$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft File: C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft (raw, json) Hash identifier: h3mEKXDLXvF2n336hRDwdozPn+O1WUPqK+JoT/rd8DU= Subject key identifier: 9F:F9:D4:F0:08:D7:E6:D7:A7:E9:1B:8F:BC:E7:24:89:19:08:D2:CB Authority key identifier: C7:AF:EA:46:9B:71:F5:3F:5D:E5:7E:84:04:03:A9:F9:FE:D4:17:40 Certificate issuer: /CN=C7AFEA469B71F53F5DE57E840403A9F9FED41740 Certificate serial: 76710FF7D79D4538CD93AAB987EF7A512C5281DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 16:56:38 +0000 Manifest this update: Thu 24 Sep 2026 16:51:38 +0000 Manifest next update: Fri 25 Sep 2026 20:39:38 +0000 Files and hashes: 1: 3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa (hash: K7PbjaFE0zSsIAVA9HPV3S0+MEAkd6bF/CX8cBvwHhQ=) 2: 3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa (hash: U97xPJjDuxOPre3lfJTSP17ykfoHncWKjzWt6fvO8OU=) 3: C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl (hash: isKimSwsdFRVUWoB+XYo7pkbsbaNBeEFOmpyij/A0N0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 20:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:71:0f:f7:d7:9d:45:38:cd:93:aa:b9:87:ef:7a:51:2c:52:81:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7AFEA469B71F53F5DE57E840403A9F9FED41740 Validity Not Before: Sep 24 16:51:38 2026 GMT Not After : Sep 25 20:39:38 2026 GMT Subject: CN=9FF9D4F008D7E6D7A7E91B8FBCE724891908D2CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:16:64:e9:5b:45:ae:d8:ac:9c:62:dc:8e:20: ba:70:15:de:46:88:7c:2d:26:0b:55:89:b7:f4:9b: 9b:de:d9:33:b6:48:4d:e9:c0:e8:02:8d:7b:64:59: 28:d3:47:aa:a2:4a:74:1c:c4:13:b4:99:68:53:e0: 87:f6:c7:b9:80:78:98:f6:20:71:a5:31:cb:57:05: f0:31:9c:4d:58:98:1c:f9:fe:d5:28:79:ae:7a:38: b7:08:6f:58:61:9e:13:45:cc:b0:8d:b5:26:42:ef: 10:ba:66:c3:f4:c1:52:4d:e9:40:09:cf:97:0b:f5: 8a:30:22:29:96:84:0a:06:e9:b4:0d:5e:b1:2e:da: 96:4e:51:a0:0a:f4:77:2d:b2:23:0c:ab:73:1d:a7: b9:e8:f4:b1:2b:41:f4:7f:81:e0:7f:11:8d:a5:0d: e5:2b:ef:11:ec:81:46:d8:d0:18:23:20:5f:a4:2d: 60:4f:8b:06:56:3e:02:33:22:40:06:e7:12:bb:8a: 76:2d:11:92:55:f7:d2:11:89:a7:7e:01:39:7b:65: 43:82:c9:87:12:00:26:c9:22:02:be:dc:a0:e5:dc: b3:9e:ea:d8:63:0e:30:f7:d7:6a:64:16:26:bd:34: 11:05:db:c8:3e:b9:77:14:fe:f1:d1:da:f2:a6:21: 80:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F9:D4:F0:08:D7:E6:D7:A7:E9:1B:8F:BC:E7:24:89:19:08:D2:CB X509v3 Authority Key Identifier: keyid:C7:AF:EA:46:9B:71:F5:3F:5D:E5:7E:84:04:03:A9:F9:FE:D4:17:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:39:cd:be:c7:b8:62:08:57:49:f2:59:c0:45:d5:ab:a0:bd: 35:ba:cb:f7:95:19:ac:7e:e3:5c:13:a4:b8:a1:76:72:a8:f4: 27:de:04:32:da:7b:67:54:ad:a9:35:8a:33:0e:6a:f1:19:ca: 58:0c:79:6c:f4:f7:9e:0b:a2:be:5d:a6:bf:c0:02:e1:ea:e8: 2a:b8:4d:32:d9:61:15:5e:1a:ea:62:62:d9:7b:60:16:7e:d1: 5b:ca:40:24:fa:17:16:01:b0:8b:b4:44:95:1f:16:83:cd:b1: fe:34:fd:ac:f9:05:5a:e5:18:40:c8:41:ca:e0:fc:88:78:c9: 98:c5:9e:37:b6:d4:83:7b:5c:46:2a:c4:04:2e:94:ac:a6:ab: 63:26:ee:31:90:9d:28:61:63:47:c7:4a:d4:62:c1:cb:8a:8e: 53:59:70:fd:e5:e4:f4:07:72:11:08:e3:39:9d:6e:17:48:01: 8b:d5:58:d9:bf:83:48:f9:32:30:62:16:25:9e:25:76:e0:7a: b9:52:3e:5c:e4:e9:a6:c7:f6:d1:26:13:8c:9d:90:60:ce:ee: fd:cf:ce:67:90:fb:d2:e8:b9:93:11:8f:a5:a0:f4:d9:4b:6d: 6b:68:d7:e9:1e:74:18:21:97:23:bd:bf:7d:da:d8:4e:ff:15: 65:1d:80:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdnEP99edRTjNk6q5h+96USxSgd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdBRkVBNDY5QjcxRjUzRjVERTU3RTg0MDQwM0E5RjlG RUQ0MTc0MDAeFw0yNjA5MjQxNjUxMzhaFw0yNjA5MjUyMDM5MzhaMDMxMTAvBgNV BAMTKDlGRjlENEYwMDhEN0U2RDdBN0U5MUI4RkJDRTcyNDg5MTkwOEQyQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQFmTpW0Wu2KycYtyOILpwFd5G iHwtJgtVibf0m5ve2TO2SE3pwOgCjXtkWSjTR6qiSnQcxBO0mWhT4If2x7mAeJj2 IHGlMctXBfAxnE1YmBz5/tUoea56OLcIb1hhnhNFzLCNtSZC7xC6ZsP0wVJN6UAJ z5cL9YowIimWhAoG6bQNXrEu2pZOUaAK9HctsiMMq3Mdp7no9LErQfR/geB/EY2l DeUr7xHsgUbY0BgjIF+kLWBPiwZWPgIzIkAG5xK7inYtEZJV99IRiad+ATl7ZUOC yYcSACbJIgK+3KDl3LOe6thjDjD312pkFia9NBEF28g+uXcU/vHR2vKmIYBjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn/nU8AjX5ten6RuPvOckiRkI0sswHwYDVR0j BBgwFoAUx6/qRptx9T9d5X6EBAOp+f7UF0AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2FjNGQ3NWUtM2RhOC00OTkwLTgwNDItN2UwZWNmNTlmMTNiLzAvQzdBRkVBNDY5 QjcxRjUzRjVERTU3RTg0MDQwM0E5RjlGRUQ0MTc0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DN0FGRUE0NjlCNzFGNTNGNURFNTdFODQwNDAzQTlGOUZFRDQx NzQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2FjNGQ3NWUtM2RhOC00OTkwLTgw NDItN2UwZWNmNTlmMTNiLzAvQzdBRkVBNDY5QjcxRjUzRjVERTU3RTg0MDQwM0E5 RjlGRUQ0MTc0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALo5zb7HuGIIV0nyWcBF1augvTW6y/eVGax+ 41wTpLihdnKo9CfeBDLae2dUrak1ijMOavEZylgMeWz0954Lor5dpr/AAuHq6Cq4 TTLZYRVeGupiYtl7YBZ+0VvKQCT6FxYBsIu0RJUfFoPNsf40/az5BVrlGEDIQcrg /Ih4yZjFnje21IN7XEYqxAQulKymq2Mm7jGQnShhY0fHStRiwcuKjlNZcP3l5PQH chEI4zmdbhdIAYvVWNm/g0j5MjBiFiWeJXbgerlSPlzk6abH9tEmE4ydkGDO7v3P zmeQ+9LouZMRj6Wg9NlLbWto1+kedBghlyO9v33a2E7/FWUdgPo= -----END CERTIFICATE-----Generated at Fri Sep 25 12:44:04 2026 by rpki-client