$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft File: 7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft (raw, json) Hash identifier: Qv8Gw5oZ8l4IhFjGZIuYUfLztO8RY84WybBYXVhrQKQ= Subject key identifier: 32:73:C2:EB:67:C2:B2:4C:34:32:A6:81:9F:78:2A:80:CF:64:5E:79 Authority key identifier: 7A:BD:2B:E2:09:FC:E2:A3:6F:A3:E5:CD:86:4B:F7:0F:6B:C6:5E:E4 Certificate issuer: /CN=7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4 Certificate serial: 6D3FDD42541C08016EB5795925423985D23C52A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft Manifest number: BA Signing time: Thu 17 Sep 2026 08:08:41 +0000 Manifest this update: Thu 17 Sep 2026 08:03:41 +0000 Manifest next update: Fri 18 Sep 2026 11:56:41 +0000 Files and hashes: 1: 3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa (hash: zpN+ZUQARf85utjXtSfFSa/KkTvAdeU606KS8jCMD5U=) 2: 3130332e3235352e3136342e302f32342d3234203d3e20313531393934.roa (hash: XAlXWmMjaTIgPpDDe6g4p0/8EhTXLUGxpCwgLN6Nis0=) 3: 7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.crl (hash: 2OGh8xiiw64LjtK8Kj83aiEGTS0SjaCzXAjitTjgsh4=) 4: 3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa (hash: Gp5/rWdRIu6ScqVU154gXkTtG4fAxGJvRR3MmRVopqg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.crl rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:3f:dd:42:54:1c:08:01:6e:b5:79:59:25:42:39:85:d2:3c:52:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4 Validity Not Before: Sep 17 08:03:41 2026 GMT Not After : Sep 18 11:56:41 2026 GMT Subject: CN=3273C2EB67C2B24C3432A6819F782A80CF645E79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f9:71:10:d6:12:b8:d6:a3:7f:09:13:b4:e6: 32:bc:c5:91:29:88:6a:c6:de:a4:95:7f:0c:cc:b7: 01:12:e4:6d:e1:2c:02:47:d0:31:c9:7f:a3:a8:24: 9c:40:7b:d2:8e:65:d3:13:97:56:99:41:dc:e4:b3: 4f:4e:92:22:24:b3:bb:6e:6a:f1:03:78:33:5d:7d: db:bc:90:33:35:6a:f8:83:d7:12:bf:86:18:ff:0b: e3:80:46:06:f4:39:e5:76:d0:a6:4e:07:be:90:cb: 46:72:71:81:b8:9e:24:25:3a:24:d2:ac:a7:41:97: 1f:d8:fc:16:17:80:bb:39:c4:ae:9a:23:1a:d2:fa: 0e:f8:dc:0f:82:63:c2:d6:4a:3f:e1:af:41:6b:e4: 74:10:4d:f1:ee:c7:04:c6:35:be:f2:9b:85:df:2d: 25:80:e9:3d:be:d0:d5:2c:5b:45:0e:69:a3:bf:36: 1e:41:7a:7e:b4:b1:73:31:d7:58:5c:db:bf:2d:23: eb:04:ef:4b:02:34:a5:1b:cb:c2:a3:e3:33:ae:7f: 62:38:4a:76:79:50:2b:95:b0:dd:7a:db:49:d5:d0: 37:b2:c1:f5:d8:16:f1:90:8d:86:b7:28:41:25:7f: 0b:6d:11:85:17:0c:4a:f3:4b:94:bc:a1:ad:5a:7a: e2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:73:C2:EB:67:C2:B2:4C:34:32:A6:81:9F:78:2A:80:CF:64:5E:79 X509v3 Authority Key Identifier: keyid:7A:BD:2B:E2:09:FC:E2:A3:6F:A3:E5:CD:86:4B:F7:0F:6B:C6:5E:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:2c:30:ca:2a:16:b0:a1:7d:ed:97:30:a5:90:b0:6a:d6:f7: d2:2f:6e:4e:d3:be:57:9f:a4:57:38:ee:e4:1b:aa:0d:ca:a9: 49:20:9f:6b:98:aa:3c:ba:41:fe:0a:02:1d:4d:99:57:98:78: 03:6f:4e:17:2b:4d:1a:83:40:30:e9:96:f6:c1:6f:d1:28:8f: 64:fb:88:30:2a:35:a6:6b:75:55:d5:43:bb:aa:77:e7:7d:d8: 7e:d9:be:65:20:0c:3d:37:f0:f3:bb:83:6c:8d:ee:8d:6e:b2: 9f:a0:3f:63:5e:03:7c:2a:13:94:6c:16:ca:0f:b8:ea:e5:63: 35:be:7a:52:32:3a:c0:15:f9:71:4d:d2:fa:67:06:38:71:02: 92:7e:eb:a1:7f:20:de:c2:cf:a3:d6:59:ff:97:a5:a7:e1:5f: 91:78:d8:51:bb:b1:54:cf:04:1c:f7:60:81:c1:fe:0b:3c:2d: fa:e2:9f:03:d4:fe:8b:f5:e5:3b:8c:cd:74:b4:1c:df:07:50: 9d:9d:31:7c:79:93:2b:00:7b:54:0a:0e:f0:7f:64:71:ef:84: 2b:9d:6a:71:be:b7:15:9b:b7:5f:80:9d:8b:14:bd:1b:77:e5: a8:17:13:15:08:d0:be:79:83:33:30:37:cf:6d:c9:c8:2b:30: 55:fe:dd:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbT/dQlQcCAFutXlZJUI5hdI8UqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FCRDJCRTIwOUZDRTJBMzZGQTNFNUNEODY0QkY3MEY2 QkM2NUVFNDAeFw0yNjA5MTcwODAzNDFaFw0yNjA5MTgxMTU2NDFaMDMxMTAvBgNV BAMTKDMyNzNDMkVCNjdDMkIyNEMzNDMyQTY4MTlGNzgyQTgwQ0Y2NDVFNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd+XEQ1hK41qN/CRO05jK8xZEp iGrG3qSVfwzMtwES5G3hLAJH0DHJf6OoJJxAe9KOZdMTl1aZQdzks09OkiIks7tu avEDeDNdfdu8kDM1aviD1xK/hhj/C+OARgb0OeV20KZOB76Qy0ZycYG4niQlOiTS rKdBlx/Y/BYXgLs5xK6aIxrS+g743A+CY8LWSj/hr0Fr5HQQTfHuxwTGNb7ym4Xf LSWA6T2+0NUsW0UOaaO/Nh5Ben60sXMx11hc278tI+sE70sCNKUby8Kj4zOuf2I4 SnZ5UCuVsN1620nV0DeywfXYFvGQjYa3KEElfwttEYUXDErzS5S8oa1aeuJlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMnPC62fCskw0MqaBn3gqgM9kXnkwHwYDVR0j BBgwFoAUer0r4gn84qNvo+XNhkv3D2vGXuQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M0N2VmNWMtNWJiYS00Y2QxLThkYzktMTczZTI3NTFmNGY0LzAvN0FCRDJCRTIw OUZDRTJBMzZGQTNFNUNEODY0QkY3MEY2QkM2NUVFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QUJEMkJFMjA5RkNFMkEzNkZBM0U1Q0Q4NjRCRjcwRjZCQzY1 RUU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M0N2VmNWMtNWJiYS00Y2QxLThk YzktMTczZTI3NTFmNGY0LzAvN0FCRDJCRTIwOUZDRTJBMzZGQTNFNUNEODY0QkY3 MEY2QkM2NUVFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN4sMMoqFrChfe2XMKWQsGrW99Ivbk7Tvlef pFc47uQbqg3KqUkgn2uYqjy6Qf4KAh1NmVeYeANvThcrTRqDQDDplvbBb9Eoj2T7 iDAqNaZrdVXVQ7uqd+d92H7ZvmUgDD038PO7g2yN7o1usp+gP2NeA3wqE5RsFsoP uOrlYzW+elIyOsAV+XFN0vpnBjhxApJ+66F/IN7Cz6PWWf+XpafhX5F42FG7sVTP BBz3YIHB/gs8LfrinwPU/ov15TuMzXS0HN8HUJ2dMXx5kysAe1QKDvB/ZHHvhCud anG+txWbt1+AnYsUvRt35agXExUI0L55gzMwN89tycgrMFX+3QI= -----END CERTIFICATE-----Generated at Thu Sep 17 13:46:51 2026 by rpki-client