$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft File: A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft (raw, json) Hash identifier: 6NTdnbbHQqXx9XH4Qr9wmuxzrTfDvJljB+lzELZfeIE= Subject key identifier: C6:DE:D0:6D:86:CA:3E:D6:26:F5:29:F1:2C:8A:A2:E7:49:C2:FD:27 Authority key identifier: A7:88:9B:33:86:7E:D2:BD:F1:5C:39:F7:22:D2:0B:AF:76:B4:20:EE Certificate issuer: /CN=A7889B33867ED2BDF15C39F722D20BAF76B420EE Certificate serial: 2E1C16900FDAADA30FB0D75F57771A2FB5377341 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7889B33867ED2BDF15C39F722D20BAF76B420EE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 06:29:02 +0000 Manifest this update: Wed 23 Sep 2026 06:24:02 +0000 Manifest next update: Thu 24 Sep 2026 08:59:02 +0000 Files and hashes: 1: 3130332e3230322e3232372e302f32342d3234203d3e20313334363335.roa (hash: O/6Vse93iZ++RJMaxSdbmCU7yuXgswidaAAY3SDWRSc=) 2: A7889B33867ED2BDF15C39F722D20BAF76B420EE.crl (hash: py/dyyKRHq+XIRPmL+77yR22clu6LNe+LZq/EwQ9oLk=) 3: 3130332e38342e3131372e302f32342d3234203d3e20313334363335.roa (hash: dkiEurQUbycXFg21P8maECsCJ68qwlxLVBuvs8trkqU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.crl rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7889B33867ED2BDF15C39F722D20BAF76B420EE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:1c:16:90:0f:da:ad:a3:0f:b0:d7:5f:57:77:1a:2f:b5:37:73:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7889B33867ED2BDF15C39F722D20BAF76B420EE Validity Not Before: Sep 23 06:24:02 2026 GMT Not After : Sep 24 08:59:02 2026 GMT Subject: CN=C6DED06D86CA3ED626F529F12C8AA2E749C2FD27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9b:eb:2e:09:49:ec:55:f4:cd:12:ae:91:51: 2b:8e:94:97:17:ed:eb:57:e9:87:82:bc:03:85:99: aa:70:6a:4d:b8:8a:2b:7f:71:6f:eb:1a:57:12:64: 4f:e4:d9:57:0b:57:6a:50:ad:03:1d:b7:d4:db:d1: d7:40:50:a0:49:05:28:c8:34:db:d5:d0:35:7d:72: d1:53:4d:03:36:83:44:97:19:a0:53:47:16:56:05: 7e:a3:db:34:b2:25:07:e3:b5:f8:91:b3:69:7d:e1: 28:d0:f6:17:bf:8b:ae:46:9a:5a:ba:27:ce:de:b4: d0:78:e0:ae:88:9d:2b:56:af:8d:05:51:4b:e0:92: 6f:fc:07:39:2a:86:bd:7f:32:9b:69:7f:60:e5:e6: 9c:2d:60:6f:8e:d0:81:bb:c0:90:6f:f3:89:32:f8: 76:32:0a:0c:e1:ac:f8:b1:e1:4b:61:c1:a1:d9:33: 3d:c9:21:9b:1f:c7:b2:3f:11:6e:61:6b:1b:45:0a: 99:a7:ed:e0:13:00:fe:67:f1:13:d0:b2:c0:7d:84: bb:dc:43:d7:70:5c:aa:e3:e8:d9:b3:31:34:c2:d6: 76:8f:d9:9c:72:b0:32:b5:dc:4f:0a:ea:8f:e6:84: fd:a2:64:9c:09:79:16:1d:94:f7:9b:53:cf:9c:81: 0c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DE:D0:6D:86:CA:3E:D6:26:F5:29:F1:2C:8A:A2:E7:49:C2:FD:27 X509v3 Authority Key Identifier: keyid:A7:88:9B:33:86:7E:D2:BD:F1:5C:39:F7:22:D2:0B:AF:76:B4:20:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7889B33867ED2BDF15C39F722D20BAF76B420EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:30:62:cf:5e:0f:00:53:d8:81:d1:1b:4a:34:ba:77:55:51: ce:aa:e5:8a:b2:0f:59:86:1c:91:e0:5d:35:93:b8:a2:b7:c5: bc:5d:c1:44:2a:ba:e9:ca:91:1b:86:5e:3f:93:61:1c:00:82: 51:d7:1c:3a:55:73:ec:fc:85:f2:7b:a9:82:13:16:92:85:2d: 70:d4:fa:d9:c0:0a:97:84:74:8d:98:d5:52:90:71:28:d4:32: 7a:77:ac:ec:bb:23:99:d4:85:df:c1:f2:6f:7a:d8:9b:34:eb: dc:a2:d7:92:58:00:c0:1f:9c:f9:4d:2a:bb:a9:c3:87:21:37: 6e:8c:b5:58:1e:67:db:7f:37:b1:00:0a:8a:87:3a:7d:72:39: e2:18:10:28:54:b2:64:40:13:b9:b6:b3:27:0c:ce:b1:0a:c3: 27:46:0d:5f:c1:d1:e0:d7:93:43:b0:2c:2e:38:b8:14:d3:ca: 89:fb:cf:81:19:dd:09:31:a1:61:4c:e8:34:8d:5d:73:f8:e8: 92:5c:1e:2d:79:ee:79:1a:63:e8:1a:c5:68:3a:76:48:06:4a: 80:ac:99:1f:55:6b:b7:75:7e:76:03:9f:65:b5:0e:f6:1d:47: 54:1c:96:4a:dd:ac:b5:be:04:09:91:e6:25:55:59:ba:b7:9f: 71:72:d9:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULhwWkA/araMPsNdfV3caL7U3c0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4ODlCMzM4NjdFRDJCREYxNUMzOUY3MjJEMjBCQUY3 NkI0MjBFRTAeFw0yNjA5MjMwNjI0MDJaFw0yNjA5MjQwODU5MDJaMDMxMTAvBgNV BAMTKEM2REVEMDZEODZDQTNFRDYyNkY1MjlGMTJDOEFBMkU3NDlDMkZEMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAm+suCUnsVfTNEq6RUSuOlJcX 7etX6YeCvAOFmapwak24iit/cW/rGlcSZE/k2VcLV2pQrQMdt9Tb0ddAUKBJBSjI NNvV0DV9ctFTTQM2g0SXGaBTRxZWBX6j2zSyJQfjtfiRs2l94SjQ9he/i65Gmlq6 J87etNB44K6InStWr40FUUvgkm/8Bzkqhr1/Mptpf2Dl5pwtYG+O0IG7wJBv84ky +HYyCgzhrPix4UthwaHZMz3JIZsfx7I/EW5haxtFCpmn7eATAP5n8RPQssB9hLvc Q9dwXKrj6NmzMTTC1naP2ZxysDK13E8K6o/mhP2iZJwJeRYdlPebU8+cgQyfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxt7QbYbKPtYm9SnxLIqi50nC/ScwHwYDVR0j BBgwFoAUp4ibM4Z+0r3xXDn3ItILr3a0IO4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjEzMmE3NDAtYmQ3ZC00NmI4LWIxMGEtYTdhNzAzZTM1MGYyLzAvQTc4ODlCMzM4 NjdFRDJCREYxNUMzOUY3MjJEMjBCQUY3NkI0MjBFRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzg4OUIzMzg2N0VEMkJERjE1QzM5RjcyMkQyMEJBRjc2QjQy MEVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjEzMmE3NDAtYmQ3ZC00NmI4LWIx MGEtYTdhNzAzZTM1MGYyLzAvQTc4ODlCMzM4NjdFRDJCREYxNUMzOUY3MjJEMjBC QUY3NkI0MjBFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcwYs9eDwBT2IHRG0o0undVUc6q5YqyD1mG HJHgXTWTuKK3xbxdwUQquunKkRuGXj+TYRwAglHXHDpVc+z8hfJ7qYITFpKFLXDU +tnACpeEdI2Y1VKQcSjUMnp3rOy7I5nUhd/B8m962Js069yi15JYAMAfnPlNKrup w4chN26MtVgeZ9t/N7EACoqHOn1yOeIYEChUsmRAE7m2sycMzrEKwydGDV/B0eDX k0OwLC44uBTTyon7z4EZ3QkxoWFM6DSNXXP46JJcHi157nkaY+gaxWg6dkgGSoCs mR9Va7d1fnYDn2W1DvYdR1QclkrdrLW+BAmR5iVVWbq3n3Fy2SA= -----END CERTIFICATE-----Generated at Wed Sep 23 22:33:46 2026 by rpki-client