$ rpki-client -vvvf rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft File: 7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft (raw, json) Hash identifier: +RTe532kJOgI0puhZqedqvyEwfiLHBal6bnPgQ1mwt4= Subject key identifier: 18:F0:F4:94:86:E5:1C:89:46:C7:E8:5A:CC:FF:A1:3B:9A:FE:35:96 Authority key identifier: 7D:D6:B5:0A:2D:41:EA:EB:84:8E:7C:42:D7:4C:0D:77:D1:30:35:06 Certificate issuer: /CN=7DD6B50A2D41EAEB848E7C42D74C0D77D1303506 Certificate serial: 249F9FF778B4083D76BED5387F8B8E583F700135 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 09:55:56 +0000 Manifest this update: Thu 17 Sep 2026 09:50:56 +0000 Manifest next update: Fri 18 Sep 2026 12:26:56 +0000 Files and hashes: 1: 3130332e3231342e3130322e302f32342d3234203d3e203634303237.roa (hash: Hn5EuMtGipfFtFBXzkyifRq2Ky/xfbDimmF9AiNLLbY=) 2: 7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.crl (hash: ImvigdD4CDzMLbdkPEQn+0rMT/lOg5w0ZvIo1+/+fjg=) 3: 3130332e3231342e3130332e302f32342d3234203d3e203634303237.roa (hash: 5sujLlpuj+APYEuCGGPMp2IaRJT57klQE6sCBEbziO0=) 4: 3130332e3231342e3130302e302f32342d3234203d3e203634303237.roa (hash: X2e4T35qCspph/xtXp3KyS/o17wZ6E0HRD0EGkuu3j4=) 5: 3130332e3231342e3130312e302f32342d3234203d3e203634303237.roa (hash: e18vtFsO2rq7V5cmuPD5QY+txt6xvfQ7TNg+W5usCFI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.crl rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:9f:9f:f7:78:b4:08:3d:76:be:d5:38:7f:8b:8e:58:3f:70:01:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DD6B50A2D41EAEB848E7C42D74C0D77D1303506 Validity Not Before: Sep 17 09:50:56 2026 GMT Not After : Sep 18 12:26:56 2026 GMT Subject: CN=18F0F49486E51C8946C7E85ACCFFA13B9AFE3596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cc:74:80:67:9d:32:8d:37:44:e9:77:bd:0c: f8:a2:7f:f0:70:fa:dc:c8:45:d4:bb:49:07:f5:f9: b1:a3:2b:6b:34:f0:9c:3a:de:26:ad:38:91:b5:e7: f4:f3:0b:d0:fb:ed:a1:99:9a:40:7a:57:39:94:38: 7d:37:53:72:b0:eb:e3:38:d7:b3:75:02:d3:7c:e5: 64:56:36:a8:d3:bb:b3:32:e2:16:02:a1:93:3d:a5: 4f:41:84:61:f7:0e:a5:80:ab:b8:54:1c:88:d7:72: 45:5e:74:5e:43:28:8e:a6:cf:ed:ce:36:b6:84:2e: 6d:67:be:96:77:52:d1:fc:fb:0d:6c:fc:bd:4b:92: 13:bf:af:26:40:c1:66:22:2a:c6:7e:a3:bc:65:77: f7:a0:89:41:b6:a8:a1:b4:c5:80:4f:1a:1f:38:e6: a2:8b:32:c3:a2:28:00:d3:97:d5:d1:e2:35:e9:50: cc:14:38:8c:53:e3:f2:d0:eb:4c:f9:3c:7c:5f:38: 84:68:06:eb:a0:a8:be:8d:f6:b9:32:56:7b:e3:ba: 93:36:65:fc:48:19:48:d0:52:1d:4a:25:dd:39:b0: d5:70:58:40:fb:23:4b:ee:a9:2a:10:45:d3:09:fa: 6c:62:81:f7:9a:1e:55:17:56:7a:d0:ce:17:a7:8a: 17:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F0:F4:94:86:E5:1C:89:46:C7:E8:5A:CC:FF:A1:3B:9A:FE:35:96 X509v3 Authority Key Identifier: keyid:7D:D6:B5:0A:2D:41:EA:EB:84:8E:7C:42:D7:4C:0D:77:D1:30:35:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:65:f7:6f:19:26:67:92:6a:5e:2f:e8:7c:82:a5:d6:85:ea: 89:7b:bd:7d:44:db:7f:20:b8:ce:ba:9b:9a:68:80:a3:79:ba: 69:77:dc:bd:b1:b1:e4:ce:63:22:a4:e1:41:a9:3c:8d:0e:d5: 6c:f3:c3:79:b2:c2:33:32:54:3e:7a:1b:87:d3:b7:4b:ea:21: a0:37:c3:b2:dd:78:e1:ed:0d:b9:b4:f8:b7:d2:d5:54:ba:b2: 33:0d:69:7a:14:3c:d4:e9:a6:c1:d1:3f:c3:8f:09:dc:c8:31: fc:f9:42:23:fb:44:8f:1a:5f:c1:89:18:9d:aa:93:dc:66:d6: 79:5a:dc:aa:7d:c7:07:9a:e2:d3:b5:08:53:af:6c:3a:43:70: 5f:10:01:6e:dc:09:77:00:d8:ef:f9:b8:ce:eb:10:06:5a:25: b4:84:99:aa:da:35:61:9b:9c:52:44:1d:24:6e:26:87:10:99: 4a:1f:2d:ac:b5:3e:fa:df:60:7c:d7:d5:1e:d9:b9:97:85:dd: a9:58:10:d2:e9:16:54:bd:e1:49:b8:8a:6e:b1:1b:99:a0:80: a6:92:42:f9:94:66:9f:84:7b:1d:85:e9:ee:6e:b4:94:52:c4: 5f:4f:51:e4:74:e4:a7:8b:8a:c3:fe:ae:04:1a:bd:f3:6e:7d: 3d:0f:25:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJJ+f93i0CD12vtU4f4uOWD9wATUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RENkI1MEEyRDQxRUFFQjg0OEU3QzQyRDc0QzBENzdE MTMwMzUwNjAeFw0yNjA5MTcwOTUwNTZaFw0yNjA5MTgxMjI2NTZaMDMxMTAvBgNV BAMTKDE4RjBGNDk0ODZFNTFDODk0NkM3RTg1QUNDRkZBMTNCOUFGRTM1OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7zHSAZ50yjTdE6Xe9DPiif/Bw +tzIRdS7SQf1+bGjK2s08Jw63iatOJG15/TzC9D77aGZmkB6VzmUOH03U3Kw6+M4 17N1AtN85WRWNqjTu7My4hYCoZM9pU9BhGH3DqWAq7hUHIjXckVedF5DKI6mz+3O NraELm1nvpZ3UtH8+w1s/L1LkhO/ryZAwWYiKsZ+o7xld/egiUG2qKG0xYBPGh84 5qKLMsOiKADTl9XR4jXpUMwUOIxT4/LQ60z5PHxfOIRoBuugqL6N9rkyVnvjupM2 ZfxIGUjQUh1KJd05sNVwWED7I0vuqSoQRdMJ+mxigfeaHlUXVnrQzhenihdvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGPD0lIblHIlGx+hazP+hO5r+NZYwHwYDVR0j BBgwFoAUfda1Ci1B6uuEjnxC10wNd9EwNQYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVlNTE4NzUtNTA4Ny00MjY0LWE4YmQtNDE1NmY1NWJhYWFiLzAvN0RENkI1MEEy RDQxRUFFQjg0OEU3QzQyRDc0QzBENzdEMTMwMzUwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83REQ2QjUwQTJENDFFQUVCODQ4RTdDNDJENzRDMEQ3N0QxMzAz NTA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVlNTE4NzUtNTA4Ny00MjY0LWE4 YmQtNDE1NmY1NWJhYWFiLzAvN0RENkI1MEEyRDQxRUFFQjg0OEU3QzQyRDc0QzBE NzdEMTMwMzUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMRl928ZJmeSal4v6HyCpdaF6ol7vX1E238g uM66m5pogKN5uml33L2xseTOYyKk4UGpPI0O1Wzzw3mywjMyVD56G4fTt0vqIaA3 w7LdeOHtDbm0+LfS1VS6sjMNaXoUPNTppsHRP8OPCdzIMfz5QiP7RI8aX8GJGJ2q k9xm1nla3Kp9xwea4tO1CFOvbDpDcF8QAW7cCXcA2O/5uM7rEAZaJbSEmaraNWGb nFJEHSRuJocQmUofLay1PvrfYHzX1R7ZuZeF3alYENLpFlS94Um4im6xG5mggKaS QvmUZp+Eex2F6e5utJRSxF9PUeR05KeLisP+rgQavfNufT0PJfA= -----END CERTIFICATE-----Generated at Thu Sep 17 14:02:51 2026 by rpki-client