$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.mft File: 7CB53701F9A5E6CBB24596105D30044B647BBC84.mft (raw, json) Hash identifier: yvoind0n2zt5T6uQOo1wZ+ofcB9ep4ghLGjsTCwGVJo= Subject key identifier: 0E:88:F1:A1:E7:C5:87:48:87:25:F6:33:92:38:A8:CC:6B:EA:3B:F2 Authority key identifier: 7C:B5:37:01:F9:A5:E6:CB:B2:45:96:10:5D:30:04:4B:64:7B:BC:84 Certificate issuer: /CN=7CB53701F9A5E6CBB24596105D30044B647BBC84 Certificate serial: 5572FB8E989623E7A8BA580A599BC8338C5A7488 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 07:17:32 +0000 Manifest this update: Thu 17 Sep 2026 07:12:32 +0000 Manifest next update: Fri 18 Sep 2026 10:57:32 +0000 Files and hashes: 1: 7CB53701F9A5E6CBB24596105D30044B647BBC84.crl (hash: JkLigO/caqTNAYvMFDbkv/KUiXb8+qDGVrXAz7tQM6c=) 2: 3130332e3135332e34322e302f32332d3234203d3e20313430343434.roa (hash: h8+dhgJZAVYl5vhc9z1CI3Q73pMj8I+xGu7T9NSMlIk=) 3: 3130332e3135332e34322e302f32342d3234203d3e20313430343434.roa (hash: unGiwDFaGahe7tpg1Hffc3jKyo8NlWLKseBqlIlvILo=) 4: 3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa (hash: HK/N3jJS+JzZ86LurZHVJQHoGpVJnd2NzI7n/JqdXTw=) 5: 323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa (hash: xUUMr5UQK8a0ejdjAN7lpyb+LyL+cS2jPdq1m4lezwg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.crl rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:72:fb:8e:98:96:23:e7:a8:ba:58:0a:59:9b:c8:33:8c:5a:74:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB53701F9A5E6CBB24596105D30044B647BBC84 Validity Not Before: Sep 17 07:12:32 2026 GMT Not After : Sep 18 10:57:32 2026 GMT Subject: CN=0E88F1A1E7C587488725F6339238A8CC6BEA3BF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bc:9a:ec:12:16:86:02:ba:d3:83:7e:13:5a: 57:e0:99:5a:50:b4:1f:90:b8:3d:aa:1d:2b:06:1a: b6:f4:4c:41:e4:57:fb:52:ac:a0:3a:fd:44:da:5b: aa:b6:1a:4a:94:d1:b3:37:8a:c5:e8:f3:eb:0b:ca: 26:8b:a1:c3:10:cb:a1:2a:a1:b2:15:c0:de:04:2f: 2d:05:f7:d0:20:0a:86:06:94:ef:dd:28:c7:c9:e2: a1:4e:8c:26:25:90:01:05:21:bc:1e:42:59:d9:ba: da:29:b4:bd:62:06:67:ab:44:ae:4b:90:cf:27:a9: 89:e3:35:fb:13:2b:40:98:d4:e6:f7:fb:ac:6a:fb: 65:f9:f4:24:3a:78:af:01:d1:ec:87:cf:0a:ad:f4: 9f:ad:38:cb:f0:d6:e7:6d:1c:dd:47:fd:1a:ca:22: 3e:5e:9e:87:cc:88:32:08:4d:94:50:5e:c4:c2:51: 95:40:40:e2:01:52:fe:16:2d:28:94:ed:12:34:42: 2b:27:8e:81:41:f4:b4:8c:0b:9a:a7:d5:06:cd:3c: 82:85:07:47:ca:b8:29:f8:80:22:fc:53:c0:17:ed: 40:a3:a7:26:71:9f:cc:1f:dc:3d:cf:6d:9e:2d:ac: bc:bc:e1:02:4a:d3:ad:e8:25:5f:15:a2:b2:dd:b4: 58:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:88:F1:A1:E7:C5:87:48:87:25:F6:33:92:38:A8:CC:6B:EA:3B:F2 X509v3 Authority Key Identifier: keyid:7C:B5:37:01:F9:A5:E6:CB:B2:45:96:10:5D:30:04:4B:64:7B:BC:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:48:10:6d:0d:4c:fd:2a:75:be:79:f7:cc:91:ee:5b:c8:e3: 75:29:04:21:42:73:bc:97:be:7b:7c:5e:bd:46:7d:e8:ab:a9: 62:13:86:e6:9d:93:a9:f4:e5:43:92:fe:67:9e:c1:63:ce:69: f6:9d:23:8e:a8:8d:00:0e:e1:e7:83:00:48:7a:8e:a6:fb:6a: 2f:98:01:fa:d2:ca:ff:93:bd:64:28:b7:22:3b:aa:0a:c6:1e: a2:99:a1:96:9b:cc:3e:53:27:f4:bd:37:c8:89:7e:27:53:fc: 47:b7:5c:ff:86:65:0f:e9:4f:41:6b:42:75:da:6c:4f:67:ff: 80:10:ad:90:b5:98:8b:42:d8:5c:ed:31:4b:67:e6:27:4f:49: 17:c9:cc:2d:31:7f:0a:04:e1:2d:89:94:83:52:eb:8f:f0:a8: d4:14:70:a8:90:c5:b0:46:0a:41:ca:0b:2b:04:db:93:62:d4: 7f:09:7c:3c:c1:87:83:f3:8e:a0:fb:cc:41:ca:af:a6:2c:7c: b0:01:d3:15:c4:f0:32:0e:f4:cb:a4:ea:e6:db:d7:76:9c:36: 4b:0e:d8:1c:58:a0:03:84:87:f0:f4:67:29:44:40:06:3c:f0: 9d:1a:c3:cf:3d:bd:ac:a7:16:0c:7e:d7:80:79:1a:e7:37:3b: 9c:79:4d:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVXL7jpiWI+eoulgKWZvIM4xadIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCNTM3MDFGOUE1RTZDQkIyNDU5NjEwNUQzMDA0NEI2 NDdCQkM4NDAeFw0yNjA5MTcwNzEyMzJaFw0yNjA5MTgxMDU3MzJaMDMxMTAvBgNV BAMTKDBFODhGMUExRTdDNTg3NDg4NzI1RjYzMzkyMzhBOENDNkJFQTNCRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKvJrsEhaGArrTg34TWlfgmVpQ tB+QuD2qHSsGGrb0TEHkV/tSrKA6/UTaW6q2GkqU0bM3isXo8+sLyiaLocMQy6Eq obIVwN4ELy0F99AgCoYGlO/dKMfJ4qFOjCYlkAEFIbweQlnZutoptL1iBmerRK5L kM8nqYnjNfsTK0CY1Ob3+6xq+2X59CQ6eK8B0eyHzwqt9J+tOMvw1udtHN1H/RrK Ij5enofMiDIITZRQXsTCUZVAQOIBUv4WLSiU7RI0QisnjoFB9LSMC5qn1QbNPIKF B0fKuCn4gCL8U8AX7UCjpyZxn8wf3D3PbZ4trLy84QJK063oJV8VorLdtFh/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDojxoefFh0iHJfYzkjiozGvqO/IwHwYDVR0j BBgwFoAUfLU3Afml5suyRZYQXTAES2R7vIQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzcxMTU1OWUtZDVlYy00YzE5LWIzMzUtZWUyOWRkZmJiOWQ1LzAvN0NCNTM3MDFG OUE1RTZDQkIyNDU5NjEwNUQzMDA0NEI2NDdCQkM4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Q0I1MzcwMUY5QTVFNkNCQjI0NTk2MTA1RDMwMDQ0QjY0N0JC Qzg0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzcxMTU1OWUtZDVlYy00YzE5LWIz MzUtZWUyOWRkZmJiOWQ1LzAvN0NCNTM3MDFGOUE1RTZDQkIyNDU5NjEwNUQzMDA0 NEI2NDdCQkM4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVIEG0NTP0qdb5598yR7lvI43UpBCFCc7yX vnt8Xr1GfeirqWIThuadk6n05UOS/meewWPOafadI46ojQAO4eeDAEh6jqb7ai+Y AfrSyv+TvWQotyI7qgrGHqKZoZabzD5TJ/S9N8iJfidT/Ee3XP+GZQ/pT0FrQnXa bE9n/4AQrZC1mItC2FztMUtn5idPSRfJzC0xfwoE4S2JlINS64/wqNQUcKiQxbBG CkHKCysE25Ni1H8JfDzBh4PzjqD7zEHKr6YsfLAB0xXE8DIO9Muk6ubb13acNksO 2BxYoAOEh/D0ZylEQAY88J0aw889vaynFgx+14B5Guc3O5x5TXA= -----END CERTIFICATE-----Generated at Thu Sep 17 10:43:27 2026 by rpki-client