$ rpki-client -vvvf rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.mft File: 7B9D20A52D1839E0A747B27E30961527317BE820.mft (raw, json) Hash identifier: MzeJk9eEGitsRif4si8PJfAWX426ouxuiM546D54SwE= Subject key identifier: C8:08:CF:56:3F:A5:65:96:AF:83:2F:7A:EB:54:6F:9D:93:35:0F:EA Authority key identifier: 7B:9D:20:A5:2D:18:39:E0:A7:47:B2:7E:30:96:15:27:31:7B:E8:20 Certificate issuer: /CN=7B9D20A52D1839E0A747B27E30961527317BE820 Certificate serial: 160E5BD142F45D4A3BE50CE46E32FFA15D6197D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B9D20A52D1839E0A747B27E30961527317BE820.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.mft Manifest number: E5 Signing time: Tue 20 Oct 2026 15:23:23 +0000 Manifest this update: Tue 20 Oct 2026 15:18:23 +0000 Manifest next update: Wed 21 Oct 2026 17:18:23 +0000 Files and hashes: 1: 3130332e3136392e3232342e302f32342d3234203d3e20313432333534.roa (hash: IMBAva6ocuxkrwvvR0kfzc9aYWdmyeGotwSFXr/8fyM=) 2: 3130332e3136392e3232352e302f32342d3234203d3e20313432333534.roa (hash: HIvBExvjcNL80TSt3Rk5JG3F8xg1VqZTRljgmRS5hK0=) 3: 7B9D20A52D1839E0A747B27E30961527317BE820.crl (hash: K4jeNKnFnEENZagvbyQvE+I7mRMHFZxed4yF7ThfdXY=) 4: 3130332e3136392e3232342e302f32332d3233203d3e20313432333534.roa (hash: d5BUk2IHCQz5cnQEHRFcfPlv6TvCXosv3ryqex1uhzo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.crl rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B9D20A52D1839E0A747B27E30961527317BE820.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Oct 2026 09:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:0e:5b:d1:42:f4:5d:4a:3b:e5:0c:e4:6e:32:ff:a1:5d:61:97:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B9D20A52D1839E0A747B27E30961527317BE820 Validity Not Before: Oct 20 15:18:23 2026 GMT Not After : Oct 21 17:18:23 2026 GMT Subject: CN=C808CF563FA56596AF832F7AEB546F9D93350FEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:07:0b:97:0a:be:0c:48:41:04:30:34:c0:3a: 71:5c:13:a1:fb:32:43:fb:74:4a:1e:ef:7b:32:03: 23:30:cb:f3:7c:71:12:f2:be:54:d6:3e:6f:ba:e0: fc:f7:b1:93:c0:28:91:bc:19:00:23:25:34:a6:0d: a6:da:e8:53:00:da:9c:e4:47:2a:f0:10:d4:8c:1f: c3:5e:a6:29:fb:1c:c1:01:08:e9:2f:48:b0:31:ba: f7:0a:43:de:7c:d5:8e:08:a1:44:1c:57:87:26:60: 67:5e:a8:19:ce:19:4f:7d:b0:be:7a:8b:2d:59:01: bc:20:f7:c8:c2:b9:4c:5b:ed:65:22:d8:41:bc:c8: fe:e1:1a:35:f9:2f:7b:54:b2:75:ea:42:70:71:ca: 62:dd:99:dd:84:6c:96:6a:62:d8:85:f9:b5:94:0a: 3d:a6:33:cc:5b:1f:b7:9c:c6:d2:c5:45:d6:e5:11: 3e:32:fb:fb:5e:8c:d6:d0:c2:ae:35:d4:8d:03:ed: 77:33:91:e9:9f:d9:33:8b:f5:5e:f3:ac:d6:59:91: 59:0e:17:5d:41:c0:c6:07:f6:11:d9:ac:70:1e:a3: 80:1b:3e:3c:b6:55:22:3e:9a:07:d9:ce:50:aa:93: 3f:79:99:43:a9:77:77:00:60:f1:ac:3a:53:e6:9e: 2f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:08:CF:56:3F:A5:65:96:AF:83:2F:7A:EB:54:6F:9D:93:35:0F:EA X509v3 Authority Key Identifier: keyid:7B:9D:20:A5:2D:18:39:E0:A7:47:B2:7E:30:96:15:27:31:7B:E8:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B9D20A52D1839E0A747B27E30961527317BE820.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:d3:29:58:ad:0a:af:ab:a1:43:17:fd:71:55:54:0d:40:13: 7d:8a:09:1f:96:a0:31:63:36:0e:d9:da:f1:0c:e2:c4:2c:9a: 73:4a:36:d4:22:53:8e:18:a6:a0:24:8f:f4:72:b2:20:ff:0b: 11:06:74:46:20:c9:67:39:76:e6:89:44:4a:8f:1d:c9:63:4d: 82:30:8f:49:0b:36:67:2c:f2:a7:9c:bc:cb:0e:d4:bf:d5:aa: 8e:62:e3:e6:7a:48:db:96:1f:ab:3e:b6:21:aa:f9:ad:33:34: 96:51:43:d0:f3:a0:94:c9:6d:a5:dd:4f:38:0f:89:9c:01:8a: 0a:f4:7f:6e:33:9b:42:42:63:9d:21:e1:00:25:86:22:0d:a3: 77:02:5f:f9:06:99:0c:86:52:c1:25:61:4e:5d:a5:91:80:e6: ff:fa:30:4d:ab:3d:aa:e7:2f:45:6a:7e:62:40:33:45:8b:0e: 06:d0:8b:50:b7:09:18:84:55:f6:24:fd:7e:50:7b:8d:f0:72: 44:c8:5f:71:f1:e2:73:52:ad:70:17:dd:fb:e7:f3:07:ac:aa: c4:73:c1:aa:95:11:5f:9f:7f:c7:81:df:41:23:b2:44:e2:fa: 4d:16:aa:d1:12:65:4b:25:1c:d3:43:23:1a:f7:72:61:b9:65: f0:0b:f1:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFg5b0UL0XUo75QzkbjL/oV1hl9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I5RDIwQTUyRDE4MzlFMEE3NDdCMjdFMzA5NjE1Mjcz MTdCRTgyMDAeFw0yNjEwMjAxNTE4MjNaFw0yNjEwMjExNzE4MjNaMDMxMTAvBgNV BAMTKEM4MDhDRjU2M0ZBNTY1OTZBRjgzMkY3QUVCNTQ2RjlEOTMzNTBGRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeBwuXCr4MSEEEMDTAOnFcE6H7 MkP7dEoe73syAyMwy/N8cRLyvlTWPm+64Pz3sZPAKJG8GQAjJTSmDaba6FMA2pzk RyrwENSMH8Nepin7HMEBCOkvSLAxuvcKQ9581Y4IoUQcV4cmYGdeqBnOGU99sL56 iy1ZAbwg98jCuUxb7WUi2EG8yP7hGjX5L3tUsnXqQnBxymLdmd2EbJZqYtiF+bWU Cj2mM8xbH7ecxtLFRdblET4y+/tejNbQwq411I0D7Xczkemf2TOL9V7zrNZZkVkO F11BwMYH9hHZrHAeo4AbPjy2VSI+mgfZzlCqkz95mUOpd3cAYPGsOlPmni+3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyAjPVj+lZZavgy9661RvnZM1D+owHwYDVR0j BBgwFoAUe50gpS0YOeCnR7J+MJYVJzF76CAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZhZjRkZTUtNTAzNy00OTE3LTlhOTMtMDE5MmM2OTU5YmZiLzAvN0I5RDIwQTUy RDE4MzlFMEE3NDdCMjdFMzA5NjE1MjczMTdCRTgyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QjlEMjBBNTJEMTgzOUUwQTc0N0IyN0UzMDk2MTUyNzMxN0JF ODIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZhZjRkZTUtNTAzNy00OTE3LTlh OTMtMDE5MmM2OTU5YmZiLzAvN0I5RDIwQTUyRDE4MzlFMEE3NDdCMjdFMzA5NjE1 MjczMTdCRTgyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLTKVitCq+roUMX/XFVVA1AE32KCR+WoDFj Ng7Z2vEM4sQsmnNKNtQiU44YpqAkj/RysiD/CxEGdEYgyWc5duaJREqPHcljTYIw j0kLNmcs8qecvMsO1L/Vqo5i4+Z6SNuWH6s+tiGq+a0zNJZRQ9DzoJTJbaXdTzgP iZwBigr0f24zm0JCY50h4QAlhiINo3cCX/kGmQyGUsElYU5dpZGA5v/6ME2rParn L0VqfmJAM0WLDgbQi1C3CRiEVfYk/X5Qe43wckTIX3Hx4nNSrXAX3fvn8wesqsRz waqVEV+ff8eB30EjskTi+k0WqtESZUslHNNDIxr3cmG5ZfAL8ZU= -----END CERTIFICATE-----Generated at Tue Oct 20 19:29:50 2026 by rpki-client