$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft File: 7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft (raw, json) Hash identifier: LXTT/QNapBPG8SX+WYUQo+eDz/bnsE+mdurVC2uP+g0= Subject key identifier: 46:EA:B6:29:0C:A9:1C:C9:37:4B:A7:C0:E0:75:C2:E6:EF:C4:FB:4E Authority key identifier: 7C:9D:38:28:7A:B4:C0:80:0F:67:E5:16:DB:04:76:04:54:CB:E9:F1 Certificate issuer: /CN=7C9D38287AB4C0800F67E516DB04760454CBE9F1 Certificate serial: 760E2BE1EC99CFA8671D73F9CD23BF1DCAE37F43 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft Manifest number: A8 Signing time: Sat 05 Sep 2026 00:16:07 +0000 Manifest this update: Sat 05 Sep 2026 00:11:07 +0000 Manifest next update: Sun 06 Sep 2026 02:37:07 +0000 Files and hashes: 1: 323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa (hash: lL0LNbFOb3ZMt/gKNiHtSDZhxYdsWPVmvyN1tdNUMJ8=) 2: 7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl (hash: hWNF+l33mz1D2nQvPdrox7wBqCFjx3m3oHtJptWnGwA=) 3: 3230332e37392e32392e302f32342d3234203d3e203435373138.roa (hash: Xr9AQJybUe2phNKjCk7EDVdTwzFlkvXIj8GjUYXwr90=) 4: 3130332e3139382e39332e302f32342d3234203d3e203435373138.roa (hash: gkNE1J8LS8bDAl/t8wn0B0ZHnNiDo1L7MzMb+7Q5ypo=) 5: 3131372e3130332e36362e302f32332d3234203d3e203435373138.roa (hash: 0DLK1MQIKbxqNmcpVPbZocMztN5rDbQk4zhYo8Bx8Cw=) 6: 3130332e33312e3230342e302f32332d3234203d3e203435373138.roa (hash: JJ0XYEWJnNqenm3YM5YcUAhKtM46eIeZHpKCM2PFMYk=) 7: 3130332e33312e3230362e302f32342d3234203d3e203435373138.roa (hash: ZPFkeP+nvfKboy4qow1VO85p4mUkgACDVOD+VqK2Ihg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 23:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:0e:2b:e1:ec:99:cf:a8:67:1d:73:f9:cd:23:bf:1d:ca:e3:7f:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C9D38287AB4C0800F67E516DB04760454CBE9F1 Validity Not Before: Sep 5 00:11:07 2026 GMT Not After : Sep 6 02:37:07 2026 GMT Subject: CN=46EAB6290CA91CC9374BA7C0E075C2E6EFC4FB4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:17:1e:c8:12:a5:91:cd:42:ed:0d:6f:96:f4: fb:72:38:94:92:a0:c4:cf:26:e0:df:0b:44:74:82: ab:c4:76:cb:bc:50:9a:08:93:c1:64:66:55:af:5f: 2a:12:61:a4:9e:90:a7:52:d5:3f:6a:26:d3:e7:b0: e2:04:24:0a:65:93:d1:08:ea:57:2e:0b:e5:04:ed: 86:2f:77:c7:1a:cf:10:af:0f:5e:13:73:63:d0:f5: 02:56:5f:21:82:8b:ca:97:ff:4c:c7:29:a3:98:5b: 74:2f:42:04:c2:16:48:be:b3:95:1f:00:c0:31:52: 5b:ca:7e:c7:6d:7d:49:34:8f:1e:5f:3c:60:a3:6e: 31:44:47:6e:30:87:bf:7e:92:b3:b2:ee:1f:96:11: cb:da:f9:91:a3:a8:ad:32:b3:35:57:68:3e:22:d9: 77:fc:18:62:92:b2:47:b2:d1:30:f4:da:64:bd:5d: 4c:f5:79:81:35:ee:2a:9f:41:85:60:ef:04:5e:7a: 3e:25:fe:ad:ba:4d:0b:4e:95:c1:2a:27:a7:80:b0: a1:bf:17:73:e9:4b:22:a2:41:cd:b2:61:25:7e:9e: 34:2d:6b:f9:e0:27:6b:8f:67:e2:1c:bf:c2:a7:bf: e6:6a:6f:49:ef:f7:02:60:50:d5:85:15:d0:73:e0: 3a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:EA:B6:29:0C:A9:1C:C9:37:4B:A7:C0:E0:75:C2:E6:EF:C4:FB:4E X509v3 Authority Key Identifier: keyid:7C:9D:38:28:7A:B4:C0:80:0F:67:E5:16:DB:04:76:04:54:CB:E9:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:3a:7a:76:e3:22:c5:0e:79:86:6d:b5:4b:fc:66:8b:fd:0c: 6e:1e:9a:56:1b:c6:a6:9e:46:ae:cf:8b:c7:07:bb:c5:16:07: 2b:62:d0:b7:49:fc:20:ff:9f:df:ff:3c:a2:7e:c8:31:bd:41: 45:9e:3f:81:ed:aa:35:d0:35:f7:8d:ed:81:85:ad:bd:9b:a6: 82:00:2b:8c:94:d4:be:50:c7:5a:7c:38:80:b1:cc:e8:5a:9b: ca:06:e3:a9:47:da:cb:86:5a:2c:e2:4e:d8:06:8b:f9:3c:11: 04:63:3a:5e:56:52:c0:99:87:73:45:8f:42:c8:d8:9d:7f:9e: 46:9e:ab:69:7a:14:e5:ca:0f:7d:85:f6:00:4f:db:14:17:8d: ab:0b:c8:7c:57:ad:b4:40:fd:0b:55:f5:bd:48:01:48:d3:da: 36:f9:52:64:ec:5d:ef:d2:e6:6e:b1:2a:70:e8:10:3d:36:52: 36:64:d0:59:48:28:54:55:c3:93:9d:f9:fb:73:a0:a9:6f:0f: 81:f2:0d:ae:64:18:1c:c1:35:bb:e9:22:01:3e:3a:3f:e0:ce: 6e:ad:b5:21:1b:8b:2d:ea:d3:66:b5:91:5e:b9:ce:ea:c4:75: a3:b3:93:3d:69:de:41:4e:af:73:8e:9e:f0:d2:f1:78:fe:61: 51:b1:56:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdg4r4eyZz6hnHXP5zSO/Hcrjf0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M5RDM4Mjg3QUI0QzA4MDBGNjdFNTE2REIwNDc2MDQ1 NENCRTlGMTAeFw0yNjA5MDUwMDExMDdaFw0yNjA5MDYwMjM3MDdaMDMxMTAvBgNV BAMTKDQ2RUFCNjI5MENBOTFDQzkzNzRCQTdDMEUwNzVDMkU2RUZDNEZCNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUFx7IEqWRzULtDW+W9PtyOJSS oMTPJuDfC0R0gqvEdsu8UJoIk8FkZlWvXyoSYaSekKdS1T9qJtPnsOIEJAplk9EI 6lcuC+UE7YYvd8cazxCvD14Tc2PQ9QJWXyGCi8qX/0zHKaOYW3QvQgTCFki+s5Uf AMAxUlvKfsdtfUk0jx5fPGCjbjFER24wh79+krOy7h+WEcva+ZGjqK0yszVXaD4i 2Xf8GGKSskey0TD02mS9XUz1eYE17iqfQYVg7wReej4l/q26TQtOlcEqJ6eAsKG/ F3PpSyKiQc2yYSV+njQta/ngJ2uPZ+Icv8Knv+Zqb0nv9wJgUNWFFdBz4DohAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURuq2KQypHMk3S6fA4HXC5u/E+04wHwYDVR0j BBgwFoAUfJ04KHq0wIAPZ+UW2wR2BFTL6fEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA0OWMyMTAtZjM2NS00MzJmLWE3Y2EtMGI1ZWI4NmIwMWM2LzAvN0M5RDM4Mjg3 QUI0QzA4MDBGNjdFNTE2REIwNDc2MDQ1NENCRTlGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QzlEMzgyODdBQjRDMDgwMEY2N0U1MTZEQjA0NzYwNDU0Q0JF OUYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjA0OWMyMTAtZjM2NS00MzJmLWE3 Y2EtMGI1ZWI4NmIwMWM2LzAvN0M5RDM4Mjg3QUI0QzA4MDBGNjdFNTE2REIwNDc2 MDQ1NENCRTlGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFc6enbjIsUOeYZttUv8Zov9DG4emlYbxqae Rq7Pi8cHu8UWByti0LdJ/CD/n9//PKJ+yDG9QUWeP4HtqjXQNfeN7YGFrb2bpoIA K4yU1L5Qx1p8OICxzOham8oG46lH2suGWiziTtgGi/k8EQRjOl5WUsCZh3NFj0LI 2J1/nkaeq2l6FOXKD32F9gBP2xQXjasLyHxXrbRA/QtV9b1IAUjT2jb5UmTsXe/S 5m6xKnDoED02UjZk0FlIKFRVw5Od+ftzoKlvD4HyDa5kGBzBNbvpIgE+Oj/gzm6t tSEbiy3q02a1kV65zurEdaOzkz1p3kFOr3OOnvDS8Xj+YVGxVlY= -----END CERTIFICATE-----Generated at Sat Sep 5 04:06:50 2026 by rpki-client