$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft File: 7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft (raw, json) Hash identifier: ImnarSomsZuqZnM17JC2Z122joMytOg6G5kGJK04XJU= Subject key identifier: 3C:B6:F7:55:DF:33:C7:91:90:4D:D6:EF:03:F4:C8:25:6B:AC:A7:DE Authority key identifier: 7B:90:2E:8E:8A:D0:99:97:B1:25:1A:6E:7F:2B:E5:A7:21:58:A4:31 Certificate issuer: /CN=7B902E8E8AD09997B1251A6E7F2BE5A72158A431 Certificate serial: 64BEB240814EF04F7E239FCD1504C6F3E9A5CD26 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft Manifest number: 9C Signing time: Thu 27 Aug 2026 00:41:31 +0000 Manifest this update: Thu 27 Aug 2026 00:36:31 +0000 Manifest next update: Fri 28 Aug 2026 01:06:31 +0000 Files and hashes: 1: 7B902E8E8AD09997B1251A6E7F2BE5A72158A431.crl (hash: k9dKqJ4pCa6rpw0K0iawHJnnlO5+ZnXC4+xWSvkTUFk=) 2: 3130332e3131392e3233302e302f32342d3234203d3e203634333135.roa (hash: bHTkeKBy9Cu2TuHvPF5JnLqJlF4128R9POs1NRnmIUI=) 3: 3130332e3131392e3233312e302f32342d3234203d3e203634333135.roa (hash: TuwnBmf2SP7FcJG/J9a9UICaP1QA248NXcYAWaFv5gA=) 4: 3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa (hash: 3J7cimsOBRL6lk3NfIu2Oz865ovVtmYYmGTF6KPQxK8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.crl rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Aug 2026 01:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:be:b2:40:81:4e:f0:4f:7e:23:9f:cd:15:04:c6:f3:e9:a5:cd:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B902E8E8AD09997B1251A6E7F2BE5A72158A431 Validity Not Before: Aug 27 00:36:31 2026 GMT Not After : Aug 28 01:06:31 2026 GMT Subject: CN=3CB6F755DF33C791904DD6EF03F4C8256BACA7DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:31:42:f4:2a:bd:b2:07:78:c2:91:f6:3c:29: ad:40:14:aa:39:26:e2:96:84:4c:5f:a7:d9:75:f2: ca:41:58:67:ca:81:2f:a8:fa:be:2a:39:9d:ce:19: 46:ce:bf:57:a1:77:45:43:6c:3f:18:56:d0:15:c7: 32:a3:1a:14:de:12:32:15:f7:50:a1:2e:ce:f5:8b: 6b:4f:31:28:fa:e9:16:d9:19:e5:cf:c6:1d:13:10: 7f:46:8d:28:4d:30:09:51:af:05:e0:6d:39:cf:9e: 80:59:16:99:df:fb:70:06:95:ee:da:d2:3d:38:87: 98:da:aa:e6:3e:07:dd:fa:32:e5:73:eb:d4:31:ae: 95:63:0f:2b:0b:21:aa:d8:e6:bc:a3:c4:30:95:05: 2c:d7:e5:f1:9f:8a:24:79:c9:bf:9e:1b:a8:47:02: e7:7c:e5:f6:fe:fe:bc:2b:38:54:46:8b:79:47:45: cd:63:37:30:f6:ca:69:98:96:02:6b:af:9d:31:77: 3f:0c:14:bf:c9:71:0f:5e:fa:dc:d5:65:cc:ea:d6: 6b:b7:28:77:65:e0:e5:6c:30:03:b8:f5:a9:d2:07: 66:2d:40:40:99:7c:f2:10:37:13:54:4e:fe:75:d8: d3:a6:45:20:33:a9:d8:2e:52:c0:f9:a1:22:c4:c9: 37:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B6:F7:55:DF:33:C7:91:90:4D:D6:EF:03:F4:C8:25:6B:AC:A7:DE X509v3 Authority Key Identifier: keyid:7B:90:2E:8E:8A:D0:99:97:B1:25:1A:6E:7F:2B:E5:A7:21:58:A4:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:25:e6:4f:ed:65:25:2e:ae:89:ae:00:af:0b:44:74:d7:e8: cc:81:25:00:09:0f:38:62:2f:2e:4e:4e:ab:94:2e:e5:21:5f: 4c:5b:78:12:a1:c7:3d:00:92:72:c6:1b:33:6f:6b:34:ff:1c: 8f:9b:87:a9:c2:3d:35:02:8b:3a:e4:b1:f9:c8:82:3d:19:54: 4a:da:04:f6:fa:b4:53:d8:f9:c3:4f:32:12:f9:62:04:b5:24: 5a:6d:70:a5:c1:83:7e:80:3b:ef:dd:3e:e4:0b:f5:ea:b1:2f: cd:09:f5:49:be:2c:5f:b2:50:22:f4:27:74:2d:1d:01:a1:d2: ef:af:86:bc:8c:ed:3f:70:c1:97:c3:d3:0b:a2:cc:66:ff:c1: 6f:66:af:a5:48:5a:4e:bb:a6:cb:e2:90:cf:9e:48:f4:26:ba: 66:e0:42:8d:18:35:13:3e:16:f9:d6:63:76:eb:da:97:f3:70: f7:5b:c3:5e:95:1f:f6:2b:13:ca:c7:1e:4e:81:05:bd:89:80: 8b:b4:b8:bc:6f:65:17:0f:36:5c:88:0d:16:db:7d:11:48:54: 7a:10:64:52:89:a7:fe:be:b7:9f:11:96:0e:8d:26:63:aa:cf: 9e:41:7d:e1:dd:45:03:7d:e4:8e:e2:c5:42:5f:d9:01:0b:1c: 2f:24:5c:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZL6yQIFO8E9+I5/NFQTG8+mlzSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I5MDJFOEU4QUQwOTk5N0IxMjUxQTZFN0YyQkU1QTcy MTU4QTQzMTAeFw0yNjA4MjcwMDM2MzFaFw0yNjA4MjgwMTA2MzFaMDMxMTAvBgNV BAMTKDNDQjZGNzU1REYzM0M3OTE5MDRERDZFRjAzRjRDODI1NkJBQ0E3REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpMUL0Kr2yB3jCkfY8Ka1AFKo5 JuKWhExfp9l18spBWGfKgS+o+r4qOZ3OGUbOv1ehd0VDbD8YVtAVxzKjGhTeEjIV 91ChLs71i2tPMSj66RbZGeXPxh0TEH9GjShNMAlRrwXgbTnPnoBZFpnf+3AGle7a 0j04h5jaquY+B936MuVz69QxrpVjDysLIarY5ryjxDCVBSzX5fGfiiR5yb+eG6hH Aud85fb+/rwrOFRGi3lHRc1jNzD2ymmYlgJrr50xdz8MFL/JcQ9e+tzVZczq1mu3 KHdl4OVsMAO49anSB2YtQECZfPIQNxNUTv512NOmRSAzqdguUsD5oSLEyTdHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPLb3Vd8zx5GQTdbvA/TIJWusp94wHwYDVR0j BBgwFoAUe5AujorQmZexJRpufyvlpyFYpDEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg4M2UzYmUtNTdlMi00MTI1LWEwYzUtOWE5ZWE1MDFiZjA1LzAvN0I5MDJFOEU4 QUQwOTk5N0IxMjUxQTZFN0YyQkU1QTcyMTU4QTQzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QjkwMkU4RThBRDA5OTk3QjEyNTFBNkU3RjJCRTVBNzIxNThB NDMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg4M2UzYmUtNTdlMi00MTI1LWEw YzUtOWE5ZWE1MDFiZjA1LzAvN0I5MDJFOEU4QUQwOTk5N0IxMjUxQTZFN0YyQkU1 QTcyMTU4QTQzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQl5k/tZSUuromuAK8LRHTX6MyBJQAJDzhi Ly5OTquULuUhX0xbeBKhxz0AknLGGzNvazT/HI+bh6nCPTUCizrksfnIgj0ZVEra BPb6tFPY+cNPMhL5YgS1JFptcKXBg36AO+/dPuQL9eqxL80J9Um+LF+yUCL0J3Qt HQGh0u+vhryM7T9wwZfD0wuizGb/wW9mr6VIWk67psvikM+eSPQmumbgQo0YNRM+ FvnWY3br2pfzcPdbw16VH/YrE8rHHk6BBb2JgIu0uLxvZRcPNlyIDRbbfRFIVHoQ ZFKJp/6+t58Rlg6NJmOqz55BfeHdRQN95I7ixUJf2QELHC8kXLQ= -----END CERTIFICATE-----Generated at Thu Aug 27 18:34:25 2026 by rpki-client