$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft File: A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft (raw, json) Hash identifier: Y0Qfhlr08OE0ykIVnLeKa5tPlJRGhGzkGtm1BgIXph8= Subject key identifier: 22:83:78:5B:EA:23:DC:38:5A:CE:B6:1C:A1:A8:B8:D9:20:5E:7A:F7 Authority key identifier: A7:88:9B:33:86:7E:D2:BD:F1:5C:39:F7:22:D2:0B:AF:76:B4:20:EE Certificate issuer: /CN=A7889B33867ED2BDF15C39F722D20BAF76B420EE Certificate serial: 03C432914A2469A830C4F159427E131CCF049FEB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7889B33867ED2BDF15C39F722D20BAF76B420EE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft Manifest number: BD Signing time: Sun 20 Sep 2026 23:05:26 +0000 Manifest this update: Sun 20 Sep 2026 23:00:26 +0000 Manifest next update: Tue 22 Sep 2026 00:14:26 +0000 Files and hashes: 1: 3130332e3230322e3232372e302f32342d3234203d3e20313334363335.roa (hash: O/6Vse93iZ++RJMaxSdbmCU7yuXgswidaAAY3SDWRSc=) 2: A7889B33867ED2BDF15C39F722D20BAF76B420EE.crl (hash: aimeQuKB8ARmd/wph+YJZQWBxFTYhXl3z1zfCALZqkQ=) 3: 3130332e38342e3131372e302f32342d3234203d3e20313334363335.roa (hash: dkiEurQUbycXFg21P8maECsCJ68qwlxLVBuvs8trkqU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.crl rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7889B33867ED2BDF15C39F722D20BAF76B420EE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 00:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:c4:32:91:4a:24:69:a8:30:c4:f1:59:42:7e:13:1c:cf:04:9f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7889B33867ED2BDF15C39F722D20BAF76B420EE Validity Not Before: Sep 20 23:00:26 2026 GMT Not After : Sep 22 00:14:26 2026 GMT Subject: CN=2283785BEA23DC385ACEB61CA1A8B8D9205E7AF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ef:63:6e:7f:4b:f5:3b:b6:19:f3:08:b0:2f: 7c:71:50:32:08:7c:6e:1d:6f:00:dd:0d:1c:e3:ef: 9a:2e:24:33:e9:ec:1c:74:ac:56:c2:59:e4:cd:a3: eb:20:a0:18:45:b9:d0:79:93:4b:9f:ac:e6:c2:e5: 95:8c:29:67:2d:fd:89:be:3d:83:61:73:9e:40:e7: a1:ef:b6:5c:fe:0c:a6:bc:cf:d7:90:de:e5:87:76: bb:02:83:c6:e9:e7:c4:86:9d:b5:a2:1c:c2:a5:79: e9:4c:f4:8b:cc:d5:05:2e:b2:7e:93:a0:ad:e3:9e: 5a:4a:db:42:92:0b:27:cd:54:5b:c5:ba:bf:d7:6c: 8e:ce:79:a9:f6:af:29:08:b3:8e:ee:40:2a:13:bc: 81:1f:ef:10:d9:b1:6a:85:44:9c:af:05:13:dc:14: e5:43:d7:ca:c7:1a:af:49:5f:53:f2:bb:2b:4d:5a: 4e:65:fd:fa:66:d9:e4:f7:ca:86:33:49:db:e9:70: 42:2e:50:ac:29:06:8c:66:37:31:f3:ec:29:db:c7: 42:c5:41:d2:85:02:fd:4c:fe:6f:a0:c2:bd:48:28: 92:26:11:ce:3b:9f:c5:5b:40:82:e7:86:91:dc:5e: b9:90:b3:38:d4:c0:ad:63:75:02:27:fa:d6:68:68: fd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:83:78:5B:EA:23:DC:38:5A:CE:B6:1C:A1:A8:B8:D9:20:5E:7A:F7 X509v3 Authority Key Identifier: keyid:A7:88:9B:33:86:7E:D2:BD:F1:5C:39:F7:22:D2:0B:AF:76:B4:20:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7889B33867ED2BDF15C39F722D20BAF76B420EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:47:2c:7e:0f:fd:30:0b:b5:21:68:ca:ea:d0:cd:4b:06:ad: b0:de:a0:47:dc:eb:86:67:b8:04:46:69:24:dc:21:1d:e7:ad: a3:89:38:6f:f0:1b:cf:e9:92:3b:af:d0:a2:28:1a:dd:5b:bd: 17:01:f0:da:84:54:ce:94:58:96:6d:8c:0f:d8:c6:3a:e3:b4: cf:4f:f7:69:5c:64:e3:4b:09:0c:09:18:76:49:79:83:3e:92: bf:7d:14:dd:40:b4:74:19:03:9c:95:99:31:6e:0f:a0:5c:7c: ec:29:77:06:6d:7c:82:63:78:7d:92:dd:e9:31:cb:2a:44:25: 26:03:d4:f7:40:0a:29:4a:17:30:73:14:1d:8d:d1:4b:c8:9f: 45:94:4b:61:0e:58:cb:40:a9:75:20:cd:ba:61:c8:3d:6b:6b: 9d:02:10:c2:19:07:93:ac:ca:43:68:66:31:45:85:08:d6:03: c5:a4:ce:30:12:4d:75:0c:12:f8:ff:84:59:1a:bf:c8:a3:53: d6:31:7a:0b:6e:29:f2:1e:3a:a0:e8:c5:c8:c9:5a:bf:02:3f: 33:fb:92:02:8e:e8:6e:0f:db:ba:44:44:bf:14:3d:cc:ce:33: 29:a6:a5:79:3a:da:ad:49:23:ef:7a:dd:2f:43:99:98:0c:1f: 2b:1e:99:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA8QykUokaagwxPFZQn4THM8En+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4ODlCMzM4NjdFRDJCREYxNUMzOUY3MjJEMjBCQUY3 NkI0MjBFRTAeFw0yNjA5MjAyMzAwMjZaFw0yNjA5MjIwMDE0MjZaMDMxMTAvBgNV BAMTKDIyODM3ODVCRUEyM0RDMzg1QUNFQjYxQ0ExQThCOEQ5MjA1RTdBRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx72Nuf0v1O7YZ8wiwL3xxUDII fG4dbwDdDRzj75ouJDPp7Bx0rFbCWeTNo+sgoBhFudB5k0ufrObC5ZWMKWct/Ym+ PYNhc55A56Hvtlz+DKa8z9eQ3uWHdrsCg8bp58SGnbWiHMKleelM9IvM1QUusn6T oK3jnlpK20KSCyfNVFvFur/XbI7Oean2rykIs47uQCoTvIEf7xDZsWqFRJyvBRPc FOVD18rHGq9JX1PyuytNWk5l/fpm2eT3yoYzSdvpcEIuUKwpBoxmNzHz7Cnbx0LF QdKFAv1M/m+gwr1IKJImEc47n8VbQILnhpHcXrmQszjUwK1jdQIn+tZoaP0VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIoN4W+oj3DhazrYcoai42SBeevcwHwYDVR0j BBgwFoAUp4ibM4Z+0r3xXDn3ItILr3a0IO4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjEzMmE3NDAtYmQ3ZC00NmI4LWIxMGEtYTdhNzAzZTM1MGYyLzAvQTc4ODlCMzM4 NjdFRDJCREYxNUMzOUY3MjJEMjBCQUY3NkI0MjBFRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzg4OUIzMzg2N0VEMkJERjE1QzM5RjcyMkQyMEJBRjc2QjQy MEVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjEzMmE3NDAtYmQ3ZC00NmI4LWIx MGEtYTdhNzAzZTM1MGYyLzAvQTc4ODlCMzM4NjdFRDJCREYxNUMzOUY3MjJEMjBC QUY3NkI0MjBFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVHLH4P/TALtSFoyurQzUsGrbDeoEfc64Zn uARGaSTcIR3nraOJOG/wG8/pkjuv0KIoGt1bvRcB8NqEVM6UWJZtjA/YxjrjtM9P 92lcZONLCQwJGHZJeYM+kr99FN1AtHQZA5yVmTFuD6BcfOwpdwZtfIJjeH2S3ekx yypEJSYD1PdACilKFzBzFB2N0UvIn0WUS2EOWMtAqXUgzbphyD1ra50CEMIZB5Os ykNoZjFFhQjWA8WkzjASTXUMEvj/hFkav8ijU9YxegtuKfIeOqDoxcjJWr8CPzP7 kgKO6G4P27pERL8UPczOMymmpXk62q1JI+963S9DmZgMHysemTw= -----END CERTIFICATE-----Generated at Mon Sep 21 18:05:41 2026 by rpki-client