$ rpki-client -vvvf rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft File: 7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft (raw, json) Hash identifier: ByrrkcHZchYrN/7lFvdgaFrgfUgy7e5E0CA68B8ySmg= Subject key identifier: 81:3D:3E:A1:77:CF:00:B7:CC:72:DB:97:20:1F:09:59:A2:A7:6F:98 Authority key identifier: 7F:88:97:9F:15:7A:73:BC:13:FC:5A:3D:5B:9C:76:CB:3A:2B:3E:31 Certificate issuer: /CN=7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31 Certificate serial: 42DA625390DF84804323369EDFB676834EAB7277 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 19:16:16 +0000 Manifest this update: Thu 03 Sep 2026 19:11:16 +0000 Manifest next update: Fri 04 Sep 2026 21:08:16 +0000 Files and hashes: 1: 3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa (hash: 8HCIw7CZYRIarfxox7lXQ/MdAlePE93YlMnPKUyebGg=) 2: 323430353a666134303a3a2f33322d3438203d3e20313430333930.roa (hash: HUZNs1iD5swAwh/g3qINc50EKHQkckdyfTFIx7Aj1lM=) 3: 7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.crl (hash: jotiSOvE0H3Fk9lylbUniuVl6Mfx97ZOJHoU7Dw7pu0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.crl rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 21:08:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:da:62:53:90:df:84:80:43:23:36:9e:df:b6:76:83:4e:ab:72:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31 Validity Not Before: Sep 3 19:11:16 2026 GMT Not After : Sep 4 21:08:16 2026 GMT Subject: CN=813D3EA177CF00B7CC72DB97201F0959A2A76F98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:62:64:d8:9f:85:f4:34:26:50:00:38:d0:2d: 0d:5e:50:bf:f1:d8:fa:e4:2e:b4:69:66:98:ac:fd: 48:83:d6:18:2f:be:35:61:6a:34:06:1c:fb:15:2f: 75:c0:cb:54:80:f7:21:03:61:f7:f5:15:6b:17:59: 7f:bb:d0:03:ea:50:52:89:c9:f7:e5:d4:12:b8:01: 55:4b:16:e9:6c:30:55:cc:38:9f:b6:e1:2a:48:e9: 48:b8:0c:77:2c:b1:a1:1a:4b:c8:e0:32:6b:96:8c: 5b:35:39:f6:a4:7b:8b:52:fc:50:d2:12:25:fc:d9: eb:b3:55:4e:4f:e9:ea:e8:2d:3d:b1:f4:78:a7:0f: 7c:e1:26:42:ae:09:63:5b:c4:33:07:5f:85:15:20: f6:07:fd:28:eb:47:43:12:c9:9a:7a:e0:e7:f8:ab: b2:9b:95:6d:25:0c:17:8e:c5:dc:c4:fa:2e:b2:17: 76:bb:54:86:7a:10:b2:2c:c5:27:a8:07:06:48:1a: be:a8:5e:43:de:f9:f6:c7:4a:1e:11:2c:17:40:e7: d5:be:70:ab:db:80:a9:eb:83:3e:df:12:f7:09:9d: 75:9f:98:74:4b:f1:4e:d8:46:af:95:8b:0d:2f:d8: 2d:6d:b4:50:f8:89:49:e9:fd:60:11:1a:4f:cc:3b: f3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3D:3E:A1:77:CF:00:B7:CC:72:DB:97:20:1F:09:59:A2:A7:6F:98 X509v3 Authority Key Identifier: keyid:7F:88:97:9F:15:7A:73:BC:13:FC:5A:3D:5B:9C:76:CB:3A:2B:3E:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:6a:85:0a:90:f6:c0:a3:20:5a:3c:91:54:03:a6:54:e1:d5: bb:04:a4:79:7a:2a:5c:94:a7:dd:31:22:b8:2f:0a:a9:8f:b1: 82:66:80:22:d1:18:3d:0d:a5:4f:ab:79:98:ac:a4:cc:a0:7d: 7b:9d:70:af:9c:89:12:f4:bb:36:31:c9:d6:a3:d4:ed:eb:6c: 64:d6:52:a4:62:16:bb:9c:17:2f:86:c5:02:45:90:24:3e:f5: d6:30:99:d4:19:ec:5c:b7:88:2d:20:03:66:bb:c5:6f:e0:00: 00:f4:b9:d0:2b:66:54:38:97:32:54:2e:0e:1a:82:42:32:d1: ec:6c:e0:cb:26:1f:3c:e2:ec:97:87:69:f4:04:0f:62:73:15: 58:96:b4:d1:6b:8d:26:6d:6d:46:2b:2e:94:8c:27:bd:ed:29: 28:0b:b8:bc:7f:75:1d:41:17:b3:a3:e9:48:ed:a6:5b:a4:72: e5:e1:3c:5a:bf:c8:3d:b6:a0:f1:bf:6b:36:df:50:9f:fa:be: ba:b3:50:b2:d2:27:8d:15:3f:c1:9c:71:1b:03:fc:59:88:cf: 2b:74:1c:2e:e7:ca:e9:5b:05:98:28:91:9a:45:f8:1e:83:b6: f5:06:ab:cc:47:c9:06:ab:2a:ab:ce:22:72:db:3b:58:54:aa: 75:7f:dd:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQtpiU5DfhIBDIzae37Z2g06rcncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y4ODk3OUYxNTdBNzNCQzEzRkM1QTNENUI5Qzc2Q0Iz QTJCM0UzMTAeFw0yNjA5MDMxOTExMTZaFw0yNjA5MDQyMTA4MTZaMDMxMTAvBgNV BAMTKDgxM0QzRUExNzdDRjAwQjdDQzcyREI5NzIwMUYwOTU5QTJBNzZGOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6YmTYn4X0NCZQADjQLQ1eUL/x 2PrkLrRpZpis/UiD1hgvvjVhajQGHPsVL3XAy1SA9yEDYff1FWsXWX+70APqUFKJ yffl1BK4AVVLFulsMFXMOJ+24SpI6Ui4DHcssaEaS8jgMmuWjFs1Ofake4tS/FDS EiX82euzVU5P6eroLT2x9HinD3zhJkKuCWNbxDMHX4UVIPYH/SjrR0MSyZp64Of4 q7KblW0lDBeOxdzE+i6yF3a7VIZ6ELIsxSeoBwZIGr6oXkPe+fbHSh4RLBdA59W+ cKvbgKnrgz7fEvcJnXWfmHRL8U7YRq+Viw0v2C1ttFD4iUnp/WARGk/MO/MvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgT0+oXfPALfMctuXIB8JWaKnb5gwHwYDVR0j BBgwFoAUf4iXnxV6c7wT/Fo9W5x2yzorPjEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2FmNTAzODMtN2QwNC00N2M4LWFhZWItZjdlNzY2OTM3NzMxLzAvN0Y4ODk3OUYx NTdBNzNCQzEzRkM1QTNENUI5Qzc2Q0IzQTJCM0UzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Rjg4OTc5RjE1N0E3M0JDMTNGQzVBM0Q1QjlDNzZDQjNBMkIz RTMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2FmNTAzODMtN2QwNC00N2M4LWFh ZWItZjdlNzY2OTM3NzMxLzAvN0Y4ODk3OUYxNTdBNzNCQzEzRkM1QTNENUI5Qzc2 Q0IzQTJCM0UzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK5qhQqQ9sCjIFo8kVQDplTh1bsEpHl6KlyU p90xIrgvCqmPsYJmgCLRGD0NpU+reZispMygfXudcK+ciRL0uzYxydaj1O3rbGTW UqRiFrucFy+GxQJFkCQ+9dYwmdQZ7Fy3iC0gA2a7xW/gAAD0udArZlQ4lzJULg4a gkIy0exs4MsmHzzi7JeHafQED2JzFViWtNFrjSZtbUYrLpSMJ73tKSgLuLx/dR1B F7Oj6UjtplukcuXhPFq/yD22oPG/azbfUJ/6vrqzULLSJ40VP8GccRsD/FmIzyt0 HC7nyulbBZgokZpF+B6DtvUGq8xHyQarKqvOInLbO1hUqnV/3fc= -----END CERTIFICATE-----Generated at Fri Sep 4 06:58:17 2026 by rpki-client