4f:93:57:fe:cc:40:2c:ba:a6:8a:7a:07:0f:3d:5a:ba:75: e4:88:7f:a6:51:89:f4:4f:b4:8c:a0:2e:63:71:d4:c5:dd:2f: 6d:90:dd:7c:23:3f:0d:90:df:b0:03:79:8d:4b:ab:b2:b6:8e: de:39:ed:e2:fe:2d:01:ea:d5:db:c7:b4:bf:92:d8:30:1e:c3: 45:fc:6d:f1:e2:58:bf:6e:35:fd:2e:fd:3d:94:ee:53:ed:ad: c6:bc:7f:0e:e6:ed:a7:92:e5:a4:fd:9d:68:df:d2:5c:a0:be: 83:c0:d1:48:cd:e3:b2:c2:db:8f:50:34:77:a3:25:ea:ba:89: e5:03:01:90:b3:50:f5:af:eb:fd:3a:82:00:6e:1b:cd:3b:b9: af:81:4b:14:61:22:50:e4:fd:f8:21:0d:6e:d3:09:da:e1:b8: b9:de:83:91:b0:d3:ed:bd:d4:9a:93:a8:5e:3e:d6:3b:84:d3: 71:00:76:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVGKG2C+fOcJc3e9s3djvg7wYgLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdEMERERkU5MDE0NkUwNkQzQkVBMTNDMkM3OTRCNTI3 RjMxNTFGODAeFw0yNjA5MjkwODI5NTVaFw0yNjA5MzAxMDAxNTVaMDMxMTAvBgNV BAMTKEM2MUZBRkQwQjY2RUQxOTZENEZERjlFNjlGNTdFMEUzQUY1MjA4MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp1U4ZNW8RPAHyv0dTQOpJSMCc AoFtD3ORydXj8kH0cuLV+tplMAawJsd6cS08CLvXVnzcjVq6a/54lcDNEMfyUD3M keoT534mKJMzlvjFPq3icSWxS68M3BQy/hZS5eFOedWa83JEXzZl8PEAlWcKMZuQ JVafXy16IcUAjR9PUescp71mCD+JnC0jk3OsBkKr3mc1oNVgdNkScad1BzUFbsWF cIvr7ygoA7rfZhUjdt6DJReyERSBd/YWuTk2W5fMZNKy14p5PLwi6WWQaVmBznYy m6zZWHLlL9vLUY6fHEl5nx6Hn7tXqaklY3qkKrRa8dYdQbbxW3lIrKUQCKnLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxh+v0LZu0ZbU/fnmn1fg469SCCwwHwYDVR0j BBgwFoAUt9Dd/pAUbgbTvqE8LHlLUn8xUfgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjEwODcxNTktMzBkZC00MWJhLTk5NzktMDM1ODgxMTJhNzgwLzAvQjdEMERERkU5 MDE0NkUwNkQzQkVBMTNDMkM3OTRCNTI3RjMxNTFGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0QwRERGRTkwMTQ2RTA2RDNCRUExM0MyQzc5NEI1MjdGMzE1 MUY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjEwODcxNTktMzBkZC00MWJhLTk5 NzktMDM1ODgxMTJhNzgwLzAvQjdEMERERkU5MDE0NkUwNkQzQkVBMTNDMkM3OTRC NTI3RjMxNTFGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIafvlK4f/Mvf/QtBsKTDnyVhmGev0cZDPdX O4/yQkgnRQSS90B6GLaJHVY1BztAKMWPJkT6lXxPJm960LdXQUrWLHtVjseaiHhP k1f+zEAsuqaKegcPPVq6deSIf6ZRifRPtIygLmNx1MXdL22Q3XwjPw2Q37ADeY1L q7K2jt457eL+LQHq1dvHtL+S2DAew0X8bfHiWL9uNf0u/T2U7lPtrca8fw7m7aeS 5aT9nWjf0lygvoPA0UjN47LC249QNHejJeq6ieUDAZCzUPWv6/06ggBuG807ua+B SxRhIlDk/fghDW7TCdrhuLneg5Gw0+291JqTqF4+1juE03EAdvE= -----END CERTIFICATE-----Generated at Wed Sep 30 05:10:31 2026 by rpki-client