$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft File: A7EC36E89BE7B48874142363CBDE6AF22273C559.mft (raw, json) Hash identifier: 8AS5BjRXH8YZQiGnGCLbAzTLlNfGudCPeTrkgoQDfgk= Subject key identifier: C1:CA:4D:60:BD:93:85:15:DC:A8:5C:8E:6C:F3:A0:C7:68:A7:2E:00 Authority key identifier: A7:EC:36:E8:9B:E7:B4:88:74:14:23:63:CB:DE:6A:F2:22:73:C5:59 Certificate issuer: /CN=A7EC36E89BE7B48874142363CBDE6AF22273C559 Certificate serial: 01FF9D20C8E71157183475D5929898ACF69EFAE6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 04:39:56 +0000 Manifest this update: Sat 24 Oct 2026 04:34:56 +0000 Manifest next update: Sun 25 Oct 2026 05:16:56 +0000 Files and hashes: 1: 3130332e3233392e32322e302f32342d3234203d3e20313336383635.roa (hash: 0JVt6Zu0M/Ga29cquq7tcggAAo9qmUWZlK+5RkmIrXg=) 2: A7EC36E89BE7B48874142363CBDE6AF22273C559.crl (hash: bWkwE41lUYZ82FI52FjkJW4uXwQX+AgzeJS2z+dMIzQ=) 3: 3130332e3233392e32332e302f32342d3234203d3e20313336383635.roa (hash: +PzA369vX1gC5i4jACzVnnj39MhVu80F0pvVZunJO1g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.crl rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ff:9d:20:c8:e7:11:57:18:34:75:d5:92:98:98:ac:f6:9e:fa:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7EC36E89BE7B48874142363CBDE6AF22273C559 Validity Not Before: Oct 24 04:34:56 2026 GMT Not After : Oct 25 05:16:56 2026 GMT Subject: CN=C1CA4D60BD938515DCA85C8E6CF3A0C768A72E00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:67:21:1a:c0:48:66:f5:54:7c:e7:b2:62:2a: cb:41:21:48:16:c6:d3:83:ea:78:ae:24:fe:5d:6e: 4f:f3:2f:6b:7a:84:b4:9f:6e:bc:fb:09:f3:fe:3e: e6:ad:a7:70:19:2c:0b:6a:9a:9c:2b:02:9e:ce:10: 0f:5e:0f:86:6a:c9:65:53:01:ee:ed:c0:25:64:9f: da:fa:ab:2a:f8:b5:67:11:f3:bf:ea:2f:31:56:11: 51:67:f5:71:2e:1c:5f:66:c2:4d:b1:91:9f:be:7b: 19:26:29:85:27:82:be:dd:c1:b9:1d:b6:53:62:9d: 98:d4:77:d3:4e:44:f0:94:d5:63:cb:85:e5:8a:5a: 72:e4:3f:e7:8b:73:ed:c6:e6:60:e2:d9:81:b1:ec: e9:46:c0:2d:ef:c0:37:5a:83:a3:42:ec:b8:e6:5c: ea:93:63:ee:88:3d:89:90:73:55:63:8f:49:8c:46: 0a:fa:10:c8:87:11:5e:c7:8e:5e:1d:69:5f:49:07: d4:a3:a8:f7:d4:fd:ce:89:b7:ae:a3:66:2b:5c:dd: eb:91:6c:cb:0a:f8:a1:ef:02:37:a9:50:7d:36:78: 0e:61:c5:be:e6:cf:b6:15:6b:57:a5:29:4f:cc:02: a8:b4:78:2d:b4:c5:41:24:ff:47:03:78:9a:48:4c: e0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:CA:4D:60:BD:93:85:15:DC:A8:5C:8E:6C:F3:A0:C7:68:A7:2E:00 X509v3 Authority Key Identifier: keyid:A7:EC:36:E8:9B:E7:B4:88:74:14:23:63:CB:DE:6A:F2:22:73:C5:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:b0:ae:e6:cb:c6:b5:7e:e5:1a:e0:b2:84:83:f3:4b:a3:dd: 85:e8:5e:3b:d3:49:ae:fa:72:f3:61:26:26:e3:48:64:e8:1e: 3c:35:cd:73:2a:b0:3f:cf:66:3d:60:81:78:ed:ab:f5:bc:57: d3:01:cf:85:da:84:05:60:04:76:79:57:c5:67:98:7e:77:0b: f2:b5:07:42:5f:55:ba:29:d9:14:25:12:da:17:43:1b:47:3c: 37:a8:02:b6:73:d6:6f:0b:48:35:6b:2e:0b:a3:58:8e:26:a8: a9:b0:3d:50:7e:a6:a0:6d:73:02:95:b3:65:45:af:cd:64:d0: b3:ae:ff:65:1b:ae:64:03:d8:de:ac:55:9f:77:be:b4:da:60: 54:17:80:33:f7:5c:79:06:8a:f0:97:9d:d8:4a:2c:70:e1:31: 99:8b:5b:c4:bb:5d:a7:11:fe:ec:04:ca:92:71:3a:cb:f2:6f: 37:2a:a2:48:8e:be:eb:7c:25:b3:a3:0d:7d:b4:33:ae:95:71: b7:85:d5:24:79:28:e5:bc:60:46:61:90:b2:11:7c:21:cd:8f: 49:38:56:1e:c2:8e:36:34:bd:d4:74:64:70:90:01:9a:a1:85: cc:dd:9b:10:c7:b7:d4:fe:b2:c3:88:76:e9:11:51:dd:43:d2: 93:3a:fd:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAf+dIMjnEVcYNHXVkpiYrPae+uYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdFQzM2RTg5QkU3QjQ4ODc0MTQyMzYzQ0JERTZBRjIy MjczQzU1OTAeFw0yNjEwMjQwNDM0NTZaFw0yNjEwMjUwNTE2NTZaMDMxMTAvBgNV BAMTKEMxQ0E0RDYwQkQ5Mzg1MTVEQ0E4NUM4RTZDRjNBMEM3NjhBNzJFMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJZyEawEhm9VR857JiKstBIUgW xtOD6niuJP5dbk/zL2t6hLSfbrz7CfP+Puatp3AZLAtqmpwrAp7OEA9eD4ZqyWVT Ae7twCVkn9r6qyr4tWcR87/qLzFWEVFn9XEuHF9mwk2xkZ++exkmKYUngr7dwbkd tlNinZjUd9NORPCU1WPLheWKWnLkP+eLc+3G5mDi2YGx7OlGwC3vwDdag6NC7Ljm XOqTY+6IPYmQc1Vjj0mMRgr6EMiHEV7Hjl4daV9JB9SjqPfU/c6Jt66jZitc3euR bMsK+KHvAjepUH02eA5hxb7mz7YVa1elKU/MAqi0eC20xUEk/0cDeJpITOCdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwcpNYL2ThRXcqFyObPOgx2inLgAwHwYDVR0j BBgwFoAUp+w26JvntIh0FCNjy95q8iJzxVkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjM5ODA2M2UtNTdhMS00MGYyLTg1MjctNGQwYTY5YzVkNjQ3LzAvQTdFQzM2RTg5 QkU3QjQ4ODc0MTQyMzYzQ0JERTZBRjIyMjczQzU1OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BN0VDMzZFODlCRTdCNDg4NzQxNDIzNjNDQkRFNkFGMjIyNzND NTU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjM5ODA2M2UtNTdhMS00MGYyLTg1 MjctNGQwYTY5YzVkNjQ3LzAvQTdFQzM2RTg5QkU3QjQ4ODc0MTQyMzYzQ0JERTZB RjIyMjczQzU1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALawrubLxrV+5RrgsoSD80uj3YXoXjvTSa76 cvNhJibjSGToHjw1zXMqsD/PZj1ggXjtq/W8V9MBz4XahAVgBHZ5V8VnmH53C/K1 B0JfVbop2RQlEtoXQxtHPDeoArZz1m8LSDVrLgujWI4mqKmwPVB+pqBtcwKVs2VF r81k0LOu/2UbrmQD2N6sVZ93vrTaYFQXgDP3XHkGivCXndhKLHDhMZmLW8S7XacR /uwEypJxOsvybzcqokiOvut8JbOjDX20M66VcbeF1SR5KOW8YEZhkLIRfCHNj0k4 Vh7CjjY0vdR0ZHCQAZqhhczdmxDHt9T+ssOIdukRUd1D0pM6/a0= -----END CERTIFICATE-----Generated at Sat Oct 24 11:12:31 2026 by rpki-client