$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft File: B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft (raw, json) Hash identifier: bVpeenp+1UJ6DTS9Esi6OL0tagmUmCp4wC3i/qENwD8= Subject key identifier: 22:3D:93:62:D1:00:EA:8E:A0:E3:5E:0C:70:7A:45:90:B8:4B:CC:A0 Authority key identifier: B7:D5:84:20:DE:53:EA:9E:24:0A:03:F3:E3:E8:1F:3D:74:C0:59:72 Certificate issuer: /CN=B7D58420DE53EA9E240A03F3E3E81F3D74C05972 Certificate serial: 3AD0AC1BDFF75AC7BB737307A02046FFB0F7290B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft Manifest number: 9D Signing time: Thu 27 Aug 2026 02:49:01 +0000 Manifest this update: Thu 27 Aug 2026 02:44:01 +0000 Manifest next update: Fri 28 Aug 2026 04:43:01 +0000 Files and hashes: 1: B7D58420DE53EA9E240A03F3E3E81F3D74C05972.crl (hash: VkM2Nuoc0WrK8k7cfVWBteYPjvtYfOF/t0xpU30gAXw=) 2: 3130332e3132312e3137302e302f32332d3234203d3e20313335343738.roa (hash: Tw0jthlgL7LR2s7HS7uvGtTnI6qmhp1zcR5Xc7WR+2U=) 3: 3130332e3132312e3136382e302f32332d3234203d3e20313335343738.roa (hash: JdCU8fnwLyrsbyZUM+2ErkfTDZvbcugmKa8c+7GG/sA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.crl rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Aug 2026 02:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d0:ac:1b:df:f7:5a:c7:bb:73:73:07:a0:20:46:ff:b0:f7:29:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7D58420DE53EA9E240A03F3E3E81F3D74C05972 Validity Not Before: Aug 27 02:44:01 2026 GMT Not After : Aug 28 04:43:01 2026 GMT Subject: CN=223D9362D100EA8EA0E35E0C707A4590B84BCCA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:35:89:26:fd:51:e8:ad:d6:82:ed:d2:03:4a: 0e:48:19:c8:1a:42:26:bf:fd:96:8b:96:3b:e1:cc: e5:84:85:3c:b5:db:3b:8c:4f:6b:00:59:b1:db:e7: 4a:fd:b9:3f:7b:a3:5e:e5:c3:bc:5e:9f:1a:ea:4f: c9:3e:ec:db:d1:26:63:66:66:10:53:15:21:f1:a0: e4:b1:71:51:60:c1:5b:19:ee:04:a3:6f:4c:bc:bf: cb:55:89:22:86:33:cf:1b:d9:e0:16:24:e2:79:79: e7:e2:81:bf:95:bb:8b:8a:5e:52:be:04:cf:f5:6e: 58:cf:42:59:5b:89:fe:6a:fb:ff:54:7f:fe:7a:61: dd:b5:08:14:74:6a:f3:ff:1c:51:13:6f:6b:73:82: 07:35:f0:82:b2:b4:a2:96:b9:13:38:e8:c2:ad:1d: aa:b9:21:82:ef:73:de:05:76:14:a4:bc:7a:a4:49: b6:f5:42:df:41:fc:27:f8:3b:4a:cb:1f:5e:86:77: 9e:85:a8:c5:c3:0f:98:df:f6:34:42:73:9f:3b:98: 25:90:6d:df:e5:fe:5e:55:2a:87:cd:6e:ef:79:37: c4:89:ee:c0:2a:1d:5b:88:3f:b6:da:9a:78:e6:c9: 3a:17:7b:64:f5:e4:db:9d:1c:38:88:f9:17:82:98: f8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3D:93:62:D1:00:EA:8E:A0:E3:5E:0C:70:7A:45:90:B8:4B:CC:A0 X509v3 Authority Key Identifier: keyid:B7:D5:84:20:DE:53:EA:9E:24:0A:03:F3:E3:E8:1F:3D:74:C0:59:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d6:a6:b5:0f:bf:14:ac:cc:23:de:7c:85:b1:6d:b1:af:9e: 29:1e:ed:23:93:83:e8:8a:9c:f4:fb:70:47:9e:9e:46:5e:f9: d6:fc:a8:6e:4a:9e:45:b2:b2:99:03:70:6a:dc:df:50:45:96: 9e:d2:ff:a6:5c:a0:a9:8d:45:93:90:9d:3e:00:d9:d5:1c:a4: 0f:b3:66:41:b5:80:aa:95:95:3a:aa:45:5f:1f:5f:c8:ab:99: ee:54:ab:3b:29:3f:3d:86:27:fe:31:53:c4:00:ec:f4:b7:73: c1:0a:8a:eb:72:48:e4:6c:64:3b:ab:12:4b:39:e5:55:91:ce: b7:bf:0a:3e:41:ee:5a:02:63:9f:fc:56:4b:ed:4e:45:3e:e5: 3c:ba:9d:1f:7c:7d:e3:12:67:b6:89:78:4b:39:e5:f5:94:2f: 48:be:11:e3:24:9c:47:a6:25:e2:d9:78:b4:81:92:31:31:32: 80:ed:02:cb:40:0d:ed:ed:3c:5b:71:8a:c0:e1:83:5e:f3:1e: 5c:28:5e:05:a0:80:d2:df:1b:15:89:90:c8:57:87:a8:df:ce: 1e:52:64:7d:57:8d:50:ee:16:ab:6a:22:94:d2:4c:4e:23:70: 32:1d:74:00:a7:1c:7e:59:66:13:e5:90:ed:73:66:80:aa:e5: 0f:10:a8:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOtCsG9/3Wse7c3MHoCBG/7D3KQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdENTg0MjBERTUzRUE5RTI0MEEwM0YzRTNFODFGM0Q3 NEMwNTk3MjAeFw0yNjA4MjcwMjQ0MDFaFw0yNjA4MjgwNDQzMDFaMDMxMTAvBgNV BAMTKDIyM0Q5MzYyRDEwMEVBOEVBMEUzNUUwQzcwN0E0NTkwQjg0QkNDQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfNYkm/VHordaC7dIDSg5IGcga Qia//ZaLljvhzOWEhTy12zuMT2sAWbHb50r9uT97o17lw7xenxrqT8k+7NvRJmNm ZhBTFSHxoOSxcVFgwVsZ7gSjb0y8v8tViSKGM88b2eAWJOJ5eefigb+Vu4uKXlK+ BM/1bljPQllbif5q+/9Uf/56Yd21CBR0avP/HFETb2tzggc18IKytKKWuRM46MKt Haq5IYLvc94FdhSkvHqkSbb1Qt9B/Cf4O0rLH16Gd56FqMXDD5jf9jRCc587mCWQ bd/l/l5VKofNbu95N8SJ7sAqHVuIP7bamnjmyToXe2T15NudHDiI+ReCmPgLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIj2TYtEA6o6g414McHpFkLhLzKAwHwYDVR0j BBgwFoAUt9WEIN5T6p4kCgPz4+gfPXTAWXIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWE1OGFmMjQtNDYzYi00NGQ4LWI2ZjAtMzliODJiNDU4Zjc1LzAvQjdENTg0MjBE RTUzRUE5RTI0MEEwM0YzRTNFODFGM0Q3NEMwNTk3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0Q1ODQyMERFNTNFQTlFMjQwQTAzRjNFM0U4MUYzRDc0QzA1 OTcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWE1OGFmMjQtNDYzYi00NGQ4LWI2 ZjAtMzliODJiNDU4Zjc1LzAvQjdENTg0MjBERTUzRUE5RTI0MEEwM0YzRTNFODFG M0Q3NEMwNTk3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrWprUPvxSszCPefIWxbbGvnike7SOTg+iK nPT7cEeenkZe+db8qG5KnkWyspkDcGrc31BFlp7S/6ZcoKmNRZOQnT4A2dUcpA+z ZkG1gKqVlTqqRV8fX8irme5UqzspPz2GJ/4xU8QA7PS3c8EKiutySORsZDurEks5 5VWRzre/Cj5B7loCY5/8VkvtTkU+5Ty6nR98feMSZ7aJeEs55fWUL0i+EeMknEem JeLZeLSBkjExMoDtAstADe3tPFtxisDhg17zHlwoXgWggNLfGxWJkMhXh6jfzh5S ZH1XjVDuFqtqIpTSTE4jcDIddACnHH5ZZhPlkO1zZoCq5Q8QqBg= -----END CERTIFICATE-----Generated at Thu Aug 27 18:23:56 2026 by rpki-client