$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft File: 793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft (raw, json) Hash identifier: X6ZrpFgCzuKaaeXL9Jsm+3nsTWT0lt6suk1gvkE29Zk= Subject key identifier: E2:E4:76:97:18:57:3A:D0:A2:0F:9D:9F:E4:E0:20:9C:A9:B0:06:10 Authority key identifier: 79:32:90:E7:EC:15:5F:F7:1C:44:DB:64:68:CE:D7:98:5C:BF:2D:F5 Certificate issuer: /CN=793290E7EC155FF71C44DB6468CED7985CBF2DF5 Certificate serial: 6AA419B305C49C4E776E7342B4CBF79AE458021D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/793290E7EC155FF71C44DB6468CED7985CBF2DF5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 19:07:51 +0000 Manifest this update: Wed 16 Sep 2026 19:02:51 +0000 Manifest next update: Thu 17 Sep 2026 22:58:51 +0000 Files and hashes: 1: 3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa (hash: 1ZSbqejAXASSMS+yiCaDvvpugHjgj1M6wD3m+4/7wrE=) 2: 3130332e38332e3131372e302f32342d3234203d3e20313336303634.roa (hash: 0QGECZtZ4NpVwUmkTwNZiQAD/nvM6N9DYMd+ulfiukw=) 3: 3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa (hash: CYcQtk6Q2BGiqIh55Kes8nmVzVHDPahaB/OUEW8nJ4s=) 4: 793290E7EC155FF71C44DB6468CED7985CBF2DF5.crl (hash: RdyqCkNdOMi5zw8juaP9LrMZYnpO7lSEB0n2iJqzeUU=) 5: 3130332e38332e3131392e302f32342d3234203d3e20313336303634.roa (hash: m8ctD+xav7ZeI0n+/CZUY0lL5X8THNniko/PGJK1gwE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.crl rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/793290E7EC155FF71C44DB6468CED7985CBF2DF5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:a4:19:b3:05:c4:9c:4e:77:6e:73:42:b4:cb:f7:9a:e4:58:02:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=793290E7EC155FF71C44DB6468CED7985CBF2DF5 Validity Not Before: Sep 16 19:02:51 2026 GMT Not After : Sep 17 22:58:51 2026 GMT Subject: CN=E2E4769718573AD0A20F9D9FE4E0209CA9B00610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d1:66:87:af:d2:7e:4b:52:53:cd:97:11:26: 19:98:f4:2e:98:53:5e:64:96:72:66:b3:c3:38:8b: c5:3b:80:e7:1f:cd:17:9b:c8:e2:6d:1a:35:4a:1e: 94:a0:e4:32:cf:7f:86:4e:20:28:0a:bc:97:0b:a2: 9c:b4:74:85:e1:8a:98:ee:47:32:0f:fa:83:48:cc: 29:0b:2c:01:30:4c:6f:1c:09:ea:6e:a4:ef:7c:f3: 83:13:9b:ce:bb:a3:b5:01:68:6a:da:91:aa:99:1b: c3:a8:ad:af:b2:05:d3:48:a1:c5:98:97:8d:5f:43: ab:e7:77:06:88:c7:0d:9e:7b:61:4d:fe:7b:b3:78: 7a:83:8d:7e:27:84:4f:84:8d:fb:5d:07:66:c0:4c: 53:ee:0f:40:80:9e:66:c9:fa:99:72:85:05:0f:35: 9e:8a:d7:9c:c9:4b:1d:9d:66:1c:c8:a3:9d:4b:46: 78:93:31:bd:0e:95:42:89:10:82:19:a6:69:4c:2b: b0:2c:0e:8d:44:eb:67:df:19:8a:e1:3c:34:af:64: 6e:ad:b6:2d:f7:a9:df:c3:47:9f:0b:10:46:d3:29: 52:d4:e1:7d:24:0d:7a:80:12:06:44:74:d2:bb:23: dc:db:a9:5b:18:98:08:89:9c:53:56:9c:d8:3d:4d: 29:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E4:76:97:18:57:3A:D0:A2:0F:9D:9F:E4:E0:20:9C:A9:B0:06:10 X509v3 Authority Key Identifier: keyid:79:32:90:E7:EC:15:5F:F7:1C:44:DB:64:68:CE:D7:98:5C:BF:2D:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/793290E7EC155FF71C44DB6468CED7985CBF2DF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:b6:59:c0:d7:83:de:10:ee:b9:6f:93:6b:30:6c:22:93:cf: ec:21:2d:84:a8:1f:be:54:f2:c9:bd:24:a2:a0:c4:cd:fc:94: 72:6c:0d:e9:e9:eb:1c:10:45:6e:7c:05:3f:e8:7c:6b:20:f0: c9:94:91:d4:ae:fa:a6:0a:17:52:93:8e:e8:a1:59:d6:f3:a1: f1:7a:db:e1:2c:50:a1:3c:e2:85:6c:c6:37:74:6d:1e:52:af: 7b:3d:56:a7:de:3e:05:37:d6:ce:b0:c9:07:2f:c9:20:b2:1b: 9e:36:48:fe:d9:bb:39:05:2d:74:d6:a3:bb:49:a1:41:8c:47: 6f:68:c3:1d:28:07:a4:da:7d:4e:9f:3a:1f:36:0e:dd:22:c3: f2:31:99:6b:c6:3d:2f:89:6b:1c:e3:66:16:de:d2:5e:4a:37: ab:92:d9:07:0b:b8:2c:98:57:b9:a7:33:66:6e:d3:cb:d0:9b: 87:d3:e9:10:3f:40:49:38:f3:d5:92:87:a4:9f:83:66:3b:ca: a7:34:76:07:91:4a:fe:82:9f:d8:75:15:a6:99:9f:50:c5:c9: 0f:e2:4b:28:49:16:0a:1f:3d:e1:89:0e:cc:42:0d:ba:f0:15: f8:ce:a5:c5:27:28:de:53:7a:40:db:5f:22:2f:62:7c:79:9a: 24:5f:4e:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaqQZswXEnE53bnNCtMv3muRYAh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzkzMjkwRTdFQzE1NUZGNzFDNDREQjY0NjhDRUQ3OTg1 Q0JGMkRGNTAeFw0yNjA5MTYxOTAyNTFaFw0yNjA5MTcyMjU4NTFaMDMxMTAvBgNV BAMTKEUyRTQ3Njk3MTg1NzNBRDBBMjBGOUQ5RkU0RTAyMDlDQTlCMDA2MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt0WaHr9J+S1JTzZcRJhmY9C6Y U15klnJms8M4i8U7gOcfzRebyOJtGjVKHpSg5DLPf4ZOICgKvJcLopy0dIXhipju RzIP+oNIzCkLLAEwTG8cCepupO9884MTm867o7UBaGrakaqZG8Oora+yBdNIocWY l41fQ6vndwaIxw2ee2FN/nuzeHqDjX4nhE+EjftdB2bATFPuD0CAnmbJ+plyhQUP NZ6K15zJSx2dZhzIo51LRniTMb0OlUKJEIIZpmlMK7AsDo1E62ffGYrhPDSvZG6t ti33qd/DR58LEEbTKVLU4X0kDXqAEgZEdNK7I9zbqVsYmAiJnFNWnNg9TSndAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4uR2lxhXOtCiD52f5OAgnKmwBhAwHwYDVR0j BBgwFoAUeTKQ5+wVX/ccRNtkaM7XmFy/LfUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGU5OGIzYmQtMjg0ZC00YTdkLTlmMjctY2I1ODdlOWRkODQxLzAvNzkzMjkwRTdF QzE1NUZGNzFDNDREQjY0NjhDRUQ3OTg1Q0JGMkRGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OTMyOTBFN0VDMTU1RkY3MUM0NERCNjQ2OENFRDc5ODVDQkYy REY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGU5OGIzYmQtMjg0ZC00YTdkLTlm MjctY2I1ODdlOWRkODQxLzAvNzkzMjkwRTdFQzE1NUZGNzFDNDREQjY0NjhDRUQ3 OTg1Q0JGMkRGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADO2WcDXg94Q7rlvk2swbCKTz+whLYSoH75U 8sm9JKKgxM38lHJsDenp6xwQRW58BT/ofGsg8MmUkdSu+qYKF1KTjuihWdbzofF6 2+EsUKE84oVsxjd0bR5Sr3s9VqfePgU31s6wyQcvySCyG542SP7ZuzkFLXTWo7tJ oUGMR29owx0oB6TafU6fOh82Dt0iw/IxmWvGPS+JaxzjZhbe0l5KN6uS2QcLuCyY V7mnM2Zu08vQm4fT6RA/QEk489WSh6Sfg2Y7yqc0dgeRSv6Cn9h1FaaZn1DFyQ/i SyhJFgofPeGJDsxCDbrwFfjOpcUnKN5TekDbXyIvYnx5miRfTio= -----END CERTIFICATE-----Generated at Thu Sep 17 09:14:01 2026 by rpki-client