$ rpki-client -vvvf rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft File: 7521EB714EF9A5F0A697E8574714A86DCF234610.mft (raw, json) Hash identifier: fyYxup9zrCGahoRryMeeCn+Xq8cj7/a6HYVvwgoUQUw= Subject key identifier: C7:3C:2E:9E:C7:57:19:1A:6A:B9:69:0C:02:89:42:E5:DC:9D:7C:2E Authority key identifier: 75:21:EB:71:4E:F9:A5:F0:A6:97:E8:57:47:14:A8:6D:CF:23:46:10 Certificate issuer: /CN=7521EB714EF9A5F0A697E8574714A86DCF234610 Certificate serial: 581FB81F51E410473ABF109A136E8A339F375BDC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft Manifest number: EE Signing time: Fri 16 Oct 2026 21:26:07 +0000 Manifest this update: Fri 16 Oct 2026 21:21:07 +0000 Manifest next update: Sat 17 Oct 2026 23:51:07 +0000 Files and hashes: 1: 3131392e34372e38392e302f32342d3234203d3e203338353237.roa (hash: c/ZF1aWYYnFDz5Gwg0w0tFfbUx8yzQQW9RzM+O5SB0A=) 2: 7521EB714EF9A5F0A697E8574714A86DCF234610.crl (hash: cInXVCZN4+SrHFrMczpPTi9bWY9HKPZDhTtA+qkjZX4=) 3: 3131392e34372e39352e302f32342d3234203d3e20313439343039.roa (hash: TS2p463fv/9DyZu6QnNhlvJI+JFIyXgQjG+Ob9/1Y6g=) 4: 3131392e34372e39302e302f32342d3234203d3e203338353237.roa (hash: dcVVKG4izCM1gb0p4eQeLHaBApqz8vGp0jvG9TGCAJ0=) 5: 32372e3132342e38332e302f32342d3234203d3e20313332363334.roa (hash: rQWHJknCSBXBPdquyEnbgQpik3OvzTZOMwyh2tsNM1M=) 6: 3131392e34372e38382e302f32342d3234203d3e203338353237.roa (hash: yffHTG+EllVLleEh6Oirz1/R0DaU0LdSs2f4Coe9+OM=) 7: 3130332e32352e3130382e302f32342d3234203d3e20313332363334.roa (hash: BP419rLo8u7KV+IdA+QhKzQqCTiad+JDOjmx+KPJYZ8=) 8: 3132342e3130392e32302e302f32322d3234203d3e203338353237.roa (hash: ZUtr0aSpRm1t31/oStRp0AgaY33s5oWHdknUIIZz1gM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.crl rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 23:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:1f:b8:1f:51:e4:10:47:3a:bf:10:9a:13:6e:8a:33:9f:37:5b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7521EB714EF9A5F0A697E8574714A86DCF234610 Validity Not Before: Oct 16 21:21:07 2026 GMT Not After : Oct 17 23:51:07 2026 GMT Subject: CN=C73C2E9EC757191A6AB9690C028942E5DC9D7C2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:16:5e:93:b0:e3:42:9b:a9:bc:c4:ab:dc:33: 5e:0c:76:04:43:fe:15:5b:17:b2:85:55:eb:50:47: a8:db:9e:23:ae:ab:13:69:1d:b0:74:ad:82:03:b5: 2a:00:5f:bb:89:83:9c:22:50:15:6d:18:45:a0:fb: f1:aa:a5:d8:cd:cb:db:63:5f:73:a3:87:8f:12:6c: 75:23:0a:6a:76:ef:57:e7:bf:82:6f:01:79:6f:22: 1c:b2:93:61:27:12:36:44:cd:44:14:61:6e:a0:44: 8e:bc:43:32:30:4d:ea:d0:a8:78:74:a7:79:f4:37: 83:60:e1:63:05:a6:bc:4e:ad:98:44:de:06:7d:80: d6:cd:45:40:63:03:0f:3c:97:44:55:49:bf:62:8d: 40:69:4f:8b:26:ef:24:47:0a:96:a2:bc:18:26:21: 89:7d:07:54:af:84:e2:1d:52:ab:ac:77:e1:2c:d5: ac:f5:13:f5:c9:f3:c2:97:72:9e:64:5a:01:68:d9: 5e:7a:a8:b7:54:9f:45:6a:5f:db:f6:28:ac:0c:1a: 02:a4:6e:59:41:3f:b6:ac:57:57:c5:ad:c5:f1:a9: 0c:13:ec:1c:b3:04:4e:bd:78:58:ec:73:a7:a5:28: d7:44:63:24:75:90:67:9c:74:dd:a8:7d:95:cc:b0: e2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:3C:2E:9E:C7:57:19:1A:6A:B9:69:0C:02:89:42:E5:DC:9D:7C:2E X509v3 Authority Key Identifier: keyid:75:21:EB:71:4E:F9:A5:F0:A6:97:E8:57:47:14:A8:6D:CF:23:46:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:a6:dd:6d:0f:09:d8:2e:c6:0e:b0:0f:7a:e0:dc:df:68:c2: 60:dc:cb:82:29:a2:a6:bc:9d:60:d4:47:62:c2:75:93:88:78: a1:f1:7c:3d:53:ed:ee:fa:45:04:b6:1d:e1:51:79:82:c1:c3: 1c:ba:f6:0e:da:97:48:dc:72:3f:bb:6f:53:1b:02:2b:35:99: 34:fb:ca:79:29:93:92:36:f5:a4:c2:b3:61:73:0b:06:bf:1a: 53:c6:fd:46:25:ca:cd:95:22:fa:56:1d:e3:ff:bc:c7:ee:ae: 42:b1:c3:13:1b:1c:c0:f5:38:6a:03:38:8c:15:83:70:48:e8: 28:d2:ba:0d:2e:37:4d:61:24:36:47:86:44:6a:5b:03:a4:47: 48:c4:1f:bc:7c:5f:88:b6:27:65:e2:58:02:c3:c1:a7:22:8e: 0d:2f:70:36:6e:6a:2e:89:3a:b2:46:7d:1c:41:d4:38:9a:00: f2:0e:c5:b9:71:e0:73:7b:e9:ab:31:6e:60:b4:ef:6e:d1:ba: 8e:e5:48:1f:62:43:87:11:d2:7d:4c:b4:4b:25:ca:ce:e6:64: fd:ee:8f:e2:04:d1:ea:49:5f:e7:84:34:35:e2:39:4c:98:10: 77:f1:05:b6:6f:e5:c3:65:d9:d1:a0:38:34:64:94:09:2e:e3: 5e:a5:bc:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWB+4H1HkEEc6vxCaE26KM583W9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzUyMUVCNzE0RUY5QTVGMEE2OTdFODU3NDcxNEE4NkRD RjIzNDYxMDAeFw0yNjEwMTYyMTIxMDdaFw0yNjEwMTcyMzUxMDdaMDMxMTAvBgNV BAMTKEM3M0MyRTlFQzc1NzE5MUE2QUI5NjkwQzAyODk0MkU1REM5RDdDMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjFl6TsONCm6m8xKvcM14MdgRD /hVbF7KFVetQR6jbniOuqxNpHbB0rYIDtSoAX7uJg5wiUBVtGEWg+/GqpdjNy9tj X3Ojh48SbHUjCmp271fnv4JvAXlvIhyyk2EnEjZEzUQUYW6gRI68QzIwTerQqHh0 p3n0N4Ng4WMFprxOrZhE3gZ9gNbNRUBjAw88l0RVSb9ijUBpT4sm7yRHCpaivBgm IYl9B1SvhOIdUqusd+Es1az1E/XJ88KXcp5kWgFo2V56qLdUn0VqX9v2KKwMGgKk bllBP7asV1fFrcXxqQwT7ByzBE69eFjsc6elKNdEYyR1kGecdN2ofZXMsOJ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxzwunsdXGRpquWkMAolC5dydfC4wHwYDVR0j BBgwFoAUdSHrcU75pfCml+hXRxSobc8jRhAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzE3ZWZkMmEtMDJhYi00MjAyLTk3MGYtZjY5OWRmZjk3ZGU1LzAvNzUyMUVCNzE0 RUY5QTVGMEE2OTdFODU3NDcxNEE4NkRDRjIzNDYxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NTIxRUI3MTRFRjlBNUYwQTY5N0U4NTc0NzE0QTg2RENGMjM0 NjEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzE3ZWZkMmEtMDJhYi00MjAyLTk3 MGYtZjY5OWRmZjk3ZGU1LzAvNzUyMUVCNzE0RUY5QTVGMEE2OTdFODU3NDcxNEE4 NkRDRjIzNDYxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGem3W0PCdguxg6wD3rg3N9owmDcy4Ipoqa8 nWDUR2LCdZOIeKHxfD1T7e76RQS2HeFReYLBwxy69g7al0jccj+7b1MbAis1mTT7 ynkpk5I29aTCs2FzCwa/GlPG/UYlys2VIvpWHeP/vMfurkKxwxMbHMD1OGoDOIwV g3BI6CjSug0uN01hJDZHhkRqWwOkR0jEH7x8X4i2J2XiWALDwacijg0vcDZuai6J OrJGfRxB1DiaAPIOxblx4HN76asxbmC0727Ruo7lSB9iQ4cR0n1MtEslys7mZP3u j+IE0epJX+eENDXiOUyYEHfxBbZv5cNl2dGgODRklAku416lvAo= -----END CERTIFICATE-----Generated at Sat Oct 17 12:06:04 2026 by rpki-client