$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft File: 7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft (raw, json) Hash identifier: o5FbnENeT9hVNalpQj24UgPsICw5QYrQ10GZgw8FxWY= Subject key identifier: 52:7E:34:48:64:2C:63:ED:92:B4:74:06:5D:31:4A:A3:19:30:99:B5 Authority key identifier: 70:31:10:4F:FC:B4:E1:D0:46:34:76:44:5B:DF:D8:AA:B4:A4:FB:42 Certificate issuer: /CN=7031104FFCB4E1D0463476445BDFD8AAB4A4FB42 Certificate serial: 108709E76C0140DF1385217676C8C7C3E4816DF1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 16:55:02 +0000 Manifest this update: Wed 16 Sep 2026 16:50:02 +0000 Manifest next update: Thu 17 Sep 2026 17:08:02 +0000 Files and hashes: 1: 323030313a6466313a633263303a3a2f34382d3438203d3e20313439393039.roa (hash: UMQrtxzU7bwTSmrEo5CM/EREbdAjBsi84Zf8mlGLlNk=) 2: 7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.crl (hash: IGuvNvqxic8vKCuyBPM08/PY1ToJ1YACB68rwg4bkq4=) 3: 3130332e3139312e35382e302f32332d3234203d3e20313439393039.roa (hash: UTfVl36IBhOzG0Z82kRsRWQYHXTuWdTZ5yU2IO9JgDg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.crl rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:87:09:e7:6c:01:40:df:13:85:21:76:76:c8:c7:c3:e4:81:6d:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7031104FFCB4E1D0463476445BDFD8AAB4A4FB42 Validity Not Before: Sep 16 16:50:02 2026 GMT Not After : Sep 17 17:08:02 2026 GMT Subject: CN=527E3448642C63ED92B474065D314AA3193099B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c0:a0:76:61:30:38:5f:2c:8d:8b:81:85:f3: 87:ed:cb:53:30:2a:12:20:47:6d:02:f5:33:5b:f3: 86:9c:72:37:e3:65:4c:f0:c3:63:03:5e:81:b5:3f: 3b:07:be:71:2a:21:06:25:9f:a6:ef:8c:96:e0:a1: 7c:be:3b:29:43:e6:04:fd:42:e2:05:8d:ff:67:c2: 42:e3:b8:fd:a4:bb:2f:9b:71:da:4d:f6:3b:1b:59: c5:de:5d:61:85:71:36:33:96:90:e9:04:63:d2:46: 58:af:43:9b:0b:be:eb:71:25:de:99:1a:cd:f2:bb: 80:b8:ae:6a:96:21:3b:64:26:e3:d3:90:20:bb:55: 83:d2:aa:81:80:48:b8:50:2d:bb:7b:f4:2d:bf:13: 49:2d:60:e2:62:0a:ed:50:13:28:42:b9:94:16:9c: 7f:4e:77:73:a8:ae:e8:1f:81:08:e3:d6:ed:5d:3f: 97:89:af:f9:8d:80:60:ad:56:d7:59:66:48:55:4b: d1:a8:5d:cf:8b:93:4a:46:bc:4d:7c:1b:46:0c:df: 82:8f:2a:12:62:5a:41:c6:08:59:56:44:85:93:82: 48:60:c1:72:1b:ab:ee:ff:d9:f1:8c:d0:65:f4:d9: 02:31:ed:ed:90:81:bd:d7:41:66:d0:0a:04:04:36: 8d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7E:34:48:64:2C:63:ED:92:B4:74:06:5D:31:4A:A3:19:30:99:B5 X509v3 Authority Key Identifier: keyid:70:31:10:4F:FC:B4:E1:D0:46:34:76:44:5B:DF:D8:AA:B4:A4:FB:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:60:6f:20:c8:cb:6c:20:c1:4e:6f:81:f0:fd:8f:96:dd:98: 88:6a:7a:62:0e:09:86:68:ac:15:37:15:8f:9b:ed:51:12:f0: 52:2d:d6:1e:82:cb:92:be:09:cc:9f:19:3d:9e:61:f5:3f:cf: f9:ea:42:18:ab:b3:41:f3:7e:e6:79:28:30:dc:8c:82:91:a0: 64:43:32:7f:11:9f:72:35:46:e3:2a:cd:1b:54:b8:5a:f4:37: 7b:a1:46:ba:9c:50:44:7e:f7:ec:80:a1:7a:b2:12:1d:5e:35: ec:0b:c9:5d:b4:27:33:7f:cd:d3:24:c0:24:0a:62:04:7b:3b: 8e:cb:02:82:23:ed:b1:ef:24:0a:8b:3b:b6:bf:92:81:8b:16: 47:e5:5d:e3:82:20:b2:75:63:43:63:e0:3c:6a:68:63:55:66: 69:ac:64:fa:7a:07:67:e9:6f:4d:74:c2:7e:42:3b:6a:02:18: 53:dc:f9:4c:bb:c5:a7:46:67:72:a2:e6:ff:19:a3:32:51:c9: 73:5d:8d:c7:40:41:a8:6c:fa:50:d1:16:3e:a7:56:0c:d7:f8: 68:cf:6e:bb:c5:e8:23:e6:b1:39:8c:61:1f:da:9b:f3:58:4d: 8c:e5:3a:78:0f:6b:53:b8:5e:cc:1c:b1:0d:5f:fa:e1:98:6e: bb:26:cd:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEIcJ52wBQN8ThSF2dsjHw+SBbfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAzMTEwNEZGQ0I0RTFEMDQ2MzQ3NjQ0NUJERkQ4QUFC NEE0RkI0MjAeFw0yNjA5MTYxNjUwMDJaFw0yNjA5MTcxNzA4MDJaMDMxMTAvBgNV BAMTKDUyN0UzNDQ4NjQyQzYzRUQ5MkI0NzQwNjVEMzE0QUEzMTkzMDk5QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNwKB2YTA4XyyNi4GF84fty1Mw KhIgR20C9TNb84accjfjZUzww2MDXoG1PzsHvnEqIQYln6bvjJbgoXy+OylD5gT9 QuIFjf9nwkLjuP2kuy+bcdpN9jsbWcXeXWGFcTYzlpDpBGPSRlivQ5sLvutxJd6Z Gs3yu4C4rmqWITtkJuPTkCC7VYPSqoGASLhQLbt79C2/E0ktYOJiCu1QEyhCuZQW nH9Od3OorugfgQjj1u1dP5eJr/mNgGCtVtdZZkhVS9GoXc+Lk0pGvE18G0YM34KP KhJiWkHGCFlWRIWTgkhgwXIbq+7/2fGM0GX02QIx7e2Qgb3XQWbQCgQENo3JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUn40SGQsY+2StHQGXTFKoxkwmbUwHwYDVR0j BBgwFoAUcDEQT/y04dBGNHZEW9/YqrSk+0IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJiZTY4MTUtMzEwZS00MjA2LWE1MDAtNmJiOWQzMjYzYWJmLzAvNzAzMTEwNEZG Q0I0RTFEMDQ2MzQ3NjQ0NUJERkQ4QUFCNEE0RkI0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MDMxMTA0RkZDQjRFMUQwNDYzNDc2NDQ1QkRGRDhBQUI0QTRG QjQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJiZTY4MTUtMzEwZS00MjA2LWE1 MDAtNmJiOWQzMjYzYWJmLzAvNzAzMTEwNEZGQ0I0RTFEMDQ2MzQ3NjQ0NUJERkQ4 QUFCNEE0RkI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxgbyDIy2wgwU5vgfD9j5bdmIhqemIOCYZo rBU3FY+b7VES8FIt1h6Cy5K+CcyfGT2eYfU/z/nqQhirs0HzfuZ5KDDcjIKRoGRD Mn8Rn3I1RuMqzRtUuFr0N3uhRrqcUER+9+yAoXqyEh1eNewLyV20JzN/zdMkwCQK YgR7O47LAoIj7bHvJAqLO7a/koGLFkflXeOCILJ1Y0Nj4DxqaGNVZmmsZPp6B2fp b010wn5CO2oCGFPc+Uy7xadGZ3Ki5v8ZozJRyXNdjcdAQahs+lDRFj6nVgzX+GjP brvF6CPmsTmMYR/am/NYTYzlOngPa1O4XswcsQ1f+uGYbrsmze0= -----END CERTIFICATE-----Generated at Thu Sep 17 09:20:13 2026 by rpki-client