$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft File: A7EC36E89BE7B48874142363CBDE6AF22273C559.mft (raw, json) Hash identifier: ff5XTxuU6YjLxRjyJ/MCyZhsItPrJdDV6JA6z4CQmWA= Subject key identifier: 55:6D:3C:99:6B:92:AB:F6:DB:42:CE:B1:2F:AF:16:C6:F3:B3:31:01 Authority key identifier: A7:EC:36:E8:9B:E7:B4:88:74:14:23:63:CB:DE:6A:F2:22:73:C5:59 Certificate issuer: /CN=A7EC36E89BE7B48874142363CBDE6AF22273C559 Certificate serial: 1AF2EBACBAA134F0419B2AD0EB68A289A8B43D68 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 02:18:28 +0000 Manifest this update: Thu 24 Sep 2026 02:13:28 +0000 Manifest next update: Fri 25 Sep 2026 05:35:28 +0000 Files and hashes: 1: 3130332e3233392e32332e302f32342d3234203d3e20313336383635.roa (hash: +PzA369vX1gC5i4jACzVnnj39MhVu80F0pvVZunJO1g=) 2: A7EC36E89BE7B48874142363CBDE6AF22273C559.crl (hash: WYpdFtsAptWyf9H9zGOjZOa76e3K1dAWUUB3ilcdKEA=) 3: 3130332e3233392e32322e302f32342d3234203d3e20313336383635.roa (hash: 0JVt6Zu0M/Ga29cquq7tcggAAo9qmUWZlK+5RkmIrXg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.crl rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:f2:eb:ac:ba:a1:34:f0:41:9b:2a:d0:eb:68:a2:89:a8:b4:3d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7EC36E89BE7B48874142363CBDE6AF22273C559 Validity Not Before: Sep 24 02:13:28 2026 GMT Not After : Sep 25 05:35:28 2026 GMT Subject: CN=556D3C996B92ABF6DB42CEB12FAF16C6F3B33101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:69:de:ed:a2:5f:99:23:a2:9d:eb:8c:e0:cb: cd:76:b9:34:1d:1b:73:b4:92:46:93:c5:e0:f0:9f: 0f:f2:36:ae:1a:a0:1b:02:47:f9:7f:34:e9:66:c9: 9b:97:69:a6:42:0e:33:a9:3e:64:fc:14:33:29:76: 54:68:d7:7c:56:e1:bf:bd:cb:c2:28:a6:fc:38:2e: 56:62:ae:32:54:8e:f9:64:52:c7:10:5b:d3:08:f6: bf:0e:9c:49:f3:24:e7:ea:0c:ee:61:f3:c4:1f:93: 65:33:d9:5f:93:f6:a5:1a:bd:28:a9:04:f8:17:90: ad:01:5a:8f:78:d3:54:fd:b8:c5:9c:6f:15:92:db: 85:69:91:c6:9e:7f:ed:33:38:2d:dc:12:e0:69:1e: 6b:51:88:18:12:c6:ed:85:a9:f6:58:0b:94:7b:b4: 66:a1:51:0f:02:cb:b8:63:03:5c:35:3a:ce:4a:bc: 32:18:14:54:a1:40:af:c2:6b:8e:b5:5f:93:76:94: 03:42:1e:cc:25:cb:43:8b:d0:4e:87:0c:64:90:18: 0e:89:2b:25:0a:1e:3f:d0:8c:20:6c:1d:d3:aa:b7: 5d:94:72:9a:f6:a3:66:96:14:ea:dc:a3:1d:ef:16: f7:c5:b2:fa:a9:6f:49:b6:59:f6:44:de:5d:7d:db: e8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6D:3C:99:6B:92:AB:F6:DB:42:CE:B1:2F:AF:16:C6:F3:B3:31:01 X509v3 Authority Key Identifier: keyid:A7:EC:36:E8:9B:E7:B4:88:74:14:23:63:CB:DE:6A:F2:22:73:C5:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:a4:e5:80:7d:36:53:7f:67:a3:07:9a:47:07:6b:6b:3c:f1: 10:0e:92:bd:fc:de:3f:19:19:5c:21:49:29:69:d6:03:b6:ca: 6b:49:23:a0:65:45:49:a4:5e:86:cf:08:7e:b3:e5:7e:a6:51: fb:99:4e:69:6d:46:70:c5:de:e7:6f:d3:e7:e3:6e:78:9d:4e: 8e:52:e8:cd:4b:93:0a:7d:e6:2c:35:f2:d2:68:aa:41:ef:58: df:f0:4e:06:1b:5a:1a:a7:51:64:9f:0a:ef:a2:0e:95:04:f4: 84:14:84:20:65:3d:4d:62:76:c7:89:eb:ec:26:8a:b5:f1:59: 56:52:a9:b8:29:cb:09:30:1c:e1:a5:56:ba:d6:89:c8:87:e9: 8f:17:91:1c:bf:43:d0:eb:df:78:80:e9:19:f1:7e:bf:58:1b: d7:f3:df:14:d6:19:87:2b:c3:c4:1b:d6:de:3c:e0:f8:61:9a: bb:06:cf:51:19:4e:a5:d1:af:93:59:f4:b2:17:b1:f4:f4:dd: 12:d0:83:26:59:f0:b9:b7:b7:05:f4:12:5c:65:28:91:13:14: 01:ac:d3:9a:89:c5:70:68:b0:6e:7a:19:c0:5f:6a:82:7e:51: 1b:5c:61:fe:dc:cd:27:02:d7:63:32:e4:35:ea:76:1f:af:ac: cd:f5:4c:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGvLrrLqhNPBBmyrQ62iiiai0PWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdFQzM2RTg5QkU3QjQ4ODc0MTQyMzYzQ0JERTZBRjIy MjczQzU1OTAeFw0yNjA5MjQwMjEzMjhaFw0yNjA5MjUwNTM1MjhaMDMxMTAvBgNV BAMTKDU1NkQzQzk5NkI5MkFCRjZEQjQyQ0VCMTJGQUYxNkM2RjNCMzMxMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmad7tol+ZI6Kd64zgy812uTQd G3O0kkaTxeDwnw/yNq4aoBsCR/l/NOlmyZuXaaZCDjOpPmT8FDMpdlRo13xW4b+9 y8Iopvw4LlZirjJUjvlkUscQW9MI9r8OnEnzJOfqDO5h88Qfk2Uz2V+T9qUavSip BPgXkK0BWo9401T9uMWcbxWS24Vpkcaef+0zOC3cEuBpHmtRiBgSxu2FqfZYC5R7 tGahUQ8Cy7hjA1w1Os5KvDIYFFShQK/Ca461X5N2lANCHswly0OL0E6HDGSQGA6J KyUKHj/QjCBsHdOqt12Ucpr2o2aWFOrcox3vFvfFsvqpb0m2WfZE3l192+jpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVW08mWuSq/bbQs6xL68WxvOzMQEwHwYDVR0j BBgwFoAUp+w26JvntIh0FCNjy95q8iJzxVkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjM5ODA2M2UtNTdhMS00MGYyLTg1MjctNGQwYTY5YzVkNjQ3LzAvQTdFQzM2RTg5 QkU3QjQ4ODc0MTQyMzYzQ0JERTZBRjIyMjczQzU1OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BN0VDMzZFODlCRTdCNDg4NzQxNDIzNjNDQkRFNkFGMjIyNzND NTU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjM5ODA2M2UtNTdhMS00MGYyLTg1 MjctNGQwYTY5YzVkNjQ3LzAvQTdFQzM2RTg5QkU3QjQ4ODc0MTQyMzYzQ0JERTZB RjIyMjczQzU1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFKk5YB9NlN/Z6MHmkcHa2s88RAOkr383j8Z GVwhSSlp1gO2ymtJI6BlRUmkXobPCH6z5X6mUfuZTmltRnDF3udv0+fjbnidTo5S 6M1Lkwp95iw18tJoqkHvWN/wTgYbWhqnUWSfCu+iDpUE9IQUhCBlPU1idseJ6+wm irXxWVZSqbgpywkwHOGlVrrWiciH6Y8XkRy/Q9Dr33iA6Rnxfr9YG9fz3xTWGYcr w8Qb1t484PhhmrsGz1EZTqXRr5NZ9LIXsfT03RLQgyZZ8Lm3twX0ElxlKJETFAGs 05qJxXBosG56GcBfaoJ+URtcYf7czScC12My5DXqdh+vrM31TMA= -----END CERTIFICATE-----Generated at Thu Sep 24 15:17:17 2026 by rpki-client