$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft File: 7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft (raw, json) Hash identifier: 0bfEBD9OxBKvsppRqSBe5AzgKCrtQyRTh1vyh8UA2G8= Subject key identifier: 69:B1:31:00:AA:76:53:C4:2A:E4:4B:FF:82:65:D4:F5:CD:E2:38:4A Authority key identifier: 7C:9D:38:28:7A:B4:C0:80:0F:67:E5:16:DB:04:76:04:54:CB:E9:F1 Certificate issuer: /CN=7C9D38287AB4C0800F67E516DB04760454CBE9F1 Certificate serial: 3E05B50A76E04D9E581829909A3C7EABCBD9B26A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft Manifest number: EA Signing time: Sat 24 Oct 2026 14:42:33 +0000 Manifest this update: Sat 24 Oct 2026 14:37:33 +0000 Manifest next update: Sun 25 Oct 2026 16:47:33 +0000 Files and hashes: 1: 323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa (hash: lL0LNbFOb3ZMt/gKNiHtSDZhxYdsWPVmvyN1tdNUMJ8=) 2: 3230332e37392e32392e302f32342d3234203d3e203435373138.roa (hash: Xr9AQJybUe2phNKjCk7EDVdTwzFlkvXIj8GjUYXwr90=) 3: 3131372e3130332e36362e302f32332d3234203d3e203435373138.roa (hash: 0DLK1MQIKbxqNmcpVPbZocMztN5rDbQk4zhYo8Bx8Cw=) 4: 3130332e33312e3230342e302f32332d3234203d3e203435373138.roa (hash: JJ0XYEWJnNqenm3YM5YcUAhKtM46eIeZHpKCM2PFMYk=) 5: 3130332e3139382e39332e302f32342d3234203d3e203435373138.roa (hash: gkNE1J8LS8bDAl/t8wn0B0ZHnNiDo1L7MzMb+7Q5ypo=) 6: 3130332e33312e3230362e302f32342d3234203d3e203435373138.roa (hash: ZPFkeP+nvfKboy4qow1VO85p4mUkgACDVOD+VqK2Ihg=) 7: 7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl (hash: acpvVN7Liso5VFiF8BF5Gv79JhfO0MnuHXcSj0vWfno=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:05:b5:0a:76:e0:4d:9e:58:18:29:90:9a:3c:7e:ab:cb:d9:b2:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C9D38287AB4C0800F67E516DB04760454CBE9F1 Validity Not Before: Oct 24 14:37:33 2026 GMT Not After : Oct 25 16:47:33 2026 GMT Subject: CN=69B13100AA7653C42AE44BFF8265D4F5CDE2384A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:aa:f5:ad:52:2f:48:bc:0e:4e:a8:1d:02:ed: 0d:8f:f8:37:31:22:a8:69:de:8a:15:68:40:1d:b4: 9f:18:3d:27:4d:7d:db:0b:59:ac:b3:32:e1:fb:b5: 1b:5e:c0:cb:83:3b:9d:5b:e9:ba:17:f4:87:62:95: 04:17:d1:b6:fb:5d:a2:e9:ad:9b:f1:7c:d4:65:45: f0:ef:86:00:6d:47:cf:7a:08:5e:2a:bc:cb:4a:57: 51:c2:92:25:e8:26:69:08:fd:d6:58:73:75:c2:a0: c2:e2:5f:aa:c1:43:7e:b6:cd:9c:40:85:db:39:ef: 62:e5:9e:ad:37:ad:ba:c8:98:9d:64:0c:7e:ac:c5: 5b:c8:ab:d1:09:b2:c8:88:0f:20:3a:31:c1:73:25: 32:e0:64:66:50:ba:00:db:14:47:de:94:98:a6:42: 63:c4:02:db:46:09:01:84:1d:e3:11:d4:97:aa:fc: b9:06:fc:f6:e7:a0:ac:ea:a3:06:2d:b6:1e:ad:e4: 9c:4d:db:b6:70:72:87:4b:16:b9:72:14:e6:b8:10: 91:39:ea:f4:9f:80:c8:de:18:ab:f1:f4:77:31:65: 35:34:19:1b:25:00:e6:4a:cf:3f:1c:7e:d1:5c:bc: 89:d2:e2:82:d9:55:e1:a7:bc:25:f5:83:30:97:ea: 8a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B1:31:00:AA:76:53:C4:2A:E4:4B:FF:82:65:D4:F5:CD:E2:38:4A X509v3 Authority Key Identifier: keyid:7C:9D:38:28:7A:B4:C0:80:0F:67:E5:16:DB:04:76:04:54:CB:E9:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:ec:84:71:50:d8:f4:5e:5c:5f:31:71:cf:6e:23:89:ed:af: 10:da:3b:f0:d5:00:52:9c:27:1a:d1:a1:dd:99:0b:c7:81:24: 5a:63:0d:2e:a6:5c:d5:6b:92:54:c8:9b:82:8e:57:48:8d:5d: b0:71:26:a3:ea:77:60:89:e0:ae:10:8a:e6:88:de:10:ee:1b: 6a:89:d6:55:8d:4b:aa:40:80:3a:c7:b9:f4:0e:a2:90:bb:c1: d9:d4:5c:68:4d:61:a7:ac:a9:c0:15:98:54:e6:c1:41:a8:65: 30:11:62:38:e3:82:3a:7e:78:aa:61:a1:7a:9d:be:87:0e:d4: 9b:96:61:b3:5e:53:58:47:bd:77:ba:d0:12:e9:63:d6:26:10: 6d:55:fd:df:cf:56:d0:d5:30:7f:7f:8c:92:ae:f4:6e:47:2f: b8:d9:3c:b9:16:eb:83:21:1d:18:d8:e2:d8:37:05:b1:45:8d: 16:e0:55:b0:db:5d:0c:20:e7:24:d3:4b:fb:e6:48:fc:9d:c3: 47:ae:87:85:b3:95:27:02:17:71:55:f8:51:2c:f4:dd:b7:5a: 78:ce:4b:0e:eb:df:5e:1a:ba:7e:d6:98:a3:ce:97:70:2b:57: c5:0f:8d:b6:19:24:31:53:18:4e:2e:2f:90:10:56:3f:31:2e: 2a:7e:23:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPgW1CnbgTZ5YGCmQmjx+q8vZsmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M5RDM4Mjg3QUI0QzA4MDBGNjdFNTE2REIwNDc2MDQ1 NENCRTlGMTAeFw0yNjEwMjQxNDM3MzNaFw0yNjEwMjUxNjQ3MzNaMDMxMTAvBgNV BAMTKDY5QjEzMTAwQUE3NjUzQzQyQUU0NEJGRjgyNjVENEY1Q0RFMjM4NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGqvWtUi9IvA5OqB0C7Q2P+Dcx Iqhp3ooVaEAdtJ8YPSdNfdsLWayzMuH7tRtewMuDO51b6boX9IdilQQX0bb7XaLp rZvxfNRlRfDvhgBtR896CF4qvMtKV1HCkiXoJmkI/dZYc3XCoMLiX6rBQ362zZxA hds572Llnq03rbrImJ1kDH6sxVvIq9EJssiIDyA6McFzJTLgZGZQugDbFEfelJim QmPEAttGCQGEHeMR1Jeq/LkG/PbnoKzqowYtth6t5JxN27ZwcodLFrlyFOa4EJE5 6vSfgMjeGKvx9HcxZTU0GRslAOZKzz8cftFcvInS4oLZVeGnvCX1gzCX6oo3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUabExAKp2U8Qq5Ev/gmXU9c3iOEowHwYDVR0j BBgwFoAUfJ04KHq0wIAPZ+UW2wR2BFTL6fEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA0OWMyMTAtZjM2NS00MzJmLWE3Y2EtMGI1ZWI4NmIwMWM2LzAvN0M5RDM4Mjg3 QUI0QzA4MDBGNjdFNTE2REIwNDc2MDQ1NENCRTlGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QzlEMzgyODdBQjRDMDgwMEY2N0U1MTZEQjA0NzYwNDU0Q0JF OUYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjA0OWMyMTAtZjM2NS00MzJmLWE3 Y2EtMGI1ZWI4NmIwMWM2LzAvN0M5RDM4Mjg3QUI0QzA4MDBGNjdFNTE2REIwNDc2 MDQ1NENCRTlGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbshHFQ2PReXF8xcc9uI4ntrxDaO/DVAFKc JxrRod2ZC8eBJFpjDS6mXNVrklTIm4KOV0iNXbBxJqPqd2CJ4K4QiuaI3hDuG2qJ 1lWNS6pAgDrHufQOopC7wdnUXGhNYaesqcAVmFTmwUGoZTARYjjjgjp+eKphoXqd vocO1JuWYbNeU1hHvXe60BLpY9YmEG1V/d/PVtDVMH9/jJKu9G5HL7jZPLkW64Mh HRjY4tg3BbFFjRbgVbDbXQwg5yTTS/vmSPydw0euh4WzlScCF3FV+FEs9N23WnjO Sw7r314aun7WmKPOl3ArV8UPjbYZJDFTGE4uL5AQVj8xLip+I+0= -----END CERTIFICATE-----Generated at Sat Oct 24 20:49:19 2026 by rpki-client