$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.mft File: A7B168CE466AE74446B650CF824618958D3868FC.mft (raw, json) Hash identifier: AP00DA+D8nUtyxtaSVs1E/3aNZqV3gnEOHM7ugEnXug= Subject key identifier: 41:64:B3:FC:9C:2C:12:BD:9C:17:3E:3D:AC:91:5B:BE:2F:5E:02:00 Authority key identifier: A7:B1:68:CE:46:6A:E7:44:46:B6:50:CF:82:46:18:95:8D:38:68:FC Certificate issuer: /CN=A7B168CE466AE74446B650CF824618958D3868FC Certificate serial: 0D43A4150DD5212710F6CF47D39BD3ABA837DE4F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7B168CE466AE74446B650CF824618958D3868FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 05:27:25 +0000 Manifest this update: Thu 24 Sep 2026 05:22:25 +0000 Manifest next update: Fri 25 Sep 2026 07:57:25 +0000 Files and hashes: 1: 3130332e3136332e3232382e302f32342d3234203d3e20313431383935.roa (hash: urKuF7qIfembxoDL1G+OM4hGHzA+dqqgmvFYbfpX2IQ=) 2: A7B168CE466AE74446B650CF824618958D3868FC.crl (hash: LoTjqHwBcq58OJL0LUEGSh/dXnHY4N0oec+82RB7Lqg=) 3: 3130332e3136332e3232382e302f32332d3233203d3e20313431383935.roa (hash: kCAtVDp2awFC3xbza6XlA3+xlFRuKEHRN2FrGan864A=) 4: 3130332e3136332e3232392e302f32342d3234203d3e20313431383935.roa (hash: A6gvhW7lfvQRxs5cFOMF6l/Sth1dI8OrQvYNut71iwg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.crl rsync://rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7B168CE466AE74446B650CF824618958D3868FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:43:a4:15:0d:d5:21:27:10:f6:cf:47:d3:9b:d3:ab:a8:37:de:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7B168CE466AE74446B650CF824618958D3868FC Validity Not Before: Sep 24 05:22:25 2026 GMT Not After : Sep 25 07:57:25 2026 GMT Subject: CN=4164B3FC9C2C12BD9C173E3DAC915BBE2F5E0200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f3:74:21:37:82:8d:27:73:fc:ec:86:39:b2: e2:c4:f8:66:0c:75:57:ee:d0:1f:5e:5f:38:60:6b: ae:e3:bf:1a:5f:ac:44:0d:04:bc:b6:86:99:df:6b: 22:d1:2b:9c:06:38:dd:d0:47:fc:1c:9c:48:c2:d7: 82:7c:a3:b8:4b:92:9e:1d:89:70:12:d1:cc:02:c0: 3f:bf:4b:dc:c1:1f:69:7e:3c:3b:43:fd:77:9b:70: 50:af:4b:a5:cd:92:84:00:fe:7d:f7:8c:da:a8:74: 96:81:5d:dd:50:e4:68:75:cb:b6:91:26:f1:13:ec: 82:f4:35:63:4b:26:15:22:9a:73:63:a9:bd:c3:31: 14:c9:56:d5:05:ab:a5:87:78:d9:47:41:d4:6c:ee: 67:4c:78:47:58:91:25:59:e5:94:50:05:5a:e6:fb: c9:2e:6d:01:97:29:fa:8f:fe:d8:21:a7:ab:94:54: df:5a:4f:84:c1:af:1d:ff:9f:c5:95:91:64:17:97: 2e:c3:51:e6:52:bf:81:09:a9:a2:83:5e:73:0c:44: b4:01:99:54:0e:81:54:78:28:5e:36:11:b2:e6:59: 1e:fd:b1:45:f6:3d:49:c0:62:f0:a7:cc:1b:40:24: fb:dd:91:c7:a1:ef:88:e7:c3:08:2c:6d:93:72:08: 4a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:64:B3:FC:9C:2C:12:BD:9C:17:3E:3D:AC:91:5B:BE:2F:5E:02:00 X509v3 Authority Key Identifier: keyid:A7:B1:68:CE:46:6A:E7:44:46:B6:50:CF:82:46:18:95:8D:38:68:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7B168CE466AE74446B650CF824618958D3868FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:48:7b:fa:c6:da:36:ea:91:ef:bd:01:22:a3:41:cc:46:bf: be:af:8a:ca:49:f7:7e:6d:e7:53:7a:70:f5:94:26:10:04:3b: b4:6f:fc:d9:7e:c6:f1:31:90:96:ab:dc:66:18:72:5d:f6:61: df:cd:16:52:b4:ba:f9:19:18:2f:f3:0b:41:e7:42:43:68:d6: ff:43:ea:c1:c8:ed:ca:8c:43:04:c3:03:c2:34:8e:4c:28:37: b8:51:49:ad:98:bd:bc:9c:16:f3:e5:77:23:94:ff:23:04:c4: 7e:a6:5f:40:7d:08:69:07:f0:2f:31:1b:6c:46:2c:8b:dd:ea: a7:d8:4d:c9:d7:6e:2c:b0:b3:dc:94:58:7b:64:47:a3:e8:c7: 94:63:da:fc:ef:7a:6d:57:f5:7c:ec:cb:4e:98:8c:c4:a2:96: 3d:e3:8e:cc:ba:f3:ff:d7:dc:88:3e:c7:ad:9e:55:54:2e:c7: 37:09:6e:1c:f9:1f:fc:e7:40:cb:67:fa:4a:ee:67:f2:ec:66: 6f:b2:22:32:c8:1c:79:14:f4:65:95:83:e3:c9:e2:68:42:fc: 52:92:90:7d:26:16:65:cd:02:6a:b3:19:a7:9f:e6:01:6f:e4: d0:b4:3a:ea:09:c0:60:e6:80:17:d2:a6:76:e4:02:ec:c6:50: c2:69:4b:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDUOkFQ3VIScQ9s9H05vTq6g33k8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdCMTY4Q0U0NjZBRTc0NDQ2QjY1MENGODI0NjE4OTU4 RDM4NjhGQzAeFw0yNjA5MjQwNTIyMjVaFw0yNjA5MjUwNzU3MjVaMDMxMTAvBgNV BAMTKDQxNjRCM0ZDOUMyQzEyQkQ5QzE3M0UzREFDOTE1QkJFMkY1RTAyMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG83QhN4KNJ3P87IY5suLE+GYM dVfu0B9eXzhga67jvxpfrEQNBLy2hpnfayLRK5wGON3QR/wcnEjC14J8o7hLkp4d iXAS0cwCwD+/S9zBH2l+PDtD/XebcFCvS6XNkoQA/n33jNqodJaBXd1Q5Gh1y7aR JvET7IL0NWNLJhUimnNjqb3DMRTJVtUFq6WHeNlHQdRs7mdMeEdYkSVZ5ZRQBVrm +8kubQGXKfqP/tghp6uUVN9aT4TBrx3/n8WVkWQXly7DUeZSv4EJqaKDXnMMRLQB mVQOgVR4KF42EbLmWR79sUX2PUnAYvCnzBtAJPvdkceh74jnwwgsbZNyCErZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQWSz/JwsEr2cFz49rJFbvi9eAgAwHwYDVR0j BBgwFoAUp7FozkZq50RGtlDPgkYYlY04aPwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNkMGQ3ZmEtZDZmOC00YzIyLWI0OGEtNThiOGVkOGVkZGE3LzAvQTdCMTY4Q0U0 NjZBRTc0NDQ2QjY1MENGODI0NjE4OTU4RDM4NjhGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BN0IxNjhDRTQ2NkFFNzQ0NDZCNjUwQ0Y4MjQ2MTg5NThEMzg2 OEZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGNkMGQ3ZmEtZDZmOC00YzIyLWI0 OGEtNThiOGVkOGVkZGE3LzAvQTdCMTY4Q0U0NjZBRTc0NDQ2QjY1MENGODI0NjE4 OTU4RDM4NjhGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADlIe/rG2jbqke+9ASKjQcxGv76vispJ935t 51N6cPWUJhAEO7Rv/Nl+xvExkJar3GYYcl32Yd/NFlK0uvkZGC/zC0HnQkNo1v9D 6sHI7cqMQwTDA8I0jkwoN7hRSa2YvbycFvPldyOU/yMExH6mX0B9CGkH8C8xG2xG LIvd6qfYTcnXbiyws9yUWHtkR6Pox5Rj2vzvem1X9Xzsy06YjMSilj3jjsy68//X 3Ig+x62eVVQuxzcJbhz5H/znQMtn+kruZ/LsZm+yIjLIHHkU9GWVg+PJ4mhC/FKS kH0mFmXNAmqzGaef5gFv5NC0OuoJwGDmgBfSpnbkAuzGUMJpS7A= -----END CERTIFICATE-----Generated at Thu Sep 24 08:39:06 2026 by rpki-client