$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft File: 872E319F800BA2C6B4EF39E67C02FA78A219796F.mft (raw, json) Hash identifier: OfAcFi6XNkPYnW6TQqzN37w08HzWKL6PpBE/RnZk4VI= Subject key identifier: 3B:B9:88:68:9C:32:1C:10:84:D6:5B:B0:8A:F2:99:98:E3:B3:22:FB Authority key identifier: 87:2E:31:9F:80:0B:A2:C6:B4:EF:39:E6:7C:02:FA:78:A2:19:79:6F Certificate issuer: /CN=872E319F800BA2C6B4EF39E67C02FA78A219796F Certificate serial: 297B146AF6A5DD3664BE19245A4D79EC9F1E5790 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 11:07:57 +0000 Manifest this update: Wed 16 Sep 2026 11:02:57 +0000 Manifest next update: Thu 17 Sep 2026 14:33:57 +0000 Files and hashes: 1: 872E319F800BA2C6B4EF39E67C02FA78A219796F.crl (hash: LbyuczlMYHJKC+zl0mLtHh5jfCpZBxPOd/wfkYx0sf4=) 2: 3130332e3138392e3131372e302f32342d3234203d3e20313439383738.roa (hash: OvRyOsYLEGBYlmYssyFcgvhpHbvbSdqAPtYyX5hS8EY=) 3: 3130332e3138392e3131362e302f32342d3234203d3e20313439383738.roa (hash: PGq4Tr5WM4VAyh7qw47RLuSMNDSTpWd9mtnYf8tmUA0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.crl rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 14:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:7b:14:6a:f6:a5:dd:36:64:be:19:24:5a:4d:79:ec:9f:1e:57:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=872E319F800BA2C6B4EF39E67C02FA78A219796F Validity Not Before: Sep 16 11:02:57 2026 GMT Not After : Sep 17 14:33:57 2026 GMT Subject: CN=3BB988689C321C1084D65BB08AF29998E3B322FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:74:d9:78:9b:4d:e3:89:3f:99:45:43:b6:b4: ae:9a:20:b3:3c:d6:43:b9:4a:35:89:71:1a:9a:52: da:ce:12:b4:5a:78:30:6a:90:77:80:86:89:9d:cf: 3f:fb:90:de:65:ca:2f:17:a5:c4:a9:45:3e:28:4e: 59:69:ec:9f:16:36:d0:c6:ae:6c:f1:1b:b6:b4:a6: 12:ce:35:8f:3c:33:83:0d:31:b8:3a:a0:17:05:d7: eb:9e:e5:74:87:7a:06:6d:58:7a:c1:b5:ad:53:5f: aa:13:2c:ac:05:6f:d1:70:18:02:26:c7:54:12:56: 84:49:e2:ba:5d:90:80:fc:40:c1:d7:96:47:04:c2: f7:b8:c5:57:2e:78:3a:48:40:cd:f2:1a:90:14:91: 48:df:67:18:32:63:0e:e6:45:e4:e9:80:72:39:49: a7:0f:0b:30:36:35:3a:44:64:68:0d:68:04:12:eb: 26:c1:cd:0a:4a:15:a9:bd:04:8c:25:2c:a0:50:67: 1c:b6:b9:7a:08:a3:5e:64:02:49:db:56:c4:e9:1c: 79:5d:18:78:65:5b:ea:2a:86:0f:a5:78:d9:2e:9a: 16:60:1d:80:52:d7:11:dc:c4:67:b8:96:09:70:45: b4:4c:96:4d:14:85:a4:9f:22:e8:ce:16:7d:8d:de: 30:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B9:88:68:9C:32:1C:10:84:D6:5B:B0:8A:F2:99:98:E3:B3:22:FB X509v3 Authority Key Identifier: keyid:87:2E:31:9F:80:0B:A2:C6:B4:EF:39:E6:7C:02:FA:78:A2:19:79:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:5f:d1:3c:72:e7:74:33:1a:47:71:3c:82:0f:a4:0b:30:c5: 8d:ab:75:b2:0a:35:b4:02:db:dc:12:9f:5e:31:66:d2:13:30: 7b:92:17:18:b7:4b:77:c0:08:2c:96:63:55:e0:ea:c2:96:e3: 14:c5:79:8f:c6:63:bf:5c:55:04:a0:3d:93:e0:50:f8:04:06: 03:d7:ea:6d:6f:bc:0b:e5:53:e3:47:d2:23:2e:73:fc:29:ac: ee:38:79:69:22:dc:5b:33:56:5f:24:2f:bf:82:b9:7a:17:48: c8:53:88:23:41:74:e1:2e:6e:c1:63:00:54:b3:d8:7b:e2:7a: 8d:fe:5f:3c:d0:da:55:c2:f4:1a:41:b3:94:b1:bf:73:ff:53: 86:4b:15:b2:bd:fd:68:90:90:a7:02:5d:8c:87:10:fd:94:e7: 36:91:09:55:e8:4a:8c:49:5a:44:4a:e7:8d:41:ba:52:a1:f2: ce:8b:b5:52:a7:ce:44:87:79:e3:18:6b:60:6d:6f:d6:75:c7: 1d:02:bc:01:2a:13:82:8c:2c:7c:d9:de:32:ee:6d:76:91:45: 48:dd:a4:1c:f4:d9:da:c1:ef:67:00:27:df:06:3c:1d:a7:af: 5b:8b:26:c2:c5:bf:22:9b:39:39:b9:21:1f:ec:fc:97:60:eb: b2:9e:3f:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKXsUaval3TZkvhkkWk157J8eV5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcyRTMxOUY4MDBCQTJDNkI0RUYzOUU2N0MwMkZBNzhB MjE5Nzk2RjAeFw0yNjA5MTYxMTAyNTdaFw0yNjA5MTcxNDMzNTdaMDMxMTAvBgNV BAMTKDNCQjk4ODY4OUMzMjFDMTA4NEQ2NUJCMDhBRjI5OTk4RTNCMzIyRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHdNl4m03jiT+ZRUO2tK6aILM8 1kO5SjWJcRqaUtrOErRaeDBqkHeAhomdzz/7kN5lyi8XpcSpRT4oTllp7J8WNtDG rmzxG7a0phLONY88M4MNMbg6oBcF1+ue5XSHegZtWHrBta1TX6oTLKwFb9FwGAIm x1QSVoRJ4rpdkID8QMHXlkcEwve4xVcueDpIQM3yGpAUkUjfZxgyYw7mReTpgHI5 SacPCzA2NTpEZGgNaAQS6ybBzQpKFam9BIwlLKBQZxy2uXoIo15kAknbVsTpHHld GHhlW+oqhg+leNkumhZgHYBS1xHcxGe4lglwRbRMlk0UhaSfIujOFn2N3jBnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO7mIaJwyHBCE1luwivKZmOOzIvswHwYDVR0j BBgwFoAUhy4xn4ALosa07znmfAL6eKIZeW8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzMwNWFiMzAtNTY1My00MmJjLTljM2YtYWFmNTY3ZWFlNzAxLzAvODcyRTMxOUY4 MDBCQTJDNkI0RUYzOUU2N0MwMkZBNzhBMjE5Nzk2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzJFMzE5RjgwMEJBMkM2QjRFRjM5RTY3QzAyRkE3OEEyMTk3 OTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzMwNWFiMzAtNTY1My00MmJjLTlj M2YtYWFmNTY3ZWFlNzAxLzAvODcyRTMxOUY4MDBCQTJDNkI0RUYzOUU2N0MwMkZB NzhBMjE5Nzk2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRf0Txy53QzGkdxPIIPpAswxY2rdbIKNbQC 29wSn14xZtITMHuSFxi3S3fACCyWY1Xg6sKW4xTFeY/GY79cVQSgPZPgUPgEBgPX 6m1vvAvlU+NH0iMuc/wprO44eWki3FszVl8kL7+CuXoXSMhTiCNBdOEubsFjAFSz 2Hvieo3+XzzQ2lXC9BpBs5Sxv3P/U4ZLFbK9/WiQkKcCXYyHEP2U5zaRCVXoSoxJ WkRK541BulKh8s6LtVKnzkSHeeMYa2Btb9Z1xx0CvAEqE4KMLHzZ3jLubXaRRUjd pBz02drB72cAJ98GPB2nr1uLJsLFvyKbOTm5IR/s/Jdg67KeP/k= -----END CERTIFICATE-----Generated at Thu Sep 17 07:34:42 2026 by rpki-client