$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.mft File: 7CB53701F9A5E6CBB24596105D30044B647BBC84.mft (raw, json) Hash identifier: QOplOGSSjhr+rr07RNGx1nzOhwGJREl6m69HmJIowy0= Subject key identifier: 97:DF:32:7B:C9:A8:55:D0:CF:70:16:F3:A2:E2:F6:D0:7F:8E:82:84 Authority key identifier: 7C:B5:37:01:F9:A5:E6:CB:B2:45:96:10:5D:30:04:4B:64:7B:BC:84 Certificate issuer: /CN=7CB53701F9A5E6CBB24596105D30044B647BBC84 Certificate serial: 3A6DF08F6C78E6AB22832B5712A9B0F4E108108B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.mft Manifest number: C0 Signing time: Thu 24 Sep 2026 09:27:28 +0000 Manifest this update: Thu 24 Sep 2026 09:22:28 +0000 Manifest next update: Fri 25 Sep 2026 10:40:28 +0000 Files and hashes: 1: 7CB53701F9A5E6CBB24596105D30044B647BBC84.crl (hash: 0UcR5QQdV9LKivqTI5916U32E5bIdc82QZ9K6p64n/E=) 2: 3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa (hash: HK/N3jJS+JzZ86LurZHVJQHoGpVJnd2NzI7n/JqdXTw=) 3: 3130332e3135332e34322e302f32332d3234203d3e20313430343434.roa (hash: h8+dhgJZAVYl5vhc9z1CI3Q73pMj8I+xGu7T9NSMlIk=) 4: 3130332e3135332e34322e302f32342d3234203d3e20313430343434.roa (hash: unGiwDFaGahe7tpg1Hffc3jKyo8NlWLKseBqlIlvILo=) 5: 323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa (hash: xUUMr5UQK8a0ejdjAN7lpyb+LyL+cS2jPdq1m4lezwg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.crl rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:6d:f0:8f:6c:78:e6:ab:22:83:2b:57:12:a9:b0:f4:e1:08:10:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB53701F9A5E6CBB24596105D30044B647BBC84 Validity Not Before: Sep 24 09:22:28 2026 GMT Not After : Sep 25 10:40:28 2026 GMT Subject: CN=97DF327BC9A855D0CF7016F3A2E2F6D07F8E8284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:63:fc:4c:81:fe:5c:da:e4:61:a3:6b:61:de: cd:9f:9d:bb:cb:e2:43:5d:62:9a:ed:34:52:4a:d5: ed:f2:34:c2:2c:aa:64:1e:97:05:8b:5a:c5:c2:f2: e6:5d:61:b5:7d:ba:d0:61:6e:4e:e5:9a:a9:40:39: 8e:5e:87:92:fe:e8:61:47:58:b7:ee:96:6b:43:cf: e7:e8:12:97:b0:70:e4:f6:ca:d0:fd:43:55:46:7c: ad:55:b0:5a:1b:58:27:6b:63:91:a7:54:78:2b:45: e4:be:19:12:f7:7e:3f:7d:a1:6c:27:a4:39:44:83: 8f:78:cb:eb:b5:1b:ee:4b:44:18:7f:e2:7f:e0:96: 9d:60:e7:57:b3:31:c5:ed:80:e3:e9:c9:73:d9:27: 59:8d:fc:c5:7b:c0:b2:cb:e2:6c:a9:30:80:66:a2: 9c:37:db:39:32:95:2d:d8:ea:4b:39:83:da:ad:52: 2c:99:21:03:81:cf:c9:e8:3d:93:bc:11:f4:b9:4a: d8:76:41:4a:c3:29:cc:65:07:d2:40:9c:ec:aa:e0: d5:23:7c:00:cf:9c:de:3f:9f:82:74:c0:f4:8e:7f: 00:e4:c1:e6:1e:e9:ac:9d:e8:8e:f8:0e:e2:cf:e3: da:42:e5:88:49:19:6c:15:78:71:2a:d3:3a:f4:ea: c7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DF:32:7B:C9:A8:55:D0:CF:70:16:F3:A2:E2:F6:D0:7F:8E:82:84 X509v3 Authority Key Identifier: keyid:7C:B5:37:01:F9:A5:E6:CB:B2:45:96:10:5D:30:04:4B:64:7B:BC:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:93:d1:09:1d:c2:47:e7:30:7f:ab:78:aa:ef:96:5b:d2:92: 07:a4:dd:f3:27:55:ea:2c:1a:d4:2e:3f:af:fb:92:5a:6c:e1: a1:aa:a5:44:3d:59:92:bb:f7:3e:04:f4:32:04:2e:26:4b:5f: 7b:79:19:a2:ce:98:f6:f4:5a:d7:ab:e0:f7:44:df:31:2b:69: 8a:78:81:20:69:b1:3d:13:87:a3:6d:dd:df:5d:b9:00:00:4f: 35:65:72:ca:cc:0e:13:a9:8c:96:33:16:be:d5:67:ab:e9:ed: 77:83:8c:da:0f:4b:d3:e6:9c:b5:b1:ad:f6:5f:fa:1a:d5:c0: 04:15:76:34:6b:6c:73:9c:bd:e3:40:6b:43:6e:e9:32:f1:f9: cc:06:57:d0:60:54:0f:67:d4:9e:7b:41:43:2b:b3:83:54:47: 53:8f:95:22:50:19:0f:13:19:78:4c:e6:48:37:12:d0:b9:fa: 8c:ca:c1:27:63:9a:cd:95:91:6d:ad:bd:89:14:f0:57:e1:32: 7f:a6:32:20:d7:49:5e:25:97:88:18:c5:44:9b:6e:dc:6e:53: b1:4c:07:e6:5b:fe:b9:5f:d8:13:c7:17:c8:84:95:02:da:7f: 38:e0:e9:f8:39:c2:33:d3:21:66:09:d4:9c:da:c7:42:c3:45: 38:09:08:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOm3wj2x45qsigytXEqmw9OEIEIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCNTM3MDFGOUE1RTZDQkIyNDU5NjEwNUQzMDA0NEI2 NDdCQkM4NDAeFw0yNjA5MjQwOTIyMjhaFw0yNjA5MjUxMDQwMjhaMDMxMTAvBgNV BAMTKDk3REYzMjdCQzlBODU1RDBDRjcwMTZGM0EyRTJGNkQwN0Y4RTgyODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnY/xMgf5c2uRho2th3s2fnbvL 4kNdYprtNFJK1e3yNMIsqmQelwWLWsXC8uZdYbV9utBhbk7lmqlAOY5eh5L+6GFH WLfulmtDz+foEpewcOT2ytD9Q1VGfK1VsFobWCdrY5GnVHgrReS+GRL3fj99oWwn pDlEg494y+u1G+5LRBh/4n/glp1g51ezMcXtgOPpyXPZJ1mN/MV7wLLL4mypMIBm opw32zkylS3Y6ks5g9qtUiyZIQOBz8noPZO8EfS5Sth2QUrDKcxlB9JAnOyq4NUj fADPnN4/n4J0wPSOfwDkweYe6ayd6I74DuLP49pC5YhJGWwVeHEq0zr06sdXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl98ye8moVdDPcBbzouL20H+OgoQwHwYDVR0j BBgwFoAUfLU3Afml5suyRZYQXTAES2R7vIQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzcxMTU1OWUtZDVlYy00YzE5LWIzMzUtZWUyOWRkZmJiOWQ1LzAvN0NCNTM3MDFG OUE1RTZDQkIyNDU5NjEwNUQzMDA0NEI2NDdCQkM4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Q0I1MzcwMUY5QTVFNkNCQjI0NTk2MTA1RDMwMDQ0QjY0N0JC Qzg0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzcxMTU1OWUtZDVlYy00YzE5LWIz MzUtZWUyOWRkZmJiOWQ1LzAvN0NCNTM3MDFGOUE1RTZDQkIyNDU5NjEwNUQzMDA0 NEI2NDdCQkM4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADaT0QkdwkfnMH+reKrvllvSkgek3fMnVeos GtQuP6/7klps4aGqpUQ9WZK79z4E9DIELiZLX3t5GaLOmPb0Wter4PdE3zEraYp4 gSBpsT0Th6Nt3d9duQAATzVlcsrMDhOpjJYzFr7VZ6vp7XeDjNoPS9PmnLWxrfZf +hrVwAQVdjRrbHOcveNAa0Nu6TLx+cwGV9BgVA9n1J57QUMrs4NUR1OPlSJQGQ8T GXhM5kg3EtC5+ozKwSdjms2VkW2tvYkU8FfhMn+mMiDXSV4ll4gYxUSbbtxuU7FM B+Zb/rlf2BPHF8iElQLafzjg6fg5wjPTIWYJ1Jzax0LDRTgJCAA= -----END CERTIFICATE-----Generated at Thu Sep 24 19:02:34 2026 by rpki-client