$ rpki-client -vvvf rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft File: 7ACC57BA3042B007AA1613352A73FFD3162E565F.mft (raw, json) Hash identifier: GMSBHT3TUMsR494t9zXKf0RMf5oJ5LvLS0P70Dmtihw= Subject key identifier: 5C:51:A9:D3:FA:DF:4E:EB:77:A7:16:C6:0D:04:8A:0E:A2:D4:86:40 Authority key identifier: 7A:CC:57:BA:30:42:B0:07:AA:16:13:35:2A:73:FF:D3:16:2E:56:5F Certificate issuer: /CN=7ACC57BA3042B007AA1613352A73FFD3162E565F Certificate serial: 2EC2D1ECA9D7902AD6143780FF6BA1BDF8018D89 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ACC57BA3042B007AA1613352A73FFD3162E565F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft Manifest number: EB Signing time: Sun 25 Oct 2026 16:27:11 +0000 Manifest this update: Sun 25 Oct 2026 16:22:11 +0000 Manifest next update: Mon 26 Oct 2026 17:08:11 +0000 Files and hashes: 1: 3130332e3136302e3137382e302f32342d3234203d3e20313431353932.roa (hash: jo8zHFeqe3LGwp2AuxTgHU+gmdWY0CJTnZZ7WU6u+5k=) 2: 3130332e3136302e3137392e302f32342d3234203d3e20313431353932.roa (hash: z0ApomisoqwQnhgmCVulOkc7tSSTjZgNZBL2SV/mK8w=) 3: 7ACC57BA3042B007AA1613352A73FFD3162E565F.crl (hash: hUOLPORKmksyGVlcVguKZ0q3IUarqE8yJ795fqTJLTU=) 4: 3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa (hash: EE9ymycRiG5es8LdeuDyt4ZBgyII9pYHMLKeHbtmxMg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.crl rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ACC57BA3042B007AA1613352A73FFD3162E565F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 17:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:c2:d1:ec:a9:d7:90:2a:d6:14:37:80:ff:6b:a1:bd:f8:01:8d:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ACC57BA3042B007AA1613352A73FFD3162E565F Validity Not Before: Oct 25 16:22:11 2026 GMT Not After : Oct 26 17:08:11 2026 GMT Subject: CN=5C51A9D3FADF4EEB77A716C60D048A0EA2D48640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:96:b6:32:11:9e:c6:63:24:30:bc:bb:5b:0b: 47:b9:a1:e1:e1:d6:27:77:5b:f9:a4:c2:45:6e:a8: 81:60:fd:d6:e7:4d:53:7d:b8:6b:1d:3c:5c:ef:7e: 6a:f4:af:67:7a:7c:da:5d:9d:e8:24:b3:04:b9:7f: 9f:c6:e1:eb:1f:b1:3f:06:a2:0e:81:43:26:d5:0b: 6e:b7:21:19:65:e6:d6:ef:8a:c7:eb:15:37:83:75: e8:49:c4:90:16:15:11:8b:c3:5a:a8:de:f1:ef:27: 5e:25:dc:64:1b:94:4c:2e:59:cf:9a:4b:a0:08:1e: 28:67:2f:d2:cd:f4:f2:68:68:71:ee:a1:03:3f:bd: ba:0f:e1:37:2c:ec:bf:2a:36:1c:89:0c:ce:17:bd: 2f:ce:ab:7b:34:02:d2:1a:23:35:c8:eb:f9:35:e7: c3:7e:57:ec:05:7a:90:39:66:c8:c8:73:ea:32:52: e9:ae:37:2c:5a:65:22:dd:cf:b4:e7:67:d2:1a:99: 97:9f:9d:11:35:0a:59:30:df:93:35:bd:88:0f:4f: aa:9c:86:41:39:b5:64:30:17:b3:72:99:74:23:7d: 8b:d2:cc:4f:4e:38:2e:84:a8:7c:1a:94:fa:59:7b: 44:47:e4:d0:a7:e7:06:74:d0:fc:ac:d6:41:ab:d9: 6d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:51:A9:D3:FA:DF:4E:EB:77:A7:16:C6:0D:04:8A:0E:A2:D4:86:40 X509v3 Authority Key Identifier: keyid:7A:CC:57:BA:30:42:B0:07:AA:16:13:35:2A:73:FF:D3:16:2E:56:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ACC57BA3042B007AA1613352A73FFD3162E565F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:ee:32:d8:88:b9:f9:79:12:72:16:e2:57:dd:28:e1:0d:af: d1:d7:c9:3c:cc:7c:b0:d7:5a:4a:30:56:76:ca:d8:97:fc:83: 1a:be:c6:ed:42:05:b8:91:ba:ca:7d:43:17:d6:85:da:7b:d7: e5:b1:28:fa:f2:53:7e:57:65:a7:eb:e9:14:28:20:23:dd:67: 11:d0:be:60:e6:4d:a5:ad:f4:42:ca:aa:95:51:64:72:36:2c: 4b:60:c5:cd:92:dc:7f:97:00:1b:61:a7:1d:bb:c0:97:94:01: ac:db:92:2a:9e:b6:7d:9f:61:e5:88:59:1c:a7:74:75:4b:27: 62:d7:ab:35:f7:8a:f1:b9:8f:83:2c:d9:fb:aa:bc:ba:dd:04: d3:45:33:4a:2e:a5:ed:11:50:84:dd:65:62:8c:c0:4e:89:a3: ef:8f:05:08:20:4f:4b:52:ea:27:cc:96:76:6f:1a:d8:2e:1f: 27:bd:15:6a:46:0d:ab:36:7d:70:f5:65:c0:54:90:b4:3b:bc: be:59:31:13:27:59:9c:af:c3:21:2e:67:a3:15:dc:12:d6:38: e8:b5:0d:a6:d0:9a:e9:46:2a:e2:27:ff:96:23:55:81:7b:cc: 0e:fa:04:0c:94:44:85:62:c5:ef:78:9f:9f:05:43:c5:6a:90: 80:6d:e6:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULsLR7KnXkCrWFDeA/2uhvfgBjYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FDQzU3QkEzMDQyQjAwN0FBMTYxMzM1MkE3M0ZGRDMx NjJFNTY1RjAeFw0yNjEwMjUxNjIyMTFaFw0yNjEwMjYxNzA4MTFaMDMxMTAvBgNV BAMTKDVDNTFBOUQzRkFERjRFRUI3N0E3MTZDNjBEMDQ4QTBFQTJENDg2NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDblrYyEZ7GYyQwvLtbC0e5oeHh 1id3W/mkwkVuqIFg/dbnTVN9uGsdPFzvfmr0r2d6fNpdnegkswS5f5/G4esfsT8G og6BQybVC263IRll5tbvisfrFTeDdehJxJAWFRGLw1qo3vHvJ14l3GQblEwuWc+a S6AIHihnL9LN9PJoaHHuoQM/vboP4Tcs7L8qNhyJDM4XvS/Oq3s0AtIaIzXI6/k1 58N+V+wFepA5ZsjIc+oyUumuNyxaZSLdz7TnZ9IamZefnRE1Clkw35M1vYgPT6qc hkE5tWQwF7NymXQjfYvSzE9OOC6EqHwalPpZe0RH5NCn5wZ00Pys1kGr2W1XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXFGp0/rfTut3pxbGDQSKDqLUhkAwHwYDVR0j BBgwFoAUesxXujBCsAeqFhM1KnP/0xYuVl8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjBhODIwYjQtODJlZi00NDEyLWJlMmUtNWQ2OTE0YmQ0ODQ0LzAvN0FDQzU3QkEz MDQyQjAwN0FBMTYxMzM1MkE3M0ZGRDMxNjJFNTY1Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QUNDNTdCQTMwNDJCMDA3QUExNjEzMzUyQTczRkZEMzE2MkU1 NjVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjBhODIwYjQtODJlZi00NDEyLWJl MmUtNWQ2OTE0YmQ0ODQ0LzAvN0FDQzU3QkEzMDQyQjAwN0FBMTYxMzM1MkE3M0ZG RDMxNjJFNTY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHuMtiIufl5EnIW4lfdKOENr9HXyTzMfLDX WkowVnbK2Jf8gxq+xu1CBbiRusp9QxfWhdp71+WxKPryU35XZafr6RQoICPdZxHQ vmDmTaWt9ELKqpVRZHI2LEtgxc2S3H+XABthpx27wJeUAazbkiqetn2fYeWIWRyn dHVLJ2LXqzX3ivG5j4Ms2fuqvLrdBNNFM0oupe0RUITdZWKMwE6Jo++PBQggT0tS 6ifMlnZvGtguHye9FWpGDas2fXD1ZcBUkLQ7vL5ZMRMnWZyvwyEuZ6MV3BLWOOi1 DabQmulGKuIn/5YjVYF7zA76BAyURIVixe94n58FQ8VqkIBt5mU= -----END CERTIFICATE-----Generated at Mon Oct 26 08:29:30 2026 by rpki-client