$ rpki-client -vvvf rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft File: 7521EB714EF9A5F0A697E8574714A86DCF234610.mft (raw, json) Hash identifier: sOo8PgaKmYNO5SNFhsVPKp9K7e9tbiUdFLlYxNaYJ68= Subject key identifier: D6:C2:9D:95:0B:22:71:76:DC:59:13:FB:B5:08:33:E2:66:E4:19:75 Authority key identifier: 75:21:EB:71:4E:F9:A5:F0:A6:97:E8:57:47:14:A8:6D:CF:23:46:10 Certificate issuer: /CN=7521EB714EF9A5F0A697E8574714A86DCF234610 Certificate serial: 06AD61DD19711A03805BCB66182A5536DB1AECA5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 10:03:06 +0000 Manifest this update: Thu 24 Sep 2026 09:58:06 +0000 Manifest next update: Fri 25 Sep 2026 10:13:06 +0000 Files and hashes: 1: 3131392e34372e38392e302f32342d3234203d3e203338353237.roa (hash: c/ZF1aWYYnFDz5Gwg0w0tFfbUx8yzQQW9RzM+O5SB0A=) 2: 3131392e34372e38382e302f32342d3234203d3e203338353237.roa (hash: yffHTG+EllVLleEh6Oirz1/R0DaU0LdSs2f4Coe9+OM=) 3: 3130332e32352e3130382e302f32342d3234203d3e20313332363334.roa (hash: BP419rLo8u7KV+IdA+QhKzQqCTiad+JDOjmx+KPJYZ8=) 4: 3132342e3130392e32322e302f32342d3234203d3e20313431313037.roa (hash: iOYmug4IgOWAtbexlc92hDoV/tNe429g9AsNdYSsaJc=) 5: 3131392e34372e39352e302f32342d3234203d3e20313439343039.roa (hash: TS2p463fv/9DyZu6QnNhlvJI+JFIyXgQjG+Ob9/1Y6g=) 6: 32372e3132342e38332e302f32342d3234203d3e20313332363334.roa (hash: rQWHJknCSBXBPdquyEnbgQpik3OvzTZOMwyh2tsNM1M=) 7: 7521EB714EF9A5F0A697E8574714A86DCF234610.crl (hash: e2pgC0+J2UwmszuWrERweqvoZgoGwF4eWIrP4rsPnCQ=) 8: 3131392e34372e39302e302f32342d3234203d3e203338353237.roa (hash: dcVVKG4izCM1gb0p4eQeLHaBApqz8vGp0jvG9TGCAJ0=) 9: 3132342e3130392e32332e302f32342d3234203d3e203538333738.roa (hash: zskLNuuXyQpxVs+4KksAWAlYXKzx7CDbhiYyNpVsFrs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.crl rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:ad:61:dd:19:71:1a:03:80:5b:cb:66:18:2a:55:36:db:1a:ec:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7521EB714EF9A5F0A697E8574714A86DCF234610 Validity Not Before: Sep 24 09:58:06 2026 GMT Not After : Sep 25 10:13:06 2026 GMT Subject: CN=D6C29D950B227176DC5913FBB50833E266E41975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:06:50:30:c5:48:a4:fc:53:8f:45:98:d3:9e: fe:34:4e:65:5a:51:0f:2e:b4:84:e4:88:7a:5d:46: c5:9c:27:b2:19:90:07:40:6a:28:37:f1:43:ec:c0: d0:82:83:75:ef:d5:92:56:d8:03:cd:58:fe:93:8f: 3e:29:21:cd:68:40:d8:a7:4b:0e:ce:5d:66:0e:a8: 0a:e0:ce:61:e2:8f:b9:25:a4:72:3e:fa:01:da:29: e2:f6:7d:f8:b8:d9:66:2a:e2:a0:5c:e8:fa:62:e8: 5d:50:6a:cb:05:29:2b:37:1f:f4:2b:bb:2f:28:77: 1c:c1:c3:ad:0b:10:ea:7c:5a:48:eb:c4:92:de:84: 02:c4:7a:8a:8b:bd:1f:e5:55:72:ed:a5:5c:a9:23: 3a:02:0b:b6:8b:0e:0d:87:11:91:94:19:a9:48:fc: 96:bf:8e:a1:86:51:65:7c:1e:42:f9:a6:52:2a:cb: 70:66:f5:78:07:64:52:7e:97:03:52:aa:ae:47:32: 32:d9:2c:02:d1:84:87:8a:b8:e5:52:7c:2c:d4:3a: 03:77:08:5b:24:37:73:11:0b:4c:fc:48:22:9c:c3: c0:6c:e7:7f:77:70:a6:21:db:c8:23:af:77:09:46: 5e:57:9d:5f:f2:7a:36:c9:c4:9c:d8:d8:b6:10:37: 2f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C2:9D:95:0B:22:71:76:DC:59:13:FB:B5:08:33:E2:66:E4:19:75 X509v3 Authority Key Identifier: keyid:75:21:EB:71:4E:F9:A5:F0:A6:97:E8:57:47:14:A8:6D:CF:23:46:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:44:ef:b9:67:da:7c:99:a4:59:19:d0:80:58:15:07:1a:ad: 3a:2d:6d:69:2e:cf:50:e5:0b:7e:9a:4a:4d:73:ac:63:57:2f: 16:d6:62:34:52:81:6e:72:51:c1:73:10:34:75:df:a1:cc:63: 38:ba:a6:93:19:e5:27:10:10:02:95:41:41:10:62:38:22:51: 3a:21:47:c7:2b:1d:9c:07:53:9e:89:ed:03:5e:64:2d:6e:3e: c2:bc:08:0d:c7:7c:82:7e:ae:39:80:2d:ce:3c:8e:47:97:13: c8:64:88:d9:8b:63:0b:c0:57:3d:33:22:89:06:e8:d4:69:84: 01:2f:43:c6:0d:80:27:f2:48:5e:95:a4:ac:ec:06:d9:fc:90: 38:7c:23:28:45:e5:2c:1c:5f:9f:4f:e2:e5:a1:6e:c5:1a:5a: 16:5b:34:dd:6e:b9:9a:7a:9a:8a:d7:fb:23:25:b2:a8:95:2e: b1:2d:e9:29:12:07:27:ec:0c:5b:e3:2d:47:2f:0e:33:d9:8d: 84:4b:21:dc:31:11:29:87:2a:c4:ca:5f:b7:2a:86:75:db:10: 4a:23:30:cd:1c:52:16:4a:62:d7:51:70:0c:80:8b:52:4f:04: 89:2c:84:8b:14:c1:9a:ec:7a:56:40:29:16:62:e4:88:cc:0a: 6b:4a:05:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBq1h3RlxGgOAW8tmGCpVNtsa7KUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzUyMUVCNzE0RUY5QTVGMEE2OTdFODU3NDcxNEE4NkRD RjIzNDYxMDAeFw0yNjA5MjQwOTU4MDZaFw0yNjA5MjUxMDEzMDZaMDMxMTAvBgNV BAMTKEQ2QzI5RDk1MEIyMjcxNzZEQzU5MTNGQkI1MDgzM0UyNjZFNDE5NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHBlAwxUik/FOPRZjTnv40TmVa UQ8utITkiHpdRsWcJ7IZkAdAaig38UPswNCCg3Xv1ZJW2APNWP6Tjz4pIc1oQNin Sw7OXWYOqArgzmHij7klpHI++gHaKeL2ffi42WYq4qBc6Ppi6F1QassFKSs3H/Qr uy8odxzBw60LEOp8WkjrxJLehALEeoqLvR/lVXLtpVypIzoCC7aLDg2HEZGUGalI /Ja/jqGGUWV8HkL5plIqy3Bm9XgHZFJ+lwNSqq5HMjLZLALRhIeKuOVSfCzUOgN3 CFskN3MRC0z8SCKcw8Bs5393cKYh28gjr3cJRl5XnV/yejbJxJzY2LYQNy+1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1sKdlQsicXbcWRP7tQgz4mbkGXUwHwYDVR0j BBgwFoAUdSHrcU75pfCml+hXRxSobc8jRhAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzE3ZWZkMmEtMDJhYi00MjAyLTk3MGYtZjY5OWRmZjk3ZGU1LzAvNzUyMUVCNzE0 RUY5QTVGMEE2OTdFODU3NDcxNEE4NkRDRjIzNDYxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NTIxRUI3MTRFRjlBNUYwQTY5N0U4NTc0NzE0QTg2RENGMjM0 NjEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzE3ZWZkMmEtMDJhYi00MjAyLTk3 MGYtZjY5OWRmZjk3ZGU1LzAvNzUyMUVCNzE0RUY5QTVGMEE2OTdFODU3NDcxNEE4 NkRDRjIzNDYxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdE77ln2nyZpFkZ0IBYFQcarTotbWkuz1Dl C36aSk1zrGNXLxbWYjRSgW5yUcFzEDR136HMYzi6ppMZ5ScQEAKVQUEQYjgiUToh R8crHZwHU56J7QNeZC1uPsK8CA3HfIJ+rjmALc48jkeXE8hkiNmLYwvAVz0zIokG 6NRphAEvQ8YNgCfySF6VpKzsBtn8kDh8IyhF5SwcX59P4uWhbsUaWhZbNN1uuZp6 morX+yMlsqiVLrEt6SkSByfsDFvjLUcvDjPZjYRLIdwxESmHKsTKX7cqhnXbEEoj MM0cUhZKYtdRcAyAi1JPBIkshIsUwZrselZAKRZi5IjMCmtKBZc= -----END CERTIFICATE-----Generated at Fri Sep 25 03:04:27 2026 by rpki-client