$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.mft File: 7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.mft (raw, json) Hash identifier: jyZWOg0++OqylNu8XxKvL6axt41Kv8Kh47xRcDvmaxg= Subject key identifier: DE:FD:F4:19:68:4B:E6:47:9D:A8:02:09:8F:13:D4:80:B8:4E:0E:0E Authority key identifier: 7A:E9:49:1D:E1:11:DA:FB:09:BA:C8:6C:97:77:FC:44:A7:E8:D9:41 Certificate issuer: /CN=7AE9491DE111DAFB09BAC86C9777FC44A7E8D941 Certificate serial: 40FFADDEA1313E2FD7F9D7C833B49EFCA43E28AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 02:01:04 +0000 Manifest this update: Thu 17 Sep 2026 01:56:04 +0000 Manifest next update: Fri 18 Sep 2026 05:33:04 +0000 Files and hashes: 1: 3130332e3135322e37322e302f32332d3234203d3e20313430343432.roa (hash: 9NfA+UigkaeRrDOYfR/pW+xu+btdeunFAYc1t2/cwBA=) 2: 323030313a6466333a666438303a3a2f34382d3438203d3e20313430343432.roa (hash: F4M8MHNpJyjK8JMP4omDLl+coBkk4H80wSqlzMtwEQs=) 3: 7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.crl (hash: H1Ll9ff8L83KAYmmsB5PcNCYeINevnoHZZfIZfJdmZ0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.crl rsync://rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ff:ad:de:a1:31:3e:2f:d7:f9:d7:c8:33:b4:9e:fc:a4:3e:28:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7AE9491DE111DAFB09BAC86C9777FC44A7E8D941 Validity Not Before: Sep 17 01:56:04 2026 GMT Not After : Sep 18 05:33:04 2026 GMT Subject: CN=DEFDF419684BE6479DA802098F13D480B84E0E0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f2:37:a6:67:2a:d0:23:f7:16:b0:34:65:c7: 8a:4a:04:76:00:d9:a0:b0:8e:42:00:40:2d:46:28: ef:22:30:64:51:bc:49:cc:e7:1d:c1:90:3f:0f:07: 0d:3a:39:01:f3:ad:7a:68:98:84:3d:b0:e3:cd:d1: 8c:8d:5b:67:e4:84:d5:cb:9a:a2:0e:a7:35:78:fe: f9:65:36:21:5c:01:46:51:f5:d6:27:31:32:6e:ba: bd:0a:04:cb:68:cc:59:0e:99:69:cb:cb:20:35:75: 8c:12:d0:da:da:67:d2:f4:ac:9d:79:91:6f:81:59: b3:8f:32:3b:64:a6:09:cd:44:5d:68:91:35:10:60: 4a:8a:ff:4d:c7:ed:b8:85:99:43:02:b7:dc:93:16: 67:81:6d:7a:8d:d8:a8:a0:3c:75:80:8f:e3:2b:d7: c4:c0:00:9e:2a:51:d9:6e:a4:63:f7:d5:f0:cd:19: 08:41:de:8f:8e:fc:61:2b:55:27:7d:97:d5:77:40: 90:ea:cc:4c:56:19:04:49:45:64:68:0a:da:b9:7e: 74:6e:82:73:31:53:ad:52:79:a6:06:fb:eb:07:1e: fa:ce:d4:b3:dc:82:f4:b4:18:45:09:b7:96:20:3e: 46:63:f3:dc:a7:60:78:e2:44:85:b3:ab:42:27:b7: 49:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FD:F4:19:68:4B:E6:47:9D:A8:02:09:8F:13:D4:80:B8:4E:0E:0E X509v3 Authority Key Identifier: keyid:7A:E9:49:1D:E1:11:DA:FB:09:BA:C8:6C:97:77:FC:44:A7:E8:D9:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:9d:c3:90:88:f1:75:65:af:35:ae:bd:72:4a:75:a0:a4:b2: 69:90:58:32:5e:42:6e:ef:b4:ae:a5:82:f7:c6:09:70:b7:41: bc:97:1a:ee:d5:b0:35:e2:23:2a:24:36:a2:06:2f:94:d5:79: 92:9d:ca:b6:50:83:92:f5:52:95:1f:40:90:d8:58:ba:b3:e4: 2d:4a:4a:df:48:c8:07:bd:7f:05:9f:79:31:6f:23:ce:c4:50: 5c:c4:07:2b:bc:60:ad:c6:c5:64:7c:b3:b1:e9:fa:ab:d8:c0: 8e:e1:4e:c6:ae:d2:70:c6:0f:af:73:8e:00:ee:0a:2f:47:9b: cc:5c:54:ad:01:32:d1:71:06:4f:ba:ae:0a:36:03:90:90:4b: 59:02:f4:34:31:6d:80:e8:f8:90:58:6a:f5:0e:5b:aa:c0:a4: 8a:23:77:67:e7:40:b6:92:2a:b5:73:17:85:2b:e5:78:79:db: 82:36:54:42:d8:7f:5f:0f:2a:29:1e:21:0d:94:ae:ff:c5:1c: 5f:0c:dd:02:d1:c6:95:0c:a8:4c:5e:3b:64:cc:93:d0:af:52: 1d:10:c6:27:87:14:a0:f0:17:4b:85:f2:aa:49:1c:f3:15:2b: c6:34:bf:ec:0e:a3:26:a5:73:8d:69:9a:98:dc:90:9b:0e:3f: aa:6e:be:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQP+t3qExPi/X+dfIM7Se/KQ+KKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FFOTQ5MURFMTExREFGQjA5QkFDODZDOTc3N0ZDNDRB N0U4RDk0MTAeFw0yNjA5MTcwMTU2MDRaFw0yNjA5MTgwNTMzMDRaMDMxMTAvBgNV BAMTKERFRkRGNDE5Njg0QkU2NDc5REE4MDIwOThGMTNENDgwQjg0RTBFMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl8jemZyrQI/cWsDRlx4pKBHYA 2aCwjkIAQC1GKO8iMGRRvEnM5x3BkD8PBw06OQHzrXpomIQ9sOPN0YyNW2fkhNXL mqIOpzV4/vllNiFcAUZR9dYnMTJuur0KBMtozFkOmWnLyyA1dYwS0NraZ9L0rJ15 kW+BWbOPMjtkpgnNRF1okTUQYEqK/03H7biFmUMCt9yTFmeBbXqN2KigPHWAj+Mr 18TAAJ4qUdlupGP31fDNGQhB3o+O/GErVSd9l9V3QJDqzExWGQRJRWRoCtq5fnRu gnMxU61SeaYG++sHHvrO1LPcgvS0GEUJt5YgPkZj89ynYHjiRIWzq0Int0k1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3v30GWhL5kedqAIJjxPUgLhODg4wHwYDVR0j BBgwFoAUeulJHeER2vsJushsl3f8RKfo2UEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjcyOGM3N2ItMjEwMC00ZjJhLTkwZDktMDhjNTNlODQxZTFiLzAvN0FFOTQ5MURF MTExREFGQjA5QkFDODZDOTc3N0ZDNDRBN0U4RDk0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QUU5NDkxREUxMTFEQUZCMDlCQUM4NkM5Nzc3RkM0NEE3RThE OTQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjcyOGM3N2ItMjEwMC00ZjJhLTkw ZDktMDhjNTNlODQxZTFiLzAvN0FFOTQ5MURFMTExREFGQjA5QkFDODZDOTc3N0ZD NDRBN0U4RDk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGdw5CI8XVlrzWuvXJKdaCksmmQWDJeQm7v tK6lgvfGCXC3QbyXGu7VsDXiIyokNqIGL5TVeZKdyrZQg5L1UpUfQJDYWLqz5C1K St9IyAe9fwWfeTFvI87EUFzEByu8YK3GxWR8s7Hp+qvYwI7hTsau0nDGD69zjgDu Ci9Hm8xcVK0BMtFxBk+6rgo2A5CQS1kC9DQxbYDo+JBYavUOW6rApIojd2fnQLaS KrVzF4Ur5Xh524I2VELYf18PKikeIQ2Urv/FHF8M3QLRxpUMqExeO2TMk9CvUh0Q xieHFKDwF0uF8qpJHPMVK8Y0v+wOoyalc41pmpjckJsOP6puvqs= -----END CERTIFICATE-----Generated at Thu Sep 17 16:27:00 2026 by rpki-client