$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.mft File: 7CA991AB85999F4151C22A6310EF08374F65F5D1.mft (raw, json) Hash identifier: uik3r4hhwCdr6usVcKulk2krDhsGPE6GiwhHfephZpw= Subject key identifier: 7A:B9:B4:5A:D3:1E:78:D2:7D:8D:A0:FC:C6:6B:F8:F7:B7:B0:5A:F9 Authority key identifier: 7C:A9:91:AB:85:99:9F:41:51:C2:2A:63:10:EF:08:37:4F:65:F5:D1 Certificate issuer: /CN=7CA991AB85999F4151C22A6310EF08374F65F5D1 Certificate serial: 6C2D1FBF28A93635B53AF8D42AAC59B29A36BD81 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA991AB85999F4151C22A6310EF08374F65F5D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.mft Manifest number: BA Signing time: Wed 16 Sep 2026 23:38:05 +0000 Manifest this update: Wed 16 Sep 2026 23:33:05 +0000 Manifest next update: Fri 18 Sep 2026 01:09:05 +0000 Files and hashes: 1: 3130332e3234382e3139362e302f32322d3234203d3e20313331373436.roa (hash: vv5Cos9qjIQTiJSbLjTdmGt6+eV8UT6ZYwAxqnFGFFo=) 2: 323430303a663334303a3a2f33322d3438203d3e20313331373436.roa (hash: TXX1EsQWcyzmG34D8pyojWErAMIsJ/+eZmwKf6nr6gQ=) 3: 3130332e32312e3230342e302f32322d3234203d3e20313331373436.roa (hash: sjq69LFtU6bk76TnhR0cZc6EeNyTMnt01vwHn/mhzio=) 4: 7CA991AB85999F4151C22A6310EF08374F65F5D1.crl (hash: jJl+etqNFC1BZ78SVvE3rJs3tp7G4NaO3DHlcRfT7kE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.crl rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA991AB85999F4151C22A6310EF08374F65F5D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:2d:1f:bf:28:a9:36:35:b5:3a:f8:d4:2a:ac:59:b2:9a:36:bd:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA991AB85999F4151C22A6310EF08374F65F5D1 Validity Not Before: Sep 16 23:33:05 2026 GMT Not After : Sep 18 01:09:05 2026 GMT Subject: CN=7AB9B45AD31E78D27D8DA0FCC66BF8F7B7B05AF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:71:9f:6b:39:23:22:16:ee:dd:e5:c7:0f:83: 74:a6:99:ee:14:52:38:7a:0f:83:02:8a:18:fc:97: 72:d0:3f:e2:e5:b0:ee:90:a9:9a:f8:91:a3:29:1b: 12:91:f6:7a:30:56:d7:c2:b7:16:75:a4:99:44:44: 80:3c:8e:ae:87:d3:bd:50:0d:c1:bd:f9:d5:f0:70: 4f:1a:42:f1:da:4d:e9:e6:ca:1c:06:24:75:c4:a4: bf:34:e8:19:a7:a6:e0:4e:e8:f1:2a:6a:94:3b:0f: 95:6b:11:58:63:c9:51:f1:bb:6f:05:b0:ee:3f:f5: f7:aa:08:e3:46:26:d7:9b:cf:d5:10:be:7b:2a:d7: 99:73:8b:99:38:d3:d4:4b:71:48:60:2a:af:61:b3: 52:24:b7:6b:12:2f:51:c3:43:13:1c:a0:8f:84:41: 9b:5c:a6:4d:82:75:83:c0:ec:9f:10:8d:97:b0:0e: 03:2c:d5:e3:e0:a2:55:f6:54:9c:e4:81:e0:87:4e: 14:eb:9b:80:31:4c:04:bb:55:44:67:ad:4b:44:15: 1d:78:9f:27:3f:34:13:06:05:3e:30:8b:e3:41:ec: 93:6e:1d:af:74:56:e7:25:d3:da:1a:b5:cf:24:f0: 4a:44:58:26:5b:b5:45:fb:ca:76:bb:ee:5d:37:9c: c3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B9:B4:5A:D3:1E:78:D2:7D:8D:A0:FC:C6:6B:F8:F7:B7:B0:5A:F9 X509v3 Authority Key Identifier: keyid:7C:A9:91:AB:85:99:9F:41:51:C2:2A:63:10:EF:08:37:4F:65:F5:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA991AB85999F4151C22A6310EF08374F65F5D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:b5:db:a3:12:d5:d4:70:27:47:f4:41:21:07:09:37:ee:15: b2:ad:cd:72:11:53:fd:38:ee:ae:12:e5:8d:78:09:17:8c:bc: 48:9a:f0:d7:80:30:f5:bd:60:c5:96:56:ca:d9:9c:93:c4:02: 9e:16:0e:79:6a:64:29:56:e0:5f:32:ed:79:15:2b:3b:27:4e: bf:de:7a:79:f9:b7:b7:65:d6:41:3d:7c:50:c4:93:6c:2f:db: 9a:9c:ac:61:6d:43:83:5d:0a:95:87:9d:f0:db:15:56:8a:65: c2:87:5d:73:0f:7e:91:da:66:f4:a1:c9:cd:08:9f:9f:42:08: 9f:a6:5b:6f:86:3a:60:ea:22:3d:d5:0b:91:37:66:87:28:46: 5a:69:5e:4e:d8:0c:35:b3:04:4e:68:f2:23:45:65:3c:d8:94: 33:13:2f:2c:76:78:de:03:39:87:97:24:d0:8c:27:1f:38:4e: 03:1e:3c:ac:1b:dd:e5:9f:56:ca:97:c7:3e:ef:30:d0:22:c4: 98:e2:93:38:76:82:17:bb:b1:da:c3:6d:ae:0f:a3:9f:a6:2c: c1:42:86:f6:b3:40:47:e2:3e:23:c7:53:32:82:68:e4:35:79: 02:1f:3f:80:96:9c:ac:e4:2b:24:f6:37:98:67:50:2f:f5:06: 21:0a:e2:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbC0fvyipNjW1OvjUKqxZspo2vYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBOTkxQUI4NTk5OUY0MTUxQzIyQTYzMTBFRjA4Mzc0 RjY1RjVEMTAeFw0yNjA5MTYyMzMzMDVaFw0yNjA5MTgwMTA5MDVaMDMxMTAvBgNV BAMTKDdBQjlCNDVBRDMxRTc4RDI3RDhEQTBGQ0M2NkJGOEY3QjdCMDVBRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZcZ9rOSMiFu7d5ccPg3Smme4U Ujh6D4MCihj8l3LQP+LlsO6QqZr4kaMpGxKR9nowVtfCtxZ1pJlERIA8jq6H071Q DcG9+dXwcE8aQvHaTenmyhwGJHXEpL806BmnpuBO6PEqapQ7D5VrEVhjyVHxu28F sO4/9feqCONGJtebz9UQvnsq15lzi5k409RLcUhgKq9hs1Ikt2sSL1HDQxMcoI+E QZtcpk2CdYPA7J8QjZewDgMs1ePgolX2VJzkgeCHThTrm4AxTAS7VURnrUtEFR14 nyc/NBMGBT4wi+NB7JNuHa90Vucl09oatc8k8EpEWCZbtUX7yna77l03nMO3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUerm0WtMeeNJ9jaD8xmv497ewWvkwHwYDVR0j BBgwFoAUfKmRq4WZn0FRwipjEO8IN09l9dEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmJlNTc4ZDAtZDNhYS00ZjBmLWJiOWQtZjc0YjQ5YzZhNjU1LzAvN0NBOTkxQUI4 NTk5OUY0MTUxQzIyQTYzMTBFRjA4Mzc0RjY1RjVEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Q0E5OTFBQjg1OTk5RjQxNTFDMjJBNjMxMEVGMDgzNzRGNjVG NUQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmJlNTc4ZDAtZDNhYS00ZjBmLWJi OWQtZjc0YjQ5YzZhNjU1LzAvN0NBOTkxQUI4NTk5OUY0MTUxQzIyQTYzMTBFRjA4 Mzc0RjY1RjVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGW126MS1dRwJ0f0QSEHCTfuFbKtzXIRU/04 7q4S5Y14CReMvEia8NeAMPW9YMWWVsrZnJPEAp4WDnlqZClW4F8y7XkVKzsnTr/e enn5t7dl1kE9fFDEk2wv25qcrGFtQ4NdCpWHnfDbFVaKZcKHXXMPfpHaZvShyc0I n59CCJ+mW2+GOmDqIj3VC5E3ZocoRlppXk7YDDWzBE5o8iNFZTzYlDMTLyx2eN4D OYeXJNCMJx84TgMePKwb3eWfVsqXxz7vMNAixJjikzh2ghe7sdrDba4Po5+mLMFC hvazQEfiPiPHUzKCaOQ1eQIfP4CWnKzkKyT2N5hnUC/1BiEK4lE= -----END CERTIFICATE-----Generated at Thu Sep 17 13:11:39 2026 by rpki-client