$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft File: D69827B97765F94998CEA76A23999571F2BDA426.mft (raw, json) Hash identifier: mPHiIrJzLpPU6cuBHM5mmNbPupf56OJHp8P5vqVJ3YQ= Subject key identifier: B8:25:AE:55:98:89:17:6B:31:B3:E5:A0:7A:4E:15:F4:30:90:18:97 Authority key identifier: D6:98:27:B9:77:65:F9:49:98:CE:A7:6A:23:99:95:71:F2:BD:A4:26 Certificate issuer: /CN=D69827B97765F94998CEA76A23999571F2BDA426 Certificate serial: 7EBFCB998BBA7AEA7C4D47C6B39FEBD6B7F6A202 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 20:54:50 +0000 Manifest this update: Wed 16 Sep 2026 20:49:50 +0000 Manifest next update: Fri 18 Sep 2026 00:03:50 +0000 Files and hashes: 1: D69827B97765F94998CEA76A23999571F2BDA426.crl (hash: 0HakIq8CSDcxsrD+/lKT9Rs6dicbAJ0z33cflTyg5XM=) 2: 3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa (hash: iLHx8gOj2lpsnRU9gP4XnWUqEugFMffYvM4rOFlrJs8=) 3: 3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa (hash: vm3LwDwLeRAwMnQkRWhgtW4ETHGNuBudAWSRp1ytOKg=) 4: 323430353a633763303a3a2f33322d3332203d3e20313339393738.roa (hash: 0y6JUWjxpl3UiTjjA3rkmhxCstrj/MfIM81XvNQIAG8=) 5: 3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa (hash: TZoS498ctZpsXD1NhIQ84Q2pw5rT92BFxmYiyFfNKls=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.crl rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:03:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:bf:cb:99:8b:ba:7a:ea:7c:4d:47:c6:b3:9f:eb:d6:b7:f6:a2:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D69827B97765F94998CEA76A23999571F2BDA426 Validity Not Before: Sep 16 20:49:50 2026 GMT Not After : Sep 18 00:03:50 2026 GMT Subject: CN=B825AE559889176B31B3E5A07A4E15F430901897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:46:45:bc:19:e0:56:ad:db:71:99:75:b5:c9: 6d:46:5a:da:2c:f2:50:67:68:81:30:38:2f:d2:82: 0b:98:2d:83:69:e9:f5:51:99:eb:a8:fc:7a:b0:e6: 92:8b:ac:bc:a7:a0:28:39:e3:87:77:22:e7:78:41: 0e:02:63:70:4f:b2:fe:25:ad:38:a4:29:e7:54:43: e8:94:0a:59:71:43:e7:67:82:4e:d8:1c:dc:e0:85: b4:9a:cb:89:cb:cd:62:5c:dc:f8:13:87:b9:bf:42: 4e:6a:04:99:8a:35:69:ae:49:d5:e6:38:ca:97:44: e4:63:04:03:5b:c1:b1:7b:44:73:be:b9:d7:1c:e5: d9:91:7f:99:41:7a:13:b5:e9:2b:f1:73:3d:55:66: 9a:4a:a7:b0:36:70:d9:26:c4:d6:16:1a:a4:46:fa: 11:e6:5c:4a:71:a8:c8:af:85:cb:0b:4d:83:9a:e4: d7:f8:07:bc:13:a4:33:1e:07:1e:02:e3:2f:8f:42: 97:47:5a:df:93:cf:91:3c:91:b6:a6:79:c5:51:03: 72:e8:81:c4:bb:dc:2f:df:42:a3:8d:20:65:c7:ac: 2f:7e:7e:af:d6:68:ca:5f:30:80:61:eb:0a:0d:cd: 8b:88:ef:5f:7d:29:93:39:cd:f7:af:b6:39:ae:50: 6f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:25:AE:55:98:89:17:6B:31:B3:E5:A0:7A:4E:15:F4:30:90:18:97 X509v3 Authority Key Identifier: keyid:D6:98:27:B9:77:65:F9:49:98:CE:A7:6A:23:99:95:71:F2:BD:A4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:bd:55:a2:8d:34:61:db:54:75:17:a0:6a:c8:a2:75:c5:d1: e5:b6:88:77:0c:ff:f5:2f:74:73:1c:76:63:0e:34:27:56:cf: 8c:66:cd:c1:be:d1:2b:e2:7d:55:b7:f0:33:d4:51:b6:3b:96: 62:dd:97:dc:c4:06:eb:ad:91:22:cd:4e:c5:b2:95:40:21:b6: 40:7a:56:30:92:2a:5d:3b:bc:35:83:63:0a:cc:fc:7a:ed:4c: 6d:de:31:fd:1a:80:ac:c5:44:6e:28:b0:04:a1:7a:3b:79:d1: f7:b0:13:38:7f:39:e6:dc:82:bc:c1:de:65:cf:cf:09:9d:5a: 02:83:a0:43:e8:08:40:df:4c:05:21:5c:1c:79:00:b3:ac:4e: dc:6d:8e:4a:0a:cf:b0:b3:d8:56:8a:ab:15:3f:e5:5e:2d:7d: fd:28:0d:a3:ea:4f:30:d7:a9:76:c3:de:9d:b9:59:b9:2a:42: df:48:62:6b:fb:d0:01:3e:6e:ce:09:de:63:37:33:2b:e2:ef: 7b:39:ab:19:00:32:9b:8a:e2:42:6f:01:17:6c:19:de:6f:ae: 12:64:33:04:34:29:ca:e0:31:e9:3d:82:5f:f0:52:26:a5:8f: 7f:ff:f7:7a:bf:28:b2:3f:fc:24:e9:89:bb:62:1e:18:b9:cd: 35:ba:35:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfr/LmYu6eup8TUfGs5/r1rf2ogIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5ODI3Qjk3NzY1Rjk0OTk4Q0VBNzZBMjM5OTk1NzFG MkJEQTQyNjAeFw0yNjA5MTYyMDQ5NTBaFw0yNjA5MTgwMDAzNTBaMDMxMTAvBgNV BAMTKEI4MjVBRTU1OTg4OTE3NkIzMUIzRTVBMDdBNEUxNUY0MzA5MDE4OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtRkW8GeBWrdtxmXW1yW1GWtos 8lBnaIEwOC/SgguYLYNp6fVRmeuo/Hqw5pKLrLynoCg544d3Iud4QQ4CY3BPsv4l rTikKedUQ+iUCllxQ+dngk7YHNzghbSay4nLzWJc3PgTh7m/Qk5qBJmKNWmuSdXm OMqXRORjBANbwbF7RHO+udcc5dmRf5lBehO16Svxcz1VZppKp7A2cNkmxNYWGqRG +hHmXEpxqMivhcsLTYOa5Nf4B7wTpDMeBx4C4y+PQpdHWt+Tz5E8kbamecVRA3Lo gcS73C/fQqONIGXHrC9+fq/WaMpfMIBh6woNzYuI7199KZM5zfevtjmuUG8TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuCWuVZiJF2sxs+Wgek4V9DCQGJcwHwYDVR0j BBgwFoAU1pgnuXdl+UmYzqdqI5mVcfK9pCYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjdiODdmNmQtMjlhNy00YjRjLTgxYzctNWI0Y2JkYjJjYjZhLzAvRDY5ODI3Qjk3 NzY1Rjk0OTk4Q0VBNzZBMjM5OTk1NzFGMkJEQTQyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjk4MjdCOTc3NjVGOTQ5OThDRUE3NkEyMzk5OTU3MUYyQkRB NDI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjdiODdmNmQtMjlhNy00YjRjLTgx YzctNWI0Y2JkYjJjYjZhLzAvRDY5ODI3Qjk3NzY1Rjk0OTk4Q0VBNzZBMjM5OTk1 NzFGMkJEQTQyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALy9VaKNNGHbVHUXoGrIonXF0eW2iHcM//Uv dHMcdmMONCdWz4xmzcG+0SvifVW38DPUUbY7lmLdl9zEBuutkSLNTsWylUAhtkB6 VjCSKl07vDWDYwrM/HrtTG3eMf0agKzFRG4osAShejt50fewEzh/OebcgrzB3mXP zwmdWgKDoEPoCEDfTAUhXBx5ALOsTtxtjkoKz7Cz2FaKqxU/5V4tff0oDaPqTzDX qXbD3p25WbkqQt9IYmv70AE+bs4J3mM3Myvi73s5qxkAMpuK4kJvARdsGd5vrhJk MwQ0KcrgMek9gl/wUialj3//93q/KLI//CTpibtiHhi5zTW6NdA= -----END CERTIFICATE-----Generated at Thu Sep 17 15:06:52 2026 by rpki-client