$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft File: 7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft (raw, json) Hash identifier: lEf0oEO7LhaRyIbXDTu3C9Ch/iuRg5egO3UqtDuon0c= Subject key identifier: 98:5D:6E:63:45:79:9B:68:42:39:77:2F:65:82:4C:A2:AC:3C:8E:64 Authority key identifier: 7D:21:9D:B4:8C:DF:74:38:98:A3:6F:EE:74:FA:88:BF:6F:2F:1E:CF Certificate issuer: /CN=7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF Certificate serial: C6E205B7799B16DC7A02EC16D22964D54D0B6D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 16:24:15 +0000 Manifest this update: Wed 16 Sep 2026 16:19:15 +0000 Manifest next update: Thu 17 Sep 2026 20:16:15 +0000 Files and hashes: 1: 7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.crl (hash: b15BWvPcoYPUAYm07a0B3liTr91NFXIpTG5Dm59MSok=) 2: 3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa (hash: a+oamNLoBLA9eXtliwNmRKAm0bPZaIn2IEdVk6cOO3c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.crl rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c6:e2:05:b7:79:9b:16:dc:7a:02:ec:16:d2:29:64:d5:4d:0b:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF Validity Not Before: Sep 16 16:19:15 2026 GMT Not After : Sep 17 20:16:15 2026 GMT Subject: CN=985D6E6345799B684239772F65824CA2AC3C8E64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:92:01:65:64:76:e5:ad:d4:5c:19:d6:03:80: cf:50:48:ea:c9:64:c8:d2:26:34:8b:bf:88:c2:3f: 57:34:03:9e:a7:87:ad:21:11:92:57:ad:45:27:72: b3:31:cc:78:eb:2d:af:14:c1:8b:30:47:4f:fe:7f: b9:e2:a2:59:cf:48:07:82:59:98:e5:be:d8:c0:e7: fe:9b:10:5f:47:c2:79:2d:ad:6e:dd:94:a0:5f:74: 4b:48:6b:8d:c4:e4:0f:00:9d:63:e8:e9:65:f7:32: dc:a5:8a:3f:bb:53:60:7f:55:32:6d:f7:db:86:71: 3e:50:5f:7a:2b:87:a4:de:b2:61:34:7d:f1:75:8f: 7b:c7:3d:ce:3e:ca:1b:70:9b:73:4c:0c:4a:16:d1: 65:b7:1b:27:5f:95:63:9a:a1:d7:66:33:e5:b3:51: 0c:af:3c:e3:2b:db:b8:1d:30:30:09:04:ec:fe:91: 10:47:5c:26:e5:d4:46:fc:0e:e7:0d:79:3b:f8:05: a7:27:41:c1:29:9a:62:9e:4b:14:80:c6:2c:b4:4b: c0:cb:ab:3f:76:d4:fe:c9:fe:8a:b1:a8:11:9c:4f: 8e:96:05:d9:53:c9:42:02:2d:fc:83:16:2f:1f:06: f6:4a:bf:95:fc:67:90:3a:ee:46:ed:d0:c1:f2:16: 0b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:5D:6E:63:45:79:9B:68:42:39:77:2F:65:82:4C:A2:AC:3C:8E:64 X509v3 Authority Key Identifier: keyid:7D:21:9D:B4:8C:DF:74:38:98:A3:6F:EE:74:FA:88:BF:6F:2F:1E:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:5a:56:ec:9d:94:80:e8:b1:4b:b6:a7:bb:51:f5:b0:fd:6c: 8a:37:38:68:e1:0c:43:7c:52:43:d8:51:5a:b0:40:ba:61:4a: 02:26:d1:28:b0:ed:3d:ac:ff:a7:50:2d:fb:d5:b2:e5:66:95: e3:a2:ed:ea:7c:2e:d0:ae:5a:fc:7c:0a:4f:ec:39:b8:61:d3: 10:2f:67:33:3f:fc:d3:13:39:ee:d1:53:68:a9:45:8d:3f:0f: 7b:56:3c:1e:62:0d:af:36:25:bf:27:cf:84:54:31:19:b1:0d: fa:f8:ed:fe:47:65:f7:42:37:08:e1:db:31:16:28:bf:b2:b3: 8d:00:c8:90:da:aa:c2:33:5c:56:e8:4b:9c:f6:ce:3f:4b:76: 19:16:cc:9f:1d:12:bc:71:55:22:17:7a:f5:35:c6:69:63:a1: 88:f8:23:42:ba:d5:e4:ca:a5:dc:7a:ac:1a:5d:2f:d7:8d:4a: 91:8b:bd:f3:70:d1:84:d0:66:b6:e6:a3:d6:02:72:7b:e2:c7: 1a:de:fe:ca:27:7b:86:e6:67:7f:f1:38:03:0f:0a:97:5e:1c: 03:5f:7a:68:e7:43:13:2e:3f:80:c4:05:a4:08:6b:24:20:94: 3b:47:02:f9:3a:72:cb:fb:17:de:fd:23:c4:8d:e8:ee:e0:f8: 20:97:52:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAMbiBbd5mxbcegLsFtIpZNVNC20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QyMTlEQjQ4Q0RGNzQzODk4QTM2RkVFNzRGQTg4QkY2 RjJGMUVDRjAeFw0yNjA5MTYxNjE5MTVaFw0yNjA5MTcyMDE2MTVaMDMxMTAvBgNV BAMTKDk4NUQ2RTYzNDU3OTlCNjg0MjM5NzcyRjY1ODI0Q0EyQUMzQzhFNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0kgFlZHblrdRcGdYDgM9QSOrJ ZMjSJjSLv4jCP1c0A56nh60hEZJXrUUncrMxzHjrLa8UwYswR0/+f7niolnPSAeC WZjlvtjA5/6bEF9HwnktrW7dlKBfdEtIa43E5A8AnWPo6WX3Mtylij+7U2B/VTJt 99uGcT5QX3orh6TesmE0ffF1j3vHPc4+yhtwm3NMDEoW0WW3GydflWOaoddmM+Wz UQyvPOMr27gdMDAJBOz+kRBHXCbl1Eb8DucNeTv4BacnQcEpmmKeSxSAxiy0S8DL qz921P7J/oqxqBGcT46WBdlTyUICLfyDFi8fBvZKv5X8Z5A67kbt0MHyFgtnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmF1uY0V5m2hCOXcvZYJMoqw8jmQwHwYDVR0j BBgwFoAUfSGdtIzfdDiYo2/udPqIv28vHs8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmQyYjRmNzctNzRkMC00Nzk3LWFlZTAtOWVhOTA3NjU0NzMwLzAvN0QyMTlEQjQ4 Q0RGNzQzODk4QTM2RkVFNzRGQTg4QkY2RjJGMUVDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDIxOURCNDhDREY3NDM4OThBMzZGRUU3NEZBODhCRjZGMkYx RUNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmQyYjRmNzctNzRkMC00Nzk3LWFl ZTAtOWVhOTA3NjU0NzMwLzAvN0QyMTlEQjQ4Q0RGNzQzODk4QTM2RkVFNzRGQTg4 QkY2RjJGMUVDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1aVuydlIDosUu2p7tR9bD9bIo3OGjhDEN8 UkPYUVqwQLphSgIm0Siw7T2s/6dQLfvVsuVmleOi7ep8LtCuWvx8Ck/sObhh0xAv ZzM//NMTOe7RU2ipRY0/D3tWPB5iDa82Jb8nz4RUMRmxDfr47f5HZfdCNwjh2zEW KL+ys40AyJDaqsIzXFboS5z2zj9LdhkWzJ8dErxxVSIXevU1xmljoYj4I0K61eTK pdx6rBpdL9eNSpGLvfNw0YTQZrbmo9YCcnvixxre/sone4bmZ3/xOAMPCpdeHANf emjnQxMuP4DEBaQIayQglDtHAvk6csv7F979I8SN6O7g+CCXUso= -----END CERTIFICATE-----Generated at Thu Sep 17 10:44:17 2026 by rpki-client