$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft File: 7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft (raw, json) Hash identifier: QP0WDHSBXCX8jCIixcvQYkFl8ntRG6Jn3gqWSV5HotQ= Subject key identifier: C1:40:65:A4:9D:C8:78:97:2D:19:E3:64:DB:3B:3C:8E:08:47:CA:2A Authority key identifier: 7D:02:02:66:9B:D0:3E:41:99:95:7B:5E:95:EB:FD:C8:A3:B2:38:14 Certificate issuer: /CN=7D0202669BD03E4199957B5E95EBFDC8A3B23814 Certificate serial: 05A40ADAF95F72FA007C505AA6B1B8C8661CB5A2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft Manifest number: A6 Signing time: Wed 02 Sep 2026 22:20:26 +0000 Manifest this update: Wed 02 Sep 2026 22:15:26 +0000 Manifest next update: Fri 04 Sep 2026 02:19:26 +0000 Files and hashes: 1: 7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl (hash: C7WK+g4vww+V7pNUcskaqMrPMDZttOcfgbcQJDDt5Yg=) 2: 3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa (hash: 8oVNIEb4TBtSy7unBowYQdxL5C3MJEoVeAhJrnkcXHw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 02:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:a4:0a:da:f9:5f:72:fa:00:7c:50:5a:a6:b1:b8:c8:66:1c:b5:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0202669BD03E4199957B5E95EBFDC8A3B23814 Validity Not Before: Sep 2 22:15:26 2026 GMT Not After : Sep 4 02:19:26 2026 GMT Subject: CN=C14065A49DC878972D19E364DB3B3C8E0847CA2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c8:b7:90:33:77:05:f6:7f:f5:9c:3c:42:08: 0d:57:4e:69:fb:a5:35:ee:af:2d:d7:71:6b:91:d2: fc:c3:35:fb:f3:58:b3:5d:f5:31:cd:b5:e3:e3:01: e5:d2:15:c9:e9:23:ff:db:b2:33:36:ea:63:c8:f0: 0c:1e:d0:9c:d1:e2:de:48:e9:89:6f:12:75:2c:f4: be:57:6a:da:12:33:26:6f:cc:a8:84:64:88:a6:20: e7:aa:a5:a3:6b:5f:43:51:01:50:14:96:33:b1:67: 51:69:c3:c4:7c:86:59:0c:e0:c2:59:b0:74:2a:fe: ce:f7:91:b0:4a:2a:2e:4a:b4:d6:c8:46:9c:09:d1: 55:e8:13:b2:03:3b:4e:32:51:e8:b3:6a:74:fc:6c: 15:af:04:f8:62:92:36:1d:ee:a1:af:4a:f8:8a:ac: 4f:3b:dc:09:b6:cb:c6:57:e8:85:ea:0f:2e:42:e6: ef:75:fa:1b:ea:e0:34:52:3d:90:73:80:29:a1:b1: 48:50:b4:c2:8a:05:93:65:fd:c1:e8:71:b4:7f:d0: e7:37:f9:9d:d5:83:f1:bb:06:63:d9:41:11:fb:d2: 58:a5:b4:8f:75:28:4e:e9:60:6f:a4:67:0d:32:dd: 88:d3:29:fd:84:93:7f:66:88:15:7b:11:9a:c5:5f: b3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:40:65:A4:9D:C8:78:97:2D:19:E3:64:DB:3B:3C:8E:08:47:CA:2A X509v3 Authority Key Identifier: keyid:7D:02:02:66:9B:D0:3E:41:99:95:7B:5E:95:EB:FD:C8:A3:B2:38:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:21:98:65:75:ee:11:5c:84:40:c4:fe:7f:5d:a4:97:94:6c: 01:8b:0b:d1:c6:e1:bf:f8:79:c3:2c:73:0d:76:8a:31:3c:e9: e1:c2:6f:b0:67:81:de:83:df:5b:99:c7:1b:85:f1:86:e5:0b: 3d:18:8d:d0:e3:2f:7b:3a:02:ab:f3:7c:a5:4c:af:e7:11:27: 64:6f:bd:f5:3d:93:78:7c:6b:43:f0:87:94:b4:a3:95:93:cb: 03:71:19:ae:ce:8e:12:12:8c:b0:38:7f:20:20:06:a7:29:b9: 82:0a:ec:b1:3e:e4:6c:1a:70:eb:77:1a:41:25:f6:e1:31:f0: 33:d6:73:16:4c:ba:42:2f:a9:48:a6:fa:d6:a9:1d:da:e3:50: 10:6e:36:7d:4d:f1:d6:89:08:db:55:0a:b0:5a:98:43:33:6d: ef:06:98:1d:b9:be:c8:96:fd:5b:9e:8a:12:66:42:9d:ed:6e: 76:02:8c:bc:a3:d8:f3:4c:f8:f1:1a:d9:fc:07:72:ff:ea:8b: 35:c3:f8:11:05:dd:02:bc:b4:58:3e:d6:70:37:d0:62:63:cb: 02:9c:e3:b5:09:69:8c:37:82:64:11:b8:a5:18:a6:67:17:34: 0f:e4:88:09:8f:f4:3a:72:3b:1c:d1:e2:5c:f3:1b:ae:be:a7: 49:08:1c:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBaQK2vlfcvoAfFBaprG4yGYctaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwMjAyNjY5QkQwM0U0MTk5OTU3QjVFOTVFQkZEQzhB M0IyMzgxNDAeFw0yNjA5MDIyMjE1MjZaFw0yNjA5MDQwMjE5MjZaMDMxMTAvBgNV BAMTKEMxNDA2NUE0OURDODc4OTcyRDE5RTM2NERCM0IzQzhFMDg0N0NBMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVyLeQM3cF9n/1nDxCCA1XTmn7 pTXury3XcWuR0vzDNfvzWLNd9THNtePjAeXSFcnpI//bsjM26mPI8Awe0JzR4t5I 6YlvEnUs9L5XatoSMyZvzKiEZIimIOeqpaNrX0NRAVAUljOxZ1Fpw8R8hlkM4MJZ sHQq/s73kbBKKi5KtNbIRpwJ0VXoE7IDO04yUeizanT8bBWvBPhikjYd7qGvSviK rE873Am2y8ZX6IXqDy5C5u91+hvq4DRSPZBzgCmhsUhQtMKKBZNl/cHocbR/0Oc3 +Z3Vg/G7BmPZQRH70liltI91KE7pYG+kZw0y3YjTKf2Ek39miBV7EZrFX7NlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwUBlpJ3IeJctGeNk2zs8jghHyiowHwYDVR0j BBgwFoAUfQICZpvQPkGZlXtelev9yKOyOBQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjllN2EyOGEtNjJmMC00ZDE0LTg3MDItNDAzYTUxOTBlYWUxLzAvN0QwMjAyNjY5 QkQwM0U0MTk5OTU3QjVFOTVFQkZEQzhBM0IyMzgxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDAyMDI2NjlCRDAzRTQxOTk5NTdCNUU5NUVCRkRDOEEzQjIz ODE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjllN2EyOGEtNjJmMC00ZDE0LTg3 MDItNDAzYTUxOTBlYWUxLzAvN0QwMjAyNjY5QkQwM0U0MTk5OTU3QjVFOTVFQkZE QzhBM0IyMzgxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANMhmGV17hFchEDE/n9dpJeUbAGLC9HG4b/4 ecMscw12ijE86eHCb7Bngd6D31uZxxuF8YblCz0YjdDjL3s6AqvzfKVMr+cRJ2Rv vfU9k3h8a0Pwh5S0o5WTywNxGa7OjhISjLA4fyAgBqcpuYIK7LE+5GwacOt3GkEl 9uEx8DPWcxZMukIvqUim+tapHdrjUBBuNn1N8daJCNtVCrBamEMzbe8GmB25vsiW /VueihJmQp3tbnYCjLyj2PNM+PEa2fwHcv/qizXD+BEF3QK8tFg+1nA30GJjywKc 47UJaYw3gmQRuKUYpmcXNA/kiAmP9DpyOxzR4lzzG66+p0kIHJg= -----END CERTIFICATE-----Generated at Thu Sep 3 14:18:14 2026 by rpki-client