$ rpki-client -vvvf rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft File: 7ACC57BA3042B007AA1613352A73FFD3162E565F.mft (raw, json) Hash identifier: AM8eCnljbzduJXAvDzIW3Tm4gse/VuxBBr5nB2W5ifo= Subject key identifier: 4D:3B:A3:53:70:13:F8:50:C3:43:17:06:08:EF:E3:41:88:DD:7E:D7 Authority key identifier: 7A:CC:57:BA:30:42:B0:07:AA:16:13:35:2A:73:FF:D3:16:2E:56:5F Certificate issuer: /CN=7ACC57BA3042B007AA1613352A73FFD3162E565F Certificate serial: 614D60EE6157E92EA6604351F3ED7F424AD2C537 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ACC57BA3042B007AA1613352A73FFD3162E565F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 15:39:11 +0000 Manifest this update: Sat 26 Sep 2026 15:34:11 +0000 Manifest next update: Sun 27 Sep 2026 18:04:11 +0000 Files and hashes: 1: 7ACC57BA3042B007AA1613352A73FFD3162E565F.crl (hash: oJMce0R2axq96fzDd0AWJ4OmaVJUDK7i0B9CuBrGgdY=) 2: 3130332e3136302e3137382e302f32342d3234203d3e20313431353932.roa (hash: jo8zHFeqe3LGwp2AuxTgHU+gmdWY0CJTnZZ7WU6u+5k=) 3: 3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa (hash: EE9ymycRiG5es8LdeuDyt4ZBgyII9pYHMLKeHbtmxMg=) 4: 3130332e3136302e3137392e302f32342d3234203d3e20313431353932.roa (hash: z0ApomisoqwQnhgmCVulOkc7tSSTjZgNZBL2SV/mK8w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.crl rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ACC57BA3042B007AA1613352A73FFD3162E565F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:4d:60:ee:61:57:e9:2e:a6:60:43:51:f3:ed:7f:42:4a:d2:c5:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ACC57BA3042B007AA1613352A73FFD3162E565F Validity Not Before: Sep 26 15:34:11 2026 GMT Not After : Sep 27 18:04:11 2026 GMT Subject: CN=4D3BA3537013F850C343170608EFE34188DD7ED7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cc:4a:84:22:81:47:b0:db:98:7e:d5:41:7d: 18:e4:5f:0c:a5:7d:0b:68:64:02:a4:f0:6a:b3:d8: 75:8b:d1:d6:a7:13:8c:63:7d:c3:0b:26:28:48:dd: 5c:be:0a:1c:b5:5d:af:b2:11:06:fc:aa:52:88:da: a7:24:aa:d9:e0:c2:c5:65:83:ce:c5:8d:65:d8:2b: 40:e7:09:0d:89:35:41:bd:89:21:42:b9:1f:1e:c6: db:85:4a:8b:e6:b3:96:89:b6:2c:a6:67:37:d1:08: 77:96:55:24:3c:1d:ec:e4:59:b3:1f:74:de:61:b0: cb:0c:9c:f5:39:e5:e1:ef:5d:59:79:15:6e:30:23: 1b:7d:b5:cf:ba:2c:07:d7:d3:54:da:8d:7d:3d:f8: 41:fe:f2:88:fe:fc:0d:21:6a:16:1a:9c:f0:82:fb: a6:48:d8:b0:13:52:87:97:e5:13:c0:c7:b7:71:47: d6:3f:f8:d1:45:b6:fe:03:e5:75:c1:4e:8b:fa:bf: d1:46:7c:6d:1a:71:60:44:b9:d4:d3:2a:25:9c:d6: 6d:3f:16:6f:1e:c5:17:d5:bc:a6:1c:1e:54:e7:57: e0:3e:f0:76:57:c9:99:77:99:bb:8a:18:cf:60:cf: ea:83:4f:9b:19:29:7f:59:1e:a0:da:10:f9:4e:0b: 9d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3B:A3:53:70:13:F8:50:C3:43:17:06:08:EF:E3:41:88:DD:7E:D7 X509v3 Authority Key Identifier: keyid:7A:CC:57:BA:30:42:B0:07:AA:16:13:35:2A:73:FF:D3:16:2E:56:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ACC57BA3042B007AA1613352A73FFD3162E565F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:a7:1f:ae:35:62:74:b1:17:10:7f:3c:4c:22:eb:18:32:a2: f0:a0:58:e4:94:02:48:2f:76:d3:28:d1:6f:f2:76:bd:41:52: 10:4a:a5:f6:be:96:56:37:da:71:7e:97:38:4a:5c:84:a1:96: 5c:7e:c8:b5:2a:99:22:81:aa:e8:44:1c:b9:4c:eb:36:7f:66: 84:e0:e4:9b:e4:62:0c:0f:13:0d:06:2f:06:7b:3e:b7:99:6c: cf:21:fd:5f:9d:23:ae:75:68:8e:8d:36:08:c1:6c:f8:3f:af: 05:2e:41:49:7b:61:75:97:1b:b1:11:ba:dc:a8:fc:d0:38:bc: 5f:7c:d4:ad:7e:5e:a0:82:16:51:57:76:85:b9:d4:51:44:98: b6:67:78:a5:81:b4:02:69:13:d7:2f:92:eb:b7:7a:30:9c:99: b3:43:a1:b6:f2:52:28:f7:d6:f3:23:66:35:3a:7f:ba:db:42: 50:df:17:87:79:bf:5e:02:e5:ab:c7:4c:73:ff:7d:50:77:4b: 82:38:03:6a:89:97:ba:dd:9b:6d:35:3e:db:ca:47:ef:e5:3c: c3:41:d1:71:6d:f3:c2:38:25:38:91:7b:c9:82:bf:c9:fa:fc: 37:c6:e3:10:5d:30:4e:c1:18:1f:53:f9:86:87:5b:2b:b2:af: 0c:c9:78:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYU1g7mFX6S6mYENR8+1/QkrSxTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FDQzU3QkEzMDQyQjAwN0FBMTYxMzM1MkE3M0ZGRDMx NjJFNTY1RjAeFw0yNjA5MjYxNTM0MTFaFw0yNjA5MjcxODA0MTFaMDMxMTAvBgNV BAMTKDREM0JBMzUzNzAxM0Y4NTBDMzQzMTcwNjA4RUZFMzQxODhERDdFRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnzEqEIoFHsNuYftVBfRjkXwyl fQtoZAKk8Gqz2HWL0danE4xjfcMLJihI3Vy+Chy1Xa+yEQb8qlKI2qckqtngwsVl g87FjWXYK0DnCQ2JNUG9iSFCuR8extuFSovms5aJtiymZzfRCHeWVSQ8HezkWbMf dN5hsMsMnPU55eHvXVl5FW4wIxt9tc+6LAfX01TajX09+EH+8oj+/A0hahYanPCC +6ZI2LATUoeX5RPAx7dxR9Y/+NFFtv4D5XXBTov6v9FGfG0acWBEudTTKiWc1m0/ Fm8exRfVvKYcHlTnV+A+8HZXyZl3mbuKGM9gz+qDT5sZKX9ZHqDaEPlOC53HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTTujU3AT+FDDQxcGCO/jQYjdftcwHwYDVR0j BBgwFoAUesxXujBCsAeqFhM1KnP/0xYuVl8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjBhODIwYjQtODJlZi00NDEyLWJlMmUtNWQ2OTE0YmQ0ODQ0LzAvN0FDQzU3QkEz MDQyQjAwN0FBMTYxMzM1MkE3M0ZGRDMxNjJFNTY1Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QUNDNTdCQTMwNDJCMDA3QUExNjEzMzUyQTczRkZEMzE2MkU1 NjVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjBhODIwYjQtODJlZi00NDEyLWJl MmUtNWQ2OTE0YmQ0ODQ0LzAvN0FDQzU3QkEzMDQyQjAwN0FBMTYxMzM1MkE3M0ZG RDMxNjJFNTY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWnH641YnSxFxB/PEwi6xgyovCgWOSUAkgv dtMo0W/ydr1BUhBKpfa+llY32nF+lzhKXIShllx+yLUqmSKBquhEHLlM6zZ/ZoTg 5JvkYgwPEw0GLwZ7PreZbM8h/V+dI651aI6NNgjBbPg/rwUuQUl7YXWXG7ERutyo /NA4vF981K1+XqCCFlFXdoW51FFEmLZneKWBtAJpE9cvkuu3ejCcmbNDobbyUij3 1vMjZjU6f7rbQlDfF4d5v14C5avHTHP/fVB3S4I4A2qJl7rdm201PtvKR+/lPMNB 0XFt88I4JTiRe8mCv8n6/DfG4xBdME7BGB9T+YaHWyuyrwzJeH4= -----END CERTIFICATE-----Generated at Sun Sep 27 06:12:16 2026 by rpki-client