$ rpki-client -vvvf rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft File: D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft (raw, json) Hash identifier: 3s1lyq5NK04yhBlNnfjW8uVNavPxCU1Jl2EKA2CiBtI= Subject key identifier: 77:95:08:4D:2D:0F:F5:BE:82:8E:6C:0B:60:71:1E:50:AF:57:BF:75 Authority key identifier: D5:B2:BC:B4:D7:CD:44:98:6E:0C:DE:AB:B1:9A:3E:8D:A8:ED:A3:DE Certificate issuer: /CN=D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE Certificate serial: 7C438F1CCA04EB8108647C480F7C6A01D2D8491A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 18:11:35 +0000 Manifest this update: Wed 16 Sep 2026 18:06:35 +0000 Manifest next update: Thu 17 Sep 2026 22:09:35 +0000 Files and hashes: 1: D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.crl (hash: HsyTauchOytsL+JIGdvT43XZ57zuEO939MvRQT+ovZU=) 2: 3130332e3136392e37322e302f32332d3234203d3e203338333230.roa (hash: Mbf898IR+Gt5QKErijFC4UdXVW5evXBibnE21kjCzDc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.crl rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:09:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:43:8f:1c:ca:04:eb:81:08:64:7c:48:0f:7c:6a:01:d2:d8:49:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE Validity Not Before: Sep 16 18:06:35 2026 GMT Not After : Sep 17 22:09:35 2026 GMT Subject: CN=7795084D2D0FF5BE828E6C0B60711E50AF57BF75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:19:7e:6c:30:c6:9f:f7:07:de:49:df:9a:e9: ce:67:aa:61:c9:b1:36:dc:e8:8a:cf:7b:bb:df:ac: 58:80:47:49:b2:cc:47:e5:2d:06:50:9e:53:42:ea: 2e:93:01:96:1a:b5:52:b2:91:8b:b9:0f:cf:62:90: cb:f2:78:3d:8e:8f:21:31:ce:e1:b0:9c:be:f1:7d: aa:00:b4:c7:32:9b:a4:d6:b7:07:33:1c:51:2a:d9: b6:79:99:b0:a7:19:7c:ea:27:5d:30:02:10:c0:f5: 00:88:f0:b6:d1:70:e9:e9:70:00:8e:1e:87:5e:39: a9:21:90:c1:2b:e6:b9:11:8a:18:73:be:1a:25:bc: 43:76:69:4b:f0:ed:a0:e4:10:dd:c4:31:09:d8:eb: e6:b4:2f:ff:92:a5:2c:f7:2d:84:3a:c9:a5:58:f2: 3f:a1:fc:32:88:31:42:b4:68:4f:f4:c1:c9:30:54: 9c:71:db:4d:95:61:fc:73:60:2e:08:b5:84:98:f0: 59:0e:31:de:a0:ca:eb:15:a7:8e:3f:ca:f4:af:d0: b9:90:e2:9e:fa:a7:7d:67:0a:22:10:79:59:2a:28: a0:d3:4d:7a:22:f8:ea:9c:ac:97:63:03:2f:34:18: 31:97:0b:66:b2:d3:e1:c5:d4:cd:df:b7:19:3f:b7: 27:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:95:08:4D:2D:0F:F5:BE:82:8E:6C:0B:60:71:1E:50:AF:57:BF:75 X509v3 Authority Key Identifier: keyid:D5:B2:BC:B4:D7:CD:44:98:6E:0C:DE:AB:B1:9A:3E:8D:A8:ED:A3:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:49:08:9e:d9:51:fa:87:13:12:70:3b:4a:05:ed:62:b3:ac: b2:88:9b:07:17:3a:cb:21:5e:a9:ea:1a:48:f5:20:6b:b2:70: 93:06:b3:ff:0b:8b:8a:97:b0:12:cd:08:bb:b6:91:17:21:30: b3:5b:3d:1a:f5:3b:63:f1:47:34:71:c7:bc:18:38:d7:25:e2: 00:2b:ff:86:c0:44:4f:7a:1a:8a:09:99:18:5b:40:4f:bc:72: d1:59:f0:85:6a:16:8d:32:18:f6:f2:e7:ad:6e:aa:64:5f:30: 9c:8e:79:bd:a2:be:96:de:57:f8:1e:d5:1a:24:59:f6:1b:5e: af:6d:5b:05:26:e5:01:4a:e7:8d:a1:48:e6:55:a7:1a:df:b0: c0:7f:2b:97:e3:01:a3:3d:99:97:73:cc:65:86:ff:cf:70:bf: 89:cb:3e:d8:23:ac:08:ef:de:26:f5:c3:4e:4b:52:00:dd:fb: 99:62:39:88:c9:6a:13:65:7d:4c:02:a0:7f:31:21:4f:67:ac: 0d:e3:1e:41:b5:04:4e:75:24:7f:6a:e6:05:62:ce:bd:78:29: 7e:2b:ea:13:1f:d3:d5:31:33:33:e1:03:37:fa:5e:ed:06:f7: 33:5b:04:71:cf:0b:e5:83:fb:f3:66:23:3e:0f:fb:a9:a1:f7: 08:2a:fa:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfEOPHMoE64EIZHxID3xqAdLYSRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVCMkJDQjREN0NENDQ5ODZFMENERUFCQjE5QTNFOERB OEVEQTNERTAeFw0yNjA5MTYxODA2MzVaFw0yNjA5MTcyMjA5MzVaMDMxMTAvBgNV BAMTKDc3OTUwODREMkQwRkY1QkU4MjhFNkMwQjYwNzExRTUwQUY1N0JGNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4GX5sMMaf9wfeSd+a6c5nqmHJ sTbc6IrPe7vfrFiAR0myzEflLQZQnlNC6i6TAZYatVKykYu5D89ikMvyeD2OjyEx zuGwnL7xfaoAtMcym6TWtwczHFEq2bZ5mbCnGXzqJ10wAhDA9QCI8LbRcOnpcACO HodeOakhkMEr5rkRihhzvholvEN2aUvw7aDkEN3EMQnY6+a0L/+SpSz3LYQ6yaVY 8j+h/DKIMUK0aE/0wckwVJxx202VYfxzYC4ItYSY8FkOMd6gyusVp44/yvSv0LmQ 4p76p31nCiIQeVkqKKDTTXoi+OqcrJdjAy80GDGXC2ay0+HF1M3ftxk/tyepAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd5UITS0P9b6CjmwLYHEeUK9Xv3UwHwYDVR0j BBgwFoAU1bK8tNfNRJhuDN6rsZo+jajto94wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQxYTAyZTYtMjE3MS00N2M5LTg2YzktZDVkODBmNDU4ODM2LzAvRDVCMkJDQjRE N0NENDQ5ODZFMENERUFCQjE5QTNFOERBOEVEQTNERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENUIyQkNCNEQ3Q0Q0NDk4NkUwQ0RFQUJCMTlBM0U4REE4RURB M0RFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQxYTAyZTYtMjE3MS00N2M5LTg2 YzktZDVkODBmNDU4ODM2LzAvRDVCMkJDQjREN0NENDQ5ODZFMENERUFCQjE5QTNF OERBOEVEQTNERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBJCJ7ZUfqHExJwO0oF7WKzrLKImwcXOssh XqnqGkj1IGuycJMGs/8Li4qXsBLNCLu2kRchMLNbPRr1O2PxRzRxx7wYONcl4gAr /4bARE96GooJmRhbQE+8ctFZ8IVqFo0yGPby561uqmRfMJyOeb2ivpbeV/ge1Rok WfYbXq9tWwUm5QFK542hSOZVpxrfsMB/K5fjAaM9mZdzzGWG/89wv4nLPtgjrAjv 3ib1w05LUgDd+5liOYjJahNlfUwCoH8xIU9nrA3jHkG1BE51JH9q5gVizr14KX4r 6hMf09UxMzPhAzf6Xu0G9zNbBHHPC+WD+/NmIz4P+6mh9wgq+mQ= -----END CERTIFICATE-----Generated at Thu Sep 17 10:55:33 2026 by rpki-client