$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft File: 7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft (raw, json) Hash identifier: lElx9O4j6nOoEdLY3rM/W9jII2LeOW6A8kQFTBAcCkY= Subject key identifier: FB:65:1B:67:9D:D4:0D:68:E5:30:59:E1:68:B7:3D:B7:6D:5A:AB:42 Authority key identifier: 7B:90:2E:8E:8A:D0:99:97:B1:25:1A:6E:7F:2B:E5:A7:21:58:A4:31 Certificate issuer: /CN=7B902E8E8AD09997B1251A6E7F2BE5A72158A431 Certificate serial: 21B123ABD9F38B3EF4C3490ED4872B3B5C92A18B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft Manifest number: DC Signing time: Wed 14 Oct 2026 13:47:29 +0000 Manifest this update: Wed 14 Oct 2026 13:42:29 +0000 Manifest next update: Thu 15 Oct 2026 17:24:29 +0000 Files and hashes: 1: 3130332e3131392e3233302e302f32342d3234203d3e203634333135.roa (hash: bHTkeKBy9Cu2TuHvPF5JnLqJlF4128R9POs1NRnmIUI=) 2: 3130332e3131392e3233312e302f32342d3234203d3e203634333135.roa (hash: TuwnBmf2SP7FcJG/J9a9UICaP1QA248NXcYAWaFv5gA=) 3: 7B902E8E8AD09997B1251A6E7F2BE5A72158A431.crl (hash: XiutwlToWTks2HCic+9fjyYJ6xTMluVGT+FrCvnpSvA=) 4: 3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa (hash: 3J7cimsOBRL6lk3NfIu2Oz865ovVtmYYmGTF6KPQxK8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.crl rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 17:24:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:b1:23:ab:d9:f3:8b:3e:f4:c3:49:0e:d4:87:2b:3b:5c:92:a1:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B902E8E8AD09997B1251A6E7F2BE5A72158A431 Validity Not Before: Oct 14 13:42:29 2026 GMT Not After : Oct 15 17:24:29 2026 GMT Subject: CN=FB651B679DD40D68E53059E168B73DB76D5AAB42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c1:d9:9c:e5:32:a9:d8:66:5e:59:18:26:c1: 67:2d:f2:50:dc:3e:df:88:ef:00:ff:f1:24:1b:ba: ba:51:36:11:8d:ef:90:a2:fd:b1:92:22:6c:7c:6f: c6:26:eb:98:a3:8f:5e:1f:2b:dc:7f:ba:5a:e1:f8: e9:94:11:be:7b:1c:54:c6:04:3f:58:96:77:38:78: 6e:2d:46:42:6e:85:d5:0a:5b:e7:18:28:4e:19:10: 6f:23:12:4b:bd:3a:c7:aa:16:d2:9b:c4:9b:78:a6: be:4d:b6:cf:6e:93:41:7f:91:d1:07:6f:be:a0:9c: 61:96:e9:04:79:1b:62:18:49:78:f9:c6:1a:ee:c9: 70:1b:cd:67:07:aa:b5:05:d8:02:95:7c:1f:38:30: bd:00:ab:7f:d2:fd:f6:73:a2:cd:90:39:7a:5f:c0: 84:f0:13:9a:4c:02:ba:90:32:e1:e8:ea:25:28:f9: 7c:46:95:e3:01:a4:af:db:56:89:e9:8c:e6:97:fc: 37:92:e2:0e:4a:d5:c9:bb:6a:8a:cb:7f:24:90:18: d8:b4:f5:e6:b4:d1:8e:eb:e3:49:62:f2:a1:4b:5c: 6f:9d:26:91:d4:62:c5:15:ed:9e:fa:f3:5f:2d:95: e3:33:27:f2:8f:55:81:5b:c1:77:95:c6:29:9f:37: b5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:65:1B:67:9D:D4:0D:68:E5:30:59:E1:68:B7:3D:B7:6D:5A:AB:42 X509v3 Authority Key Identifier: keyid:7B:90:2E:8E:8A:D0:99:97:B1:25:1A:6E:7F:2B:E5:A7:21:58:A4:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a5:68:0a:c5:08:11:b6:0b:f6:a0:35:d3:bb:1b:d9:98:c9: 28:ac:6c:ef:e3:ed:07:23:62:77:3b:6c:54:13:be:42:5e:b0: 39:76:fd:e4:ea:18:d4:ff:c3:09:70:be:22:7c:76:bb:ef:e9: b8:56:9a:62:37:bf:34:10:9e:56:c9:1e:76:03:8d:76:6f:c8: 42:24:e7:7d:1c:d2:82:01:5f:90:01:13:4b:d1:04:33:9b:9d: e9:4e:12:33:58:ff:5a:14:72:84:15:8d:9f:9a:bc:99:c3:9d: cb:2c:b9:6f:de:26:ee:3a:c4:cc:b7:73:3e:8a:33:a1:1f:00: 58:89:4f:5c:2a:ac:6d:16:ca:dc:cf:87:90:6e:73:7c:1f:91: 93:f6:6f:c7:00:9b:06:a6:21:54:7d:60:d1:f9:e0:8f:18:a3: 49:b0:79:89:b1:b7:d5:5b:51:71:58:01:71:20:1e:fa:97:d9: b7:eb:3c:5a:98:56:bd:07:ab:4c:70:da:c6:97:4b:11:71:7d: a8:75:3b:52:54:e2:e3:d2:f8:ac:75:b2:13:16:4a:7f:b1:83: 45:4f:65:eb:b9:0e:f2:96:89:6b:5d:e9:86:45:1d:27:27:64: 6a:05:7e:2a:79:01:bd:d4:c8:c3:3a:42:99:d7:46:30:8f:a9: 13:09:b0:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIbEjq9nziz70w0kO1IcrO1ySoYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I5MDJFOEU4QUQwOTk5N0IxMjUxQTZFN0YyQkU1QTcy MTU4QTQzMTAeFw0yNjEwMTQxMzQyMjlaFw0yNjEwMTUxNzI0MjlaMDMxMTAvBgNV BAMTKEZCNjUxQjY3OURENDBENjhFNTMwNTlFMTY4QjczREI3NkQ1QUFCNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDwdmc5TKp2GZeWRgmwWct8lDc Pt+I7wD/8SQburpRNhGN75Ci/bGSImx8b8Ym65ijj14fK9x/ulrh+OmUEb57HFTG BD9Ylnc4eG4tRkJuhdUKW+cYKE4ZEG8jEku9OseqFtKbxJt4pr5Nts9uk0F/kdEH b76gnGGW6QR5G2IYSXj5xhruyXAbzWcHqrUF2AKVfB84ML0Aq3/S/fZzos2QOXpf wITwE5pMArqQMuHo6iUo+XxGleMBpK/bVonpjOaX/DeS4g5K1cm7aorLfySQGNi0 9ea00Y7r40li8qFLXG+dJpHUYsUV7Z76818tleMzJ/KPVYFbwXeVximfN7WrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+2UbZ53UDWjlMFnhaLc9t21aq0IwHwYDVR0j BBgwFoAUe5AujorQmZexJRpufyvlpyFYpDEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg4M2UzYmUtNTdlMi00MTI1LWEwYzUtOWE5ZWE1MDFiZjA1LzAvN0I5MDJFOEU4 QUQwOTk5N0IxMjUxQTZFN0YyQkU1QTcyMTU4QTQzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QjkwMkU4RThBRDA5OTk3QjEyNTFBNkU3RjJCRTVBNzIxNThB NDMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg4M2UzYmUtNTdlMi00MTI1LWEw YzUtOWE5ZWE1MDFiZjA1LzAvN0I5MDJFOEU4QUQwOTk5N0IxMjUxQTZFN0YyQkU1 QTcyMTU4QTQzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHylaArFCBG2C/agNdO7G9mYySisbO/j7Qcj Ync7bFQTvkJesDl2/eTqGNT/wwlwviJ8drvv6bhWmmI3vzQQnlbJHnYDjXZvyEIk 530c0oIBX5ABE0vRBDObnelOEjNY/1oUcoQVjZ+avJnDncssuW/eJu46xMy3cz6K M6EfAFiJT1wqrG0WytzPh5Buc3wfkZP2b8cAmwamIVR9YNH54I8Yo0mweYmxt9Vb UXFYAXEgHvqX2bfrPFqYVr0Hq0xw2saXSxFxfah1O1JU4uPS+Kx1shMWSn+xg0VP Zeu5DvKWiWtd6YZFHScnZGoFfip5Ab3UyMM6QpnXRjCPqRMJsHk= -----END CERTIFICATE-----Generated at Thu Oct 15 10:32:05 2026 by rpki-client