$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft File: C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft (raw, json) Hash identifier: IfJY6bx1osR0Gaccxn6uAFs2QjIRXY/laN5snNMpQJ8= Subject key identifier: C6:9F:00:1E:9F:D5:A2:32:E8:E1:3E:65:52:FB:E3:9E:D2:F2:9F:24 Authority key identifier: C7:AF:EA:46:9B:71:F5:3F:5D:E5:7E:84:04:03:A9:F9:FE:D4:17:40 Certificate issuer: /CN=C7AFEA469B71F53F5DE57E840403A9F9FED41740 Certificate serial: 67C6475F347ADF6C46D0B1C2E5CC57D2A7E6A898 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 17:46:05 +0000 Manifest this update: Wed 16 Sep 2026 17:41:05 +0000 Manifest next update: Thu 17 Sep 2026 21:43:05 +0000 Files and hashes: 1: C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl (hash: mEOSvNi0HOFqK7iHT/2xTOUtWw9jE2oOmsgwprYskss=) 2: 3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa (hash: K7PbjaFE0zSsIAVA9HPV3S0+MEAkd6bF/CX8cBvwHhQ=) 3: 3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa (hash: U97xPJjDuxOPre3lfJTSP17ykfoHncWKjzWt6fvO8OU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:43:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:c6:47:5f:34:7a:df:6c:46:d0:b1:c2:e5:cc:57:d2:a7:e6:a8:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7AFEA469B71F53F5DE57E840403A9F9FED41740 Validity Not Before: Sep 16 17:41:05 2026 GMT Not After : Sep 17 21:43:05 2026 GMT Subject: CN=C69F001E9FD5A232E8E13E6552FBE39ED2F29F24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ed:27:42:e0:dc:e9:3c:85:5f:65:4b:85:32: a5:1b:86:4f:3c:50:9c:7b:a5:3f:2b:5d:83:15:7c: 79:58:27:aa:a8:9d:a1:d4:c9:b6:de:00:10:14:52: d6:cd:46:25:f9:69:77:ed:f5:af:01:bd:5a:fa:6a: 96:56:d8:ae:ef:7b:4e:25:2f:0a:3b:11:f5:8e:c2: 51:57:6a:69:64:77:94:81:b3:54:d4:30:b0:c5:94: 75:78:20:5e:e2:c9:ca:61:e1:22:f7:2f:5f:5e:31: 24:64:2b:dc:3f:f6:61:9b:0a:5e:a3:cf:a3:93:09: f4:48:09:7c:28:b4:8d:b0:7d:07:90:23:77:ec:78: 5e:c7:12:bd:27:42:aa:5f:e8:1e:a2:cb:8c:7d:58: f0:10:d4:74:ea:b2:cd:a7:c8:45:e7:27:b8:09:d8: 53:fd:6c:c3:fe:1d:36:b5:d5:09:f6:0d:30:83:9b: f3:92:59:61:80:50:5c:06:3c:91:c7:d0:ca:de:4a: 67:5c:c0:08:99:4c:df:c9:2c:b6:fb:8f:37:1a:31: aa:a8:fe:2d:c1:31:d1:b9:fd:78:95:b0:07:95:c5: 18:23:ec:28:8c:d0:ff:7f:e8:43:e3:f3:40:a1:f1: a4:91:09:6e:50:8e:60:9d:d9:e2:f5:b7:13:6c:2c: 68:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9F:00:1E:9F:D5:A2:32:E8:E1:3E:65:52:FB:E3:9E:D2:F2:9F:24 X509v3 Authority Key Identifier: keyid:C7:AF:EA:46:9B:71:F5:3F:5D:E5:7E:84:04:03:A9:F9:FE:D4:17:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:63:a5:cd:79:9e:7b:eb:c3:fb:ce:33:4d:21:a7:9a:a4:9d: af:fb:9f:2e:66:7d:a0:32:d4:5e:9b:fe:a6:bd:2e:d2:83:60: 1a:54:76:4b:f4:a9:33:c3:d3:38:68:31:78:53:56:f4:f3:31: 44:ce:28:cd:20:e4:58:a7:61:fb:6b:42:31:e3:c9:d9:8c:6a: 21:a1:f6:78:75:c7:15:1e:59:5c:e9:5d:75:87:05:c1:2a:0b: cd:31:79:2b:38:49:60:23:ba:ad:c9:e6:4b:78:c4:3d:02:b6: a7:a7:32:76:68:4d:21:46:bb:53:8c:52:17:33:9f:5f:cc:d3: 07:6d:82:3f:f6:f7:bc:b4:52:20:2f:cd:86:51:9a:b0:36:a2: 8a:05:6e:92:f9:ef:69:71:fa:1c:d4:1a:b9:66:ab:a9:89:b9: 12:1c:e4:82:42:0b:d8:52:45:d9:05:9a:76:66:eb:c8:a4:32: ed:8a:19:f4:65:7e:67:04:66:03:df:82:3b:3d:2e:ac:ae:55: af:66:69:61:9d:ec:2a:c2:6e:83:ca:72:7b:ce:b8:a5:7b:ce: 3c:95:ff:c4:55:ac:62:0b:9a:0d:34:ab:69:63:f1:e8:ef:4c: 31:b2:8e:00:77:24:26:ce:05:64:13:06:3b:4f:ef:cc:2a:1b: 10:1f:41:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ8ZHXzR632xG0LHC5cxX0qfmqJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdBRkVBNDY5QjcxRjUzRjVERTU3RTg0MDQwM0E5RjlG RUQ0MTc0MDAeFw0yNjA5MTYxNzQxMDVaFw0yNjA5MTcyMTQzMDVaMDMxMTAvBgNV BAMTKEM2OUYwMDFFOUZENUEyMzJFOEUxM0U2NTUyRkJFMzlFRDJGMjlGMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa7SdC4NzpPIVfZUuFMqUbhk88 UJx7pT8rXYMVfHlYJ6qonaHUybbeABAUUtbNRiX5aXft9a8BvVr6apZW2K7ve04l Lwo7EfWOwlFXamlkd5SBs1TUMLDFlHV4IF7iycph4SL3L19eMSRkK9w/9mGbCl6j z6OTCfRICXwotI2wfQeQI3fseF7HEr0nQqpf6B6iy4x9WPAQ1HTqss2nyEXnJ7gJ 2FP9bMP+HTa11Qn2DTCDm/OSWWGAUFwGPJHH0MreSmdcwAiZTN/JLLb7jzcaMaqo /i3BMdG5/XiVsAeVxRgj7CiM0P9/6EPj80Ch8aSRCW5QjmCd2eL1txNsLGi7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxp8AHp/VojLo4T5lUvvjntLynyQwHwYDVR0j BBgwFoAUx6/qRptx9T9d5X6EBAOp+f7UF0AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2FjNGQ3NWUtM2RhOC00OTkwLTgwNDItN2UwZWNmNTlmMTNiLzAvQzdBRkVBNDY5 QjcxRjUzRjVERTU3RTg0MDQwM0E5RjlGRUQ0MTc0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DN0FGRUE0NjlCNzFGNTNGNURFNTdFODQwNDAzQTlGOUZFRDQx NzQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2FjNGQ3NWUtM2RhOC00OTkwLTgw NDItN2UwZWNmNTlmMTNiLzAvQzdBRkVBNDY5QjcxRjUzRjVERTU3RTg0MDQwM0E5 RjlGRUQ0MTc0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVjpc15nnvrw/vOM00hp5qkna/7ny5mfaAy 1F6b/qa9LtKDYBpUdkv0qTPD0zhoMXhTVvTzMUTOKM0g5FinYftrQjHjydmMaiGh 9nh1xxUeWVzpXXWHBcEqC80xeSs4SWAjuq3J5kt4xD0CtqenMnZoTSFGu1OMUhcz n1/M0wdtgj/297y0UiAvzYZRmrA2oooFbpL572lx+hzUGrlmq6mJuRIc5IJCC9hS RdkFmnZm68ikMu2KGfRlfmcEZgPfgjs9LqyuVa9maWGd7CrCboPKcnvOuKV7zjyV /8RVrGILmg00q2lj8ejvTDGyjgB3JCbOBWQTBjtP78wqGxAfQXg= -----END CERTIFICATE-----Generated at Thu Sep 17 15:19:58 2026 by rpki-client