$ rpki-client -vvvf rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft File: 7ACC57BA3042B007AA1613352A73FFD3162E565F.mft (raw, json) Hash identifier: fE8rdzSbl6zdWn+3CHPp68pLbPfDC/OnhzrPUXX8MFc= Subject key identifier: A4:FD:73:F5:6C:40:43:CD:9D:55:F2:59:CC:97:EC:28:1C:C8:E7:DA Authority key identifier: 7A:CC:57:BA:30:42:B0:07:AA:16:13:35:2A:73:FF:D3:16:2E:56:5F Certificate issuer: /CN=7ACC57BA3042B007AA1613352A73FFD3162E565F Certificate serial: 4EB80A701893EAFC2DDB7C292EEF78CE3AE724B6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ACC57BA3042B007AA1613352A73FFD3162E565F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft Manifest number: BE Signing time: Mon 21 Sep 2026 02:44:49 +0000 Manifest this update: Mon 21 Sep 2026 02:39:49 +0000 Manifest next update: Tue 22 Sep 2026 05:46:49 +0000 Files and hashes: 1: 3130332e3136302e3137392e302f32342d3234203d3e20313431353932.roa (hash: z0ApomisoqwQnhgmCVulOkc7tSSTjZgNZBL2SV/mK8w=) 2: 7ACC57BA3042B007AA1613352A73FFD3162E565F.crl (hash: hamy2GSvotcOG9PCgLaffkNWICCQ0lq/CS/g6rnH4UY=) 3: 3130332e3136302e3137382e302f32342d3234203d3e20313431353932.roa (hash: jo8zHFeqe3LGwp2AuxTgHU+gmdWY0CJTnZZ7WU6u+5k=) 4: 3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa (hash: EE9ymycRiG5es8LdeuDyt4ZBgyII9pYHMLKeHbtmxMg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.crl rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ACC57BA3042B007AA1613352A73FFD3162E565F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:b8:0a:70:18:93:ea:fc:2d:db:7c:29:2e:ef:78:ce:3a:e7:24:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ACC57BA3042B007AA1613352A73FFD3162E565F Validity Not Before: Sep 21 02:39:49 2026 GMT Not After : Sep 22 05:46:49 2026 GMT Subject: CN=A4FD73F56C4043CD9D55F259CC97EC281CC8E7DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:52:31:76:bc:42:c1:26:c0:60:4c:05:e6:fe: e9:3e:bf:07:86:c1:d4:4a:82:c0:44:42:40:99:e6: 93:8b:de:da:b1:7a:45:69:b0:0b:d9:f1:d6:c0:2c: b3:42:2b:15:36:4a:70:cf:41:46:14:f2:e6:bb:3a: 7f:48:01:41:6e:0c:2b:1e:c3:bb:65:91:16:d7:c8: c5:fe:04:f2:b2:6c:a6:4f:a6:67:5f:6d:1d:cd:04: 6a:45:f7:63:f5:0a:bc:39:de:ab:76:59:79:d4:fb: 60:00:a8:8d:a6:6e:87:82:ca:12:e5:78:73:77:c6: 82:60:60:31:80:5d:49:61:57:88:87:e2:2c:b2:6c: f5:06:83:e2:6b:81:b0:73:18:5e:9a:0f:83:c9:54: f6:67:59:b8:aa:2a:e2:c3:8c:e1:a5:f3:8e:17:ea: 0a:67:fb:4c:fd:37:97:08:40:23:a3:8a:b7:8b:7f: 7b:d4:1f:ef:21:39:8d:2a:e7:00:1e:e9:7f:30:aa: 82:06:38:cd:0b:88:a8:a7:4d:2c:f6:d6:c7:46:d7: 21:d8:ed:05:e8:fd:fb:ee:51:03:7c:7d:e8:0e:57: 7d:30:4d:a7:6a:6c:46:4b:51:3e:5f:d8:8d:f1:28: 85:86:e7:e2:f7:45:ae:d4:9f:fb:3c:93:5f:61:c9: 59:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FD:73:F5:6C:40:43:CD:9D:55:F2:59:CC:97:EC:28:1C:C8:E7:DA X509v3 Authority Key Identifier: keyid:7A:CC:57:BA:30:42:B0:07:AA:16:13:35:2A:73:FF:D3:16:2E:56:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ACC57BA3042B007AA1613352A73FFD3162E565F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:37:d0:b3:49:22:5c:d1:49:e6:0b:86:83:8e:26:c0:3c:db: 7d:ad:83:56:62:26:c0:cb:3e:e3:aa:47:8a:31:88:1a:63:1a: a2:3a:b0:d9:28:53:30:b7:b0:02:1c:b2:7e:a2:3f:f9:8b:a5: 68:ee:db:a8:98:5a:ca:3e:06:22:ee:90:a0:40:c3:c5:c1:a9: 59:a0:12:33:01:fd:7d:fb:fd:08:d3:b8:ba:d5:ca:a7:14:1e: e8:90:2c:86:7f:97:d4:71:39:6f:0a:ff:3b:77:4b:49:12:f2: 53:92:09:16:bc:47:98:e5:95:7c:3a:b3:a1:6f:ee:72:ee:3a: 12:bb:16:4c:bf:aa:77:c9:45:ac:a1:c0:8d:03:aa:59:4f:3a: 46:2b:48:e3:90:eb:c1:5c:30:73:54:d6:6e:65:9b:20:da:c2: ef:6f:95:0e:82:08:1b:b2:b0:e9:c4:7f:3d:c1:2a:11:e4:3a: d6:72:90:79:eb:c6:03:ac:6e:26:7e:2c:8d:9e:59:5c:c2:6a: 9a:11:b0:f8:f0:fd:00:a9:ae:35:4c:11:dc:5f:9c:f6:bc:a4: d5:10:d5:10:e4:94:df:f3:44:24:ff:44:aa:f0:96:8b:94:3d: 25:b6:82:97:e4:b7:89:94:38:5a:91:2a:67:14:12:b7:d9:da: 80:4e:e8:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTrgKcBiT6vwt23wpLu94zjrnJLYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FDQzU3QkEzMDQyQjAwN0FBMTYxMzM1MkE3M0ZGRDMx NjJFNTY1RjAeFw0yNjA5MjEwMjM5NDlaFw0yNjA5MjIwNTQ2NDlaMDMxMTAvBgNV BAMTKEE0RkQ3M0Y1NkM0MDQzQ0Q5RDU1RjI1OUNDOTdFQzI4MUNDOEU3REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkUjF2vELBJsBgTAXm/uk+vweG wdRKgsBEQkCZ5pOL3tqxekVpsAvZ8dbALLNCKxU2SnDPQUYU8ua7On9IAUFuDCse w7tlkRbXyMX+BPKybKZPpmdfbR3NBGpF92P1Crw53qt2WXnU+2AAqI2mboeCyhLl eHN3xoJgYDGAXUlhV4iH4iyybPUGg+JrgbBzGF6aD4PJVPZnWbiqKuLDjOGl844X 6gpn+0z9N5cIQCOjireLf3vUH+8hOY0q5wAe6X8wqoIGOM0LiKinTSz21sdG1yHY 7QXo/fvuUQN8fegOV30wTadqbEZLUT5f2I3xKIWG5+L3Ra7Un/s8k19hyVnJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpP1z9WxAQ82dVfJZzJfsKBzI59owHwYDVR0j BBgwFoAUesxXujBCsAeqFhM1KnP/0xYuVl8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjBhODIwYjQtODJlZi00NDEyLWJlMmUtNWQ2OTE0YmQ0ODQ0LzAvN0FDQzU3QkEz MDQyQjAwN0FBMTYxMzM1MkE3M0ZGRDMxNjJFNTY1Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QUNDNTdCQTMwNDJCMDA3QUExNjEzMzUyQTczRkZEMzE2MkU1 NjVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjBhODIwYjQtODJlZi00NDEyLWJl MmUtNWQ2OTE0YmQ0ODQ0LzAvN0FDQzU3QkEzMDQyQjAwN0FBMTYxMzM1MkE3M0ZG RDMxNjJFNTY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH430LNJIlzRSeYLhoOOJsA8232tg1ZiJsDL PuOqR4oxiBpjGqI6sNkoUzC3sAIcsn6iP/mLpWju26iYWso+BiLukKBAw8XBqVmg EjMB/X37/QjTuLrVyqcUHuiQLIZ/l9RxOW8K/zt3S0kS8lOSCRa8R5jllXw6s6Fv 7nLuOhK7Fky/qnfJRayhwI0DqllPOkYrSOOQ68FcMHNU1m5lmyDawu9vlQ6CCBuy sOnEfz3BKhHkOtZykHnrxgOsbiZ+LI2eWVzCapoRsPjw/QCprjVMEdxfnPa8pNUQ 1RDklN/zRCT/RKrwlouUPSW2gpfkt4mUOFqRKmcUErfZ2oBO6B8= -----END CERTIFICATE-----Generated at Mon Sep 21 13:31:34 2026 by rpki-client