$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft File: 7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft (raw, json) Hash identifier: IBGmdkUvrWTvZa8AnGJW1VXYnM0ywPJMQows/iHA/1w= Subject key identifier: D9:1C:06:A5:B0:D2:19:A3:AC:E2:BE:63:0C:1C:72:88:74:3C:DE:03 Authority key identifier: 7F:2F:D9:D7:9F:60:99:D1:AC:3B:40:66:68:2D:5C:9A:2E:CC:E3:1E Certificate issuer: /CN=7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E Certificate serial: 13056AE2E9267AEE479B82EE746347554DFB3E56 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 00:54:40 +0000 Manifest this update: Thu 17 Sep 2026 00:49:40 +0000 Manifest next update: Fri 18 Sep 2026 02:36:40 +0000 Files and hashes: 1: 3230332e33342e3131392e302f32342d3234203d3e203338373735.roa (hash: 5w8Q3ENzfSVAdulWtqD1S418kv12p4yit5XWvzxAqJ8=) 2: 3230332e33342e3131382e302f32342d3234203d3e203338373735.roa (hash: yB+e13aw4Ak7KRHxYqfHIAAhYIN8+abqPgpkhebxjaM=) 3: 323030313a6466343a393830303a3a2f34382d3438203d3e203338373735.roa (hash: RhVnpDr+TsXGYur3x46+P5YbFynPSyPec/J9jJ0glE4=) 4: 7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.crl (hash: CvZO5oi74dF1+ks2cFwl9AeZuzWARKbOtyEPQCztKoQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.crl rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:05:6a:e2:e9:26:7a:ee:47:9b:82:ee:74:63:47:55:4d:fb:3e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E Validity Not Before: Sep 17 00:49:40 2026 GMT Not After : Sep 18 02:36:40 2026 GMT Subject: CN=D91C06A5B0D219A3ACE2BE630C1C7288743CDE03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9a:73:7a:bd:9f:c9:d7:40:1d:be:12:bf:35: 10:a5:a6:7f:a1:0b:bb:5d:cd:4a:36:14:9a:ec:45: 6b:f9:0e:bb:de:26:90:c3:9a:51:9f:4e:76:83:54: c7:11:e5:ae:13:d9:52:fe:d3:fe:0d:d3:3c:be:b9: 8c:bc:fd:a9:fe:63:61:0b:8f:95:01:41:70:ce:4e: 5c:a8:8f:b5:41:15:37:5f:d3:25:fd:71:37:be:13: df:6d:38:62:11:6a:4a:d1:3a:45:2d:9b:bb:1b:c6: c1:26:2e:e0:54:67:90:08:89:30:e5:4c:88:14:83: 7e:e1:fd:87:68:7a:42:4a:af:2d:bb:10:96:28:88: c7:3d:84:05:1d:ae:28:d9:ef:e5:e9:a4:73:7b:e3: 9b:9e:ea:6d:ef:92:a9:45:27:59:5b:be:3c:fd:1a: bf:09:c1:8c:9c:c4:83:1c:9d:ff:66:a8:1f:03:4f: 07:5b:83:d3:6b:b9:9f:af:67:01:e9:87:75:3f:38: fd:ac:06:64:57:a2:dd:24:11:92:3f:d4:89:3d:c3: fc:29:96:b7:d8:ff:3f:70:d0:ec:e1:be:9b:5b:f6: 52:8a:70:d0:61:b6:82:ca:0d:a2:61:18:31:06:de: f9:79:38:95:fa:d9:80:0b:72:1c:30:ed:61:e0:65: 3f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1C:06:A5:B0:D2:19:A3:AC:E2:BE:63:0C:1C:72:88:74:3C:DE:03 X509v3 Authority Key Identifier: keyid:7F:2F:D9:D7:9F:60:99:D1:AC:3B:40:66:68:2D:5C:9A:2E:CC:E3:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:b8:22:05:96:5b:13:c3:81:15:16:0e:e8:7d:b7:68:a8:b5: bc:1f:dc:2b:ff:38:2f:8b:3d:e9:90:74:3e:83:08:21:99:76: 9e:d6:71:c5:4a:18:db:57:70:fa:4e:e4:2f:4c:49:85:fe:33: 59:14:1d:68:72:8d:16:11:18:67:f4:85:58:ec:48:2f:59:1d: a4:91:ce:f1:e8:b9:f9:58:cf:3c:b0:74:92:55:2e:57:b7:9b: 5d:75:b8:54:c8:11:ee:da:60:54:3e:0c:7b:ce:c8:3f:1c:ca: 65:6b:a0:11:2a:66:54:32:f9:09:ce:7e:3c:bf:66:56:75:71: 8a:d9:05:92:7f:7e:ff:1a:20:c0:30:39:9c:0c:b3:35:f4:4a: 42:32:a8:bf:44:b5:58:4a:d2:a6:90:01:27:5d:c1:fa:08:aa: 82:a3:d9:b3:7d:3f:4f:f0:e3:d8:bb:9a:53:4d:af:01:ee:23: 72:d3:82:fd:52:9c:be:83:a8:8b:cb:32:79:f6:b3:b4:3a:9c: 6d:c1:4b:79:a6:62:fb:f2:f3:4a:1a:5e:c5:6c:79:d4:3f:70: 75:32:c8:f0:46:84:50:12:17:a7:78:50:ab:fb:7b:d9:b2:de: 8d:48:a3:f3:67:8f:a0:d3:5a:da:1a:ec:58:fd:2b:65:20:0c: b2:d4:43:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEwVq4ukmeu5Hm4LudGNHVU37PlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YyRkQ5RDc5RjYwOTlEMUFDM0I0MDY2NjgyRDVDOUEy RUNDRTMxRTAeFw0yNjA5MTcwMDQ5NDBaFw0yNjA5MTgwMjM2NDBaMDMxMTAvBgNV BAMTKEQ5MUMwNkE1QjBEMjE5QTNBQ0UyQkU2MzBDMUM3Mjg4NzQzQ0RFMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfmnN6vZ/J10AdvhK/NRClpn+h C7tdzUo2FJrsRWv5DrveJpDDmlGfTnaDVMcR5a4T2VL+0/4N0zy+uYy8/an+Y2EL j5UBQXDOTlyoj7VBFTdf0yX9cTe+E99tOGIRakrROkUtm7sbxsEmLuBUZ5AIiTDl TIgUg37h/YdoekJKry27EJYoiMc9hAUdrijZ7+XppHN745ue6m3vkqlFJ1lbvjz9 Gr8JwYycxIMcnf9mqB8DTwdbg9NruZ+vZwHph3U/OP2sBmRXot0kEZI/1Ik9w/wp lrfY/z9w0Ozhvptb9lKKcNBhtoLKDaJhGDEG3vl5OJX62YALchww7WHgZT95AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2RwGpbDSGaOs4r5jDBxyiHQ83gMwHwYDVR0j BBgwFoAUfy/Z159gmdGsO0BmaC1cmi7M4x4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkwNTNkOTYtZGExNy00MDk5LWI3MDctZGEwZWIyYmYwN2JjLzAvN0YyRkQ5RDc5 RjYwOTlEMUFDM0I0MDY2NjgyRDVDOUEyRUNDRTMxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RjJGRDlENzlGNjA5OUQxQUMzQjQwNjY2ODJENUM5QTJFQ0NF MzFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkwNTNkOTYtZGExNy00MDk5LWI3 MDctZGEwZWIyYmYwN2JjLzAvN0YyRkQ5RDc5RjYwOTlEMUFDM0I0MDY2NjgyRDVD OUEyRUNDRTMxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABa4IgWWWxPDgRUWDuh9t2iotbwf3Cv/OC+L PemQdD6DCCGZdp7WccVKGNtXcPpO5C9MSYX+M1kUHWhyjRYRGGf0hVjsSC9ZHaSR zvHouflYzzywdJJVLle3m111uFTIEe7aYFQ+DHvOyD8cymVroBEqZlQy+QnOfjy/ ZlZ1cYrZBZJ/fv8aIMAwOZwMszX0SkIyqL9EtVhK0qaQASddwfoIqoKj2bN9P0/w 49i7mlNNrwHuI3LTgv1SnL6DqIvLMnn2s7Q6nG3BS3mmYvvy80oaXsVsedQ/cHUy yPBGhFASF6d4UKv7e9my3o1Io/Nnj6DTWtoa7Fj9K2UgDLLUQ3Q= -----END CERTIFICATE-----Generated at Thu Sep 17 10:43:14 2026 by rpki-client