$ rpki-client -vvvf rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft File: B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft (raw, json) Hash identifier: B5hFgXgXqwlSPDNPY1jc9DdfZjF/MMvrdfVWSblbeGs= Subject key identifier: EE:95:8E:CA:B2:71:A7:9C:EC:8C:D4:1D:D5:13:26:36:22:52:A0:6D Authority key identifier: B7:B8:8E:63:A9:66:6B:D2:EC:77:AD:E3:2E:08:5A:C5:87:7A:84:C0 Certificate issuer: /CN=B7B88E63A9666BD2EC77ADE32E085AC5877A84C0 Certificate serial: 4795233852BAF846DB3CE2A9CBAD1949A25A0047 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 07:32:48 +0000 Manifest this update: Thu 17 Sep 2026 07:27:48 +0000 Manifest next update: Fri 18 Sep 2026 08:11:48 +0000 Files and hashes: 1: 3130332e37302e36382e302f32342d3234203d3e20313335343634.roa (hash: 7qm6JzeL/7hHG1DAohfubeGddIvVsEzpvxGKto8u6kI=) 2: 3130332e3130322e3137372e302f32342d3234203d3e20313335343634.roa (hash: lSZEpn9P8SXdF4oANlJgFtpdNX8qaO0HeGHCAr1aP7E=) 3: 3130332e3130322e3136372e302f32342d3234203d3e20313335343634.roa (hash: Ly2+eHMG54yQYmvS+CQqaN+EkIOuz7zp9N0bR1H1740=) 4: 3130332e3130322e3137362e302f32342d3234203d3e20313335343634.roa (hash: +co2KhnhkyS+dd2WpG/hxO+d+62en7egKYIfJt2xtsw=) 5: B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl (hash: sJA/5simjjvOuOogTRK9N9m9yDYZnACQSoXgsFGVPCs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:95:23:38:52:ba:f8:46:db:3c:e2:a9:cb:ad:19:49:a2:5a:00:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7B88E63A9666BD2EC77ADE32E085AC5877A84C0 Validity Not Before: Sep 17 07:27:48 2026 GMT Not After : Sep 18 08:11:48 2026 GMT Subject: CN=EE958ECAB271A79CEC8CD41DD51326362252A06D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b1:ad:bc:96:a6:44:4d:ae:f8:83:d4:a4:50: 72:9c:a3:54:d2:af:c4:65:13:f4:c9:0a:03:f9:c4: 89:32:c5:f3:9e:aa:a5:c2:78:09:26:06:79:94:18: 95:cf:f2:8b:82:3c:c5:fa:4f:83:24:ff:94:14:62: 5b:68:45:8c:5d:4d:aa:a4:f1:a6:3f:11:20:c8:ab: f5:5e:1f:6e:3c:f5:af:b8:58:7c:37:80:0d:14:1f: aa:32:cf:3d:ba:a9:ae:fe:ec:0f:19:5e:39:4d:c5: 7b:7f:74:df:31:ab:30:1a:6d:74:77:5a:fa:a6:27: f6:a6:ba:05:fd:c0:b4:3d:01:a2:48:dd:96:63:b1: c8:d3:e6:bd:4e:81:ef:c9:e8:3b:b1:50:8b:30:15: b0:38:88:b1:a8:b8:8d:c0:0b:f2:51:14:d1:34:83: 5e:dc:8c:db:d3:4d:5d:7d:4d:b0:ee:c8:df:13:ad: 3c:33:ad:c3:80:e1:af:63:03:55:25:a3:06:43:02: ae:c6:e0:26:36:c8:98:14:d9:38:d4:68:f8:d5:19: 19:a7:17:ab:68:1e:09:76:d3:f0:06:11:76:06:23: 39:4e:98:dc:e3:dd:0d:2a:64:11:c1:04:8f:4a:14: 80:28:ce:36:25:37:28:14:31:7a:97:f8:58:11:b2: d0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:95:8E:CA:B2:71:A7:9C:EC:8C:D4:1D:D5:13:26:36:22:52:A0:6D X509v3 Authority Key Identifier: keyid:B7:B8:8E:63:A9:66:6B:D2:EC:77:AD:E3:2E:08:5A:C5:87:7A:84:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:7b:b0:a0:fc:06:92:74:0a:f5:c8:40:2f:56:50:00:6a:aa: 79:06:c8:13:8e:da:98:39:f0:9d:49:2d:e0:0f:d9:92:9e:65: 16:19:30:43:4d:84:24:01:ec:63:52:cd:22:09:9a:15:26:94: 5a:53:41:8d:b6:e7:8f:4d:7f:04:d5:6d:8f:ce:ba:77:9f:e1: 61:aa:ed:eb:08:bb:10:1f:28:10:e8:ae:4d:c2:d5:ce:cc:c8: 2e:2d:1e:ea:b7:d6:85:39:77:c9:ea:a5:d8:ab:53:ad:27:85: 28:f3:3f:61:76:91:8a:09:42:e5:04:9c:7e:90:aa:5d:55:e5: 19:9d:e9:60:2d:ab:dc:de:f4:24:b2:43:77:c1:3e:52:da:2f: e1:3e:95:16:61:cc:45:ca:7a:b0:6e:a7:79:38:a4:b8:ca:3a: 4c:74:65:37:dc:1f:45:1f:82:91:a5:e4:9c:fd:8f:e7:e0:31: c5:f7:a3:c5:69:aa:30:dc:3f:0c:e5:10:5b:01:95:0a:7c:20: 53:2b:51:b8:16:a5:79:53:86:51:d9:8c:53:02:cd:99:96:8e: 1c:6e:16:61:8d:2a:a1:58:b2:fa:8a:70:aa:5e:38:ea:78:2e: 78:ec:54:1a:6b:4f:03:bc:24:e7:98:d1:ea:e4:fc:6d:a1:fe: 60:f0:6a:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR5UjOFK6+EbbPOKpy60ZSaJaAEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdCODhFNjNBOTY2NkJEMkVDNzdBREUzMkUwODVBQzU4 NzdBODRDMDAeFw0yNjA5MTcwNzI3NDhaFw0yNjA5MTgwODExNDhaMDMxMTAvBgNV BAMTKEVFOTU4RUNBQjI3MUE3OUNFQzhDRDQxREQ1MTMyNjM2MjI1MkEwNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIsa28lqZETa74g9SkUHKco1TS r8RlE/TJCgP5xIkyxfOeqqXCeAkmBnmUGJXP8ouCPMX6T4Mk/5QUYltoRYxdTaqk 8aY/ESDIq/VeH2489a+4WHw3gA0UH6oyzz26qa7+7A8ZXjlNxXt/dN8xqzAabXR3 WvqmJ/amugX9wLQ9AaJI3ZZjscjT5r1Oge/J6DuxUIswFbA4iLGouI3AC/JRFNE0 g17cjNvTTV19TbDuyN8TrTwzrcOA4a9jA1UlowZDAq7G4CY2yJgU2TjUaPjVGRmn F6toHgl20/AGEXYGIzlOmNzj3Q0qZBHBBI9KFIAozjYlNygUMXqX+FgRstDRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7pWOyrJxp5zsjNQd1RMmNiJSoG0wHwYDVR0j BBgwFoAUt7iOY6lma9Lsd63jLghaxYd6hMAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTE5YTg1MzgtZGE0My00MTU4LWFiYzItOGU2M2E4ZTQwODk5LzAvQjdCODhFNjNB OTY2NkJEMkVDNzdBREUzMkUwODVBQzU4NzdBODRDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0I4OEU2M0E5NjY2QkQyRUM3N0FERTMyRTA4NUFDNTg3N0E4 NEMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTE5YTg1MzgtZGE0My00MTU4LWFi YzItOGU2M2E4ZTQwODk5LzAvQjdCODhFNjNBOTY2NkJEMkVDNzdBREUzMkUwODVB QzU4NzdBODRDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKV7sKD8BpJ0CvXIQC9WUABqqnkGyBOO2pg5 8J1JLeAP2ZKeZRYZMENNhCQB7GNSzSIJmhUmlFpTQY22549NfwTVbY/Ounef4WGq 7esIuxAfKBDork3C1c7MyC4tHuq31oU5d8nqpdirU60nhSjzP2F2kYoJQuUEnH6Q ql1V5Rmd6WAtq9ze9CSyQ3fBPlLaL+E+lRZhzEXKerBup3k4pLjKOkx0ZTfcH0Uf gpGl5Jz9j+fgMcX3o8VpqjDcPwzlEFsBlQp8IFMrUbgWpXlThlHZjFMCzZmWjhxu FmGNKqFYsvqKcKpeOOp4LnjsVBprTwO8JOeY0erk/G2h/mDwao0= -----END CERTIFICATE-----Generated at Thu Sep 17 09:21:24 2026 by rpki-client