$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft File: 7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft (raw, json) Hash identifier: /hZV6DRzPc/cmAtVPbhIxVMRfrkcG79ehm15MnmHsxA= Subject key identifier: DF:C9:24:23:D3:E4:E3:01:70:D8:83:CE:56:8F:55:D5:C1:01:58:AE Authority key identifier: 7F:5C:ED:19:7F:7E:88:09:44:8C:D3:16:88:50:A9:AC:AB:A3:5B:CD Certificate issuer: /CN=7F5CED197F7E8809448CD3168850A9ACABA35BCD Certificate serial: 0D1B8EDD7356D5EC2D06F2A33F48CB5D254D8165 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 09:09:57 +0000 Manifest this update: Thu 17 Sep 2026 09:04:57 +0000 Manifest next update: Fri 18 Sep 2026 09:42:57 +0000 Files and hashes: 1: 7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl (hash: wzjfAMYwPZSdsmIjdIZ8MA3K90ZZFohyCklEtPbq+Z8=) 2: 3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa (hash: 0ceXQBT7nQVIUPaueWzFLm7bmqkvnlmzpOPpIKUeokk=) 3: 3135372e36362e3235302e302f32342d3234203d3e20313532373635.roa (hash: e9freSOl6ZanO/adGulxqpvEl7SzFc7wYY3wkhJg4CE=) 4: 3135372e36362e3235312e302f32342d3234203d3e20313532373635.roa (hash: 67rdoMV01a3IGZ3053/VOVG/uiaYoOQVt0FRgDL8wn8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:1b:8e:dd:73:56:d5:ec:2d:06:f2:a3:3f:48:cb:5d:25:4d:81:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F5CED197F7E8809448CD3168850A9ACABA35BCD Validity Not Before: Sep 17 09:04:57 2026 GMT Not After : Sep 18 09:42:57 2026 GMT Subject: CN=DFC92423D3E4E30170D883CE568F55D5C10158AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c7:4e:29:ad:ea:a2:5b:98:f2:04:21:47:67: b0:e3:a1:f3:6a:d9:78:12:07:78:93:41:8b:a8:ef: dd:a6:dc:dc:c8:e6:8d:c2:24:1e:69:bd:82:9f:60: 67:4b:95:20:5f:db:17:22:d7:1a:a7:30:95:0f:ba: 44:a7:19:40:93:5e:a7:5f:9b:a7:e2:67:8f:44:af: f4:9f:ce:e2:32:90:99:b2:4f:12:63:53:e2:e4:bc: b0:79:da:32:25:a5:29:ff:de:8b:30:88:06:ff:b3: 6e:5c:ac:d8:d3:6e:22:43:a2:a8:44:3a:33:bf:99: 3f:af:79:3c:d4:8b:cf:fb:94:5e:67:3a:eb:13:26: b5:65:2c:de:3a:94:e5:a3:6e:45:e7:93:5e:22:09: d4:e9:20:33:88:0d:a9:78:b7:52:a8:a6:84:48:79: 91:bd:7b:2e:11:f9:16:36:cb:78:ae:41:2d:f3:4e: 84:c3:39:96:b7:fc:98:96:6e:dc:e9:b7:59:d7:84: 2a:fa:a3:b3:7e:3a:93:48:8c:93:80:34:07:77:ad: 27:fd:4b:a0:6d:72:dc:43:c4:0d:53:08:ed:ee:da: 02:80:62:b1:91:e5:44:f8:85:ee:8e:d1:3f:40:ca: 28:d9:91:55:e6:af:c4:a0:6c:9d:06:bb:40:99:8e: 69:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C9:24:23:D3:E4:E3:01:70:D8:83:CE:56:8F:55:D5:C1:01:58:AE X509v3 Authority Key Identifier: keyid:7F:5C:ED:19:7F:7E:88:09:44:8C:D3:16:88:50:A9:AC:AB:A3:5B:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:1d:5f:df:47:d5:45:50:1f:7e:2a:0d:0f:62:23:dd:c2:5c: 1f:6e:46:27:d7:19:f6:7e:93:c3:9a:76:85:0a:31:cc:29:95: ad:bc:9f:1d:25:af:62:ea:28:65:12:01:2d:94:6d:42:03:68: 5e:08:15:8b:21:e9:e8:5f:17:aa:e1:a0:71:71:05:00:73:b5: ea:70:e2:72:7a:4a:5d:85:44:1a:bf:3d:b7:67:e8:9b:a7:5d: 6d:d8:75:96:e8:ba:ed:9e:7e:9e:44:41:ee:45:cb:7a:b0:a4: 95:ca:10:82:93:a7:f8:55:1d:7e:ca:68:93:26:45:1e:37:f0: 0c:6f:75:94:ff:68:b2:44:c2:e1:6b:3d:f1:fb:07:76:e4:d8: 50:5a:7f:96:08:b8:2e:f9:df:68:2d:eb:eb:c1:7c:ba:ed:ef: 7e:30:53:c6:ed:d6:d4:85:e0:d1:ba:bf:5d:db:1e:6f:4a:48: 7d:99:d5:c2:c9:61:ca:bf:da:1b:8e:6d:34:7c:96:b4:50:cc: 67:83:bc:e0:3a:15:35:56:95:7d:0b:bf:61:d0:e0:ea:2e:f8: a5:2c:c8:1a:84:5b:b3:94:57:42:09:81:29:55:3d:c6:a7:37: 91:8b:73:60:8b:6e:3f:e9:ee:75:61:b5:79:b7:8d:e7:6b:a8: b5:d2:e4:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDRuO3XNW1ewtBvKjP0jLXSVNgWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y1Q0VEMTk3RjdFODgwOTQ0OENEMzE2ODg1MEE5QUNB QkEzNUJDRDAeFw0yNjA5MTcwOTA0NTdaFw0yNjA5MTgwOTQyNTdaMDMxMTAvBgNV BAMTKERGQzkyNDIzRDNFNEUzMDE3MEQ4ODNDRTU2OEY1NUQ1QzEwMTU4QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0x04preqiW5jyBCFHZ7DjofNq 2XgSB3iTQYuo792m3NzI5o3CJB5pvYKfYGdLlSBf2xci1xqnMJUPukSnGUCTXqdf m6fiZ49Er/SfzuIykJmyTxJjU+LkvLB52jIlpSn/3oswiAb/s25crNjTbiJDoqhE OjO/mT+veTzUi8/7lF5nOusTJrVlLN46lOWjbkXnk14iCdTpIDOIDal4t1KopoRI eZG9ey4R+RY2y3iuQS3zToTDOZa3/JiWbtzpt1nXhCr6o7N+OpNIjJOANAd3rSf9 S6BtctxDxA1TCO3u2gKAYrGR5UT4he6O0T9AyijZkVXmr8SgbJ0Gu0CZjmlHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU38kkI9Pk4wFw2IPOVo9V1cEBWK4wHwYDVR0j BBgwFoAUf1ztGX9+iAlEjNMWiFCprKujW80wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjEyYmY4NjMtYTFmMC00MmQwLTllM2EtM2Y5ZmY2OWEyZDE1LzAvN0Y1Q0VEMTk3 RjdFODgwOTQ0OENEMzE2ODg1MEE5QUNBQkEzNUJDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83RjVDRUQxOTdGN0U4ODA5NDQ4Q0QzMTY4ODUwQTlBQ0FCQTM1 QkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjEyYmY4NjMtYTFmMC00MmQwLTll M2EtM2Y5ZmY2OWEyZDE1LzAvN0Y1Q0VEMTk3RjdFODgwOTQ0OENEMzE2ODg1MEE5 QUNBQkEzNUJDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQdX99H1UVQH34qDQ9iI93CXB9uRifXGfZ+ k8OadoUKMcwpla28nx0lr2LqKGUSAS2UbUIDaF4IFYsh6ehfF6rhoHFxBQBztepw 4nJ6Sl2FRBq/Pbdn6JunXW3YdZbouu2efp5EQe5Fy3qwpJXKEIKTp/hVHX7KaJMm RR438AxvdZT/aLJEwuFrPfH7B3bk2FBaf5YIuC7532gt6+vBfLrt734wU8bt1tSF 4NG6v13bHm9KSH2Z1cLJYcq/2huObTR8lrRQzGeDvOA6FTVWlX0Lv2HQ4Oou+KUs yBqEW7OUV0IJgSlVPcanN5GLc2CLbj/p7nVhtXm3jedrqLXS5EY= -----END CERTIFICATE-----Generated at Thu Sep 17 14:23:01 2026 by rpki-client