$ rpki-client -vvvf rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft File: 7A642EBA720716DAB552755544A2F1F74B4C87F0.mft (raw, json) Hash identifier: qh0En11zifsUhNJwB0k+WnsCH9pTY/U/z1ydlhaqcvw= Subject key identifier: 1E:15:79:16:48:BD:E9:9D:64:9A:9C:45:7B:45:AE:9B:ED:30:A4:6A Authority key identifier: 7A:64:2E:BA:72:07:16:DA:B5:52:75:55:44:A2:F1:F7:4B:4C:87:F0 Certificate issuer: /CN=7A642EBA720716DAB552755544A2F1F74B4C87F0 Certificate serial: 424E23569C68DF18EEE1B5D8ABAB16DF0C6F657B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft Manifest number: BF Signing time: Tue 22 Sep 2026 04:21:52 +0000 Manifest this update: Tue 22 Sep 2026 04:16:52 +0000 Manifest next update: Wed 23 Sep 2026 05:45:52 +0000 Files and hashes: 1: 3130332e35302e32362e302f32342d3234203d3e203633383639.roa (hash: YCN7I5UWNLXuHygdgU/kJLypeaTF/PMJFgsLTKVnbT4=) 2: 3130332e35302e32342e302f32342d3234203d3e203633383639.roa (hash: XFbZ6P98oGgog/5WrjcLXHv6AL71Dr8c506Ad90eQJw=) 3: 3130332e35302e32352e302f32342d3234203d3e203633383639.roa (hash: SFKf2YeTUegvyDEl1rZlcJoG3esfQ3DWN5bFQUzfaIY=) 4: 7A642EBA720716DAB552755544A2F1F74B4C87F0.crl (hash: cJVf0ntq3aY0Qckp2m55Rp6aRJnXPvc17ZZOdGmLZOo=) 5: 3130332e35302e32372e302f32342d3234203d3e203633383639.roa (hash: yANla07PHHSJzynbOzLUlkqhsSjnBCXp6rBp1cKVCdo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.crl rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 05:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:4e:23:56:9c:68:df:18:ee:e1:b5:d8:ab:ab:16:df:0c:6f:65:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A642EBA720716DAB552755544A2F1F74B4C87F0 Validity Not Before: Sep 22 04:16:52 2026 GMT Not After : Sep 23 05:45:52 2026 GMT Subject: CN=1E15791648BDE99D649A9C457B45AE9BED30A46A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:94:4c:91:a1:4e:07:8a:be:25:86:27:3a:e2: 80:1d:5e:1b:15:7c:65:3c:11:10:40:dd:95:19:89: 1c:d8:11:dc:e3:07:35:56:58:2d:1c:0b:f1:e8:3e: da:f0:d5:e7:fd:7e:ad:c7:bd:ff:97:32:4c:6e:93: 54:fe:be:ca:7e:fc:42:dc:5f:05:60:92:24:0e:40: 4e:f2:f6:53:db:b1:b0:2f:f5:78:72:73:49:39:2f: 8b:14:40:97:1f:7d:b2:9c:a1:c1:36:f9:23:7c:c8: 90:bf:d3:22:9a:cf:ed:3b:6a:61:72:be:28:ca:41: 1d:12:0a:8a:fa:24:90:66:02:52:3b:ad:e1:73:23: 37:16:85:16:ac:29:08:4a:6c:1f:75:86:a9:14:74: 9b:77:02:c4:80:cf:88:44:8c:09:61:ff:12:6d:1c: d2:46:0d:83:0f:08:b8:89:f2:d6:8e:f5:77:04:62: 36:fc:ad:c9:0f:d8:da:49:32:35:62:42:94:dd:ce: b8:a9:7c:3f:97:58:41:05:5d:8c:e5:0c:6d:35:32: 5e:52:15:a3:e0:b8:73:d7:41:0d:67:ef:6c:3b:3e: 5f:6b:e0:ad:61:4f:2f:09:3c:bd:34:2e:71:03:40: dd:d5:fd:29:cf:4c:58:e8:5b:95:68:cd:cc:61:1b: 7e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:15:79:16:48:BD:E9:9D:64:9A:9C:45:7B:45:AE:9B:ED:30:A4:6A X509v3 Authority Key Identifier: keyid:7A:64:2E:BA:72:07:16:DA:B5:52:75:55:44:A2:F1:F7:4B:4C:87:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:75:92:93:5c:c5:e5:d8:2d:1a:77:bc:58:55:a8:f9:23:b2: 14:08:fc:8a:c6:76:45:b6:9c:fa:ac:e8:79:f4:d7:29:da:46: 72:b8:01:c0:6f:8f:66:37:7e:59:a9:5c:d0:7f:f6:e4:29:33: 1e:7e:94:01:74:59:d0:ea:0c:41:f3:23:0e:7f:f2:85:28:78: a7:b6:cb:d9:12:b3:03:3a:44:17:0e:21:81:85:03:9d:65:73: a0:06:2d:12:3f:c9:65:a7:98:60:78:cc:68:f4:e0:bd:ea:f7: 6b:3f:c4:cb:62:f6:0e:27:b5:44:b4:bd:5f:6e:95:2a:f2:b7: 4d:84:ba:71:06:c1:74:34:17:91:8b:32:8f:17:66:81:bb:8d: 3b:ff:8a:f9:b3:46:2a:a9:50:b1:26:72:cb:4c:80:0d:70:89: ca:4a:4f:67:2a:7f:be:1a:5d:62:f0:ae:1b:62:dc:48:98:f8: 79:5d:55:af:81:71:e5:89:c1:08:2a:b0:c8:ce:01:45:5d:b6: 55:c5:67:49:3c:e0:d1:98:62:6b:84:0a:12:d6:49:22:5f:86: 1c:69:8d:5b:f3:a7:e2:74:8b:32:d6:e8:cb:6a:76:15:47:7a: 13:25:c8:c9:2a:98:eb:4d:bf:32:6c:84:20:57:6d:5a:3b:ae: a9:68:bf:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQk4jVpxo3xju4bXYq6sW3wxvZXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E2NDJFQkE3MjA3MTZEQUI1NTI3NTU1NDRBMkYxRjc0 QjRDODdGMDAeFw0yNjA5MjIwNDE2NTJaFw0yNjA5MjMwNTQ1NTJaMDMxMTAvBgNV BAMTKDFFMTU3OTE2NDhCREU5OUQ2NDlBOUM0NTdCNDVBRTlCRUQzMEE0NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCklEyRoU4Hir4lhic64oAdXhsV fGU8ERBA3ZUZiRzYEdzjBzVWWC0cC/HoPtrw1ef9fq3Hvf+XMkxuk1T+vsp+/ELc XwVgkiQOQE7y9lPbsbAv9Xhyc0k5L4sUQJcffbKcocE2+SN8yJC/0yKaz+07amFy vijKQR0SCor6JJBmAlI7reFzIzcWhRasKQhKbB91hqkUdJt3AsSAz4hEjAlh/xJt HNJGDYMPCLiJ8taO9XcEYjb8rckP2NpJMjViQpTdzripfD+XWEEFXYzlDG01Ml5S FaPguHPXQQ1n72w7Pl9r4K1hTy8JPL00LnEDQN3V/SnPTFjoW5VozcxhG37/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHhV5Fki96Z1kmpxFe0Wum+0wpGowHwYDVR0j BBgwFoAUemQuunIHFtq1UnVVRKLx90tMh/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzc2Njg1NDEtZDZjNi00MDllLThhZDEtNWU4OWE0YjI4NTBlLzAvN0E2NDJFQkE3 MjA3MTZEQUI1NTI3NTU1NDRBMkYxRjc0QjRDODdGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QTY0MkVCQTcyMDcxNkRBQjU1Mjc1NTU0NEEyRjFGNzRCNEM4 N0YwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzc2Njg1NDEtZDZjNi00MDllLThh ZDEtNWU4OWE0YjI4NTBlLzAvN0E2NDJFQkE3MjA3MTZEQUI1NTI3NTU1NDRBMkYx Rjc0QjRDODdGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFp1kpNcxeXYLRp3vFhVqPkjshQI/IrGdkW2 nPqs6Hn01ynaRnK4AcBvj2Y3flmpXNB/9uQpMx5+lAF0WdDqDEHzIw5/8oUoeKe2 y9kSswM6RBcOIYGFA51lc6AGLRI/yWWnmGB4zGj04L3q92s/xMti9g4ntUS0vV9u lSryt02EunEGwXQ0F5GLMo8XZoG7jTv/ivmzRiqpULEmcstMgA1wicpKT2cqf74a XWLwrhti3EiY+HldVa+BceWJwQgqsMjOAUVdtlXFZ0k84NGYYmuEChLWSSJfhhxp jVvzp+J0izLW6MtqdhVHehMlyMkqmOtNvzJshCBXbVo7rqlov0g= -----END CERTIFICATE-----Generated at Tue Sep 22 13:37:46 2026 by rpki-client