$ rpki-client -vvvf rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft File: 7C6942D9E39D2E0708854282CB6A37230729EB7C.mft (raw, json) Hash identifier: a0ItpWY3V6N2OsaXd8e8RzfY3IJEaJPXW76B+EJ+ocg= Subject key identifier: 58:77:87:6B:03:B2:08:F4:26:70:A5:1F:C5:8E:61:A9:3E:38:90:D8 Authority key identifier: 7C:69:42:D9:E3:9D:2E:07:08:85:42:82:CB:6A:37:23:07:29:EB:7C Certificate issuer: /CN=7C6942D9E39D2E0708854282CB6A37230729EB7C Certificate serial: 1CE81B5237263DFDF7E186BE6E2B97D4D5080FD6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft Manifest number: 9A Signing time: Tue 25 Aug 2026 13:13:07 +0000 Manifest this update: Tue 25 Aug 2026 13:08:07 +0000 Manifest next update: Wed 26 Aug 2026 16:46:07 +0000 Files and hashes: 1: 3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa (hash: a/D2rVaWkVN5pmkQwkGcUtFXfVxfJlNH614eeRJToo8=) 2: 3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa (hash: JAIdekl6qx6Yav3DLzW5vQbW9XO1mtiJq5doPkJbVhQ=) 3: 3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa (hash: 81IWbLsi74joj24luAk9XXdkDSmApQhMyYOQhkwPoaQ=) 4: 7C6942D9E39D2E0708854282CB6A37230729EB7C.crl (hash: s3IBOVpLN8y19+MSmxpORkocwR9oSu27Bid9150RzZk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.crl rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 16:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:e8:1b:52:37:26:3d:fd:f7:e1:86:be:6e:2b:97:d4:d5:08:0f:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C6942D9E39D2E0708854282CB6A37230729EB7C Validity Not Before: Aug 25 13:08:07 2026 GMT Not After : Aug 26 16:46:07 2026 GMT Subject: CN=5877876B03B208F42670A51FC58E61A93E3890D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:75:a1:11:a7:e4:2f:2f:74:78:3f:5d:fa:de: dc:85:96:1e:ae:78:55:80:e2:1e:e6:d9:f8:75:fc: ad:fe:30:64:07:19:52:a1:ad:71:40:e8:ee:2b:66: 78:4f:1c:2d:ff:f3:08:98:35:fe:37:91:c4:47:64: ef:2a:eb:ab:fc:ec:3b:73:a7:f0:c6:83:2a:fa:6d: 51:9c:3f:29:06:db:7d:76:02:98:76:c0:ae:89:3b: cf:77:81:89:bd:f9:d1:7b:0c:07:eb:55:94:a4:0b: 5e:3d:85:93:b8:ea:04:db:91:0a:19:4e:96:40:9a: 0f:fe:c1:37:d7:75:05:69:e0:10:35:bf:01:35:87: c8:8a:dc:2f:16:b0:ce:98:ba:cc:ad:6a:dc:6c:dd: 8c:74:a0:27:4d:6f:02:44:5b:d2:6d:fd:d3:ce:dc: ea:cf:00:5c:56:79:58:8f:94:9c:1a:e8:e6:97:3d: 2d:4a:cc:5d:3f:ec:e1:16:25:43:1e:c3:86:5c:90: 1a:54:81:d6:b1:67:58:e3:d5:20:66:5d:4c:03:38: 02:eb:55:29:dd:c3:1b:a0:4e:d2:d5:37:93:1b:90: bb:eb:7d:96:2f:3e:6e:c1:56:5d:07:c3:77:9d:f0: 1c:51:33:ac:c9:be:f5:7a:c7:14:b4:47:07:c2:ca: e3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:77:87:6B:03:B2:08:F4:26:70:A5:1F:C5:8E:61:A9:3E:38:90:D8 X509v3 Authority Key Identifier: keyid:7C:69:42:D9:E3:9D:2E:07:08:85:42:82:CB:6A:37:23:07:29:EB:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:83:6f:cb:a6:58:d2:5d:ca:c7:e8:75:a0:79:b4:4e:2b:78: d7:2d:0e:a3:75:01:a3:f2:5e:12:eb:96:8d:46:23:f5:f9:c9: ac:4a:c3:e6:c8:f9:26:d7:50:99:e9:73:b7:ce:70:0c:ad:cd: 1a:b0:fd:c9:96:c6:c3:9e:56:55:df:57:f7:65:13:f0:88:de: 1f:6d:9f:d3:29:e1:e3:ba:73:66:fe:f9:f1:6b:b2:18:9a:3c: 75:68:c4:99:84:61:84:0d:c0:ad:7e:13:66:d8:a9:65:69:33: c8:a0:40:42:9b:2a:a9:3e:1a:62:9e:50:dc:ab:c9:3f:31:0e: 5d:fd:65:e8:9f:f0:61:1f:dd:3a:7a:e8:51:56:0a:85:7d:75: 22:6c:2a:f7:40:45:1f:e5:59:0f:81:33:a4:85:5b:9d:72:e6: 05:1f:b9:fd:c7:05:aa:59:e1:f0:72:71:04:0b:bd:e8:af:5e: d7:74:42:2a:53:d9:05:0a:f9:e9:a8:44:16:39:44:7e:58:51: ad:84:03:2f:cb:80:c6:53:71:49:2f:b3:8f:7d:35:99:a7:aa: 68:d3:48:29:39:a4:18:e2:47:23:a3:d5:d9:0f:b7:24:f6:4e: 90:15:d0:00:f2:00:ed:a0:e8:d1:31:25:32:d3:50:34:c7:57: 01:0e:ce:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHOgbUjcmPf334Ya+biuX1NUID9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M2OTQyRDlFMzlEMkUwNzA4ODU0MjgyQ0I2QTM3MjMw NzI5RUI3QzAeFw0yNjA4MjUxMzA4MDdaFw0yNjA4MjYxNjQ2MDdaMDMxMTAvBgNV BAMTKDU4Nzc4NzZCMDNCMjA4RjQyNjcwQTUxRkM1OEU2MUE5M0UzODkwRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUdaERp+QvL3R4P1363tyFlh6u eFWA4h7m2fh1/K3+MGQHGVKhrXFA6O4rZnhPHC3/8wiYNf43kcRHZO8q66v87Dtz p/DGgyr6bVGcPykG2312Aph2wK6JO893gYm9+dF7DAfrVZSkC149hZO46gTbkQoZ TpZAmg/+wTfXdQVp4BA1vwE1h8iK3C8WsM6Yusytatxs3Yx0oCdNbwJEW9Jt/dPO 3OrPAFxWeViPlJwa6OaXPS1KzF0/7OEWJUMew4ZckBpUgdaxZ1jj1SBmXUwDOALr VSndwxugTtLVN5MbkLvrfZYvPm7BVl0Hw3ed8BxRM6zJvvV6xxS0RwfCyuNTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWHeHawOyCPQmcKUfxY5hqT44kNgwHwYDVR0j BBgwFoAUfGlC2eOdLgcIhUKCy2o3Iwcp63wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODZiZDU1MzgtNDI3MC00MTJkLTlkNjYtYzJiNTE1N2QzZDZlLzAvN0M2OTQyRDlF MzlEMkUwNzA4ODU0MjgyQ0I2QTM3MjMwNzI5RUI3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QzY5NDJEOUUzOUQyRTA3MDg4NTQyODJDQjZBMzcyMzA3MjlF QjdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODZiZDU1MzgtNDI3MC00MTJkLTlk NjYtYzJiNTE1N2QzZDZlLzAvN0M2OTQyRDlFMzlEMkUwNzA4ODU0MjgyQ0I2QTM3 MjMwNzI5RUI3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEWDb8umWNJdysfodaB5tE4reNctDqN1AaPy XhLrlo1GI/X5yaxKw+bI+SbXUJnpc7fOcAytzRqw/cmWxsOeVlXfV/dlE/CI3h9t n9Mp4eO6c2b++fFrshiaPHVoxJmEYYQNwK1+E2bYqWVpM8igQEKbKqk+GmKeUNyr yT8xDl39Zeif8GEf3Tp66FFWCoV9dSJsKvdARR/lWQ+BM6SFW51y5gUfuf3HBapZ 4fBycQQLveivXtd0QipT2QUK+emoRBY5RH5YUa2EAy/LgMZTcUkvs499NZmnqmjT SCk5pBjiRyOj1dkPtyT2TpAV0ADyAO2g6NExJTLTUDTHVwEOzks= -----END CERTIFICATE-----Generated at Tue Aug 25 23:41:38 2026 by rpki-client