$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft File: 7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft (raw, json) Hash identifier: 3LLXkkjyzdkpwK3+C6eRzlX6IIkQ9O40GfLhNXwb8z4= Subject key identifier: 2C:C9:36:B1:E1:81:23:37:CF:8F:D7:05:41:CB:BB:25:54:7B:3C:89 Authority key identifier: 7C:9D:38:28:7A:B4:C0:80:0F:67:E5:16:DB:04:76:04:54:CB:E9:F1 Certificate issuer: /CN=7C9D38287AB4C0800F67E516DB04760454CBE9F1 Certificate serial: 4FC54040BDA840B0B0AF026C3BA6B339EC85CAFC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft Manifest number: BF Signing time: Tue 22 Sep 2026 00:01:32 +0000 Manifest this update: Mon 21 Sep 2026 23:56:32 +0000 Manifest next update: Wed 23 Sep 2026 00:13:32 +0000 Files and hashes: 1: 3130332e33312e3230362e302f32342d3234203d3e203435373138.roa (hash: ZPFkeP+nvfKboy4qow1VO85p4mUkgACDVOD+VqK2Ihg=) 2: 3230332e37392e32392e302f32342d3234203d3e203435373138.roa (hash: Xr9AQJybUe2phNKjCk7EDVdTwzFlkvXIj8GjUYXwr90=) 3: 3130332e3139382e39332e302f32342d3234203d3e203435373138.roa (hash: gkNE1J8LS8bDAl/t8wn0B0ZHnNiDo1L7MzMb+7Q5ypo=) 4: 3131372e3130332e36362e302f32332d3234203d3e203435373138.roa (hash: 0DLK1MQIKbxqNmcpVPbZocMztN5rDbQk4zhYo8Bx8Cw=) 5: 323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa (hash: lL0LNbFOb3ZMt/gKNiHtSDZhxYdsWPVmvyN1tdNUMJ8=) 6: 7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl (hash: 45fUV3H54edCtFvbqABRqKjmLPR4Zfvw0GsWFv93Niw=) 7: 3130332e33312e3230342e302f32332d3234203d3e203435373138.roa (hash: JJ0XYEWJnNqenm3YM5YcUAhKtM46eIeZHpKCM2PFMYk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 00:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:c5:40:40:bd:a8:40:b0:b0:af:02:6c:3b:a6:b3:39:ec:85:ca:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C9D38287AB4C0800F67E516DB04760454CBE9F1 Validity Not Before: Sep 21 23:56:32 2026 GMT Not After : Sep 23 00:13:32 2026 GMT Subject: CN=2CC936B1E1812337CF8FD70541CBBB25547B3C89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:07:62:45:0f:8e:f8:8e:48:31:8c:fc:ab:88: 53:8b:3b:82:39:3b:f4:0c:2d:9d:03:6a:54:c2:9a: 17:ef:f3:af:e1:68:a6:d7:aa:79:8b:b4:38:b7:cb: 0c:2f:68:14:23:0a:b6:81:02:29:d7:56:0c:3a:27: 22:63:71:a4:85:ff:99:33:d6:ea:44:80:14:15:c3: 0e:79:a5:46:cb:af:87:ec:b5:f7:72:d9:8e:78:45: 06:3b:e8:27:c1:ae:e4:4b:90:0e:92:c8:30:ea:2f: 94:ba:13:dd:6a:f8:3b:f6:11:e9:21:1e:ef:e3:d9: aa:89:c8:2e:bc:63:8d:67:51:b9:a9:b2:be:42:34: 60:fb:49:18:d9:55:32:b7:f1:fc:bd:cb:12:cb:70: 6e:57:5b:c7:8a:e7:5a:67:e8:49:4b:ca:4a:4e:0c: 44:99:25:2d:99:b2:95:02:7b:f8:d6:2b:82:10:02: bc:7f:8d:7d:11:ed:90:b8:30:42:f7:92:2e:b5:b0: 83:97:8a:b0:ea:1e:2a:56:84:ce:f2:d1:71:38:e1: 43:df:84:e4:7d:2c:24:63:7e:d6:5d:b1:69:33:70: 42:75:38:ca:8b:6e:5a:cc:06:bc:03:0a:c1:05:0b: b8:1d:30:5e:06:a9:3f:02:63:e6:dd:53:78:32:e2: 87:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C9:36:B1:E1:81:23:37:CF:8F:D7:05:41:CB:BB:25:54:7B:3C:89 X509v3 Authority Key Identifier: keyid:7C:9D:38:28:7A:B4:C0:80:0F:67:E5:16:DB:04:76:04:54:CB:E9:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:da:f6:52:01:dd:58:af:56:11:c4:a6:1d:27:1a:6c:5f:78: 4a:bd:52:a2:c3:eb:5b:33:e8:4b:ad:d9:80:50:2d:3c:6f:bf: cf:8c:b3:42:7a:30:b1:13:a2:eb:33:7c:b8:2b:9a:ae:df:d3: ab:50:5b:94:e6:79:3e:df:c8:db:09:8c:22:f7:33:eb:81:f7: fa:14:9b:2f:3d:5a:33:ef:c1:28:09:24:d0:7d:c6:3f:59:18: 70:c8:8b:5e:05:5c:98:73:eb:1d:34:56:8f:55:d5:95:ac:95: 2c:62:90:eb:67:85:cc:99:68:16:a4:0d:34:77:d6:6d:a8:58: 09:7d:46:da:02:c6:7f:00:76:79:40:e8:b0:65:46:de:1c:9f: 4e:e5:e8:33:2c:d4:23:18:27:79:cd:0b:ce:94:bb:73:38:82: fc:1e:48:c1:48:f1:40:68:bc:8b:4a:77:7a:54:3b:59:01:f2: 72:4e:26:fd:95:9c:a2:6b:b5:06:88:69:b7:f9:d4:3a:7f:f3: 74:7f:d9:60:62:2f:44:d0:44:03:c7:62:5a:40:53:8d:b0:7b: ec:13:d0:19:ef:fe:57:67:d0:29:da:fc:63:60:f5:4f:fc:1a: 14:2e:5a:2a:e1:19:bf:5d:88:66:90:6c:24:47:53:29:ed:f4: 5f:8e:51:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT8VAQL2oQLCwrwJsO6azOeyFyvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M5RDM4Mjg3QUI0QzA4MDBGNjdFNTE2REIwNDc2MDQ1 NENCRTlGMTAeFw0yNjA5MjEyMzU2MzJaFw0yNjA5MjMwMDEzMzJaMDMxMTAvBgNV BAMTKDJDQzkzNkIxRTE4MTIzMzdDRjhGRDcwNTQxQ0JCQjI1NTQ3QjNDODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrB2JFD474jkgxjPyriFOLO4I5 O/QMLZ0DalTCmhfv86/haKbXqnmLtDi3ywwvaBQjCraBAinXVgw6JyJjcaSF/5kz 1upEgBQVww55pUbLr4fstfdy2Y54RQY76CfBruRLkA6SyDDqL5S6E91q+Dv2Eekh Hu/j2aqJyC68Y41nUbmpsr5CNGD7SRjZVTK38fy9yxLLcG5XW8eK51pn6ElLykpO DESZJS2ZspUCe/jWK4IQArx/jX0R7ZC4MEL3ki61sIOXirDqHipWhM7y0XE44UPf hOR9LCRjftZdsWkzcEJ1OMqLblrMBrwDCsEFC7gdMF4GqT8CY+bdU3gy4odpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULMk2seGBIzfPj9cFQcu7JVR7PIkwHwYDVR0j BBgwFoAUfJ04KHq0wIAPZ+UW2wR2BFTL6fEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA0OWMyMTAtZjM2NS00MzJmLWE3Y2EtMGI1ZWI4NmIwMWM2LzAvN0M5RDM4Mjg3 QUI0QzA4MDBGNjdFNTE2REIwNDc2MDQ1NENCRTlGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QzlEMzgyODdBQjRDMDgwMEY2N0U1MTZEQjA0NzYwNDU0Q0JF OUYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjA0OWMyMTAtZjM2NS00MzJmLWE3 Y2EtMGI1ZWI4NmIwMWM2LzAvN0M5RDM4Mjg3QUI0QzA4MDBGNjdFNTE2REIwNDc2 MDQ1NENCRTlGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHa9lIB3VivVhHEph0nGmxfeEq9UqLD61sz 6Eut2YBQLTxvv8+Ms0J6MLETouszfLgrmq7f06tQW5TmeT7fyNsJjCL3M+uB9/oU my89WjPvwSgJJNB9xj9ZGHDIi14FXJhz6x00Vo9V1ZWslSxikOtnhcyZaBakDTR3 1m2oWAl9RtoCxn8AdnlA6LBlRt4cn07l6DMs1CMYJ3nNC86Uu3M4gvweSMFI8UBo vItKd3pUO1kB8nJOJv2VnKJrtQaIabf51Dp/83R/2WBiL0TQRAPHYlpAU42we+wT 0Bnv/ldn0Cna/GNg9U/8GhQuWirhGb9diGaQbCRHUynt9F+OUVY= -----END CERTIFICATE-----Generated at Tue Sep 22 10:48:47 2026 by rpki-client