$ rpki-client -vvvf rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft File: 7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft (raw, json) Hash identifier: hZxLxPjI3VW1LtlTrpKaaUM6IpoU7NW8NDFCeGRXAxw= Subject key identifier: BF:2E:3F:72:A3:46:B2:2A:29:09:EF:48:F9:4A:E2:A6:50:E7:47:87 Authority key identifier: 7C:A7:C7:E6:03:DB:E1:4E:06:E9:48:C7:48:A3:85:43:F5:F5:E7:26 Certificate issuer: /CN=7CA7C7E603DBE14E06E948C748A38543F5F5E726 Certificate serial: 0AC996C561EEA297359D9E344553310BF47F8EFF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA7C7E603DBE14E06E948C748A38543F5F5E726.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 10:33:42 +0000 Manifest this update: Thu 24 Sep 2026 10:28:42 +0000 Manifest next update: Fri 25 Sep 2026 11:15:42 +0000 Files and hashes: 1: 7CA7C7E603DBE14E06E948C748A38543F5F5E726.crl (hash: YyVH/wzYAyRYYmfTnuX8S6kXnyNKgk62aLgtz5xDXWo=) 2: 323430323a383263303a3a2f33322d3438203d3e203138303536.roa (hash: slMWOkKg1OA+OP/zcUxoXUDIah1vgvG+HFFav6ni4c4=) 3: 3230322e34362e3134342e302f32322d3234203d3e203138303536.roa (hash: oDQWvgAroc6j8Zz7ACtwggHFMEzsZVwlsq4pDyGB050=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.crl rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA7C7E603DBE14E06E948C748A38543F5F5E726.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:c9:96:c5:61:ee:a2:97:35:9d:9e:34:45:53:31:0b:f4:7f:8e:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA7C7E603DBE14E06E948C748A38543F5F5E726 Validity Not Before: Sep 24 10:28:42 2026 GMT Not After : Sep 25 11:15:42 2026 GMT Subject: CN=BF2E3F72A346B22A2909EF48F94AE2A650E74787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:83:4b:d1:13:f2:08:bc:1b:35:20:6a:8d:7e: 3c:e6:9d:cc:a2:5f:bb:74:0a:1b:63:d6:4f:92:35: 1c:26:ec:5b:15:bb:a3:2e:62:c1:34:f6:d6:14:51: 1b:8a:53:77:6b:89:f0:fc:6c:7f:fd:38:5b:e8:48: 4b:76:ac:fc:17:f0:0a:ad:70:d1:76:09:c2:5d:53: 0a:4d:5b:d3:76:97:c8:76:fe:c7:38:22:9e:a8:79: 7c:4f:41:ca:5d:46:4c:84:20:c3:5f:4b:aa:cb:3b: fd:80:46:60:35:72:1b:96:7d:75:f2:dd:87:81:e9: 25:7d:23:b7:2f:14:f6:ab:1e:0f:ec:46:9a:85:78: e3:06:01:f3:66:2e:e3:6d:ff:54:19:98:8c:ac:c1: fa:d4:a9:ff:b7:4c:f3:c1:e1:a2:aa:7d:27:70:63: ea:e5:de:3b:cb:df:2a:bd:4a:94:b6:a9:26:50:db: e3:d3:40:d6:b5:ee:ef:b1:2f:a4:6d:ad:f4:1d:27: 43:3b:d1:1f:78:69:1d:5b:da:61:5f:31:25:bd:08: 94:f4:af:ee:2b:d9:4c:9e:9e:04:0a:b5:e8:ed:7f: 00:2a:55:47:44:b8:41:9e:b9:62:6f:fd:f9:81:a9: 2c:f5:01:d1:a5:09:11:c9:0f:57:67:ea:ce:c1:97: ab:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:2E:3F:72:A3:46:B2:2A:29:09:EF:48:F9:4A:E2:A6:50:E7:47:87 X509v3 Authority Key Identifier: keyid:7C:A7:C7:E6:03:DB:E1:4E:06:E9:48:C7:48:A3:85:43:F5:F5:E7:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA7C7E603DBE14E06E948C748A38543F5F5E726.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:67:1f:96:f9:e4:3a:56:61:08:b9:87:cc:37:56:ae:d9:ec: 7c:90:97:16:b0:4d:84:58:62:50:ce:ba:f2:bc:22:a6:b1:37: 0d:3b:5d:1a:37:30:1a:78:14:15:89:f6:c6:28:a7:88:f2:5c: 84:78:84:c5:15:e1:04:fc:9a:2d:40:20:87:0f:1c:43:c4:aa: f5:5a:4d:dd:32:72:fa:65:0c:62:5d:92:4a:be:32:91:f7:fe: 2f:6b:79:19:30:2b:6d:af:ce:50:35:7e:2e:0c:ae:b5:15:2f: 55:e3:0e:8b:34:6e:c1:60:13:c2:6d:a0:4b:36:ce:dc:a3:5d: 14:c1:01:ab:c0:06:e0:8b:b2:0c:df:9e:50:f1:e7:30:4c:f1: 25:37:fd:18:20:33:4a:c9:00:58:9d:4e:28:6a:72:03:84:28: c4:40:35:1d:1b:b9:a9:62:5f:51:21:d0:49:01:a1:dc:4b:bd: ff:9e:03:c0:63:ab:af:85:50:2e:1e:bd:78:f8:a1:ef:17:d4: 9e:8d:d7:c8:52:12:b7:5f:ea:88:d9:e9:74:2e:18:a3:55:84: 67:88:98:ca:75:8e:a4:c8:20:c7:37:9c:9c:00:c7:1c:64:51: 35:62:5f:3b:63:9a:0b:bc:28:69:76:3d:57:10:6a:eb:29:cd: 0e:28:a5:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCsmWxWHuopc1nZ40RVMxC/R/jv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBN0M3RTYwM0RCRTE0RTA2RTk0OEM3NDhBMzg1NDNG NUY1RTcyNjAeFw0yNjA5MjQxMDI4NDJaFw0yNjA5MjUxMTE1NDJaMDMxMTAvBgNV BAMTKEJGMkUzRjcyQTM0NkIyMkEyOTA5RUY0OEY5NEFFMkE2NTBFNzQ3ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwg0vRE/IIvBs1IGqNfjzmncyi X7t0Chtj1k+SNRwm7FsVu6MuYsE09tYUURuKU3drifD8bH/9OFvoSEt2rPwX8Aqt cNF2CcJdUwpNW9N2l8h2/sc4Ip6oeXxPQcpdRkyEIMNfS6rLO/2ARmA1chuWfXXy 3YeB6SV9I7cvFParHg/sRpqFeOMGAfNmLuNt/1QZmIyswfrUqf+3TPPB4aKqfSdw Y+rl3jvL3yq9SpS2qSZQ2+PTQNa17u+xL6RtrfQdJ0M70R94aR1b2mFfMSW9CJT0 r+4r2UyengQKtejtfwAqVUdEuEGeuWJv/fmBqSz1AdGlCRHJD1dn6s7Bl6tXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvy4/cqNGsiopCe9I+UriplDnR4cwHwYDVR0j BBgwFoAUfKfH5gPb4U4G6UjHSKOFQ/X15yYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjRmN2ViNGYtNzkyNC00ZGI2LWI2ZDYtMzk0ZDgzYjM5MmZjLzAvN0NBN0M3RTYw M0RCRTE0RTA2RTk0OEM3NDhBMzg1NDNGNUY1RTcyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Q0E3QzdFNjAzREJFMTRFMDZFOTQ4Qzc0OEEzODU0M0Y1RjVF NzI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjRmN2ViNGYtNzkyNC00ZGI2LWI2 ZDYtMzk0ZDgzYjM5MmZjLzAvN0NBN0M3RTYwM0RCRTE0RTA2RTk0OEM3NDhBMzg1 NDNGNUY1RTcyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxnH5b55DpWYQi5h8w3Vq7Z7HyQlxawTYRY YlDOuvK8IqaxNw07XRo3MBp4FBWJ9sYop4jyXIR4hMUV4QT8mi1AIIcPHEPEqvVa Td0ycvplDGJdkkq+MpH3/i9reRkwK22vzlA1fi4MrrUVL1XjDos0bsFgE8JtoEs2 ztyjXRTBAavABuCLsgzfnlDx5zBM8SU3/RggM0rJAFidTihqcgOEKMRANR0buali X1Eh0EkBodxLvf+eA8Bjq6+FUC4evXj4oe8X1J6N18hSErdf6ojZ6XQuGKNVhGeI mMp1jqTIIMc3nJwAxxxkUTViXztjmgu8KGl2PVcQauspzQ4opb8= -----END CERTIFICATE-----Generated at Fri Sep 25 05:13:08 2026 by rpki-client