$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.mft File: 7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.mft (raw, json) Hash identifier: XERd1jiWuwI/vQSDVtWerV1SL5tkBJN8WJ23S6eAp3c= Subject key identifier: 36:AD:9E:46:02:EB:DA:B6:5C:3F:1D:1D:E2:09:57:7D:FA:96:AB:B2 Authority key identifier: 7C:58:06:FF:2C:62:AF:2C:C9:65:E8:88:A4:5E:C4:BA:4F:BF:26:C2 Certificate issuer: /CN=7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2 Certificate serial: 51C5A23E17DAF0850B6D28BDBC43AA4CFECC0DD3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.mft Manifest number: BF Signing time: Wed 23 Sep 2026 17:42:51 +0000 Manifest this update: Wed 23 Sep 2026 17:37:51 +0000 Manifest next update: Thu 24 Sep 2026 19:51:51 +0000 Files and hashes: 1: 3131372e35332e34342e302f32322d3234203d3e203538333937.roa (hash: WWLsIusOSv+8Jaml9M27MqcNs+gTxLH2Htlcij04EDM=) 2: 7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.crl (hash: dYJ6fYmjW89N+ZDO6bme0MLgFJouE1V38ypn1tBl+kA=) 3: 3130332e34312e3138382e302f32322d3234203d3e203538333937.roa (hash: KuY5wEri7u4war8JSwekkctUjVu/WQ12XivwVmrP91A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.crl rsync://rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:51:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:c5:a2:3e:17:da:f0:85:0b:6d:28:bd:bc:43:aa:4c:fe:cc:0d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2 Validity Not Before: Sep 23 17:37:51 2026 GMT Not After : Sep 24 19:51:51 2026 GMT Subject: CN=36AD9E4602EBDAB65C3F1D1DE209577DFA96ABB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:44:5d:7e:49:32:2a:70:58:c6:39:82:86:94: 42:04:1b:e6:15:a3:33:d5:70:0c:22:d3:13:6f:9f: 3f:7d:77:4d:7f:f1:7e:94:3a:9a:28:dc:7f:eb:93: 66:3c:b4:e7:23:3c:6b:65:29:64:d1:8a:41:55:71: e7:ee:48:e2:17:05:8a:e6:66:a5:30:93:b6:1e:02: ee:26:b8:64:45:31:be:dc:ad:8b:49:15:bf:b5:23: 42:34:9f:65:ec:a0:0a:92:a0:78:87:ed:1f:31:1e: cc:fb:aa:25:17:3e:cf:ac:9d:50:4c:b3:67:25:96: 92:80:1a:ac:31:f8:7e:c1:8e:5d:84:41:2a:32:09: b2:0b:c4:06:39:64:d5:37:d5:13:3c:ca:d9:cc:c1: 2d:3e:59:16:e1:c6:9e:00:f6:d5:0e:49:cf:25:b4: e7:c9:7a:f0:36:3c:e2:0e:29:ae:5b:cc:e5:be:14: 0d:5e:ec:70:cc:e0:ef:e1:b9:37:a3:1a:94:9c:76: b5:11:51:82:f3:1d:46:a1:2b:7e:d7:24:11:b5:95: 5f:ca:e6:36:30:32:38:7b:aa:ea:4d:df:b1:1b:60: 7c:8a:51:f4:8d:07:b8:24:79:06:ba:ff:61:2e:5d: 29:ed:13:f5:33:a4:da:59:a6:32:ba:67:0e:83:59: 5d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:AD:9E:46:02:EB:DA:B6:5C:3F:1D:1D:E2:09:57:7D:FA:96:AB:B2 X509v3 Authority Key Identifier: keyid:7C:58:06:FF:2C:62:AF:2C:C9:65:E8:88:A4:5E:C4:BA:4F:BF:26:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:23:36:aa:ea:2e:78:6f:ef:e6:12:2a:af:45:c8:d1:69:7b: fc:b5:01:0b:05:0c:93:8d:e6:12:8b:43:29:19:f3:bd:a6:ce: de:a7:5b:ff:04:1f:ee:f9:d0:90:88:09:35:74:e2:15:0a:06: b7:3c:89:92:b1:3f:1e:9f:cd:6e:d5:bf:06:02:72:0a:45:93: c1:0a:89:6b:be:81:7b:45:c6:08:e1:f0:e8:c8:1a:74:49:19: 8d:32:a5:54:3f:89:b7:ae:3b:ef:61:6f:0d:42:b0:09:8a:5b: 15:35:c5:ec:3a:70:11:3b:76:cf:d8:ed:e6:9b:49:b3:6a:d3: 6c:36:59:4d:01:e3:f4:82:fd:d3:18:93:f4:a4:c7:16:bc:88: 86:4c:db:f3:11:79:4a:70:40:63:f2:e0:73:d1:6b:8a:f9:bc: 96:a6:a2:8b:e3:84:ec:ac:6f:80:94:45:55:36:11:4b:09:68: 51:d5:0e:d1:70:bb:f1:59:58:6e:0c:ff:c7:e5:14:46:be:e7: 66:51:7e:fa:a3:ef:26:c0:34:f9:cd:f8:5c:d8:38:0c:47:ec: 56:36:37:3b:bf:37:e0:03:99:09:c7:3e:02:30:55:b9:c9:29: 1d:1c:6d:16:66:01:c6:d0:27:9c:c5:fa:80:e3:bb:6f:e1:da: 52:37:15:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUcWiPhfa8IULbSi9vEOqTP7MDdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M1ODA2RkYyQzYyQUYyQ0M5NjVFODg4QTQ1RUM0QkE0 RkJGMjZDMjAeFw0yNjA5MjMxNzM3NTFaFw0yNjA5MjQxOTUxNTFaMDMxMTAvBgNV BAMTKDM2QUQ5RTQ2MDJFQkRBQjY1QzNGMUQxREUyMDk1NzdERkE5NkFCQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmRF1+STIqcFjGOYKGlEIEG+YV ozPVcAwi0xNvnz99d01/8X6UOpoo3H/rk2Y8tOcjPGtlKWTRikFVcefuSOIXBYrm ZqUwk7YeAu4muGRFMb7crYtJFb+1I0I0n2XsoAqSoHiH7R8xHsz7qiUXPs+snVBM s2cllpKAGqwx+H7Bjl2EQSoyCbILxAY5ZNU31RM8ytnMwS0+WRbhxp4A9tUOSc8l tOfJevA2POIOKa5bzOW+FA1e7HDM4O/huTejGpScdrURUYLzHUahK37XJBG1lV/K 5jYwMjh7qupN37EbYHyKUfSNB7gkeQa6/2EuXSntE/UzpNpZpjK6Zw6DWV1/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNq2eRgLr2rZcPx0d4glXffqWq7IwHwYDVR0j BBgwFoAUfFgG/yxiryzJZeiIpF7Euk+/JsIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Y0OTljNTYtYTI0Ni00ZDE4LWJlODYtZjQ2MWQ4ZjU1OWM4LzAvN0M1ODA2RkYy QzYyQUYyQ0M5NjVFODg4QTQ1RUM0QkE0RkJGMjZDMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QzU4MDZGRjJDNjJBRjJDQzk2NUU4ODhBNDVFQzRCQTRGQkYy NkMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Y0OTljNTYtYTI0Ni00ZDE4LWJl ODYtZjQ2MWQ4ZjU1OWM4LzAvN0M1ODA2RkYyQzYyQUYyQ0M5NjVFODg4QTQ1RUM0 QkE0RkJGMjZDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIjNqrqLnhv7+YSKq9FyNFpe/y1AQsFDJON 5hKLQykZ872mzt6nW/8EH+750JCICTV04hUKBrc8iZKxPx6fzW7VvwYCcgpFk8EK iWu+gXtFxgjh8OjIGnRJGY0ypVQ/ibeuO+9hbw1CsAmKWxU1xew6cBE7ds/Y7eab SbNq02w2WU0B4/SC/dMYk/Skxxa8iIZM2/MReUpwQGPy4HPRa4r5vJamoovjhOys b4CURVU2EUsJaFHVDtFwu/FZWG4M/8flFEa+52ZRfvqj7ybANPnN+FzYOAxH7FY2 Nzu/N+ADmQnHPgIwVbnJKR0cbRZmAcbQJ5zF+oDju2/h2lI3FU0= -----END CERTIFICATE-----Generated at Thu Sep 24 06:04:25 2026 by rpki-client