$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft File: 7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft (raw, json) Hash identifier: 862z94oN7b/FBceP8MPGh5803O3GYAiNx+JLzZi9vOg= Subject key identifier: CA:BA:DE:FB:6A:DF:E5:BA:91:44:A1:71:D3:5D:50:91:66:C8:9C:AD Authority key identifier: 7C:9D:38:28:7A:B4:C0:80:0F:67:E5:16:DB:04:76:04:54:CB:E9:F1 Certificate issuer: /CN=7C9D38287AB4C0800F67E516DB04760454CBE9F1 Certificate serial: 48954DCD9107181BAC9732EF0B7A64E234FFFB25 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 18:18:01 +0000 Manifest this update: Fri 25 Sep 2026 18:13:01 +0000 Manifest next update: Sat 26 Sep 2026 20:27:01 +0000 Files and hashes: 1: 3131372e3130332e36362e302f32332d3234203d3e203435373138.roa (hash: 0DLK1MQIKbxqNmcpVPbZocMztN5rDbQk4zhYo8Bx8Cw=) 2: 3130332e33312e3230362e302f32342d3234203d3e203435373138.roa (hash: ZPFkeP+nvfKboy4qow1VO85p4mUkgACDVOD+VqK2Ihg=) 3: 3130332e3139382e39332e302f32342d3234203d3e203435373138.roa (hash: gkNE1J8LS8bDAl/t8wn0B0ZHnNiDo1L7MzMb+7Q5ypo=) 4: 323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa (hash: lL0LNbFOb3ZMt/gKNiHtSDZhxYdsWPVmvyN1tdNUMJ8=) 5: 3230332e37392e32392e302f32342d3234203d3e203435373138.roa (hash: Xr9AQJybUe2phNKjCk7EDVdTwzFlkvXIj8GjUYXwr90=) 6: 7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl (hash: /1cnpAluIX3u/V5fc4en1xC0rcgNlZRBBE5e5jE2E+o=) 7: 3130332e33312e3230342e302f32332d3234203d3e203435373138.roa (hash: JJ0XYEWJnNqenm3YM5YcUAhKtM46eIeZHpKCM2PFMYk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:95:4d:cd:91:07:18:1b:ac:97:32:ef:0b:7a:64:e2:34:ff:fb:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C9D38287AB4C0800F67E516DB04760454CBE9F1 Validity Not Before: Sep 25 18:13:01 2026 GMT Not After : Sep 26 20:27:01 2026 GMT Subject: CN=CABADEFB6ADFE5BA9144A171D35D509166C89CAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1c:28:e5:3f:65:e2:15:6a:84:17:6d:d3:7f: 1d:a3:4f:c8:b5:01:a5:28:9b:38:b4:b6:f7:80:82: 8a:90:ab:95:3b:9b:7a:9c:e9:1d:97:de:4a:77:04: 79:56:c2:34:03:76:35:3d:3b:cc:4d:eb:a2:44:e6: f9:98:ec:10:d7:d7:a2:ed:a4:a6:7d:9e:12:fc:61: 6f:da:fb:91:f6:10:8b:d1:30:0e:ad:bc:23:80:84: 5b:fd:8c:44:c8:77:26:95:ee:6b:a1:c5:b1:76:d0: ba:1b:0a:0f:9f:be:3f:2d:bb:f0:e1:67:6e:f6:35: 0f:c4:02:77:f3:72:08:1f:22:5c:ae:6a:b2:a7:4f: eb:21:64:17:96:29:59:47:c6:e4:90:d1:4b:a3:7f: fa:f2:64:38:3e:38:37:d8:2b:b9:21:19:a9:1c:2b: 88:46:17:e5:86:42:0c:ae:28:94:f5:02:d7:5b:ee: d0:0d:24:05:ea:93:cb:60:55:ff:dc:75:2e:1c:bb: 0b:41:61:3f:8a:02:29:0f:5a:b9:d5:53:ce:e0:27: 20:eb:55:56:f4:fd:d3:0e:4b:91:c5:64:16:27:26: a1:d8:17:d8:6e:68:86:9a:a5:0c:f2:4c:37:ee:be: 66:63:fa:47:9d:be:6b:e9:f1:b9:bf:b0:a3:2e:c7: 50:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BA:DE:FB:6A:DF:E5:BA:91:44:A1:71:D3:5D:50:91:66:C8:9C:AD X509v3 Authority Key Identifier: keyid:7C:9D:38:28:7A:B4:C0:80:0F:67:E5:16:DB:04:76:04:54:CB:E9:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:c8:6e:7f:08:61:31:0d:a2:b2:da:75:34:80:0d:2f:5c:3d: 4b:13:7b:53:d6:1d:5b:71:67:e5:59:f0:17:a0:b0:b2:18:e5: a9:ec:57:1a:a0:1a:d2:c6:37:f9:21:ce:d2:ff:cc:10:18:16: c6:19:58:f9:bc:95:b6:3c:e8:49:fc:7e:63:4c:94:b5:4d:ce: 23:ad:67:65:d8:87:1b:b3:be:48:be:c5:eb:21:ab:81:47:76: eb:59:89:8a:e5:ca:e6:a4:cf:30:2f:6f:7b:00:d1:83:e2:6e: 05:85:89:68:b5:f0:fd:61:c0:99:c8:96:31:61:c9:1d:f9:a5: e5:44:db:59:6f:47:12:26:f3:9c:73:61:03:69:67:c8:b3:cb: b3:91:c9:36:57:e1:6a:d4:a6:83:d8:2d:ad:05:d9:03:cd:44: bb:04:96:86:ea:d1:47:e0:3c:aa:b2:a4:80:4e:ac:de:45:9b: b7:ee:1a:20:a0:d6:71:4a:37:df:8a:89:24:86:01:9e:58:9a: a7:db:be:80:fa:3d:04:9c:b4:7e:97:26:80:5c:88:45:9e:53: 0e:ac:65:78:31:21:01:01:1c:7c:38:ee:5a:9b:84:23:7d:48: 21:be:55:6f:b9:60:e8:62:41:95:dc:1c:5b:2d:fc:16:ee:2f: 95:47:cb:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSJVNzZEHGBuslzLvC3pk4jT/+yUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M5RDM4Mjg3QUI0QzA4MDBGNjdFNTE2REIwNDc2MDQ1 NENCRTlGMTAeFw0yNjA5MjUxODEzMDFaFw0yNjA5MjYyMDI3MDFaMDMxMTAvBgNV BAMTKENBQkFERUZCNkFERkU1QkE5MTQ0QTE3MUQzNUQ1MDkxNjZDODlDQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZHCjlP2XiFWqEF23Tfx2jT8i1 AaUomzi0tveAgoqQq5U7m3qc6R2X3kp3BHlWwjQDdjU9O8xN66JE5vmY7BDX16Lt pKZ9nhL8YW/a+5H2EIvRMA6tvCOAhFv9jETIdyaV7muhxbF20LobCg+fvj8tu/Dh Z272NQ/EAnfzcggfIlyuarKnT+shZBeWKVlHxuSQ0Uujf/ryZDg+ODfYK7khGakc K4hGF+WGQgyuKJT1Atdb7tANJAXqk8tgVf/cdS4cuwtBYT+KAikPWrnVU87gJyDr VVb0/dMOS5HFZBYnJqHYF9huaIaapQzyTDfuvmZj+kedvmvp8bm/sKMux1ALAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyrre+2rf5bqRRKFx011QkWbInK0wHwYDVR0j BBgwFoAUfJ04KHq0wIAPZ+UW2wR2BFTL6fEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA0OWMyMTAtZjM2NS00MzJmLWE3Y2EtMGI1ZWI4NmIwMWM2LzAvN0M5RDM4Mjg3 QUI0QzA4MDBGNjdFNTE2REIwNDc2MDQ1NENCRTlGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QzlEMzgyODdBQjRDMDgwMEY2N0U1MTZEQjA0NzYwNDU0Q0JF OUYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjA0OWMyMTAtZjM2NS00MzJmLWE3 Y2EtMGI1ZWI4NmIwMWM2LzAvN0M5RDM4Mjg3QUI0QzA4MDBGNjdFNTE2REIwNDc2 MDQ1NENCRTlGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjIbn8IYTENorLadTSADS9cPUsTe1PWHVtx Z+VZ8BegsLIY5ansVxqgGtLGN/khztL/zBAYFsYZWPm8lbY86En8fmNMlLVNziOt Z2XYhxuzvki+xeshq4FHdutZiYrlyuakzzAvb3sA0YPibgWFiWi18P1hwJnIljFh yR35peVE21lvRxIm85xzYQNpZ8izy7ORyTZX4WrUpoPYLa0F2QPNRLsElobq0Ufg PKqypIBOrN5Fm7fuGiCg1nFKN9+KiSSGAZ5YmqfbvoD6PQSctH6XJoBciEWeUw6s ZXgxIQEBHHw47lqbhCN9SCG+VW+5YOhiQZXcHFst/BbuL5VHy0Y= -----END CERTIFICATE-----Generated at Fri Sep 25 21:03:17 2026 by rpki-client