$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.mft File: 7CA991AB85999F4151C22A6310EF08374F65F5D1.mft (raw, json) Hash identifier: jO84fYxzhEVFs2EzSYqMXPi6GgROPMDK8/yfMESHqCU= Subject key identifier: 75:50:F2:73:D1:3D:68:64:CB:75:7F:94:57:48:43:61:A2:C9:8A:5D Authority key identifier: 7C:A9:91:AB:85:99:9F:41:51:C2:2A:63:10:EF:08:37:4F:65:F5:D1 Certificate issuer: /CN=7CA991AB85999F4151C22A6310EF08374F65F5D1 Certificate serial: 6F0111F2012A327FC1012282634344362A2D33E8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA991AB85999F4151C22A6310EF08374F65F5D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 11:04:16 +0000 Manifest this update: Thu 24 Sep 2026 10:59:16 +0000 Manifest next update: Fri 25 Sep 2026 14:24:16 +0000 Files and hashes: 1: 3130332e3234382e3139362e302f32322d3234203d3e20313331373436.roa (hash: vv5Cos9qjIQTiJSbLjTdmGt6+eV8UT6ZYwAxqnFGFFo=) 2: 3130332e32312e3230342e302f32322d3234203d3e20313331373436.roa (hash: sjq69LFtU6bk76TnhR0cZc6EeNyTMnt01vwHn/mhzio=) 3: 7CA991AB85999F4151C22A6310EF08374F65F5D1.crl (hash: P2N3piNUnNwyg/rV8mplHfMVqihNlGIiAGAtPD9VxfM=) 4: 323430303a663334303a3a2f33322d3438203d3e20313331373436.roa (hash: TXX1EsQWcyzmG34D8pyojWErAMIsJ/+eZmwKf6nr6gQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.crl rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA991AB85999F4151C22A6310EF08374F65F5D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:01:11:f2:01:2a:32:7f:c1:01:22:82:63:43:44:36:2a:2d:33:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA991AB85999F4151C22A6310EF08374F65F5D1 Validity Not Before: Sep 24 10:59:16 2026 GMT Not After : Sep 25 14:24:16 2026 GMT Subject: CN=7550F273D13D6864CB757F9457484361A2C98A5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:52:c3:0b:92:8f:91:d5:b4:47:f4:da:48:66: 80:a5:63:1b:f6:81:4b:46:17:4f:53:73:e1:60:9d: 00:25:d3:29:86:47:2e:4b:f9:c0:e0:e7:f8:07:3e: f8:93:b9:44:9f:e3:63:3f:c1:6d:fc:d0:3e:b7:b6: 33:60:40:e2:bb:e1:b2:ba:62:6e:ca:bc:84:98:c8: 9e:26:89:7b:21:56:0d:68:5c:a1:bc:aa:da:78:df: ce:b7:b0:f1:6b:a4:90:ca:d4:aa:5a:b8:74:e0:78: 83:47:12:26:9c:34:83:3f:16:14:7c:d4:e6:0e:02: 96:45:de:4d:bb:85:84:1f:ef:f4:ad:9b:5d:ce:d0: cf:66:28:c8:2f:6a:9d:90:a3:92:6f:35:71:cb:26: 5f:70:ab:58:42:fa:7b:61:07:71:fa:c1:8d:1c:74: a0:1f:58:49:d8:99:a6:5a:88:5d:21:b2:d4:c7:ab: b0:f4:34:a7:e1:17:13:ce:f7:aa:bb:34:ac:1f:8a: a9:e4:70:2f:b6:90:23:c4:69:30:05:36:73:3b:ef: 45:91:32:0b:dc:b1:59:81:63:0e:16:1d:14:02:c1: ba:a9:ce:ff:f4:5c:a7:f8:1b:a2:53:94:d9:fb:87: bd:f3:f1:bf:c5:8b:d5:49:3b:6f:96:a2:c4:2a:a7: e4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:50:F2:73:D1:3D:68:64:CB:75:7F:94:57:48:43:61:A2:C9:8A:5D X509v3 Authority Key Identifier: keyid:7C:A9:91:AB:85:99:9F:41:51:C2:2A:63:10:EF:08:37:4F:65:F5:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA991AB85999F4151C22A6310EF08374F65F5D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:8c:51:22:9d:65:d0:03:87:f0:fa:33:f0:8f:6b:94:bd:a7: be:e0:4d:38:27:5f:2d:22:b7:f1:5d:13:21:4f:32:ba:85:a2: 17:60:08:6e:3b:ba:e3:a5:86:65:08:fc:55:d4:1f:de:48:c1: 20:c1:64:d2:c5:12:bf:90:f4:03:31:e0:93:44:9f:ba:dc:ba: 74:a7:e5:b4:25:52:17:6d:01:1c:84:f9:8a:2c:e0:b4:31:ab: de:52:54:9d:ee:07:95:79:18:17:cf:5d:1c:e2:64:b8:43:df: 10:3b:51:71:3d:86:2f:69:33:c1:16:bd:50:ae:de:1f:44:58: 4f:b6:93:59:91:8a:eb:7d:e7:a2:04:50:ad:6a:d3:da:56:7f: 14:04:5c:06:97:eb:7f:2d:ce:07:f3:b6:ea:0e:5d:1e:47:b9: 09:1e:09:a9:a0:bb:d3:e8:3c:8d:34:23:96:81:dc:37:8d:51: d6:28:67:8d:f9:8a:86:ff:05:2d:45:ac:11:83:75:c7:4b:85: 16:c5:2f:88:6b:18:9b:15:fe:f3:4b:7d:8a:a7:bc:65:af:52: 59:89:cb:b8:f7:a0:51:55:a6:32:63:69:39:4e:63:28:30:2d: 95:7c:fc:db:10:5f:b8:d5:61:b9:40:c5:60:53:18:b2:ae:6b: f2:8d:b5:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbwER8gEqMn/BASKCY0NENiotM+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBOTkxQUI4NTk5OUY0MTUxQzIyQTYzMTBFRjA4Mzc0 RjY1RjVEMTAeFw0yNjA5MjQxMDU5MTZaFw0yNjA5MjUxNDI0MTZaMDMxMTAvBgNV BAMTKDc1NTBGMjczRDEzRDY4NjRDQjc1N0Y5NDU3NDg0MzYxQTJDOThBNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoUsMLko+R1bRH9NpIZoClYxv2 gUtGF09Tc+FgnQAl0ymGRy5L+cDg5/gHPviTuUSf42M/wW380D63tjNgQOK74bK6 Ym7KvISYyJ4miXshVg1oXKG8qtp43863sPFrpJDK1KpauHTgeINHEiacNIM/FhR8 1OYOApZF3k27hYQf7/Stm13O0M9mKMgvap2Qo5JvNXHLJl9wq1hC+nthB3H6wY0c dKAfWEnYmaZaiF0hstTHq7D0NKfhFxPO96q7NKwfiqnkcC+2kCPEaTAFNnM770WR MgvcsVmBYw4WHRQCwbqpzv/0XKf4G6JTlNn7h73z8b/Fi9VJO2+WosQqp+RXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdVDyc9E9aGTLdX+UV0hDYaLJil0wHwYDVR0j BBgwFoAUfKmRq4WZn0FRwipjEO8IN09l9dEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmJlNTc4ZDAtZDNhYS00ZjBmLWJiOWQtZjc0YjQ5YzZhNjU1LzAvN0NBOTkxQUI4 NTk5OUY0MTUxQzIyQTYzMTBFRjA4Mzc0RjY1RjVEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Q0E5OTFBQjg1OTk5RjQxNTFDMjJBNjMxMEVGMDgzNzRGNjVG NUQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmJlNTc4ZDAtZDNhYS00ZjBmLWJi OWQtZjc0YjQ5YzZhNjU1LzAvN0NBOTkxQUI4NTk5OUY0MTUxQzIyQTYzMTBFRjA4 Mzc0RjY1RjVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGMUSKdZdADh/D6M/CPa5S9p77gTTgnXy0i t/FdEyFPMrqFohdgCG47uuOlhmUI/FXUH95IwSDBZNLFEr+Q9AMx4JNEn7rcunSn 5bQlUhdtARyE+Yos4LQxq95SVJ3uB5V5GBfPXRziZLhD3xA7UXE9hi9pM8EWvVCu 3h9EWE+2k1mRiut956IEUK1q09pWfxQEXAaX638tzgfztuoOXR5HuQkeCamgu9Po PI00I5aB3DeNUdYoZ435iob/BS1FrBGDdcdLhRbFL4hrGJsV/vNLfYqnvGWvUlmJ y7j3oFFVpjJjaTlOYygwLZV8/NsQX7jVYblAxWBTGLKua/KNtTc= -----END CERTIFICATE-----Generated at Thu Sep 24 14:29:21 2026 by rpki-client