$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft File: 793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft (raw, json) Hash identifier: p6D2UJp5Uke6UfJFuuUizZ1rDMnq0tH41nBuTXKzCCo= Subject key identifier: C7:11:8A:EE:7B:B6:0B:C4:F2:B0:74:66:8C:B5:3E:4E:E3:AE:70:51 Authority key identifier: 79:32:90:E7:EC:15:5F:F7:1C:44:DB:64:68:CE:D7:98:5C:BF:2D:F5 Certificate issuer: /CN=793290E7EC155FF71C44DB6468CED7985CBF2DF5 Certificate serial: 03D0D444FFFCA4880CA343ADC43B8DD4FB1C3DAC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/793290E7EC155FF71C44DB6468CED7985CBF2DF5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 14:08:38 +0000 Manifest this update: Wed 23 Sep 2026 14:03:38 +0000 Manifest next update: Thu 24 Sep 2026 16:51:38 +0000 Files and hashes: 1: 3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa (hash: CYcQtk6Q2BGiqIh55Kes8nmVzVHDPahaB/OUEW8nJ4s=) 2: 3130332e38332e3131372e302f32342d3234203d3e20313336303634.roa (hash: 0QGECZtZ4NpVwUmkTwNZiQAD/nvM6N9DYMd+ulfiukw=) 3: 3130332e38332e3131392e302f32342d3234203d3e20313336303634.roa (hash: m8ctD+xav7ZeI0n+/CZUY0lL5X8THNniko/PGJK1gwE=) 4: 793290E7EC155FF71C44DB6468CED7985CBF2DF5.crl (hash: mVNx116LAPjcS0jMCuufSa8Bdvt0bNllzeshrE0A6AM=) 5: 3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa (hash: 1ZSbqejAXASSMS+yiCaDvvpugHjgj1M6wD3m+4/7wrE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.crl rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/793290E7EC155FF71C44DB6468CED7985CBF2DF5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d0:d4:44:ff:fc:a4:88:0c:a3:43:ad:c4:3b:8d:d4:fb:1c:3d:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=793290E7EC155FF71C44DB6468CED7985CBF2DF5 Validity Not Before: Sep 23 14:03:38 2026 GMT Not After : Sep 24 16:51:38 2026 GMT Subject: CN=C7118AEE7BB60BC4F2B074668CB53E4EE3AE7051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c3:e5:08:54:a1:2d:b0:31:74:4d:bc:eb:bd: ed:a9:ad:e0:a7:60:a6:7b:3f:82:f0:9c:1f:70:8b: ca:4d:d7:a8:81:a0:36:13:e5:8a:d7:60:8a:fe:83: 14:92:72:ff:05:13:17:4b:29:c8:a1:d0:a4:0d:f0: f5:1e:01:0a:b9:16:9f:be:c8:87:16:63:11:21:94: c1:51:7c:23:40:9f:e5:b1:b3:bd:77:60:f8:f5:13: 51:59:4a:0c:f9:54:51:40:2f:19:77:f6:51:e0:df: ec:5e:ea:7f:56:6d:ae:21:f7:0a:96:61:9c:6b:5e: b2:6a:88:41:16:81:54:dc:6d:dd:0d:d7:18:b1:37: 06:6f:f3:91:cb:7a:8a:70:40:97:15:46:ab:f6:7d: 6b:ae:89:bb:6d:09:cc:c3:4c:6a:08:b9:28:80:dc: 6f:68:91:55:c6:65:54:16:29:3d:74:48:ae:d9:cd: b8:64:4d:a9:51:6b:66:96:28:cf:ff:20:2b:12:1b: 5c:2f:02:d0:21:56:4e:5d:80:64:fe:aa:c2:cd:c6: 61:dc:0d:bd:61:27:b9:54:d1:3a:90:e5:05:e1:98: fd:b5:82:ae:57:b1:0d:26:59:9e:98:4a:35:7b:ce: bd:3b:ff:22:2f:19:76:c7:16:22:29:1f:1a:db:49: ab:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:11:8A:EE:7B:B6:0B:C4:F2:B0:74:66:8C:B5:3E:4E:E3:AE:70:51 X509v3 Authority Key Identifier: keyid:79:32:90:E7:EC:15:5F:F7:1C:44:DB:64:68:CE:D7:98:5C:BF:2D:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/793290E7EC155FF71C44DB6468CED7985CBF2DF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:8a:b1:bb:95:73:dd:89:20:a7:d3:a7:08:07:0e:c2:04:9f: 3d:97:e9:26:95:c4:6d:dd:fa:25:c7:8f:d2:bc:5a:21:d6:c1: 08:37:bf:b2:e6:23:ef:55:67:c6:9f:e8:cf:b3:0a:d3:4b:52: 4b:e4:4b:96:2b:91:a5:07:be:a6:f2:25:98:f0:2d:76:50:ab: 9a:60:01:30:72:e7:e7:9a:0c:d5:66:69:8b:4a:10:79:bf:79: a6:7a:66:6a:74:c3:78:a4:fb:fc:02:4c:af:7f:fe:39:e9:89: b7:4e:5a:c0:c7:bf:0d:54:42:99:1a:b7:a8:43:83:cd:fd:5c: 65:2a:c2:07:4f:c5:f3:2b:23:80:3b:d7:73:a7:57:85:15:ba: 3f:ed:f7:fb:ec:56:a1:22:3b:22:96:df:e0:48:c4:a6:40:bf: e0:43:01:4f:16:f2:ad:95:91:e4:e1:9c:6e:36:62:b2:33:20: 85:d2:74:48:49:f0:57:85:b1:42:5a:34:d6:81:2f:1c:68:a3: e5:20:b7:9d:1a:c9:99:3a:1e:cc:e2:9f:df:f4:2a:26:39:4b: 04:67:79:ab:c5:17:bf:79:b5:85:32:bb:c9:ac:49:78:33:57: 22:e7:c0:d6:1e:e9:1d:27:f5:a8:e1:0e:fb:ac:c8:da:0d:3c: 47:e3:54:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA9DURP/8pIgMo0OtxDuN1PscPawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzkzMjkwRTdFQzE1NUZGNzFDNDREQjY0NjhDRUQ3OTg1 Q0JGMkRGNTAeFw0yNjA5MjMxNDAzMzhaFw0yNjA5MjQxNjUxMzhaMDMxMTAvBgNV BAMTKEM3MTE4QUVFN0JCNjBCQzRGMkIwNzQ2NjhDQjUzRTRFRTNBRTcwNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOw+UIVKEtsDF0Tbzrve2preCn YKZ7P4LwnB9wi8pN16iBoDYT5YrXYIr+gxSScv8FExdLKcih0KQN8PUeAQq5Fp++ yIcWYxEhlMFRfCNAn+Wxs713YPj1E1FZSgz5VFFALxl39lHg3+xe6n9Wba4h9wqW YZxrXrJqiEEWgVTcbd0N1xixNwZv85HLeopwQJcVRqv2fWuuibttCczDTGoIuSiA 3G9okVXGZVQWKT10SK7ZzbhkTalRa2aWKM//ICsSG1wvAtAhVk5dgGT+qsLNxmHc Db1hJ7lU0TqQ5QXhmP21gq5XsQ0mWZ6YSjV7zr07/yIvGXbHFiIpHxrbSatrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxxGK7nu2C8TysHRmjLU+TuOucFEwHwYDVR0j BBgwFoAUeTKQ5+wVX/ccRNtkaM7XmFy/LfUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGU5OGIzYmQtMjg0ZC00YTdkLTlmMjctY2I1ODdlOWRkODQxLzAvNzkzMjkwRTdF QzE1NUZGNzFDNDREQjY0NjhDRUQ3OTg1Q0JGMkRGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OTMyOTBFN0VDMTU1RkY3MUM0NERCNjQ2OENFRDc5ODVDQkYy REY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGU5OGIzYmQtMjg0ZC00YTdkLTlm MjctY2I1ODdlOWRkODQxLzAvNzkzMjkwRTdFQzE1NUZGNzFDNDREQjY0NjhDRUQ3 OTg1Q0JGMkRGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOKsbuVc92JIKfTpwgHDsIEnz2X6SaVxG3d +iXHj9K8WiHWwQg3v7LmI+9VZ8af6M+zCtNLUkvkS5YrkaUHvqbyJZjwLXZQq5pg ATBy5+eaDNVmaYtKEHm/eaZ6Zmp0w3ik+/wCTK9//jnpibdOWsDHvw1UQpkat6hD g839XGUqwgdPxfMrI4A713OnV4UVuj/t9/vsVqEiOyKW3+BIxKZAv+BDAU8W8q2V keThnG42YrIzIIXSdEhJ8FeFsUJaNNaBLxxoo+Ugt50ayZk6Hszin9/0KiY5SwRn eavFF795tYUyu8msSXgzVyLnwNYe6R0n9ajhDvusyNoNPEfjVDA= -----END CERTIFICATE-----Generated at Thu Sep 24 00:59:01 2026 by rpki-client