$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.mft File: 7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.mft (raw, json) Hash identifier: 2BSNWQe79FLpYbOnKOGTOG9Jm1y0z8GIBt4x6Y7fjU4= Subject key identifier: E5:80:97:19:BE:1A:2A:81:18:4E:F4:5E:A1:11:E0:80:2E:1C:81:C9 Authority key identifier: 7A:E9:49:1D:E1:11:DA:FB:09:BA:C8:6C:97:77:FC:44:A7:E8:D9:41 Certificate issuer: /CN=7AE9491DE111DAFB09BAC86C9777FC44A7E8D941 Certificate serial: 55F98F9FA6CB12210DF2CCED89608095E2231307 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 21:22:34 +0000 Manifest this update: Wed 23 Sep 2026 21:17:34 +0000 Manifest next update: Fri 25 Sep 2026 01:19:34 +0000 Files and hashes: 1: 323030313a6466333a666438303a3a2f34382d3438203d3e20313430343432.roa (hash: F4M8MHNpJyjK8JMP4omDLl+coBkk4H80wSqlzMtwEQs=) 2: 3130332e3135322e37322e302f32332d3234203d3e20313430343432.roa (hash: 9NfA+UigkaeRrDOYfR/pW+xu+btdeunFAYc1t2/cwBA=) 3: 7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.crl (hash: UedjL7CzCG3tstRDxPriiRUBiqN6rdg/zQfnxLOqqOg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.crl rsync://rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 01:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:f9:8f:9f:a6:cb:12:21:0d:f2:cc:ed:89:60:80:95:e2:23:13:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7AE9491DE111DAFB09BAC86C9777FC44A7E8D941 Validity Not Before: Sep 23 21:17:34 2026 GMT Not After : Sep 25 01:19:34 2026 GMT Subject: CN=E5809719BE1A2A81184EF45EA111E0802E1C81C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0b:10:45:f0:cf:a5:17:3b:84:fa:c9:92:14: c1:92:cb:0d:3f:07:1e:69:a8:69:95:79:b1:38:38: db:60:e7:57:fa:15:cc:bb:45:98:4e:4a:5c:b9:27: 27:50:ba:4e:bb:a1:f4:fe:0d:ae:67:e3:bf:93:7b: 71:0b:1b:18:42:76:e4:3a:02:5d:c9:d8:45:fb:e3: 18:96:c6:42:03:d7:57:a6:80:df:9b:b2:67:ec:1b: 44:dd:77:dc:65:34:87:77:c2:95:a5:00:fc:2b:a2: 72:aa:7b:ea:8c:dc:d4:b0:8c:fa:c6:14:c4:b1:ef: 1a:a7:4e:e7:76:fd:18:b4:25:2e:18:46:94:d4:3c: 61:ab:1d:bf:2b:1d:54:9a:bd:61:53:10:b8:a8:89: b5:61:b3:69:57:dd:8e:f5:f9:d0:ef:18:d8:3d:c2: 78:43:1e:a8:c8:13:1e:5a:7e:50:49:92:a5:e3:14: 6c:07:4b:b3:15:e3:72:af:ef:47:4d:52:92:1d:72: df:3d:ae:b8:8c:a2:d7:ce:f9:ba:ce:62:c9:eb:93: ba:ec:28:40:07:16:c5:c5:3f:5b:45:9b:c8:ea:80: 51:cf:c0:13:cb:52:3c:55:5a:b8:f1:18:23:04:db: 74:af:d3:f8:bf:2c:45:83:0a:c8:c8:8b:33:1a:e1: e4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:80:97:19:BE:1A:2A:81:18:4E:F4:5E:A1:11:E0:80:2E:1C:81:C9 X509v3 Authority Key Identifier: keyid:7A:E9:49:1D:E1:11:DA:FB:09:BA:C8:6C:97:77:FC:44:A7:E8:D9:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f5:d0:de:ff:6d:54:a8:65:94:27:30:d8:a9:f8:c7:3d:49: 01:bb:dd:cb:0b:fb:ec:b6:04:a8:b9:ab:7c:5d:0d:1d:b4:5e: 33:8f:7a:d0:cc:d9:5c:22:2d:58:bb:be:59:c8:d8:7e:28:19: 87:db:6f:8a:60:c9:78:2e:69:83:34:0a:9d:03:b2:6b:a8:63: 28:13:5b:85:79:32:80:5f:df:e3:77:c4:c7:f2:9b:44:b0:3d: b0:75:bb:c8:6a:88:bf:43:f2:88:f3:ac:82:84:a2:c3:f2:f4: 86:39:f7:ee:ea:72:46:6d:b7:47:e2:72:c3:f7:ec:6c:1d:60: 0d:50:0c:de:d8:b2:39:26:b4:62:2a:63:5c:a4:ba:36:71:71: 2b:11:5b:7c:50:7c:e8:38:30:5a:dd:99:99:14:94:2b:4d:ac: 50:84:1e:d6:8e:15:14:23:7b:f8:29:5f:7e:2b:95:df:0d:66: 81:8a:ea:46:00:a3:50:b4:b1:9b:0e:f2:b4:63:20:00:a1:e7: df:ae:69:fd:96:7d:34:10:f8:37:20:aa:a7:40:45:1b:82:44: f6:92:e5:fc:b6:e0:0a:2b:d0:b0:c0:44:dc:3f:42:9f:f7:78: 23:51:42:c2:e9:1f:c7:c5:42:92:93:d3:99:d2:b4:85:ac:75: 20:99:51:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVfmPn6bLEiEN8sztiWCAleIjEwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FFOTQ5MURFMTExREFGQjA5QkFDODZDOTc3N0ZDNDRB N0U4RDk0MTAeFw0yNjA5MjMyMTE3MzRaFw0yNjA5MjUwMTE5MzRaMDMxMTAvBgNV BAMTKEU1ODA5NzE5QkUxQTJBODExODRFRjQ1RUExMTFFMDgwMkUxQzgxQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHCxBF8M+lFzuE+smSFMGSyw0/ Bx5pqGmVebE4ONtg51f6Fcy7RZhOSly5JydQuk67ofT+Da5n47+Te3ELGxhCduQ6 Al3J2EX74xiWxkID11emgN+bsmfsG0Tdd9xlNId3wpWlAPwronKqe+qM3NSwjPrG FMSx7xqnTud2/Ri0JS4YRpTUPGGrHb8rHVSavWFTELioibVhs2lX3Y71+dDvGNg9 wnhDHqjIEx5aflBJkqXjFGwHS7MV43Kv70dNUpIdct89rriMotfO+brOYsnrk7rs KEAHFsXFP1tFm8jqgFHPwBPLUjxVWrjxGCME23Sv0/i/LEWDCsjIizMa4eSJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5YCXGb4aKoEYTvReoRHggC4cgckwHwYDVR0j BBgwFoAUeulJHeER2vsJushsl3f8RKfo2UEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjcyOGM3N2ItMjEwMC00ZjJhLTkwZDktMDhjNTNlODQxZTFiLzAvN0FFOTQ5MURF MTExREFGQjA5QkFDODZDOTc3N0ZDNDRBN0U4RDk0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QUU5NDkxREUxMTFEQUZCMDlCQUM4NkM5Nzc3RkM0NEE3RThE OTQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjcyOGM3N2ItMjEwMC00ZjJhLTkw ZDktMDhjNTNlODQxZTFiLzAvN0FFOTQ5MURFMTExREFGQjA5QkFDODZDOTc3N0ZD NDRBN0U4RDk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEv10N7/bVSoZZQnMNip+Mc9SQG73csL++y2 BKi5q3xdDR20XjOPetDM2VwiLVi7vlnI2H4oGYfbb4pgyXguaYM0Cp0DsmuoYygT W4V5MoBf3+N3xMfym0SwPbB1u8hqiL9D8ojzrIKEosPy9IY59+7qckZtt0ficsP3 7GwdYA1QDN7YsjkmtGIqY1ykujZxcSsRW3xQfOg4MFrdmZkUlCtNrFCEHtaOFRQj e/gpX34rld8NZoGK6kYAo1C0sZsO8rRjIACh59+uaf2WfTQQ+DcgqqdARRuCRPaS 5fy24Aor0LDARNw/Qp/3eCNRQsLpH8fFQpKT05nStIWsdSCZUe0= -----END CERTIFICATE-----Generated at Thu Sep 24 09:39:26 2026 by rpki-client