$ rpki-client -vvvf rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft File: 7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft (raw, json) Hash identifier: ziaBDo95ihHoxCob1COVMnnLjV4Oz6eWTJfIsS26ob8= Subject key identifier: 70:E0:AF:8F:9A:52:E1:C8:25:AF:10:BB:8B:C8:A4:99:76:3F:75:02 Authority key identifier: 7C:A7:C7:E6:03:DB:E1:4E:06:E9:48:C7:48:A3:85:43:F5:F5:E7:26 Certificate issuer: /CN=7CA7C7E603DBE14E06E948C748A38543F5F5E726 Certificate serial: 0AE0D9C7803A4580FA4067D7F5BAEA5ECFEEC57A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA7C7E603DBE14E06E948C748A38543F5F5E726.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 23:53:26 +0000 Manifest this update: Wed 16 Sep 2026 23:48:26 +0000 Manifest next update: Thu 17 Sep 2026 23:58:26 +0000 Files and hashes: 1: 3230322e34362e3134342e302f32322d3234203d3e203138303536.roa (hash: oDQWvgAroc6j8Zz7ACtwggHFMEzsZVwlsq4pDyGB050=) 2: 323430323a383263303a3a2f33322d3438203d3e203138303536.roa (hash: slMWOkKg1OA+OP/zcUxoXUDIah1vgvG+HFFav6ni4c4=) 3: 7CA7C7E603DBE14E06E948C748A38543F5F5E726.crl (hash: SUqt8UuJL4kSxqNDDfbDQhIARJDdfLPrFVK41tCEQwk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.crl rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA7C7E603DBE14E06E948C748A38543F5F5E726.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:e0:d9:c7:80:3a:45:80:fa:40:67:d7:f5:ba:ea:5e:cf:ee:c5:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA7C7E603DBE14E06E948C748A38543F5F5E726 Validity Not Before: Sep 16 23:48:26 2026 GMT Not After : Sep 17 23:58:26 2026 GMT Subject: CN=70E0AF8F9A52E1C825AF10BB8BC8A499763F7502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8b:8c:db:e3:4f:91:f4:26:34:0c:d3:88:fe: 39:f2:86:4b:8f:7b:81:1f:38:b8:6d:58:52:aa:4d: fc:21:00:ec:9f:ec:e0:78:77:e5:cb:b0:8b:ed:85: d6:7c:fb:b8:bb:05:25:cd:fd:12:a9:c2:63:66:12: 6d:aa:bf:ae:1d:c5:9e:f4:7b:f4:64:84:a0:f3:92: 80:70:4d:a6:b0:cf:78:16:dd:79:8f:11:5d:87:2c: 59:3d:1f:dd:dd:b1:70:ab:e3:26:26:e5:43:db:38: 32:33:8e:85:33:c2:a2:9c:df:80:d1:b0:ac:de:41: 73:0f:71:5b:83:32:46:8b:18:c3:f4:c3:8e:83:76: f2:3c:be:d9:1f:fd:3f:19:b7:d9:b1:bd:39:51:76: 9a:57:9d:8d:da:26:e1:23:75:a8:cb:26:bd:6d:83: 0c:9a:87:da:4f:a5:37:ac:c8:25:fe:8d:bd:4f:ed: 52:10:ff:3d:87:3f:8c:33:10:c9:68:4c:1b:87:75: a2:ab:7b:59:51:39:f3:34:00:11:37:d4:65:bd:1a: 7a:c2:9a:3f:6d:e0:f8:ed:ad:47:aa:5e:7f:ce:ec: ee:e6:d2:5b:cb:83:c0:25:3e:91:81:57:25:59:71: 07:9c:6e:66:e7:04:e0:1d:9d:28:85:27:dd:dc:e6: 31:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E0:AF:8F:9A:52:E1:C8:25:AF:10:BB:8B:C8:A4:99:76:3F:75:02 X509v3 Authority Key Identifier: keyid:7C:A7:C7:E6:03:DB:E1:4E:06:E9:48:C7:48:A3:85:43:F5:F5:E7:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA7C7E603DBE14E06E948C748A38543F5F5E726.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:f4:3a:f2:a2:f5:a7:f3:67:fe:f2:7d:d4:6b:c6:fc:fe:bc: 83:a8:18:07:0a:d1:6d:bb:bf:46:0f:31:e3:bc:55:22:90:21: 62:6a:49:20:d9:7a:08:14:f1:ef:b3:1c:56:e7:ca:88:87:9e: bd:16:aa:37:e2:91:84:11:55:1f:71:fb:3e:1f:58:3c:ed:29: c1:9b:8a:75:f9:9d:16:bd:56:99:21:74:95:0d:12:2e:c6:8b: 45:5b:9f:3a:f1:d7:36:8a:44:4a:51:88:49:64:76:48:c8:ac: 51:85:66:a8:0d:62:b7:25:34:9c:b9:65:94:2c:02:18:d3:60: ed:18:e8:36:80:5e:17:49:12:a4:51:75:6e:fa:b8:f9:4e:f5: d8:2d:b5:3d:24:02:d6:1a:b3:04:65:af:44:d7:1e:e2:8a:cf: 70:0d:8c:de:34:7f:9b:c3:34:b4:7f:da:31:a7:f1:6f:c0:70: 15:4d:57:99:d7:24:c6:07:fc:5b:fd:3a:d1:8b:50:c6:fc:bc: 1e:3d:3d:8f:14:4f:64:e7:6f:e0:72:de:a4:95:25:f0:23:b9: 96:ae:4b:d9:3b:ec:ad:71:51:5b:ed:ac:2a:1a:b9:9a:9a:94: dd:15:ad:89:3c:04:57:22:8e:2b:2d:93:16:1b:44:0d:b0:7e: 01:7f:c7:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCuDZx4A6RYD6QGfX9brqXs/uxXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBN0M3RTYwM0RCRTE0RTA2RTk0OEM3NDhBMzg1NDNG NUY1RTcyNjAeFw0yNjA5MTYyMzQ4MjZaFw0yNjA5MTcyMzU4MjZaMDMxMTAvBgNV BAMTKDcwRTBBRjhGOUE1MkUxQzgyNUFGMTBCQjhCQzhBNDk5NzYzRjc1MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbi4zb40+R9CY0DNOI/jnyhkuP e4EfOLhtWFKqTfwhAOyf7OB4d+XLsIvthdZ8+7i7BSXN/RKpwmNmEm2qv64dxZ70 e/RkhKDzkoBwTaawz3gW3XmPEV2HLFk9H93dsXCr4yYm5UPbODIzjoUzwqKc34DR sKzeQXMPcVuDMkaLGMP0w46DdvI8vtkf/T8Zt9mxvTlRdppXnY3aJuEjdajLJr1t gwyah9pPpTesyCX+jb1P7VIQ/z2HP4wzEMloTBuHdaKre1lROfM0ABE31GW9GnrC mj9t4PjtrUeqXn/O7O7m0lvLg8AlPpGBVyVZcQecbmbnBOAdnSiFJ93c5jGNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcOCvj5pS4cglrxC7i8ikmXY/dQIwHwYDVR0j BBgwFoAUfKfH5gPb4U4G6UjHSKOFQ/X15yYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjRmN2ViNGYtNzkyNC00ZGI2LWI2ZDYtMzk0ZDgzYjM5MmZjLzAvN0NBN0M3RTYw M0RCRTE0RTA2RTk0OEM3NDhBMzg1NDNGNUY1RTcyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Q0E3QzdFNjAzREJFMTRFMDZFOTQ4Qzc0OEEzODU0M0Y1RjVF NzI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjRmN2ViNGYtNzkyNC00ZGI2LWI2 ZDYtMzk0ZDgzYjM5MmZjLzAvN0NBN0M3RTYwM0RCRTE0RTA2RTk0OEM3NDhBMzg1 NDNGNUY1RTcyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABT0OvKi9afzZ/7yfdRrxvz+vIOoGAcK0W27 v0YPMeO8VSKQIWJqSSDZeggU8e+zHFbnyoiHnr0WqjfikYQRVR9x+z4fWDztKcGb inX5nRa9VpkhdJUNEi7Gi0Vbnzrx1zaKREpRiElkdkjIrFGFZqgNYrclNJy5ZZQs AhjTYO0Y6DaAXhdJEqRRdW76uPlO9dgttT0kAtYaswRlr0TXHuKKz3ANjN40f5vD NLR/2jGn8W/AcBVNV5nXJMYH/Fv9OtGLUMb8vB49PY8UT2Tnb+By3qSVJfAjuZau S9k77K1xUVvtrCoauZqalN0VrYk8BFcijistkxYbRA2wfgF/x3I= -----END CERTIFICATE-----Generated at Thu Sep 17 14:33:42 2026 by rpki-client