$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft File: C7CDFA6BC067C7A495919AAD0E26180B86353954.mft (raw, json) Hash identifier: gUtwUE78YBBn52AIwYyyCbMPTIhdC/HvQ6CzzbXCLmg= Subject key identifier: 3C:E0:82:44:0D:DF:35:06:14:8F:09:A3:36:55:99:4B:BE:24:3E:B4 Authority key identifier: C7:CD:FA:6B:C0:67:C7:A4:95:91:9A:AD:0E:26:18:0B:86:35:39:54 Certificate issuer: /CN=C7CDFA6BC067C7A495919AAD0E26180B86353954 Certificate serial: 502443F4CA0270C6F057BCE653CE5EA65F359EE9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 11:34:55 +0000 Manifest this update: Thu 24 Sep 2026 11:29:55 +0000 Manifest next update: Fri 25 Sep 2026 14:14:55 +0000 Files and hashes: 1: C7CDFA6BC067C7A495919AAD0E26180B86353954.crl (hash: n2QDDKVCEcfnDUp5jR0ask1sviLyhmAl4ZVauZ30EKw=) 2: 3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa (hash: pSVzT2vio9bf7LUyfGmLirM4hVE1PKigRBwf0BFNg8U=) 3: 323030313a6466313a366263303a3a2f34382d3438203d3e20313431363036.roa (hash: I79Q34o1f2vuvFl40hYKqigyJvsHaAMckuqi63LU5sQ=) 4: 3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa (hash: 0iLOUhfmWoIB+lxiDVooYY80mjdqjMFktAq2sVeC4n8=) 5: 3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa (hash: LgH9oXeBcuQFeopdycllX9ZwgANBmbEdowpLFMRb868=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.crl rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 14:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:24:43:f4:ca:02:70:c6:f0:57:bc:e6:53:ce:5e:a6:5f:35:9e:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7CDFA6BC067C7A495919AAD0E26180B86353954 Validity Not Before: Sep 24 11:29:55 2026 GMT Not After : Sep 25 14:14:55 2026 GMT Subject: CN=3CE082440DDF3506148F09A33655994BBE243EB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:08:ea:b2:b4:ab:56:8a:65:b2:42:da:b0:72: 5e:1a:cd:00:c1:4e:87:8e:a8:37:b2:8a:3e:04:2b: 3d:79:be:fb:df:98:d9:83:93:ef:ce:38:0e:9f:de: a0:57:18:f4:a9:d6:ab:40:e0:72:5c:ee:45:4d:19: 51:73:97:a0:9e:cc:96:3f:19:95:10:c7:fe:a8:cd: 8b:37:c0:53:29:5e:48:22:60:4a:ea:c8:f7:2f:f4: 36:2d:1a:4d:e5:fb:e5:8b:14:3f:b6:55:38:81:12: ea:87:8b:42:87:fc:4d:64:53:af:ca:43:e8:b3:3f: 9c:3c:07:89:50:e1:85:4b:fd:7d:48:15:75:d8:f9: db:dd:56:7d:95:c7:f1:17:d9:24:af:d5:5d:0f:98: 7e:d5:e5:da:db:fc:ff:dd:54:9b:a3:ba:d0:61:41: e9:1c:7c:6d:b6:92:8d:e8:39:d2:90:5e:d4:1e:31: 22:c1:2e:20:a6:79:94:89:e2:26:3c:2a:51:2b:ac: 5e:ea:47:1d:a8:e5:00:c7:d4:3d:d9:86:cc:6c:b7: ce:bb:ed:3c:f3:72:a1:d3:48:30:6e:09:46:0f:76: 2c:6f:85:0a:f4:56:47:90:4f:2a:ae:25:bd:3d:b0: 34:ca:6c:79:b0:dd:50:2b:7e:a3:2f:c3:3b:9a:96: 06:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E0:82:44:0D:DF:35:06:14:8F:09:A3:36:55:99:4B:BE:24:3E:B4 X509v3 Authority Key Identifier: keyid:C7:CD:FA:6B:C0:67:C7:A4:95:91:9A:AD:0E:26:18:0B:86:35:39:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:7f:d7:6a:fe:1f:a5:7d:41:9d:42:e6:22:5e:05:62:42:69: e8:31:4f:92:e6:11:35:ba:c4:07:fe:af:f4:80:1b:e1:c2:df: bb:27:22:45:1d:b1:2c:b7:37:db:9a:c9:7a:ee:11:56:96:19: f7:91:51:90:1a:01:56:d5:a1:0f:44:3e:d5:55:91:ec:02:18: 89:8f:b0:f5:ac:4b:a7:3f:22:bb:3c:74:88:4f:6f:3b:62:a8: 33:ff:09:34:12:22:e9:3b:35:2f:62:fc:1e:8f:71:7f:ea:af: 31:be:a2:bc:50:dc:a7:7d:92:db:91:91:03:69:bb:df:05:ff: 37:ef:ec:db:38:06:e9:b7:53:15:66:5d:5b:f8:99:1c:77:d6: 4d:ff:71:e2:c6:7a:dd:68:2e:13:8d:c7:19:eb:21:14:22:f3: ee:97:9a:58:aa:2f:d3:30:24:a9:21:07:3b:39:7b:fe:7b:e3: 79:b3:a7:6a:77:e8:f5:04:00:59:48:09:9c:c7:9c:d4:b4:76: 28:12:93:a1:aa:4a:dc:2f:12:5d:66:a6:b2:ae:16:fa:11:34: eb:3a:d9:58:80:31:e1:54:f3:01:1c:c3:b3:cc:d0:0f:3c:10: 16:f5:3a:d8:70:fe:70:33:a8:f1:cd:cd:3a:b7:52:79:39:9a: c7:26:b5:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUCRD9MoCcMbwV7zmU85epl81nukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdDREZBNkJDMDY3QzdBNDk1OTE5QUFEMEUyNjE4MEI4 NjM1Mzk1NDAeFw0yNjA5MjQxMTI5NTVaFw0yNjA5MjUxNDE0NTVaMDMxMTAvBgNV BAMTKDNDRTA4MjQ0MERERjM1MDYxNDhGMDlBMzM2NTU5OTRCQkUyNDNFQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClCOqytKtWimWyQtqwcl4azQDB ToeOqDeyij4EKz15vvvfmNmDk+/OOA6f3qBXGPSp1qtA4HJc7kVNGVFzl6CezJY/ GZUQx/6ozYs3wFMpXkgiYErqyPcv9DYtGk3l++WLFD+2VTiBEuqHi0KH/E1kU6/K Q+izP5w8B4lQ4YVL/X1IFXXY+dvdVn2Vx/EX2SSv1V0PmH7V5drb/P/dVJujutBh QekcfG22ko3oOdKQXtQeMSLBLiCmeZSJ4iY8KlErrF7qRx2o5QDH1D3Zhsxst867 7TzzcqHTSDBuCUYPdixvhQr0VkeQTyquJb09sDTKbHmw3VArfqMvwzualgbfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPOCCRA3fNQYUjwmjNlWZS74kPrQwHwYDVR0j BBgwFoAUx836a8Bnx6SVkZqtDiYYC4Y1OVQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ2NGJmNmEtNDMwMi00NjBmLTk2NjktMDlhNTBhNzNhZjFhLzAvQzdDREZBNkJD MDY3QzdBNDk1OTE5QUFEMEUyNjE4MEI4NjM1Mzk1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DN0NERkE2QkMwNjdDN0E0OTU5MTlBQUQwRTI2MTgwQjg2MzUz OTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ2NGJmNmEtNDMwMi00NjBmLTk2 NjktMDlhNTBhNzNhZjFhLzAvQzdDREZBNkJDMDY3QzdBNDk1OTE5QUFEMEUyNjE4 MEI4NjM1Mzk1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJV/12r+H6V9QZ1C5iJeBWJCaegxT5LmETW6 xAf+r/SAG+HC37snIkUdsSy3N9uayXruEVaWGfeRUZAaAVbVoQ9EPtVVkewCGImP sPWsS6c/Irs8dIhPbztiqDP/CTQSIuk7NS9i/B6PcX/qrzG+orxQ3Kd9ktuRkQNp u98F/zfv7Ns4Bum3UxVmXVv4mRx31k3/ceLGet1oLhONxxnrIRQi8+6XmliqL9Mw JKkhBzs5e/5743mzp2p36PUEAFlICZzHnNS0digSk6GqStwvEl1mprKuFvoRNOs6 2ViAMeFU8wEcw7PM0A88EBb1Othw/nAzqPHNzTq3Unk5mscmtcE= -----END CERTIFICATE-----Generated at Fri Sep 25 06:54:53 2026 by rpki-client