$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft File: A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft (raw, json) Hash identifier: RMbZmcxms7hcVq+sFcsNu/OCWwdN9a4I4zcQzM+pGIo= Subject key identifier: 00:7A:20:AC:48:55:3A:AC:32:EA:8F:9E:7A:05:61:E0:89:8C:3C:22 Authority key identifier: A7:88:9B:33:86:7E:D2:BD:F1:5C:39:F7:22:D2:0B:AF:76:B4:20:EE Certificate issuer: /CN=A7889B33867ED2BDF15C39F722D20BAF76B420EE Certificate serial: 70B69535665B7718AA0D653B7AA53165C9E0ACB8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7889B33867ED2BDF15C39F722D20BAF76B420EE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 01:02:04 +0000 Manifest this update: Thu 24 Sep 2026 00:57:04 +0000 Manifest next update: Fri 25 Sep 2026 02:36:04 +0000 Files and hashes: 1: 3130332e38342e3131372e302f32342d3234203d3e20313334363335.roa (hash: dkiEurQUbycXFg21P8maECsCJ68qwlxLVBuvs8trkqU=) 2: A7889B33867ED2BDF15C39F722D20BAF76B420EE.crl (hash: BwZ8Ud9vG23DvRt1340nOXuagv1Xe2TdfJUhDrHtMFM=) 3: 3130332e3230322e3232372e302f32342d3234203d3e20313334363335.roa (hash: O/6Vse93iZ++RJMaxSdbmCU7yuXgswidaAAY3SDWRSc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.crl rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7889B33867ED2BDF15C39F722D20BAF76B420EE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b6:95:35:66:5b:77:18:aa:0d:65:3b:7a:a5:31:65:c9:e0:ac:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7889B33867ED2BDF15C39F722D20BAF76B420EE Validity Not Before: Sep 24 00:57:04 2026 GMT Not After : Sep 25 02:36:04 2026 GMT Subject: CN=007A20AC48553AAC32EA8F9E7A0561E0898C3C22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7b:fa:b0:f3:6c:81:70:9f:6c:bc:4e:b0:64: 70:00:13:a2:3a:bc:42:a5:56:47:be:94:2c:13:63: 8a:8a:af:a2:e2:73:1e:2d:1c:f7:aa:59:36:34:9d: 7f:fa:c8:87:bc:37:18:4e:57:27:8c:65:5e:e4:39: f0:00:09:a0:b6:da:35:f2:1a:78:a4:76:88:09:2a: 49:bf:35:33:dd:0b:fd:ba:57:5e:9b:46:66:b6:60: 22:09:8d:a8:b1:d8:06:db:c8:ac:25:50:5f:4f:2c: 44:7a:fd:5b:bf:f4:cb:23:6e:a7:d6:36:c1:df:c1: 63:7c:f9:b7:80:24:7b:62:31:86:16:4d:f0:a0:ca: 0d:c5:34:96:d6:10:73:f2:10:e4:6d:2d:8a:ee:eb: fd:a7:85:a1:61:63:84:4a:39:99:a2:2a:43:fc:29: 97:7c:1a:dc:c4:f7:45:54:94:0a:fa:88:54:74:e5: f3:17:27:da:c2:e0:64:35:8c:16:55:af:36:a6:1e: d1:a1:75:23:27:12:f8:ea:e4:7e:88:ae:ac:4e:f6: c5:8b:5a:e3:91:64:51:fd:12:5b:c2:50:9e:8d:57: 03:e1:c9:f2:36:f9:33:b1:11:30:38:c1:c7:e8:ac: 6c:1c:cd:60:b7:78:04:43:85:41:a5:29:cf:7b:c7: b1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7A:20:AC:48:55:3A:AC:32:EA:8F:9E:7A:05:61:E0:89:8C:3C:22 X509v3 Authority Key Identifier: keyid:A7:88:9B:33:86:7E:D2:BD:F1:5C:39:F7:22:D2:0B:AF:76:B4:20:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7889B33867ED2BDF15C39F722D20BAF76B420EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:94:a9:de:b2:13:7c:8f:ec:f6:f2:6d:7b:41:90:43:35:8f: 9c:f8:68:02:af:8d:e6:dd:0c:36:c7:27:a0:79:b0:aa:84:50: 46:e3:7c:b8:d3:ae:ab:65:81:ba:5e:80:d2:aa:4a:71:cd:db: b9:bc:02:3e:92:e2:9c:16:b3:7f:dc:38:ec:c1:7d:58:24:c1: 48:8a:03:cb:49:9f:b1:24:27:55:70:0a:78:b6:34:5e:c9:0e: c2:5f:76:c1:48:59:93:79:ed:9c:b5:dc:5c:9f:22:03:a9:8a: f1:a0:ed:dd:bb:4c:e7:22:eb:f4:dd:5f:54:ab:ec:7f:19:7c: fe:98:0b:f3:bb:4a:05:11:bf:07:81:ec:ea:dd:fd:01:6c:9e: 6a:3a:9b:67:25:66:fd:1d:08:c2:d3:2b:98:6a:d0:30:38:c9: 47:22:5b:cf:43:0e:f4:71:f1:eb:75:3b:45:1f:80:28:a5:1c: 82:b8:fe:f2:09:84:50:5b:2f:ce:d0:5e:11:55:d2:9e:2f:56: 49:27:dc:da:92:a3:93:7f:49:3c:de:e2:24:6d:77:8b:ad:74: a5:a6:09:df:60:90:6e:38:13:8f:e4:2b:65:5a:53:9a:51:db: 43:5a:96:e0:b7:66:4a:2a:4a:4f:0e:e9:d0:12:a2:37:4a:95: 75:e2:5f:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcLaVNWZbdxiqDWU7eqUxZcngrLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4ODlCMzM4NjdFRDJCREYxNUMzOUY3MjJEMjBCQUY3 NkI0MjBFRTAeFw0yNjA5MjQwMDU3MDRaFw0yNjA5MjUwMjM2MDRaMDMxMTAvBgNV BAMTKDAwN0EyMEFDNDg1NTNBQUMzMkVBOEY5RTdBMDU2MUUwODk4QzNDMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6e/qw82yBcJ9svE6wZHAAE6I6 vEKlVke+lCwTY4qKr6Licx4tHPeqWTY0nX/6yIe8NxhOVyeMZV7kOfAACaC22jXy GnikdogJKkm/NTPdC/26V16bRma2YCIJjaix2AbbyKwlUF9PLER6/Vu/9MsjbqfW NsHfwWN8+beAJHtiMYYWTfCgyg3FNJbWEHPyEORtLYru6/2nhaFhY4RKOZmiKkP8 KZd8GtzE90VUlAr6iFR05fMXJ9rC4GQ1jBZVrzamHtGhdSMnEvjq5H6IrqxO9sWL WuORZFH9ElvCUJ6NVwPhyfI2+TOxETA4wcforGwczWC3eARDhUGlKc97x7FXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAHogrEhVOqwy6o+eegVh4ImMPCIwHwYDVR0j BBgwFoAUp4ibM4Z+0r3xXDn3ItILr3a0IO4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjEzMmE3NDAtYmQ3ZC00NmI4LWIxMGEtYTdhNzAzZTM1MGYyLzAvQTc4ODlCMzM4 NjdFRDJCREYxNUMzOUY3MjJEMjBCQUY3NkI0MjBFRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzg4OUIzMzg2N0VEMkJERjE1QzM5RjcyMkQyMEJBRjc2QjQy MEVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjEzMmE3NDAtYmQ3ZC00NmI4LWIx MGEtYTdhNzAzZTM1MGYyLzAvQTc4ODlCMzM4NjdFRDJCREYxNUMzOUY3MjJEMjBC QUY3NkI0MjBFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqUqd6yE3yP7PbybXtBkEM1j5z4aAKvjebd DDbHJ6B5sKqEUEbjfLjTrqtlgbpegNKqSnHN27m8Aj6S4pwWs3/cOOzBfVgkwUiK A8tJn7EkJ1VwCni2NF7JDsJfdsFIWZN57Zy13FyfIgOpivGg7d27TOci6/TdX1Sr 7H8ZfP6YC/O7SgURvweB7Ord/QFsnmo6m2clZv0dCMLTK5hq0DA4yUciW89DDvRx 8et1O0UfgCilHIK4/vIJhFBbL87QXhFV0p4vVkkn3NqSo5N/STze4iRtd4utdKWm Cd9gkG44E4/kK2VaU5pR20NaluC3ZkoqSk8O6dASojdKlXXiX+k= -----END CERTIFICATE-----Generated at Thu Sep 24 05:08:05 2026 by rpki-client