$ rpki-client -vvvf rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft File: 7E5852640ACB27CE4AC466E5338B30E206711DDD.mft (raw, json) Hash identifier: YoM9VXP2oGgvrwdKs+dkBS0ltcryeKp44eMeWg747zo= Subject key identifier: E4:C8:24:2C:80:A6:43:2B:82:50:7D:9C:AF:60:7A:D7:98:E9:28:BF Authority key identifier: 7E:58:52:64:0A:CB:27:CE:4A:C4:66:E5:33:8B:30:E2:06:71:1D:DD Certificate issuer: /CN=7E5852640ACB27CE4AC466E5338B30E206711DDD Certificate serial: 662ADF5A9CDA050BBB85290EF0F6B7CC7AD1AD4A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 12:26:08 +0000 Manifest this update: Thu 24 Sep 2026 12:21:08 +0000 Manifest next update: Fri 25 Sep 2026 14:05:08 +0000 Files and hashes: 1: 3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa (hash: 8hArOQkZgNmI16L0WGc7RzZ5Ruf+DKiwdMQ56yopHsU=) 2: 3130332e32322e3231372e302f32342d3234203d3e20313530323631.roa (hash: zgUoXY12HmCoiLv/YyPkviXHygAhdx3kmWkfk7KOXTU=) 3: 7E5852640ACB27CE4AC466E5338B30E206711DDD.crl (hash: tnbfx/MEXbZErz7vwr0vE1WYNGTUcBxH/HIh/N8HOdw=) 4: 3130332e32322e3231362e302f32342d3234203d3e20313530323631.roa (hash: 1PUWFE0HvObC84cJz28KwHOs36xPuTELe/I8Yxh+ht0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.crl rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:2a:df:5a:9c:da:05:0b:bb:85:29:0e:f0:f6:b7:cc:7a:d1:ad:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E5852640ACB27CE4AC466E5338B30E206711DDD Validity Not Before: Sep 24 12:21:08 2026 GMT Not After : Sep 25 14:05:08 2026 GMT Subject: CN=E4C8242C80A6432B82507D9CAF607AD798E928BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:47:17:e5:70:66:f9:56:a8:48:02:01:e9:6b: 36:21:80:fe:48:18:5f:09:03:f7:90:0b:02:13:47: 4a:98:d6:e7:5a:4b:3b:1a:23:6e:94:31:f1:25:3e: 07:06:3c:86:c6:66:13:39:6f:b6:a5:cb:28:83:42: a4:d3:eb:9b:97:2e:22:81:da:7b:f5:a5:b1:f5:f5: 68:8e:9b:f2:aa:28:4c:9b:59:77:58:ac:a9:ea:69: f9:11:54:b9:d2:35:ca:6f:ac:c0:43:54:34:9c:01: ab:ab:16:02:4c:cf:fc:ea:51:17:50:31:9b:ae:27: 79:1c:a0:3e:14:02:da:7e:63:8e:85:fb:8c:a0:02: 5c:dd:00:72:0e:87:14:93:0b:eb:07:08:00:14:4a: f8:99:01:ac:d6:5a:69:f1:c9:33:27:ce:90:fe:08: f5:eb:bb:11:ac:48:8e:0c:0e:3e:cb:3f:48:96:0c: 45:e2:a9:27:4c:27:bd:dd:53:41:67:a9:d4:25:20: e3:a9:d3:c5:83:3a:0c:16:5d:b7:79:f2:d1:c7:e5: ef:ae:8f:54:00:bc:f4:4b:a6:cb:72:38:c1:2d:86: 2e:8d:87:3b:4b:12:71:e6:6c:de:49:0c:d5:54:95: 10:a5:8c:c2:b7:1c:66:81:de:11:4d:2e:69:c8:39: ae:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C8:24:2C:80:A6:43:2B:82:50:7D:9C:AF:60:7A:D7:98:E9:28:BF X509v3 Authority Key Identifier: keyid:7E:58:52:64:0A:CB:27:CE:4A:C4:66:E5:33:8B:30:E2:06:71:1D:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f5:e9:22:0d:4d:eb:bd:e8:c9:55:54:c2:ce:33:32:82:a1: 3e:bc:66:a8:72:d5:46:71:6c:28:e4:47:a5:b9:1e:9b:4c:ef: 3d:4c:d8:e2:68:63:5d:76:65:5d:8f:b2:b4:a0:01:ce:3d:ca: 79:7d:4f:4f:02:4a:24:95:cc:61:e4:b8:e0:dd:8c:5d:f6:81: 72:fa:56:54:c9:2d:34:5f:8d:66:2a:45:d5:ec:a6:af:c9:65: 86:a8:94:a8:f5:57:c8:28:da:36:ed:2a:53:11:48:34:94:71: 65:a8:f7:0d:4b:b0:f0:2d:1e:8c:d7:75:bf:44:7d:ae:b7:5d: 4a:9f:31:3a:28:12:83:d8:00:b6:da:d8:36:62:de:5f:94:3e: 77:90:f7:1d:b5:0b:3c:64:5d:2f:e7:47:cd:02:9d:42:66:82: aa:b2:08:94:96:a4:22:08:34:68:b8:20:ac:09:a7:67:3a:9f: 04:4c:c3:0e:37:06:26:a6:33:f7:c3:15:ac:40:0f:2d:2e:75: 73:35:de:ac:b8:40:ee:4b:af:69:bf:2c:6f:55:7e:79:4d:2d: 6c:0f:95:a5:18:5f:b3:14:3c:07:dc:8e:ba:b3:bd:dc:f1:eb: c9:54:5c:e7:ae:bf:f1:9a:33:6c:13:ff:df:bf:dd:6f:09:a5: 1d:dc:3e:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZirfWpzaBQu7hSkO8Pa3zHrRrUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U1ODUyNjQwQUNCMjdDRTRBQzQ2NkU1MzM4QjMwRTIw NjcxMURERDAeFw0yNjA5MjQxMjIxMDhaFw0yNjA5MjUxNDA1MDhaMDMxMTAvBgNV BAMTKEU0QzgyNDJDODBBNjQzMkI4MjUwN0Q5Q0FGNjA3QUQ3OThFOTI4QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNRxflcGb5VqhIAgHpazYhgP5I GF8JA/eQCwITR0qY1udaSzsaI26UMfElPgcGPIbGZhM5b7alyyiDQqTT65uXLiKB 2nv1pbH19WiOm/KqKEybWXdYrKnqafkRVLnSNcpvrMBDVDScAaurFgJMz/zqURdQ MZuuJ3kcoD4UAtp+Y46F+4ygAlzdAHIOhxSTC+sHCAAUSviZAazWWmnxyTMnzpD+ CPXruxGsSI4MDj7LP0iWDEXiqSdMJ73dU0FnqdQlIOOp08WDOgwWXbd58tHH5e+u j1QAvPRLpstyOMEthi6NhztLEnHmbN5JDNVUlRCljMK3HGaB3hFNLmnIOa6bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5MgkLICmQyuCUH2cr2B615jpKL8wHwYDVR0j BBgwFoAUflhSZArLJ85KxGblM4sw4gZxHd0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU0NjA3ZjAtMTcwMS00OWIxLTkxZmYtYjFiZWQ1Y2JkZWQxLzAvN0U1ODUyNjQw QUNCMjdDRTRBQzQ2NkU1MzM4QjMwRTIwNjcxMURERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RTU4NTI2NDBBQ0IyN0NFNEFDNDY2RTUzMzhCMzBFMjA2NzEx RERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU0NjA3ZjAtMTcwMS00OWIxLTkx ZmYtYjFiZWQ1Y2JkZWQxLzAvN0U1ODUyNjQwQUNCMjdDRTRBQzQ2NkU1MzM4QjMw RTIwNjcxMURERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/16SINTeu96MlVVMLOMzKCoT68Zqhy1UZx bCjkR6W5HptM7z1M2OJoY112ZV2PsrSgAc49ynl9T08CSiSVzGHkuODdjF32gXL6 VlTJLTRfjWYqRdXspq/JZYaolKj1V8go2jbtKlMRSDSUcWWo9w1LsPAtHozXdb9E fa63XUqfMTooEoPYALba2DZi3l+UPneQ9x21CzxkXS/nR80CnUJmgqqyCJSWpCII NGi4IKwJp2c6nwRMww43BiamM/fDFaxADy0udXM13qy4QO5Lr2m/LG9VfnlNLWwP laUYX7MUPAfcjrqzvdzx68lUXOeuv/GaM2wT/9+/3W8JpR3cPrQ= -----END CERTIFICATE-----Generated at Thu Sep 24 15:16:44 2026 by rpki-client