$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft File: 7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft (raw, json) Hash identifier: ZCrVJsafVO+J7L/83RPOcLWG/0Ib1qRfeYbQETFoT/4= Subject key identifier: 28:C3:F1:EA:3B:68:33:A0:14:D0:92:BC:67:67:5A:F6:F4:84:67:9D Authority key identifier: 7D:2A:02:CF:AA:CD:51:FA:2E:B1:D7:AE:C7:0E:CD:81:04:47:5F:53 Certificate issuer: /CN=7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53 Certificate serial: 07C199F121383087EEF50FCE8AF5D322E7009C76 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 06:18:33 +0000 Manifest this update: Thu 24 Sep 2026 06:13:33 +0000 Manifest next update: Fri 25 Sep 2026 06:20:33 +0000 Files and hashes: 1: 7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.crl (hash: m9sOkk9YfsYMeXD4smF/iQtzE7a+RYnyfKOXTeQxQBc=) 2: 323030313a6466313a316263303a3a2f34382d3438203d3e20313431393339.roa (hash: nFLDPD776WE/L2X/jlMFqVRg6eI7I+qoNOVFN/HkArY=) 3: 3130332e3136342e3139322e302f32332d3234203d3e20313431393339.roa (hash: caZbilaazkpxqRWhkCpM9BxKghMhKlcvJxCPrxBN/3Q=) 4: 3130332e3136342e3139322e302f32342d3234203d3e20313431393339.roa (hash: FuJt3vcY9L09+RmWxid8u8pgisIt7rO49/5ndQMSY6Q=) 5: 3130332e3136342e3139332e302f32342d3234203d3e20313431393339.roa (hash: VOmlgkQp1tgA9VYOLX2CHv85GyyaVqqf5FgzdISInaI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.crl rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 06:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:c1:99:f1:21:38:30:87:ee:f5:0f:ce:8a:f5:d3:22:e7:00:9c:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53 Validity Not Before: Sep 24 06:13:33 2026 GMT Not After : Sep 25 06:20:33 2026 GMT Subject: CN=28C3F1EA3B6833A014D092BC67675AF6F484679D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3d:dd:b8:38:41:e2:2c:33:f7:8c:44:a3:b8: fd:58:88:b2:a5:76:d3:7b:fb:48:13:bc:38:76:63: 09:3d:2e:a3:69:d6:89:f1:db:97:20:2c:39:29:47: 46:b1:3d:71:4c:85:78:d5:c1:20:9c:f1:fb:81:50: 58:6d:5a:f6:7e:2a:88:95:93:e0:a6:64:6f:80:6c: 31:26:f7:c8:49:13:de:bd:fc:f9:97:d7:1a:bf:19: 8e:bd:56:89:f1:74:61:a4:c5:d4:a9:9d:42:e6:8c: 05:d7:ff:33:7b:04:21:f1:ee:88:87:64:ba:49:ef: 89:dd:5f:75:bb:fb:48:df:b0:8a:52:fc:7f:64:15: c5:ab:95:39:7e:ff:5a:10:eb:d0:0d:8b:72:aa:0b: 4c:cd:20:00:75:f1:ae:4a:04:0e:00:c2:d2:10:29: d1:82:b5:8a:f5:6c:96:22:a5:c7:39:5b:f2:8d:84: dc:d3:cb:ac:8e:7c:0f:58:44:60:ef:5e:7e:d9:f8: bd:b1:b1:fb:91:80:ca:2f:89:e9:09:2d:38:21:04: 8f:f1:c4:48:dd:de:2d:8d:8c:89:29:47:c2:3d:9b: 42:88:e5:0d:c2:84:43:95:c4:e6:7e:3d:c8:ca:50: f4:7f:3e:32:00:5f:c8:f9:b2:55:d4:a0:98:12:0e: b5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C3:F1:EA:3B:68:33:A0:14:D0:92:BC:67:67:5A:F6:F4:84:67:9D X509v3 Authority Key Identifier: keyid:7D:2A:02:CF:AA:CD:51:FA:2E:B1:D7:AE:C7:0E:CD:81:04:47:5F:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ab:fa:1c:2b:88:c1:c8:06:6c:94:d7:b9:94:a9:0d:f5:10: 8d:fc:fc:2d:1c:66:6a:67:91:fb:7a:4b:8d:d6:3f:13:e0:ac: bb:aa:cd:52:79:ea:94:22:d3:0c:a3:64:ce:64:fd:46:f2:cc: 6b:09:4c:f7:d9:46:30:c4:6a:42:94:4e:9c:38:79:9e:a4:59: 71:7e:bc:15:37:46:0d:fc:3d:8b:e8:19:d5:00:3b:c7:41:bd: ba:a2:57:2a:85:d1:a1:31:97:61:1e:9f:09:c6:6e:6c:38:69: ae:72:f2:ea:fa:ce:2a:6e:40:34:51:be:b7:d9:bc:37:3b:e9: cd:c2:3c:fd:49:2f:c7:ea:5e:6d:e9:26:35:cb:18:41:7d:8a: 9e:f4:16:db:04:a3:b8:7c:55:d6:7a:c3:a2:96:de:9b:21:53: 2f:7f:c8:2a:0d:3f:d0:3b:a8:9c:2d:f3:b6:64:22:25:2f:5a: 9a:24:bb:29:ec:85:98:71:66:be:ff:42:ec:08:69:73:07:09: 21:a9:56:c1:fc:c0:df:cf:61:70:cd:e1:b6:5b:a5:07:bb:49: cf:8d:e3:a2:17:8e:6b:a4:f3:7a:e7:4a:76:e3:69:9a:99:ed: 9a:76:0b:57:fe:7b:f8:5e:87:27:5d:1d:fe:bf:c8:fc:04:e6: 55:ec:5d:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB8GZ8SE4MIfu9Q/OivXTIucAnHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QyQTAyQ0ZBQUNENTFGQTJFQjFEN0FFQzcwRUNEODEw NDQ3NUY1MzAeFw0yNjA5MjQwNjEzMzNaFw0yNjA5MjUwNjIwMzNaMDMxMTAvBgNV BAMTKDI4QzNGMUVBM0I2ODMzQTAxNEQwOTJCQzY3Njc1QUY2RjQ4NDY3OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Pd24OEHiLDP3jESjuP1YiLKl dtN7+0gTvDh2Ywk9LqNp1onx25cgLDkpR0axPXFMhXjVwSCc8fuBUFhtWvZ+KoiV k+CmZG+AbDEm98hJE969/PmX1xq/GY69VonxdGGkxdSpnULmjAXX/zN7BCHx7oiH ZLpJ74ndX3W7+0jfsIpS/H9kFcWrlTl+/1oQ69ANi3KqC0zNIAB18a5KBA4AwtIQ KdGCtYr1bJYipcc5W/KNhNzTy6yOfA9YRGDvXn7Z+L2xsfuRgMoviekJLTghBI/x xEjd3i2NjIkpR8I9m0KI5Q3ChEOVxOZ+PcjKUPR/PjIAX8j5slXUoJgSDrUdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKMPx6jtoM6AU0JK8Z2da9vSEZ50wHwYDVR0j BBgwFoAUfSoCz6rNUfousdeuxw7NgQRHX1MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmJhNDhlNGUtZmM5NS00YWNmLWJlYWMtZDkzYTBmNjk0NDIxLzAvN0QyQTAyQ0ZB QUNENTFGQTJFQjFEN0FFQzcwRUNEODEwNDQ3NUY1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDJBMDJDRkFBQ0Q1MUZBMkVCMUQ3QUVDNzBFQ0Q4MTA0NDc1 RjUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJhNDhlNGUtZmM5NS00YWNmLWJl YWMtZDkzYTBmNjk0NDIxLzAvN0QyQTAyQ0ZBQUNENTFGQTJFQjFEN0FFQzcwRUNE ODEwNDQ3NUY1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKr+hwriMHIBmyU17mUqQ31EI38/C0cZmpn kft6S43WPxPgrLuqzVJ56pQi0wyjZM5k/UbyzGsJTPfZRjDEakKUTpw4eZ6kWXF+ vBU3Rg38PYvoGdUAO8dBvbqiVyqF0aExl2EenwnGbmw4aa5y8ur6zipuQDRRvrfZ vDc76c3CPP1JL8fqXm3pJjXLGEF9ip70FtsEo7h8VdZ6w6KW3pshUy9/yCoNP9A7 qJwt87ZkIiUvWpokuynshZhxZr7/QuwIaXMHCSGpVsH8wN/PYXDN4bZbpQe7Sc+N 46IXjmuk83rnSnbjaZqZ7Zp2C1f+e/hehyddHf6/yPwE5lXsXXY= -----END CERTIFICATE-----Generated at Thu Sep 24 18:41:25 2026 by rpki-client