$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/7091DC8336BC57D39C24D1C393F2B14780B192CD.mft File: 7091DC8336BC57D39C24D1C393F2B14780B192CD.mft (raw, json) Hash identifier: 80aF8kblfowiLwNvALlQbN7RW5FMW46/d1jRIwBL9xs= Subject key identifier: 9C:FC:B7:10:FC:86:A9:13:E7:1B:15:1F:E7:18:67:FA:44:A7:AF:76 Authority key identifier: 70:91:DC:83:36:BC:57:D3:9C:24:D1:C3:93:F2:B1:47:80:B1:92:CD Certificate issuer: /CN=7091DC8336BC57D39C24D1C393F2B14780B192CD Certificate serial: 206C0BE1F782DF9C4892CBF8B8F89C5389B30D1E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7091DC8336BC57D39C24D1C393F2B14780B192CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/7091DC8336BC57D39C24D1C393F2B14780B192CD.mft Manifest number: BA Signing time: Thu 17 Sep 2026 13:04:48 +0000 Manifest this update: Thu 17 Sep 2026 12:59:48 +0000 Manifest next update: Fri 18 Sep 2026 14:32:48 +0000 Files and hashes: 1: 7091DC8336BC57D39C24D1C393F2B14780B192CD.crl (hash: age10Fc0DsEj9iHwzST8e+SQcgOz1A1wuBCt4MWHuXY=) 2: 3130332e3132302e3133382e302f32342d3234203d3e20313338303537.roa (hash: Q0OtuE0x+1dg20GdJHzojtIIWvsVtWVNvAlS/PxOJuA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/7091DC8336BC57D39C24D1C393F2B14780B192CD.crl rsync://rpki-rsync.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/7091DC8336BC57D39C24D1C393F2B14780B192CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7091DC8336BC57D39C24D1C393F2B14780B192CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:6c:0b:e1:f7:82:df:9c:48:92:cb:f8:b8:f8:9c:53:89:b3:0d:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7091DC8336BC57D39C24D1C393F2B14780B192CD Validity Not Before: Sep 17 12:59:48 2026 GMT Not After : Sep 18 14:32:48 2026 GMT Subject: CN=9CFCB710FC86A913E71B151FE71867FA44A7AF76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3a:c1:2e:5a:96:13:3e:fb:74:d6:88:69:52: 4f:4d:36:66:70:ea:5b:5e:d9:b9:49:a0:68:3a:e6: 2e:a4:39:8a:39:40:d7:de:6c:15:5d:14:74:ea:e7: 5e:e3:7e:fc:d9:2e:f8:3f:54:f8:d4:d4:cb:ee:f9: 69:bd:cb:fa:61:27:50:70:44:f4:82:a2:2b:6c:af: 3e:c8:8f:95:eb:ee:21:ff:92:30:f4:f2:a6:a9:45: 53:0a:1a:68:97:4f:79:e2:86:24:78:a1:96:8a:ae: 49:82:78:aa:cd:44:09:42:e8:cb:b4:a7:a6:c2:61: 0f:e4:0f:d1:87:b5:0d:e0:34:42:cb:9f:87:98:10: ee:34:4a:7d:f3:ee:43:f6:5d:44:99:a0:01:2e:27: 08:2e:a4:91:61:44:a9:8c:8c:0a:8c:ff:cc:37:6e: 8e:ec:03:15:60:5c:52:a4:ab:e6:e0:03:a6:ac:36: f3:e0:6f:85:ea:80:f5:48:61:b5:2b:2d:66:df:2a: 72:b2:b4:33:57:91:d7:2f:de:f3:63:9f:2d:d0:13: e4:27:a5:5c:c7:f0:4d:85:38:74:b3:51:da:d1:f2: dd:b3:b2:dd:f6:af:ad:b8:ea:0b:c4:0d:ea:36:d0: 5e:09:3a:1c:41:fe:d3:24:cf:c3:90:1c:28:7a:f8: ca:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FC:B7:10:FC:86:A9:13:E7:1B:15:1F:E7:18:67:FA:44:A7:AF:76 X509v3 Authority Key Identifier: keyid:70:91:DC:83:36:BC:57:D3:9C:24:D1:C3:93:F2:B1:47:80:B1:92:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/7091DC8336BC57D39C24D1C393F2B14780B192CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7091DC8336BC57D39C24D1C393F2B14780B192CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/7091DC8336BC57D39C24D1C393F2B14780B192CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:98:96:39:93:aa:ca:84:85:c0:00:3f:80:4b:bf:78:f0:e1: e8:03:ef:92:2a:7f:77:f2:86:7d:cb:72:97:23:f0:69:73:82: 29:cc:25:11:ab:1b:5e:8f:74:2e:08:4a:5f:6a:05:8c:c6:39: 80:38:8e:f6:de:c2:17:82:d9:ea:52:05:29:2f:be:6e:84:2a: 0b:75:29:12:14:24:79:ee:16:86:3d:cc:74:75:71:60:e6:1b: 90:b7:d0:ce:72:20:2c:5b:cb:6d:4a:cd:20:b0:19:77:15:45: a9:f0:40:5e:b7:14:eb:b8:c1:78:6c:d0:99:05:d0:b2:13:a9: e4:26:4f:38:cb:0a:00:d6:43:7e:8c:05:b3:ae:2d:5f:8f:ea: aa:30:a9:da:ea:51:e4:e5:10:78:99:17:34:3c:78:90:4a:52: f2:81:9e:86:27:0e:e9:37:a4:98:c9:e5:be:01:67:dd:9a:a4: a2:74:fb:c0:b3:d1:54:db:29:6f:4f:76:25:d4:9c:ec:28:d0: b7:53:f4:71:b1:4b:7f:05:04:2f:39:df:1b:b9:64:1e:fc:44: 52:13:ae:4b:58:f0:aa:19:7d:d8:d3:b8:79:65:e9:7c:01:bc: df:f8:5c:1b:f2:00:5b:94:b2:1d:f4:3b:07:e6:c8:ed:96:04: 37:5e:c7:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIGwL4feC35xIksv4uPicU4mzDR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5MURDODMzNkJDNTdEMzlDMjREMUMzOTNGMkIxNDc4 MEIxOTJDRDAeFw0yNjA5MTcxMjU5NDhaFw0yNjA5MTgxNDMyNDhaMDMxMTAvBgNV BAMTKDlDRkNCNzEwRkM4NkE5MTNFNzFCMTUxRkU3MTg2N0ZBNDRBN0FGNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/OsEuWpYTPvt01ohpUk9NNmZw 6lte2blJoGg65i6kOYo5QNfebBVdFHTq517jfvzZLvg/VPjU1Mvu+Wm9y/phJ1Bw RPSCoitsrz7Ij5Xr7iH/kjD08qapRVMKGmiXT3nihiR4oZaKrkmCeKrNRAlC6Mu0 p6bCYQ/kD9GHtQ3gNELLn4eYEO40Sn3z7kP2XUSZoAEuJwgupJFhRKmMjAqM/8w3 bo7sAxVgXFKkq+bgA6asNvPgb4XqgPVIYbUrLWbfKnKytDNXkdcv3vNjny3QE+Qn pVzH8E2FOHSzUdrR8t2zst32r6246gvEDeo20F4JOhxB/tMkz8OQHCh6+MrRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnPy3EPyGqRPnGxUf5xhn+kSnr3YwHwYDVR0j BBgwFoAUcJHcgza8V9OcJNHDk/KxR4Cxks0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGViOTYwMDUtODNhOS00MWU0LWFmNWItZjNlYWE4ZjIzNjUxLzAvNzA5MURDODMz NkJDNTdEMzlDMjREMUMzOTNGMkIxNDc4MEIxOTJDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MDkxREM4MzM2QkM1N0QzOUMyNEQxQzM5M0YyQjE0NzgwQjE5 MkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGViOTYwMDUtODNhOS00MWU0LWFm NWItZjNlYWE4ZjIzNjUxLzAvNzA5MURDODMzNkJDNTdEMzlDMjREMUMzOTNGMkIx NDc4MEIxOTJDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIOYljmTqsqEhcAAP4BLv3jw4egD75Iqf3fy hn3Lcpcj8GlzginMJRGrG16PdC4ISl9qBYzGOYA4jvbewheC2epSBSkvvm6EKgt1 KRIUJHnuFoY9zHR1cWDmG5C30M5yICxby21KzSCwGXcVRanwQF63FOu4wXhs0JkF 0LITqeQmTzjLCgDWQ36MBbOuLV+P6qowqdrqUeTlEHiZFzQ8eJBKUvKBnoYnDuk3 pJjJ5b4BZ92apKJ0+8Cz0VTbKW9PdiXUnOwo0LdT9HGxS38FBC853xu5ZB78RFIT rktY8KoZfdjTuHll6XwBvN/4XBvyAFuUsh30OwfmyO2WBDdex9w= -----END CERTIFICATE-----Generated at Thu Sep 17 15:26:19 2026 by rpki-client