$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.mft File: C7B88124E27943001DCBEF12B94411DF803E6864.mft (raw, json) Hash identifier: FMlzLAgJf81ZQdYLv31k+pBw4qoyu5LpQLmqxovFowc= Subject key identifier: 65:2B:9C:16:4C:EA:F2:B1:79:9F:8C:E1:D6:27:48:2A:F0:20:4D:5A Authority key identifier: C7:B8:81:24:E2:79:43:00:1D:CB:EF:12:B9:44:11:DF:80:3E:68:64 Certificate issuer: /CN=C7B88124E27943001DCBEF12B94411DF803E6864 Certificate serial: 1FFF0C338AF28A905ED19D4D07826DA95FB7B0E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7B88124E27943001DCBEF12B94411DF803E6864.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 20:39:36 +0000 Manifest this update: Wed 16 Sep 2026 20:34:36 +0000 Manifest next update: Thu 17 Sep 2026 22:15:36 +0000 Files and hashes: 1: 3130332e3134332e3139342e302f32342d3234203d3e20313339343135.roa (hash: VbZP5AlQJHoYGRcuhEjAa8Ztq6z5yJJSceEmBD6UPnQ=) 2: C7B88124E27943001DCBEF12B94411DF803E6864.crl (hash: EDhQBh6c7371dauC7ZNVvhYYTSZfCyizXCQi4UI8Stw=) 3: 3130332e3134332e3139352e302f32342d3234203d3e20313339343135.roa (hash: nkkFu7O3K8B/AyuvsEsau+DSlTgImFo/RgKno+4L8tw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.crl rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7B88124E27943001DCBEF12B94411DF803E6864.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:15:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:ff:0c:33:8a:f2:8a:90:5e:d1:9d:4d:07:82:6d:a9:5f:b7:b0:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7B88124E27943001DCBEF12B94411DF803E6864 Validity Not Before: Sep 16 20:34:36 2026 GMT Not After : Sep 17 22:15:36 2026 GMT Subject: CN=652B9C164CEAF2B1799F8CE1D627482AF0204D5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cb:79:7f:07:8b:dc:34:09:e9:f3:7b:f1:e2: 31:d8:36:6f:39:58:0e:f1:d1:a8:5c:0b:d0:32:a1: 71:c7:04:0c:e8:75:5d:8a:cb:d3:a9:0e:74:88:b3: e0:95:17:a1:12:f8:41:ff:cb:be:9a:9a:4f:b9:f8: ef:73:2a:26:4f:d3:1f:0b:6b:45:33:21:c5:33:20: c5:9d:ef:60:dc:4c:e5:7c:7a:8d:ae:c8:6b:3d:9b: e0:77:cf:bb:9a:37:e7:21:5b:4e:8a:9f:66:23:e6: ab:02:8a:a1:be:c6:db:03:64:37:9b:8f:bb:34:53: 41:dc:9a:a8:72:a7:a5:b9:84:85:91:61:f1:1a:83: 60:df:76:80:bd:9b:bb:c1:d3:a6:d7:60:f9:fe:d9: 0a:15:09:99:3e:d3:10:82:e4:04:39:6e:5e:8f:78: 81:93:3c:b2:0b:7a:fd:96:e0:34:39:46:ce:6d:e7: 3b:98:a3:d7:df:55:5d:41:0b:50:74:59:93:dc:13: 80:4f:2f:2c:68:3a:f1:b9:0d:70:76:27:ed:ff:71: 20:07:ad:6f:c6:3e:79:ae:27:4e:5a:99:5a:0f:8c: 53:92:80:56:b9:b2:fe:cf:6c:2c:7e:10:ce:cb:c1: 0f:fe:72:d2:11:56:77:26:81:68:1f:9c:c7:1f:89: 51:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2B:9C:16:4C:EA:F2:B1:79:9F:8C:E1:D6:27:48:2A:F0:20:4D:5A X509v3 Authority Key Identifier: keyid:C7:B8:81:24:E2:79:43:00:1D:CB:EF:12:B9:44:11:DF:80:3E:68:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7B88124E27943001DCBEF12B94411DF803E6864.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a2:c1:c9:3c:6b:07:b1:7b:21:ce:24:2e:ba:2f:2e:d1:db: 30:16:9c:cd:86:75:f6:6b:44:6b:61:e7:f5:02:a8:fd:32:3a: 97:c8:64:5f:91:50:a5:aa:e7:bd:4f:b3:c5:c0:7e:6a:26:10: 11:e2:c0:05:4f:d3:b2:70:f8:2d:de:5d:f2:d2:a1:9c:12:5a: f3:9d:63:9a:1c:e7:fe:9c:15:4a:c8:d7:57:bc:9c:84:62:88: b9:2f:4e:2c:14:f9:86:da:82:d2:a5:f6:91:8b:90:7e:13:3d: 24:72:4c:57:17:d1:5b:8b:7f:20:8e:2a:64:7a:08:21:52:74: dc:40:e8:6e:9c:43:2b:72:7b:1f:3b:3d:0b:29:4f:e4:c8:5b: ab:d4:09:41:b0:50:f0:e0:ba:7e:6c:07:cd:88:6e:96:1d:fe: 8b:41:eb:43:d6:37:f4:16:23:31:31:54:02:ca:60:ed:7b:1c: b5:e6:4e:9b:53:0b:ca:f1:20:9f:c1:33:e2:9b:a0:b6:c1:ce: 7e:61:06:7c:61:8a:da:3c:ef:dd:d6:bf:7c:05:ab:ad:bf:b7: 6a:a3:6d:ae:e9:cf:66:f0:2e:ff:c0:0f:4a:ea:16:ee:cd:1e: 07:04:c1:80:30:32:a1:a0:7e:73:73:a5:8f:53:e1:ad:9d:1d: d1:21:52:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH/8MM4ryipBe0Z1NB4JtqV+3sOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdCODgxMjRFMjc5NDMwMDFEQ0JFRjEyQjk0NDExREY4 MDNFNjg2NDAeFw0yNjA5MTYyMDM0MzZaFw0yNjA5MTcyMjE1MzZaMDMxMTAvBgNV BAMTKDY1MkI5QzE2NENFQUYyQjE3OTlGOENFMUQ2Mjc0ODJBRjAyMDRENUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCly3l/B4vcNAnp83vx4jHYNm85 WA7x0ahcC9AyoXHHBAzodV2Ky9OpDnSIs+CVF6ES+EH/y76amk+5+O9zKiZP0x8L a0UzIcUzIMWd72DcTOV8eo2uyGs9m+B3z7uaN+chW06Kn2Yj5qsCiqG+xtsDZDeb j7s0U0Hcmqhyp6W5hIWRYfEag2DfdoC9m7vB06bXYPn+2QoVCZk+0xCC5AQ5bl6P eIGTPLILev2W4DQ5Rs5t5zuYo9ffVV1BC1B0WZPcE4BPLyxoOvG5DXB2J+3/cSAH rW/GPnmuJ05amVoPjFOSgFa5sv7PbCx+EM7LwQ/+ctIRVncmgWgfnMcfiVGtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZSucFkzq8rF5n4zh1idIKvAgTVowHwYDVR0j BBgwFoAUx7iBJOJ5QwAdy+8SuUQR34A+aGQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjJlMDZmNzItMTMyMy00ZmJkLWIyNmUtOWVkOWE5YWRkODgwLzAvQzdCODgxMjRF Mjc5NDMwMDFEQ0JFRjEyQjk0NDExREY4MDNFNjg2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DN0I4ODEyNEUyNzk0MzAwMURDQkVGMTJCOTQ0MTFERjgwM0U2 ODY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjJlMDZmNzItMTMyMy00ZmJkLWIy NmUtOWVkOWE5YWRkODgwLzAvQzdCODgxMjRFMjc5NDMwMDFEQ0JFRjEyQjk0NDEx REY4MDNFNjg2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyiwck8awexeyHOJC66Ly7R2zAWnM2GdfZr RGth5/UCqP0yOpfIZF+RUKWq571Ps8XAfmomEBHiwAVP07Jw+C3eXfLSoZwSWvOd Y5oc5/6cFUrI11e8nIRiiLkvTiwU+YbagtKl9pGLkH4TPSRyTFcX0VuLfyCOKmR6 CCFSdNxA6G6cQytyex87PQspT+TIW6vUCUGwUPDgun5sB82IbpYd/otB60PWN/QW IzExVALKYO17HLXmTptTC8rxIJ/BM+KboLbBzn5hBnxhito8793Wv3wFq62/t2qj ba7pz2bwLv/AD0rqFu7NHgcEwYAwMqGgfnNzpY9T4a2dHdEhUuQ= -----END CERTIFICATE-----Generated at Thu Sep 17 15:22:26 2026 by rpki-client