$ rpki-client -vvvf rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft File: 7ACC57BA3042B007AA1613352A73FFD3162E565F.mft (raw, json) Hash identifier: Vi7JQv7lqWRWhAi7hecc++hHrOfuI2DQ0fuw6YV4a4E= Subject key identifier: 40:B2:B2:0E:D3:72:E0:8B:6D:1F:4D:A5:DF:CD:F9:85:9C:F4:A7:22 Authority key identifier: 7A:CC:57:BA:30:42:B0:07:AA:16:13:35:2A:73:FF:D3:16:2E:56:5F Certificate issuer: /CN=7ACC57BA3042B007AA1613352A73FFD3162E565F Certificate serial: 38C3F384949DC8F02D065A27FD39B231138170B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ACC57BA3042B007AA1613352A73FFD3162E565F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft Manifest number: EA Signing time: Sat 24 Oct 2026 22:06:39 +0000 Manifest this update: Sat 24 Oct 2026 22:01:39 +0000 Manifest next update: Mon 26 Oct 2026 00:24:39 +0000 Files and hashes: 1: 7ACC57BA3042B007AA1613352A73FFD3162E565F.crl (hash: 6JURULpTYbn0EZiRCBkD0mUEs09uJWLRFZs/XYDpKCE=) 2: 3130332e3136302e3137382e302f32342d3234203d3e20313431353932.roa (hash: jo8zHFeqe3LGwp2AuxTgHU+gmdWY0CJTnZZ7WU6u+5k=) 3: 3130332e3136302e3137392e302f32342d3234203d3e20313431353932.roa (hash: z0ApomisoqwQnhgmCVulOkc7tSSTjZgNZBL2SV/mK8w=) 4: 3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa (hash: EE9ymycRiG5es8LdeuDyt4ZBgyII9pYHMLKeHbtmxMg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.crl rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ACC57BA3042B007AA1613352A73FFD3162E565F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c3:f3:84:94:9d:c8:f0:2d:06:5a:27:fd:39:b2:31:13:81:70:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ACC57BA3042B007AA1613352A73FFD3162E565F Validity Not Before: Oct 24 22:01:39 2026 GMT Not After : Oct 26 00:24:39 2026 GMT Subject: CN=40B2B20ED372E08B6D1F4DA5DFCDF9859CF4A722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b4:8d:4c:83:71:61:f7:9e:6f:a9:e3:2b:58: bc:e7:39:a7:69:1d:1e:41:9c:78:60:c9:ea:8b:78: cd:13:2b:10:db:ab:67:ab:cc:31:db:c9:a9:e4:80: a4:99:13:f5:fe:8a:e4:50:d3:dc:0a:75:26:41:82: 00:07:ee:92:c5:b2:9c:c6:46:d3:24:fe:aa:38:cc: 7c:f9:5a:95:b1:30:b3:7f:51:40:38:bf:09:f0:dc: 7e:69:2b:09:d5:63:f5:66:8f:ac:eb:ed:ae:ee:18: b7:24:4a:56:16:d2:5d:25:a2:18:2c:b0:2a:66:64: bb:3a:d2:bb:59:b9:27:80:2d:47:f9:06:ba:2e:d5: 18:c4:26:b1:eb:e5:f4:6d:34:31:3d:f2:0e:ae:2c: ce:ae:01:50:1b:85:89:37:05:d0:03:a6:fa:17:d1: 8d:c2:bb:30:53:10:a8:88:f4:c0:66:a2:92:2a:06: ac:82:c6:3c:c1:50:f0:8c:98:5e:11:69:e0:9a:c7: 73:cc:32:57:2b:77:c4:db:f2:25:5a:b1:08:9d:22: 71:e4:a0:12:f6:23:f1:dc:bb:58:09:6b:15:8f:a7: 22:cf:b4:68:e1:17:8a:92:86:f9:66:fe:c9:f7:23: da:d6:f2:de:32:27:21:0c:e7:3c:57:b1:a6:74:00: 2a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B2:B2:0E:D3:72:E0:8B:6D:1F:4D:A5:DF:CD:F9:85:9C:F4:A7:22 X509v3 Authority Key Identifier: keyid:7A:CC:57:BA:30:42:B0:07:AA:16:13:35:2A:73:FF:D3:16:2E:56:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ACC57BA3042B007AA1613352A73FFD3162E565F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:30:ed:9b:16:e7:ca:c1:a7:78:3a:09:c4:e8:0e:c7:23:c2: 5f:1c:97:50:28:77:5e:68:f9:4d:0a:20:f9:f5:8c:06:03:c7: 30:fe:e8:7c:be:09:55:5e:fe:ab:ee:77:92:fd:a5:b6:2e:74: 84:f3:95:0a:0d:f5:40:ca:4e:05:1d:42:e4:72:9f:34:17:be: d7:4d:e3:c6:9b:02:f0:11:80:eb:62:ec:ac:4a:b0:c9:e6:ee: 0d:71:ef:08:4d:56:ac:4d:fb:9c:31:aa:8e:09:c3:1b:94:dd: 83:1c:75:8b:5a:68:d5:d7:32:23:56:68:fd:b5:ad:3b:bf:b0: 86:62:f9:5c:56:c7:75:c1:85:43:71:f2:16:2d:e2:85:3f:47: f9:a3:b5:29:09:e4:bf:b7:f7:80:b0:fb:c1:63:01:d3:ff:bd: d9:87:46:5b:04:41:d2:75:91:c3:cf:a3:ff:8b:85:28:e0:ba: a8:45:6e:df:26:31:4f:35:9b:aa:17:f0:05:2e:9b:6e:28:8a: c0:06:4a:ce:3a:50:61:fb:bc:74:25:59:c6:ed:b9:06:65:f6: af:ac:2e:66:b7:61:f7:0d:75:05:1a:fa:af:3e:84:09:51:37: 01:c7:b5:ec:f7:48:92:f9:16:27:a2:80:42:a9:93:dc:b5:6c: 96:21:aa:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOMPzhJSdyPAtBlon/TmyMROBcLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FDQzU3QkEzMDQyQjAwN0FBMTYxMzM1MkE3M0ZGRDMx NjJFNTY1RjAeFw0yNjEwMjQyMjAxMzlaFw0yNjEwMjYwMDI0MzlaMDMxMTAvBgNV BAMTKDQwQjJCMjBFRDM3MkUwOEI2RDFGNERBNURGQ0RGOTg1OUNGNEE3MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDItI1Mg3Fh955vqeMrWLznOadp HR5BnHhgyeqLeM0TKxDbq2erzDHbyankgKSZE/X+iuRQ09wKdSZBggAH7pLFspzG RtMk/qo4zHz5WpWxMLN/UUA4vwnw3H5pKwnVY/Vmj6zr7a7uGLckSlYW0l0lohgs sCpmZLs60rtZuSeALUf5Brou1RjEJrHr5fRtNDE98g6uLM6uAVAbhYk3BdADpvoX 0Y3CuzBTEKiI9MBmopIqBqyCxjzBUPCMmF4RaeCax3PMMlcrd8Tb8iVasQidInHk oBL2I/Hcu1gJaxWPpyLPtGjhF4qShvlm/sn3I9rW8t4yJyEM5zxXsaZ0ACqXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQLKyDtNy4IttH02l3835hZz0pyIwHwYDVR0j BBgwFoAUesxXujBCsAeqFhM1KnP/0xYuVl8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjBhODIwYjQtODJlZi00NDEyLWJlMmUtNWQ2OTE0YmQ0ODQ0LzAvN0FDQzU3QkEz MDQyQjAwN0FBMTYxMzM1MkE3M0ZGRDMxNjJFNTY1Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QUNDNTdCQTMwNDJCMDA3QUExNjEzMzUyQTczRkZEMzE2MkU1 NjVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjBhODIwYjQtODJlZi00NDEyLWJl MmUtNWQ2OTE0YmQ0ODQ0LzAvN0FDQzU3QkEzMDQyQjAwN0FBMTYxMzM1MkE3M0ZG RDMxNjJFNTY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKMw7ZsW58rBp3g6CcToDscjwl8cl1Aod15o +U0KIPn1jAYDxzD+6Hy+CVVe/qvud5L9pbYudITzlQoN9UDKTgUdQuRynzQXvtdN 48abAvARgOti7KxKsMnm7g1x7whNVqxN+5wxqo4JwxuU3YMcdYtaaNXXMiNWaP21 rTu/sIZi+VxWx3XBhUNx8hYt4oU/R/mjtSkJ5L+394Cw+8FjAdP/vdmHRlsEQdJ1 kcPPo/+LhSjguqhFbt8mMU81m6oX8AUum24oisAGSs46UGH7vHQlWcbtuQZl9q+s Lma3YfcNdQUa+q8+hAlRNwHHtez3SJL5FieigEKpk9y1bJYhqpY= -----END CERTIFICATE-----Generated at Sun Oct 25 06:08:30 2026 by rpki-client