$ rpki-client -vvvf rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft File: 7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft (raw, json) Hash identifier: WKIKS6f/m7InDQPxUtugLppoW8DPqOWDOkreoe/wJcc= Subject key identifier: 1D:00:C9:BF:0B:82:A3:70:86:49:34:80:7E:3E:72:DD:69:3A:26:2D Authority key identifier: 7C:A7:C7:E6:03:DB:E1:4E:06:E9:48:C7:48:A3:85:43:F5:F5:E7:26 Certificate issuer: /CN=7CA7C7E603DBE14E06E948C748A38543F5F5E726 Certificate serial: 6E1AE1D2C630EC90A1FE5E2802A9285438A62960 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA7C7E603DBE14E06E948C748A38543F5F5E726.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft Manifest number: BF Signing time: Tue 22 Sep 2026 04:42:16 +0000 Manifest this update: Tue 22 Sep 2026 04:37:16 +0000 Manifest next update: Wed 23 Sep 2026 07:30:16 +0000 Files and hashes: 1: 323430323a383263303a3a2f33322d3438203d3e203138303536.roa (hash: slMWOkKg1OA+OP/zcUxoXUDIah1vgvG+HFFav6ni4c4=) 2: 3230322e34362e3134342e302f32322d3234203d3e203138303536.roa (hash: oDQWvgAroc6j8Zz7ACtwggHFMEzsZVwlsq4pDyGB050=) 3: 7CA7C7E603DBE14E06E948C748A38543F5F5E726.crl (hash: Rph1SuuacBXLdrpaWYQxIIhzpfHjW4AdWZifW5HB+H4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.crl rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA7C7E603DBE14E06E948C748A38543F5F5E726.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 07:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:1a:e1:d2:c6:30:ec:90:a1:fe:5e:28:02:a9:28:54:38:a6:29:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA7C7E603DBE14E06E948C748A38543F5F5E726 Validity Not Before: Sep 22 04:37:16 2026 GMT Not After : Sep 23 07:30:16 2026 GMT Subject: CN=1D00C9BF0B82A370864934807E3E72DD693A262D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:66:22:91:14:b8:07:d5:86:ee:a4:92:a5:60: a6:c9:d4:52:9c:c0:26:9b:48:e2:f1:56:f4:a7:cb: 78:a9:ac:5f:9b:46:da:c6:73:6b:0c:60:0c:d0:d4: 94:28:43:ea:e2:23:c4:e4:72:44:5b:ee:3a:f1:c4: ff:88:51:08:6d:38:25:26:08:c8:f0:8d:77:ba:09: 49:93:b2:13:0e:2b:c7:59:4f:63:d7:f2:e8:27:27: b4:83:45:35:50:0d:0e:53:3c:19:9d:07:0a:e2:2e: 15:61:21:a8:e1:b5:1d:b7:6e:9f:68:99:eb:4b:8f: 2b:59:d7:1c:57:4d:74:18:80:f7:48:c9:1d:02:37: 8f:41:2a:dd:1e:f4:d2:15:0f:6d:d4:fe:9b:82:7b: aa:66:92:81:74:4c:6a:ed:6f:d4:81:0a:b8:11:5a: 38:b0:36:cc:25:67:b5:81:7b:67:4f:fc:3d:b1:cb: 33:47:f6:f9:58:51:45:69:e3:0c:bd:7a:df:eb:69: d3:43:96:54:95:86:84:6c:91:3f:4a:0c:c1:59:b9: 1a:c6:fb:fb:2c:d7:85:86:e2:98:54:75:a8:d7:93: 8d:33:52:df:0e:e6:58:bd:0b:12:64:3a:bb:ce:a8: e6:d6:f9:5a:87:5f:8e:93:18:e5:a1:df:31:13:97: 05:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:00:C9:BF:0B:82:A3:70:86:49:34:80:7E:3E:72:DD:69:3A:26:2D X509v3 Authority Key Identifier: keyid:7C:A7:C7:E6:03:DB:E1:4E:06:E9:48:C7:48:A3:85:43:F5:F5:E7:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA7C7E603DBE14E06E948C748A38543F5F5E726.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:cf:cc:95:c5:04:85:53:7e:4e:47:01:7a:9e:35:57:70:f2: 6b:bc:ad:bc:34:10:fd:10:69:7c:0b:7d:9a:10:b8:42:c7:92: b6:67:61:66:b5:27:dc:fc:31:54:c3:8d:4a:b7:d4:92:b7:ac: 46:b6:a1:11:0a:a1:5f:7d:aa:0e:dd:1a:8e:64:1c:b8:2b:ce: 9b:20:a2:63:78:34:ea:c9:2c:cc:3d:1b:47:3b:78:df:f7:20: a6:60:8e:84:52:e3:df:fd:f6:fe:a6:d7:ea:c3:75:53:7c:17: 9c:9f:f0:54:41:66:2f:41:48:0d:9a:61:88:e4:a7:01:38:0e: 62:32:fb:a1:03:1e:bc:d0:76:fd:c6:93:53:61:49:63:ac:1b: d9:b0:dc:2a:11:96:c4:99:b1:bb:76:0c:0c:69:d1:1b:9f:14: bc:80:b6:42:78:e4:a1:c1:8c:10:40:bb:33:71:35:2e:e7:49: 52:50:26:01:53:d9:94:54:94:d4:4b:09:de:1b:b0:e4:aa:b3: d6:1e:7d:34:56:a9:b0:5a:92:95:fd:7c:2a:69:b3:d2:2b:a8: 8c:56:bb:75:03:8f:3b:e6:14:6d:e6:26:46:d2:44:16:fd:3c: 93:cc:02:f5:7d:f2:06:f2:85:ad:94:8d:f2:ba:f9:9f:f9:0a: 61:20:25:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbhrh0sYw7JCh/l4oAqkoVDimKWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBN0M3RTYwM0RCRTE0RTA2RTk0OEM3NDhBMzg1NDNG NUY1RTcyNjAeFw0yNjA5MjIwNDM3MTZaFw0yNjA5MjMwNzMwMTZaMDMxMTAvBgNV BAMTKDFEMDBDOUJGMEI4MkEzNzA4NjQ5MzQ4MDdFM0U3MkRENjkzQTI2MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8ZiKRFLgH1YbupJKlYKbJ1FKc wCabSOLxVvSny3iprF+bRtrGc2sMYAzQ1JQoQ+riI8TkckRb7jrxxP+IUQhtOCUm CMjwjXe6CUmTshMOK8dZT2PX8ugnJ7SDRTVQDQ5TPBmdBwriLhVhIajhtR23bp9o metLjytZ1xxXTXQYgPdIyR0CN49BKt0e9NIVD23U/puCe6pmkoF0TGrtb9SBCrgR WjiwNswlZ7WBe2dP/D2xyzNH9vlYUUVp4wy9et/radNDllSVhoRskT9KDMFZuRrG +/ss14WG4phUdajXk40zUt8O5li9CxJkOrvOqObW+VqHX46TGOWh3zETlwVVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHQDJvwuCo3CGSTSAfj5y3Wk6Ji0wHwYDVR0j BBgwFoAUfKfH5gPb4U4G6UjHSKOFQ/X15yYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjRmN2ViNGYtNzkyNC00ZGI2LWI2ZDYtMzk0ZDgzYjM5MmZjLzAvN0NBN0M3RTYw M0RCRTE0RTA2RTk0OEM3NDhBMzg1NDNGNUY1RTcyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Q0E3QzdFNjAzREJFMTRFMDZFOTQ4Qzc0OEEzODU0M0Y1RjVF NzI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjRmN2ViNGYtNzkyNC00ZGI2LWI2 ZDYtMzk0ZDgzYjM5MmZjLzAvN0NBN0M3RTYwM0RCRTE0RTA2RTk0OEM3NDhBMzg1 NDNGNUY1RTcyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/PzJXFBIVTfk5HAXqeNVdw8mu8rbw0EP0Q aXwLfZoQuELHkrZnYWa1J9z8MVTDjUq31JK3rEa2oREKoV99qg7dGo5kHLgrzpsg omN4NOrJLMw9G0c7eN/3IKZgjoRS49/99v6m1+rDdVN8F5yf8FRBZi9BSA2aYYjk pwE4DmIy+6EDHrzQdv3Gk1NhSWOsG9mw3CoRlsSZsbt2DAxp0RufFLyAtkJ45KHB jBBAuzNxNS7nSVJQJgFT2ZRUlNRLCd4bsOSqs9YefTRWqbBakpX9fCpps9IrqIxW u3UDjzvmFG3mJkbSRBb9PJPMAvV98gbyha2UjfK6+Z/5CmEgJUc= -----END CERTIFICATE-----Generated at Tue Sep 22 13:37:16 2026 by rpki-client