$ rpki-client -vvvf rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft File: 7521EB714EF9A5F0A697E8574714A86DCF234610.mft (raw, json) Hash identifier: hCzohpUlxxIoDJhwzSafi+icAztKoVVpSBfsQkUXJa0= Subject key identifier: 1D:E9:8E:A1:61:F6:40:63:F2:12:7F:D2:5F:73:46:C9:88:8B:BE:52 Authority key identifier: 75:21:EB:71:4E:F9:A5:F0:A6:97:E8:57:47:14:A8:6D:CF:23:46:10 Certificate issuer: /CN=7521EB714EF9A5F0A697E8574714A86DCF234610 Certificate serial: 7FA0A1EB9E5627772770BE31643BE2748E289826 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft Manifest number: BE Signing time: Tue 22 Sep 2026 02:19:23 +0000 Manifest this update: Tue 22 Sep 2026 02:14:23 +0000 Manifest next update: Wed 23 Sep 2026 05:40:23 +0000 Files and hashes: 1: 3132342e3130392e32332e302f32342d3234203d3e203538333738.roa (hash: zskLNuuXyQpxVs+4KksAWAlYXKzx7CDbhiYyNpVsFrs=) 2: 3131392e34372e39352e302f32342d3234203d3e20313439343039.roa (hash: TS2p463fv/9DyZu6QnNhlvJI+JFIyXgQjG+Ob9/1Y6g=) 3: 3131392e34372e39302e302f32342d3234203d3e203338353237.roa (hash: dcVVKG4izCM1gb0p4eQeLHaBApqz8vGp0jvG9TGCAJ0=) 4: 3131392e34372e38382e302f32342d3234203d3e203338353237.roa (hash: yffHTG+EllVLleEh6Oirz1/R0DaU0LdSs2f4Coe9+OM=) 5: 7521EB714EF9A5F0A697E8574714A86DCF234610.crl (hash: REIcU6zvqI+/txjMQQI3wH41u9smzxl0MBxjHYr6KgE=) 6: 3130332e32352e3130382e302f32342d3234203d3e20313332363334.roa (hash: BP419rLo8u7KV+IdA+QhKzQqCTiad+JDOjmx+KPJYZ8=) 7: 3132342e3130392e32322e302f32342d3234203d3e20313431313037.roa (hash: iOYmug4IgOWAtbexlc92hDoV/tNe429g9AsNdYSsaJc=) 8: 32372e3132342e38332e302f32342d3234203d3e20313332363334.roa (hash: rQWHJknCSBXBPdquyEnbgQpik3OvzTZOMwyh2tsNM1M=) 9: 3131392e34372e38392e302f32342d3234203d3e203338353237.roa (hash: c/ZF1aWYYnFDz5Gwg0w0tFfbUx8yzQQW9RzM+O5SB0A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.crl rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 05:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:a0:a1:eb:9e:56:27:77:27:70:be:31:64:3b:e2:74:8e:28:98:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7521EB714EF9A5F0A697E8574714A86DCF234610 Validity Not Before: Sep 22 02:14:23 2026 GMT Not After : Sep 23 05:40:23 2026 GMT Subject: CN=1DE98EA161F64063F2127FD25F7346C9888BBE52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:42:a8:73:9c:dc:a1:f2:81:28:87:80:0d:a1: b6:3f:1a:61:ff:ad:b1:8d:15:7b:20:03:17:e4:f0: 2a:be:4e:bf:a3:1b:d1:97:5e:7a:22:68:59:73:d9: a5:14:5c:42:74:0b:4d:0a:36:9e:2d:bd:ce:03:12: da:84:77:ea:32:3d:2a:0b:79:7f:aa:69:d8:dc:2a: 61:c6:fc:1d:b2:a6:f2:ba:5b:62:61:68:9c:78:07: 67:af:08:35:4b:88:89:e3:da:71:55:4e:3e:58:0d: 68:a5:e0:d3:87:e6:1e:94:99:c6:1f:c4:09:ac:4e: 44:2a:be:2b:a4:3a:8a:bd:b5:1e:8b:1d:55:06:3f: bf:01:d7:1c:81:93:c6:66:2e:f3:5a:55:c9:19:2d: 6c:7d:d5:2a:92:f0:b5:7c:58:63:74:a1:bd:dc:8e: d7:6d:71:75:f4:c2:e9:0f:e5:f6:9b:bc:3f:5b:c6: c7:3b:15:8d:1e:43:39:f8:03:2c:af:5b:de:33:1a: f3:77:ac:99:4b:4e:01:2f:0b:bc:78:11:02:7b:b9: aa:ac:3f:10:d7:37:9f:9f:a7:23:f6:10:45:5b:71: 6e:b0:a1:c8:37:69:19:c8:42:f0:e6:37:b3:a3:e2: 37:e1:7f:2c:b7:11:9d:ad:f9:d1:64:43:1d:75:46: 65:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E9:8E:A1:61:F6:40:63:F2:12:7F:D2:5F:73:46:C9:88:8B:BE:52 X509v3 Authority Key Identifier: keyid:75:21:EB:71:4E:F9:A5:F0:A6:97:E8:57:47:14:A8:6D:CF:23:46:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:a0:0f:11:a4:ed:d1:ef:59:c8:3a:d6:80:56:10:c4:12:d0: d2:27:68:64:9c:84:6c:13:81:03:a7:41:26:ad:4f:1e:20:7b: 62:77:10:1c:0e:fb:2b:05:01:27:3f:85:8e:c1:00:0c:b2:3d: e4:f6:f8:ed:6b:68:3f:6a:d7:33:c2:b0:00:db:ce:e5:7c:cb: 74:8b:ac:22:9a:72:51:aa:dd:9c:da:52:b9:ce:7c:07:f4:ed: 42:a2:2c:2b:3d:47:cb:3c:95:3f:5c:f7:3d:93:5c:fb:ab:c1: 36:0e:e3:7d:97:08:13:09:be:9f:c8:04:56:1a:a0:d6:d1:9a: 48:a5:d1:64:5f:e2:a6:ea:95:9c:14:67:4c:91:97:3b:81:3e: 48:ae:7b:36:6f:7d:37:98:e8:24:93:6e:38:82:fc:2c:33:1a: a4:1e:18:a6:02:d3:c8:7a:d8:e4:ad:96:8c:06:0b:ef:32:9a: 4e:0b:e9:0e:bd:3b:56:0e:c4:b5:90:1c:ea:87:38:aa:d2:fa: 6a:31:fa:e7:0c:26:2c:56:f5:36:0f:d6:82:db:61:5d:ff:15: 08:f0:fb:13:8d:8c:95:ff:f8:77:b7:03:97:40:e5:5f:e6:98: d6:aa:8b:1b:73:45:71:85:c3:4a:49:56:80:19:55:e5:9f:b3: 0a:39:14:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf6Ch655WJ3cncL4xZDvidI4omCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzUyMUVCNzE0RUY5QTVGMEE2OTdFODU3NDcxNEE4NkRD RjIzNDYxMDAeFw0yNjA5MjIwMjE0MjNaFw0yNjA5MjMwNTQwMjNaMDMxMTAvBgNV BAMTKDFERTk4RUExNjFGNjQwNjNGMjEyN0ZEMjVGNzM0NkM5ODg4QkJFNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9QqhznNyh8oEoh4ANobY/GmH/ rbGNFXsgAxfk8Cq+Tr+jG9GXXnoiaFlz2aUUXEJ0C00KNp4tvc4DEtqEd+oyPSoL eX+qadjcKmHG/B2ypvK6W2JhaJx4B2evCDVLiInj2nFVTj5YDWil4NOH5h6UmcYf xAmsTkQqviukOoq9tR6LHVUGP78B1xyBk8ZmLvNaVckZLWx91SqS8LV8WGN0ob3c jtdtcXX0wukP5fabvD9bxsc7FY0eQzn4AyyvW94zGvN3rJlLTgEvC7x4EQJ7uaqs PxDXN5+fpyP2EEVbcW6wocg3aRnIQvDmN7Oj4jfhfyy3EZ2t+dFkQx11RmXnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHemOoWH2QGPyEn/SX3NGyYiLvlIwHwYDVR0j BBgwFoAUdSHrcU75pfCml+hXRxSobc8jRhAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzE3ZWZkMmEtMDJhYi00MjAyLTk3MGYtZjY5OWRmZjk3ZGU1LzAvNzUyMUVCNzE0 RUY5QTVGMEE2OTdFODU3NDcxNEE4NkRDRjIzNDYxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NTIxRUI3MTRFRjlBNUYwQTY5N0U4NTc0NzE0QTg2RENGMjM0 NjEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzE3ZWZkMmEtMDJhYi00MjAyLTk3 MGYtZjY5OWRmZjk3ZGU1LzAvNzUyMUVCNzE0RUY5QTVGMEE2OTdFODU3NDcxNEE4 NkRDRjIzNDYxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCgDxGk7dHvWcg61oBWEMQS0NInaGSchGwT gQOnQSatTx4ge2J3EBwO+ysFASc/hY7BAAyyPeT2+O1raD9q1zPCsADbzuV8y3SL rCKaclGq3ZzaUrnOfAf07UKiLCs9R8s8lT9c9z2TXPurwTYO432XCBMJvp/IBFYa oNbRmkil0WRf4qbqlZwUZ0yRlzuBPkiuezZvfTeY6CSTbjiC/CwzGqQeGKYC08h6 2OStlowGC+8ymk4L6Q69O1YOxLWQHOqHOKrS+mox+ucMJixW9TYP1oLbYV3/FQjw +xONjJX/+He3A5dA5V/mmNaqixtzRXGFw0pJVoAZVeWfswo5FDg= -----END CERTIFICATE-----Generated at Tue Sep 22 19:36:40 2026 by rpki-client