$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft File: 7BEEB290E9254E766A7D8C3B216F0785206617EF.mft (raw, json) Hash identifier: LUjEJ/g+bFcfFbozofb4u2IjdcTdmEYCkKL+ik0VqTg= Subject key identifier: 5A:9D:E1:43:F1:D6:D4:AF:B5:8E:05:FF:78:E6:65:CB:9F:A9:42:97 Authority key identifier: 7B:EE:B2:90:E9:25:4E:76:6A:7D:8C:3B:21:6F:07:85:20:66:17:EF Certificate issuer: /CN=7BEEB290E9254E766A7D8C3B216F0785206617EF Certificate serial: 491A98460691A1940A4E5DF618F5F3CE8F239FF2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 10:13:19 +0000 Manifest this update: Thu 24 Sep 2026 10:08:19 +0000 Manifest next update: Fri 25 Sep 2026 10:23:19 +0000 Files and hashes: 1: 3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa (hash: bW6EtF3Vlqjb0ua0UMwhPPX9SMPnrKmlHFzlUxuua+k=) 2: 3136302e32352e3132302e302f32342d3234203d3e20313533303632.roa (hash: 3tpzoG5Hhn3R6GUMX6zsEklRDaeeeAfN54reFvu6a6c=) 3: 7BEEB290E9254E766A7D8C3B216F0785206617EF.crl (hash: q6MziKuZ5p6gBSa//YuUaxmue9s8SCW4oPUJlMkTx9w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.crl rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:23:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:1a:98:46:06:91:a1:94:0a:4e:5d:f6:18:f5:f3:ce:8f:23:9f:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7BEEB290E9254E766A7D8C3B216F0785206617EF Validity Not Before: Sep 24 10:08:19 2026 GMT Not After : Sep 25 10:23:19 2026 GMT Subject: CN=5A9DE143F1D6D4AFB58E05FF78E665CB9FA94297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e3:18:7a:60:63:fe:54:78:8f:93:82:73:06: 0e:ce:b5:ce:9d:84:f7:8d:58:2e:0b:b7:6e:61:eb: e9:86:0b:53:64:a0:6a:e3:17:43:da:79:4b:4f:d2: d0:aa:20:23:21:bd:3b:45:2e:ef:2d:25:53:fa:36: f7:3f:fb:f3:d7:f5:33:be:97:50:52:41:43:26:7f: 6e:96:b1:cd:0f:14:ab:92:b6:b9:2d:9e:1c:5e:fe: 9f:37:a2:94:62:f6:3e:2d:68:f9:1c:d8:be:10:fe: a2:1a:cf:63:a7:c9:e8:3d:1d:e3:eb:91:2e:e4:3c: ef:df:dc:36:90:58:19:3c:0d:44:ff:e7:1f:a1:5f: 30:7a:4a:c3:02:5b:a4:05:9c:c6:7e:73:8c:e0:0d: 34:b9:66:01:a5:ce:3f:53:ae:8b:6a:73:74:60:02: 83:b2:1a:7c:53:02:28:d6:19:66:98:c4:ae:6f:47: 4b:64:0b:62:e5:1a:8d:2f:af:5a:b5:de:b5:c3:7c: 06:0d:db:e3:b7:86:3a:c0:3a:19:6a:59:fc:24:16: df:90:6f:2b:6e:50:d9:f2:e7:c3:6d:3f:61:c8:ca: d4:fb:bf:df:64:26:e5:e5:aa:af:c6:f9:88:8a:59: 3a:e1:e8:4e:1e:17:c7:97:64:d5:19:d6:fc:04:39: 2e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9D:E1:43:F1:D6:D4:AF:B5:8E:05:FF:78:E6:65:CB:9F:A9:42:97 X509v3 Authority Key Identifier: keyid:7B:EE:B2:90:E9:25:4E:76:6A:7D:8C:3B:21:6F:07:85:20:66:17:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:89:35:f1:15:86:f3:7f:48:c7:23:22:1a:b6:fb:e2:66:a0: 7a:e4:a4:a2:37:42:4a:dc:5c:e7:71:dd:55:06:f0:a5:9c:c2: 8f:60:f7:b3:f6:61:3a:a0:54:5e:e2:78:58:e6:d8:c2:da:63: af:c1:e5:75:6e:89:1c:c0:86:e7:5a:a3:b3:49:bf:d2:0c:28: be:e2:ea:17:8e:d8:c1:5f:b3:59:50:45:94:77:54:a0:0f:02: 34:a3:de:f6:fb:30:4e:02:a1:b4:96:1e:37:65:5b:c9:a6:88: 27:41:73:0a:f2:d4:93:83:fa:8e:58:60:c1:f9:97:c4:12:3d: f9:b4:13:a0:31:35:5a:4c:bf:f8:63:f5:e2:c5:c2:07:2d:56: f0:16:8a:39:3f:b5:7c:9d:86:1b:fc:6d:f9:b4:41:a4:f9:1c: d0:0f:1d:b9:ac:e1:78:47:97:72:2a:ea:03:a4:64:78:d2:9d: f6:83:2f:09:fa:20:cb:b3:9f:43:a3:c0:94:3d:7c:18:9a:21: 78:1f:29:45:33:85:89:e8:ca:5f:e1:62:a3:97:d7:f1:4b:29: a4:f6:92:ca:52:37:0d:fd:26:9d:eb:dd:56:b9:8b:ea:57:bb: 5b:bb:84:5d:f8:ee:55:22:cb:37:48:8c:73:15:64:1a:a3:2f: 72:b9:24:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSRqYRgaRoZQKTl32GPXzzo8jn/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0JFRUIyOTBFOTI1NEU3NjZBN0Q4QzNCMjE2RjA3ODUy MDY2MTdFRjAeFw0yNjA5MjQxMDA4MTlaFw0yNjA5MjUxMDIzMTlaMDMxMTAvBgNV BAMTKDVBOURFMTQzRjFENkQ0QUZCNThFMDVGRjc4RTY2NUNCOUZBOTQyOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM4xh6YGP+VHiPk4JzBg7Otc6d hPeNWC4Lt25h6+mGC1NkoGrjF0PaeUtP0tCqICMhvTtFLu8tJVP6Nvc/+/PX9TO+ l1BSQUMmf26Wsc0PFKuStrktnhxe/p83opRi9j4taPkc2L4Q/qIaz2Onyeg9HePr kS7kPO/f3DaQWBk8DUT/5x+hXzB6SsMCW6QFnMZ+c4zgDTS5ZgGlzj9Trotqc3Rg AoOyGnxTAijWGWaYxK5vR0tkC2LlGo0vr1q13rXDfAYN2+O3hjrAOhlqWfwkFt+Q bytuUNny58NtP2HIytT7v99kJuXlqq/G+YiKWTrh6E4eF8eXZNUZ1vwEOS4/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWp3hQ/HW1K+1jgX/eOZly5+pQpcwHwYDVR0j BBgwFoAUe+6ykOklTnZqfYw7IW8HhSBmF+8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2Y3MmYwMTItYTQzYS00ZmNiLTg2YTktYWIzZTk1NzNhOGQ5LzAvN0JFRUIyOTBF OTI1NEU3NjZBN0Q4QzNCMjE2RjA3ODUyMDY2MTdFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83QkVFQjI5MEU5MjU0RTc2NkE3RDhDM0IyMTZGMDc4NTIwNjYx N0VGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2Y3MmYwMTItYTQzYS00ZmNiLTg2 YTktYWIzZTk1NzNhOGQ5LzAvN0JFRUIyOTBFOTI1NEU3NjZBN0Q4QzNCMjE2RjA3 ODUyMDY2MTdFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCJNfEVhvN/SMcjIhq2++JmoHrkpKI3Qkrc XOdx3VUG8KWcwo9g97P2YTqgVF7ieFjm2MLaY6/B5XVuiRzAhudao7NJv9IMKL7i 6heO2MFfs1lQRZR3VKAPAjSj3vb7ME4CobSWHjdlW8mmiCdBcwry1JOD+o5YYMH5 l8QSPfm0E6AxNVpMv/hj9eLFwgctVvAWijk/tXydhhv8bfm0QaT5HNAPHbms4XhH l3Iq6gOkZHjSnfaDLwn6IMuzn0OjwJQ9fBiaIXgfKUUzhYnoyl/hYqOX1/FLKaT2 kspSNw39Jp3r3Va5i+pXu1u7hF347lUiyzdIjHMVZBqjL3K5JCI= -----END CERTIFICATE-----Generated at Thu Sep 24 19:45:24 2026 by rpki-client