$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft File: A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft (raw, json) Hash identifier: riV0r2fGePfZmySSh1VOOiOL+GHypSv8TSwbTq3itbk= Subject key identifier: AA:C4:DB:AD:1A:C9:6A:40:9E:20:EC:8D:F8:54:8C:7F:FB:8B:9A:5A Authority key identifier: A7:F2:57:AB:23:3C:8B:2F:1C:63:88:FC:B9:4F:34:20:60:63:AC:A7 Certificate issuer: /CN=A7F257AB233C8B2F1C6388FCB94F34206063ACA7 Certificate serial: 4261159754CB8471CCB9FB12D9B3754917F744C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft Manifest number: C3 Signing time: Wed 23 Sep 2026 17:17:23 +0000 Manifest this update: Wed 23 Sep 2026 17:12:23 +0000 Manifest next update: Thu 24 Sep 2026 19:52:23 +0000 Files and hashes: 1: 3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa (hash: GkQ8eVgQ8r/gDw/x4qIJQCYsnJYsQySSoX0lOgA5GAk=) 2: 3130332e3233312e3137312e302f32342d3234203d3e20313430343832.roa (hash: 5YtXBJW+pcjkjSSkT2eyu+9IHPZhAt7snHtZn/2zdlI=) 3: A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl (hash: wkFRTetXC8OR/pZz1fAtqENNsBQVOaYc3m0CUxoy4sQ=) 4: 32372e3131322e37372e302f32342d3234203d3e20313430343832.roa (hash: EYrB9WmEEsZBQC1BtxA6FgRk0osKm3o1jztWowdaQE0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:52:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:61:15:97:54:cb:84:71:cc:b9:fb:12:d9:b3:75:49:17:f7:44:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7F257AB233C8B2F1C6388FCB94F34206063ACA7 Validity Not Before: Sep 23 17:12:23 2026 GMT Not After : Sep 24 19:52:23 2026 GMT Subject: CN=AAC4DBAD1AC96A409E20EC8DF8548C7FFB8B9A5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6d:e7:1b:5e:e0:23:79:cd:d0:6c:be:43:44: 92:d3:2e:a0:60:43:a6:de:46:63:21:85:31:95:d0: 87:fd:2d:78:19:0d:17:7c:52:48:7c:69:2b:d9:bc: 60:53:a6:bc:ea:5c:03:da:16:b0:d4:46:43:57:63: 17:29:cc:1a:46:a5:4a:c3:7a:d6:2b:ca:17:fe:56: ef:22:b5:16:74:d5:48:36:97:77:65:02:da:fc:86: f6:bf:32:57:bc:21:81:5f:5f:a1:8e:ff:84:7b:2e: 04:94:62:73:2e:74:6a:20:90:30:09:59:b6:c1:34: d3:e5:e9:a0:fc:06:c6:d2:db:69:cc:a1:8c:59:63: 24:a6:60:8c:7d:92:dd:19:04:89:9a:2c:43:49:c2: 8f:32:b6:d6:24:72:91:cc:d3:77:79:7f:8e:51:0e: 47:e1:93:b0:bd:ac:b7:88:ba:35:98:f7:01:ee:3d: 7a:53:c1:26:5f:df:e9:ab:53:ef:c0:ae:f0:bf:70: 88:46:93:b3:a3:3a:ab:72:d3:52:27:7a:32:fc:80: 00:13:47:5d:3b:a5:d4:df:45:79:94:74:67:eb:ef: 41:2a:94:cc:9d:91:f1:1d:2c:4f:0f:0b:da:52:05: 7c:e1:6a:20:0a:a5:43:d4:00:8a:5a:c6:a0:02:7a: 87:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C4:DB:AD:1A:C9:6A:40:9E:20:EC:8D:F8:54:8C:7F:FB:8B:9A:5A X509v3 Authority Key Identifier: keyid:A7:F2:57:AB:23:3C:8B:2F:1C:63:88:FC:B9:4F:34:20:60:63:AC:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:95:aa:14:aa:cc:f1:47:53:cd:1b:2e:8b:a8:72:50:e5:96: d1:b0:ef:27:65:80:f4:c1:b8:73:f6:93:1e:d7:d7:04:4a:d7: d2:6f:67:17:1b:8b:bc:bf:78:20:86:62:a5:f4:48:50:9f:09: 0b:05:b9:47:80:4f:93:d8:37:11:f4:1b:b2:67:fa:2e:91:c4: 9f:f2:2e:3a:55:16:f7:3e:23:69:4d:45:db:a0:e1:44:78:22: 88:0f:2e:29:09:ce:f5:ba:b5:dd:f2:fb:62:4b:66:e8:09:83: 5a:12:f8:9b:b9:99:f2:b6:e8:f5:8f:99:29:e6:05:d1:a2:83: a8:65:d1:7a:ae:12:cd:84:92:27:9c:cc:f4:c4:27:27:fe:09: ac:da:6d:a7:96:01:e8:3e:9f:8f:fb:67:41:58:65:05:3c:6c: 9e:fe:34:0d:44:95:66:8a:48:59:d0:09:62:97:bc:76:c6:a8: cb:6f:04:c5:f4:f7:04:d8:67:3b:b1:3d:a6:c9:d1:e8:9c:72: c7:dd:ee:bd:86:c0:25:b5:42:b2:5f:d4:1c:10:15:41:73:e8: 65:9a:a1:38:bf:f1:21:01:44:af:79:ba:df:04:c6:9a:18:8f: 0d:d4:b6:77:cd:6b:59:7a:f2:20:c7:2a:c4:da:75:47:ce:9d: 20:08:de:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQmEVl1TLhHHMufsS2bN1SRf3RMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdGMjU3QUIyMzNDOEIyRjFDNjM4OEZDQjk0RjM0MjA2 MDYzQUNBNzAeFw0yNjA5MjMxNzEyMjNaFw0yNjA5MjQxOTUyMjNaMDMxMTAvBgNV BAMTKEFBQzREQkFEMUFDOTZBNDA5RTIwRUM4REY4NTQ4QzdGRkI4QjlBNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlbecbXuAjec3QbL5DRJLTLqBg Q6beRmMhhTGV0If9LXgZDRd8Ukh8aSvZvGBTprzqXAPaFrDURkNXYxcpzBpGpUrD etYryhf+Vu8itRZ01Ug2l3dlAtr8hva/Mle8IYFfX6GO/4R7LgSUYnMudGogkDAJ WbbBNNPl6aD8BsbS22nMoYxZYySmYIx9kt0ZBImaLENJwo8yttYkcpHM03d5f45R Dkfhk7C9rLeIujWY9wHuPXpTwSZf3+mrU+/ArvC/cIhGk7OjOqty01InejL8gAAT R107pdTfRXmUdGfr70EqlMydkfEdLE8PC9pSBXzhaiAKpUPUAIpaxqACeoflAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqsTbrRrJakCeIOyN+FSMf/uLmlowHwYDVR0j BBgwFoAUp/JXqyM8iy8cY4j8uU80IGBjrKcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWU2ZmYzOGQtZTU0Ny00ZjczLWJiMzAtMmIxNGMwOGM4OWZiLzAvQTdGMjU3QUIy MzNDOEIyRjFDNjM4OEZDQjk0RjM0MjA2MDYzQUNBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BN0YyNTdBQjIzM0M4QjJGMUM2Mzg4RkNCOTRGMzQyMDYwNjNB Q0E3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWU2ZmYzOGQtZTU0Ny00ZjczLWJi MzAtMmIxNGMwOGM4OWZiLzAvQTdGMjU3QUIyMzNDOEIyRjFDNjM4OEZDQjk0RjM0 MjA2MDYzQUNBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGaVqhSqzPFHU80bLouoclDlltGw7ydlgPTB uHP2kx7X1wRK19JvZxcbi7y/eCCGYqX0SFCfCQsFuUeAT5PYNxH0G7Jn+i6RxJ/y LjpVFvc+I2lNRdug4UR4IogPLikJzvW6td3y+2JLZugJg1oS+Ju5mfK26PWPmSnm BdGig6hl0XquEs2EkieczPTEJyf+CazabaeWAeg+n4/7Z0FYZQU8bJ7+NA1ElWaK SFnQCWKXvHbGqMtvBMX09wTYZzuxPabJ0eiccsfd7r2GwCW1QrJf1BwQFUFz6GWa oTi/8SEBRK95ut8ExpoYjw3UtnfNa1l68iDHKsTadUfOnSAI3gM= -----END CERTIFICATE-----Generated at Thu Sep 24 02:33:51 2026 by rpki-client