$ rpki-client -vvvf rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft File: 7A642EBA720716DAB552755544A2F1F74B4C87F0.mft (raw, json) Hash identifier: FckXi35HgvR0XnHZvCfTMSTCSf3/YQjVKHZUXrIR3JE= Subject key identifier: 37:04:17:31:B0:47:30:A5:A5:D1:11:E2:24:2E:87:42:E7:E0:6A:F7 Authority key identifier: 7A:64:2E:BA:72:07:16:DA:B5:52:75:55:44:A2:F1:F7:4B:4C:87:F0 Certificate issuer: /CN=7A642EBA720716DAB552755544A2F1F74B4C87F0 Certificate serial: 3D1426F83F7441F0D456E48A36640CC77397DE15 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 10:33:44 +0000 Manifest this update: Thu 24 Sep 2026 10:28:44 +0000 Manifest next update: Fri 25 Sep 2026 14:29:44 +0000 Files and hashes: 1: 7A642EBA720716DAB552755544A2F1F74B4C87F0.crl (hash: JXJirf1Amp3uRD02DqSm6yd+1M7Wt4gKgwCbTrBb3Gw=) 2: 3130332e35302e32362e302f32342d3234203d3e203633383639.roa (hash: YCN7I5UWNLXuHygdgU/kJLypeaTF/PMJFgsLTKVnbT4=) 3: 3130332e35302e32342e302f32342d3234203d3e203633383639.roa (hash: XFbZ6P98oGgog/5WrjcLXHv6AL71Dr8c506Ad90eQJw=) 4: 3130332e35302e32372e302f32342d3234203d3e203633383639.roa (hash: yANla07PHHSJzynbOzLUlkqhsSjnBCXp6rBp1cKVCdo=) 5: 3130332e35302e32352e302f32342d3234203d3e203633383639.roa (hash: SFKf2YeTUegvyDEl1rZlcJoG3esfQ3DWN5bFQUzfaIY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.crl rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:14:26:f8:3f:74:41:f0:d4:56:e4:8a:36:64:0c:c7:73:97:de:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A642EBA720716DAB552755544A2F1F74B4C87F0 Validity Not Before: Sep 24 10:28:44 2026 GMT Not After : Sep 25 14:29:44 2026 GMT Subject: CN=37041731B04730A5A5D111E2242E8742E7E06AF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:58:5a:60:a0:9d:2d:95:ee:68:70:8d:6e:dd: 3a:50:82:81:16:37:99:5a:4b:88:b7:6f:77:f2:11: a1:d5:6d:41:e6:8f:d5:ac:28:98:8a:c9:43:b2:28: 6f:9c:61:09:94:57:96:bc:de:5a:74:e4:a8:e1:0e: 64:d6:4d:d5:03:bf:e6:90:80:c0:36:3a:eb:de:94: a9:0f:a9:7c:76:ec:f1:74:18:6d:8a:19:50:f9:a8: e9:5b:2e:67:d0:3b:c0:32:bb:7e:3c:79:c2:2e:3f: 31:be:51:c9:0a:e2:6f:25:fe:6c:5e:ca:d3:9d:56: ab:5a:fe:14:1d:e9:25:0e:da:ec:27:e1:a1:57:87: 20:c9:fd:87:ca:f4:a9:2e:75:4c:07:97:0b:36:ca: 43:3f:fb:51:98:f7:5e:c9:f1:bd:73:bd:8e:8c:a3: 46:58:18:7f:9e:a6:20:b1:4c:88:8c:a7:2d:bc:56: 95:45:a9:cd:d2:f6:0a:4d:1f:19:3a:ff:c1:15:66: 55:b2:f3:86:68:d5:7d:09:94:4f:4b:50:ae:7c:fa: c3:91:0d:7c:84:51:51:5a:3d:fd:f1:d5:fb:3a:02: 81:bc:dc:5e:54:55:f2:d6:64:ec:ee:43:03:76:44: 8e:74:e8:ff:ce:e1:b3:8b:db:bf:15:59:0d:8e:dc: 00:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:04:17:31:B0:47:30:A5:A5:D1:11:E2:24:2E:87:42:E7:E0:6A:F7 X509v3 Authority Key Identifier: keyid:7A:64:2E:BA:72:07:16:DA:B5:52:75:55:44:A2:F1:F7:4B:4C:87:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:4f:ea:1c:80:96:6c:19:62:de:f8:fc:52:2f:39:f2:73:16: 93:0e:3d:b4:52:83:d3:ef:c5:5a:d3:e4:54:9d:43:4c:1f:b6: 01:f4:3b:91:04:ae:46:aa:b7:9a:16:66:08:43:39:b8:64:27: 1f:ed:6f:38:59:cb:46:87:84:e1:58:83:a0:e1:6d:68:57:86: 5e:7e:28:a1:0f:53:20:69:27:a4:a4:cc:49:06:97:f1:63:6e: b2:41:0f:4b:33:df:2d:06:4f:2a:a0:f3:23:17:26:11:08:6f: a6:49:dc:fd:08:99:0d:fb:48:83:f4:36:8d:21:29:09:0b:49: 13:61:39:d9:64:9d:88:e1:01:7b:d6:3c:4d:57:9c:b7:02:06: 40:8e:31:a6:87:af:4c:33:25:1a:e0:b5:f5:4a:71:63:89:ba: 38:01:aa:06:b9:54:de:2b:f3:73:0e:b1:c2:77:55:83:2a:d0: b2:e6:b2:b4:42:0c:c2:a7:82:e2:64:3a:cf:13:5e:67:6a:ef: a5:d3:19:74:23:20:7d:53:4d:23:fe:f1:cc:b8:ef:c7:ee:dc: 41:c1:d0:a6:c2:55:ca:f0:6d:f9:40:c8:bc:58:cb:6e:e3:9b: b0:5c:76:01:a1:5e:28:04:f2:ae:8a:0c:30:44:15:58:0e:51: f1:bc:b7:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPRQm+D90QfDUVuSKNmQMx3OX3hUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E2NDJFQkE3MjA3MTZEQUI1NTI3NTU1NDRBMkYxRjc0 QjRDODdGMDAeFw0yNjA5MjQxMDI4NDRaFw0yNjA5MjUxNDI5NDRaMDMxMTAvBgNV BAMTKDM3MDQxNzMxQjA0NzMwQTVBNUQxMTFFMjI0MkU4NzQyRTdFMDZBRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzWFpgoJ0tle5ocI1u3TpQgoEW N5laS4i3b3fyEaHVbUHmj9WsKJiKyUOyKG+cYQmUV5a83lp05KjhDmTWTdUDv+aQ gMA2OuvelKkPqXx27PF0GG2KGVD5qOlbLmfQO8Ayu348ecIuPzG+UckK4m8l/mxe ytOdVqta/hQd6SUO2uwn4aFXhyDJ/YfK9KkudUwHlws2ykM/+1GY917J8b1zvY6M o0ZYGH+epiCxTIiMpy28VpVFqc3S9gpNHxk6/8EVZlWy84Zo1X0JlE9LUK58+sOR DXyEUVFaPf3x1fs6AoG83F5UVfLWZOzuQwN2RI506P/O4bOL278VWQ2O3AB/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNwQXMbBHMKWl0RHiJC6HQufgavcwHwYDVR0j BBgwFoAUemQuunIHFtq1UnVVRKLx90tMh/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzc2Njg1NDEtZDZjNi00MDllLThhZDEtNWU4OWE0YjI4NTBlLzAvN0E2NDJFQkE3 MjA3MTZEQUI1NTI3NTU1NDRBMkYxRjc0QjRDODdGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QTY0MkVCQTcyMDcxNkRBQjU1Mjc1NTU0NEEyRjFGNzRCNEM4 N0YwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzc2Njg1NDEtZDZjNi00MDllLThh ZDEtNWU4OWE0YjI4NTBlLzAvN0E2NDJFQkE3MjA3MTZEQUI1NTI3NTU1NDRBMkYx Rjc0QjRDODdGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABdP6hyAlmwZYt74/FIvOfJzFpMOPbRSg9Pv xVrT5FSdQ0wftgH0O5EErkaqt5oWZghDObhkJx/tbzhZy0aHhOFYg6DhbWhXhl5+ KKEPUyBpJ6SkzEkGl/FjbrJBD0sz3y0GTyqg8yMXJhEIb6ZJ3P0ImQ37SIP0No0h KQkLSRNhOdlknYjhAXvWPE1XnLcCBkCOMaaHr0wzJRrgtfVKcWOJujgBqga5VN4r 83MOscJ3VYMq0LLmsrRCDMKnguJkOs8TXmdq76XTGXQjIH1TTSP+8cy478fu3EHB 0KbCVcrwbflAyLxYy27jm7BcdgGhXigE8q6KDDBEFVgOUfG8t6k= -----END CERTIFICATE-----Generated at Thu Sep 24 14:19:33 2026 by rpki-client