$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft File: C7CDFA6BC067C7A495919AAD0E26180B86353954.mft (raw, json) Hash identifier: jZk6KR+02FT066aeIE79OdNPZ93TBsAXiJbUEJaGq88= Subject key identifier: A7:72:6B:06:04:32:95:30:23:83:B5:3F:7E:92:97:61:C2:4F:C1:61 Authority key identifier: C7:CD:FA:6B:C0:67:C7:A4:95:91:9A:AD:0E:26:18:0B:86:35:39:54 Certificate issuer: /CN=C7CDFA6BC067C7A495919AAD0E26180B86353954 Certificate serial: 25670BB0161CFA18AE0A09A96463B17AC497CE46 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 16:57:03 +0000 Manifest this update: Wed 23 Sep 2026 16:52:03 +0000 Manifest next update: Thu 24 Sep 2026 19:34:03 +0000 Files and hashes: 1: 3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa (hash: 0iLOUhfmWoIB+lxiDVooYY80mjdqjMFktAq2sVeC4n8=) 2: 3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa (hash: pSVzT2vio9bf7LUyfGmLirM4hVE1PKigRBwf0BFNg8U=) 3: 3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa (hash: LgH9oXeBcuQFeopdycllX9ZwgANBmbEdowpLFMRb868=) 4: 323030313a6466313a366263303a3a2f34382d3438203d3e20313431363036.roa (hash: I79Q34o1f2vuvFl40hYKqigyJvsHaAMckuqi63LU5sQ=) 5: C7CDFA6BC067C7A495919AAD0E26180B86353954.crl (hash: YrhcaMllgWsJwKbBdtwk9PQrJzpPXFg9pjtLK/2z0+E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.crl rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:67:0b:b0:16:1c:fa:18:ae:0a:09:a9:64:63:b1:7a:c4:97:ce:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7CDFA6BC067C7A495919AAD0E26180B86353954 Validity Not Before: Sep 23 16:52:03 2026 GMT Not After : Sep 24 19:34:03 2026 GMT Subject: CN=A7726B06043295302383B53F7E929761C24FC161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:47:de:a6:92:ee:18:7d:f4:de:40:d3:86:6f: 89:bb:73:a9:74:b1:16:f6:ac:42:ac:c0:ca:7b:74: e3:b7:2c:a3:6a:83:95:ef:33:56:57:45:20:57:1f: 0d:6a:16:c3:8e:7e:52:46:54:ff:4a:ba:55:be:c4: 6f:e1:cb:1b:cd:3e:9d:b8:ac:2f:6f:c8:17:9e:62: 54:a3:c1:ad:63:5c:e7:1c:7b:89:3d:48:02:f3:cd: 5b:04:54:34:4f:39:87:1a:60:1c:6c:36:d0:24:53: 99:4d:1d:6f:d6:b4:fb:49:95:7a:a9:43:14:39:84: 99:45:78:bf:08:a0:8c:f1:d0:fe:d1:b1:35:6f:c5: 04:93:e0:97:3f:2d:fe:69:72:1d:2f:12:a7:60:34: c7:ec:42:b6:54:8d:29:68:2d:4d:db:12:0d:f1:13: a5:3b:c7:49:08:60:8d:ea:9c:7e:d4:59:b0:a8:7f: 24:db:d2:53:2a:51:33:c9:0f:ba:cf:6d:a7:0b:40: 19:99:f2:b4:45:83:ba:3d:94:4e:6e:9f:c7:bb:26: de:40:da:f2:d0:e6:d9:3f:4d:43:cd:5c:70:1f:ac: bf:46:cf:25:33:6b:13:13:1f:37:8b:b9:98:27:c7: ca:6e:c0:9e:0f:64:0b:57:9d:c6:67:d5:15:22:f0: ef:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:72:6B:06:04:32:95:30:23:83:B5:3F:7E:92:97:61:C2:4F:C1:61 X509v3 Authority Key Identifier: keyid:C7:CD:FA:6B:C0:67:C7:A4:95:91:9A:AD:0E:26:18:0B:86:35:39:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:7a:c5:79:fe:9e:8a:ff:9f:52:3a:97:dc:ca:58:f1:3c:5c: cb:6d:4d:aa:df:f7:3d:9d:22:d8:e0:d1:a3:6a:22:dd:7d:f0: c9:6c:78:d9:4e:10:b6:47:da:92:80:5e:be:30:91:3f:a2:64: 96:7a:32:ec:3e:1d:1d:16:bc:e8:9f:1a:9b:41:1d:b2:0c:27: 77:54:d1:dd:9c:29:2e:bd:84:3c:28:3b:fa:27:1c:62:76:94: 8c:97:e3:ca:ea:83:1c:8f:a3:bb:e0:a9:58:c2:6e:48:bf:6c: d1:d8:97:8c:73:d4:e4:5b:0a:d3:45:18:26:f2:22:b7:ee:44: c2:aa:51:b7:84:81:bf:52:61:12:99:03:a5:5b:64:74:63:c8: a9:24:42:12:9c:96:bb:12:b2:e7:63:fc:0c:ee:00:0f:58:b2: 69:9d:60:5c:50:b2:55:88:3b:32:fb:94:d5:6c:93:72:97:1d: 34:3d:de:92:46:36:db:36:41:29:4c:c6:c3:b7:d0:40:07:66: 66:ca:dc:19:57:cf:d8:dc:f2:81:23:27:ed:d7:e3:8c:7f:7e: ce:df:73:e0:d8:6d:fd:aa:f2:3b:00:c6:b3:c3:ab:ea:85:21: 31:7d:ba:e4:24:5c:77:11:12:76:92:2b:8c:38:d1:b8:5f:5d: d9:cb:31:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJWcLsBYc+hiuCgmpZGOxesSXzkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdDREZBNkJDMDY3QzdBNDk1OTE5QUFEMEUyNjE4MEI4 NjM1Mzk1NDAeFw0yNjA5MjMxNjUyMDNaFw0yNjA5MjQxOTM0MDNaMDMxMTAvBgNV BAMTKEE3NzI2QjA2MDQzMjk1MzAyMzgzQjUzRjdFOTI5NzYxQzI0RkMxNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiR96mku4YffTeQNOGb4m7c6l0 sRb2rEKswMp7dOO3LKNqg5XvM1ZXRSBXHw1qFsOOflJGVP9KulW+xG/hyxvNPp24 rC9vyBeeYlSjwa1jXOcce4k9SALzzVsEVDRPOYcaYBxsNtAkU5lNHW/WtPtJlXqp QxQ5hJlFeL8IoIzx0P7RsTVvxQST4Jc/Lf5pch0vEqdgNMfsQrZUjSloLU3bEg3x E6U7x0kIYI3qnH7UWbCofyTb0lMqUTPJD7rPbacLQBmZ8rRFg7o9lE5un8e7Jt5A 2vLQ5tk/TUPNXHAfrL9GzyUzaxMTHzeLuZgnx8puwJ4PZAtXncZn1RUi8O8pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp3JrBgQylTAjg7U/fpKXYcJPwWEwHwYDVR0j BBgwFoAUx836a8Bnx6SVkZqtDiYYC4Y1OVQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ2NGJmNmEtNDMwMi00NjBmLTk2NjktMDlhNTBhNzNhZjFhLzAvQzdDREZBNkJD MDY3QzdBNDk1OTE5QUFEMEUyNjE4MEI4NjM1Mzk1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DN0NERkE2QkMwNjdDN0E0OTU5MTlBQUQwRTI2MTgwQjg2MzUz OTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ2NGJmNmEtNDMwMi00NjBmLTk2 NjktMDlhNTBhNzNhZjFhLzAvQzdDREZBNkJDMDY3QzdBNDk1OTE5QUFEMEUyNjE4 MEI4NjM1Mzk1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC56xXn+nor/n1I6l9zKWPE8XMttTarf9z2d Itjg0aNqIt198MlseNlOELZH2pKAXr4wkT+iZJZ6Muw+HR0WvOifGptBHbIMJ3dU 0d2cKS69hDwoO/onHGJ2lIyX48rqgxyPo7vgqVjCbki/bNHYl4xz1ORbCtNFGCby IrfuRMKqUbeEgb9SYRKZA6VbZHRjyKkkQhKclrsSsudj/AzuAA9YsmmdYFxQslWI OzL7lNVsk3KXHTQ93pJGNts2QSlMxsO30EAHZmbK3BlXz9jc8oEjJ+3X44x/fs7f c+DYbf2q8jsAxrPDq+qFITF9uuQkXHcREnaSK4w40bhfXdnLMXU= -----END CERTIFICATE-----Generated at Thu Sep 24 08:16:09 2026 by rpki-client