$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft File: A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft (raw, json) Hash identifier: igTSO4e9HqHvRntcYkURKJvhroE3CPhe04WQPmKjH9o= Subject key identifier: DE:FF:8B:67:B7:57:6C:42:22:BF:A3:B0:A6:A6:89:83:59:42:CF:2F Authority key identifier: A7:F2:57:AB:23:3C:8B:2F:1C:63:88:FC:B9:4F:34:20:60:63:AC:A7 Certificate issuer: /CN=A7F257AB233C8B2F1C6388FCB94F34206063ACA7 Certificate serial: 7F380A5DA236AD8AA62888149D467412047F54FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft Manifest number: BF Signing time: Sun 20 Sep 2026 19:36:04 +0000 Manifest this update: Sun 20 Sep 2026 19:31:04 +0000 Manifest next update: Mon 21 Sep 2026 20:59:04 +0000 Files and hashes: 1: 3130332e3233312e3137312e302f32342d3234203d3e20313430343832.roa (hash: 5YtXBJW+pcjkjSSkT2eyu+9IHPZhAt7snHtZn/2zdlI=) 2: 32372e3131322e37372e302f32342d3234203d3e20313430343832.roa (hash: EYrB9WmEEsZBQC1BtxA6FgRk0osKm3o1jztWowdaQE0=) 3: A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl (hash: p8Is6czjU7QAPwPn71hmpNABSVmHyDTz4k66c3948f8=) 4: 3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa (hash: GkQ8eVgQ8r/gDw/x4qIJQCYsnJYsQySSoX0lOgA5GAk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 20:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:38:0a:5d:a2:36:ad:8a:a6:28:88:14:9d:46:74:12:04:7f:54:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7F257AB233C8B2F1C6388FCB94F34206063ACA7 Validity Not Before: Sep 20 19:31:04 2026 GMT Not After : Sep 21 20:59:04 2026 GMT Subject: CN=DEFF8B67B7576C4222BFA3B0A6A689835942CF2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fa:e4:0f:20:6f:f0:0b:3c:6e:8c:ef:09:3a: 50:e7:9c:d7:49:04:02:66:7d:c9:e9:80:30:71:4f: 90:75:2b:55:d9:25:ea:d0:13:1f:66:7e:2c:f1:3e: 98:be:14:47:ea:5f:2b:4f:8b:63:ee:76:ca:da:1b: 64:76:71:b2:37:7b:7e:c6:66:8d:69:0d:cb:0f:47: 2c:93:86:a4:d2:a9:60:a4:d0:2e:5a:31:dd:2e:04: 42:4e:66:fa:85:48:ae:37:d5:21:33:25:0c:5e:d9: ee:1f:48:ae:0e:9d:97:e0:7d:95:00:d2:60:bf:56: f9:1d:98:e5:a6:d2:0e:de:7c:d8:28:8a:b2:77:9d: b9:8b:60:8c:7c:ff:33:96:1a:77:f8:97:f6:20:3d: dc:a8:30:d2:ee:d1:c9:82:2d:6a:8b:b4:39:22:58: 14:56:a4:31:d0:1f:95:3a:da:20:44:e9:00:1a:53: cd:92:f0:b5:71:10:23:97:c5:9c:d3:a5:3f:45:23: 6b:ce:4d:4b:3d:ab:a9:fa:21:8d:0d:2c:d8:9a:f6: 58:0c:18:82:d7:60:85:74:a6:bb:32:8a:74:dd:00: 63:45:47:07:c1:78:d8:95:47:d0:43:e5:fb:92:0c: cb:c5:79:b8:42:b4:fe:a7:3d:0c:03:ae:94:ae:36: 51:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FF:8B:67:B7:57:6C:42:22:BF:A3:B0:A6:A6:89:83:59:42:CF:2F X509v3 Authority Key Identifier: keyid:A7:F2:57:AB:23:3C:8B:2F:1C:63:88:FC:B9:4F:34:20:60:63:AC:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:16:8f:62:9a:1b:59:7a:54:77:ef:db:aa:de:01:ae:2b:c8: 92:bb:5b:18:ea:cd:d5:0f:d6:cc:8d:6b:2d:e4:ee:d7:c2:7f: 7c:f1:02:90:bf:37:5b:cb:35:df:dc:24:34:54:9a:a7:2a:6b: 38:1a:57:f5:92:85:33:3b:db:92:00:11:be:3a:83:71:f5:b1: b4:81:1e:18:8f:c4:63:da:97:c9:65:50:58:a5:e4:fd:49:54: eb:0b:ec:49:d7:91:2c:75:68:16:17:1b:51:1e:48:30:97:c1: 6b:9e:45:d3:18:41:45:df:01:97:e8:3c:fa:db:f5:71:64:13: e9:6b:b0:21:3e:c9:44:eb:9f:c7:0b:de:c8:24:31:5d:45:b6: 67:01:bc:53:43:7c:f1:50:3e:80:13:ac:ee:a1:f6:e0:dd:9e: 8b:55:39:1b:78:98:ad:4a:36:a8:76:db:5e:5e:0a:ee:28:22: 99:a2:19:bf:c8:7a:44:50:7b:f0:33:9d:55:7c:0c:6d:7b:da: 0a:b6:77:cc:8f:29:80:bd:38:c0:aa:2f:96:bf:a9:4f:0e:1b: df:c0:26:63:b6:85:f8:09:47:7b:b5:fd:60:3c:32:d7:76:0b: 1e:4c:85:76:d0:27:0c:4e:ae:ff:8f:ab:27:66:83:44:c3:ab: 50:23:a1:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfzgKXaI2rYqmKIgUnUZ0EgR/VP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdGMjU3QUIyMzNDOEIyRjFDNjM4OEZDQjk0RjM0MjA2 MDYzQUNBNzAeFw0yNjA5MjAxOTMxMDRaFw0yNjA5MjEyMDU5MDRaMDMxMTAvBgNV BAMTKERFRkY4QjY3Qjc1NzZDNDIyMkJGQTNCMEE2QTY4OTgzNTk0MkNGMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ+uQPIG/wCzxujO8JOlDnnNdJ BAJmfcnpgDBxT5B1K1XZJerQEx9mfizxPpi+FEfqXytPi2PudsraG2R2cbI3e37G Zo1pDcsPRyyThqTSqWCk0C5aMd0uBEJOZvqFSK431SEzJQxe2e4fSK4OnZfgfZUA 0mC/VvkdmOWm0g7efNgoirJ3nbmLYIx8/zOWGnf4l/YgPdyoMNLu0cmCLWqLtDki WBRWpDHQH5U62iBE6QAaU82S8LVxECOXxZzTpT9FI2vOTUs9q6n6IY0NLNia9lgM GILXYIV0prsyinTdAGNFRwfBeNiVR9BD5fuSDMvFebhCtP6nPQwDrpSuNlHlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3v+LZ7dXbEIiv6OwpqaJg1lCzy8wHwYDVR0j BBgwFoAUp/JXqyM8iy8cY4j8uU80IGBjrKcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWU2ZmYzOGQtZTU0Ny00ZjczLWJiMzAtMmIxNGMwOGM4OWZiLzAvQTdGMjU3QUIy MzNDOEIyRjFDNjM4OEZDQjk0RjM0MjA2MDYzQUNBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BN0YyNTdBQjIzM0M4QjJGMUM2Mzg4RkNCOTRGMzQyMDYwNjNB Q0E3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWU2ZmYzOGQtZTU0Ny00ZjczLWJi MzAtMmIxNGMwOGM4OWZiLzAvQTdGMjU3QUIyMzNDOEIyRjFDNjM4OEZDQjk0RjM0 MjA2MDYzQUNBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACsWj2KaG1l6VHfv26reAa4ryJK7WxjqzdUP 1syNay3k7tfCf3zxApC/N1vLNd/cJDRUmqcqazgaV/WShTM725IAEb46g3H1sbSB HhiPxGPal8llUFil5P1JVOsL7EnXkSx1aBYXG1EeSDCXwWueRdMYQUXfAZfoPPrb 9XFkE+lrsCE+yUTrn8cL3sgkMV1FtmcBvFNDfPFQPoATrO6h9uDdnotVORt4mK1K Nqh2215eCu4oIpmiGb/IekRQe/AznVV8DG172gq2d8yPKYC9OMCqL5a/qU8OG9/A JmO2hfgJR3u1/WA8Mtd2Cx5MhXbQJwxOrv+Pqydmg0TDq1Ajobc= -----END CERTIFICATE-----Generated at Mon Sep 21 12:28:45 2026 by rpki-client