$ rpki-client -vvvf rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft File: 7E5852640ACB27CE4AC466E5338B30E206711DDD.mft (raw, json) Hash identifier: Jb9/4y4BQZGwdOdMrA5mziAw76U3VWNsOB2ArKr0n5s= Subject key identifier: 99:4C:A2:9D:86:6D:37:6D:D5:10:37:5B:B1:9D:32:7E:1E:4D:BF:A5 Authority key identifier: 7E:58:52:64:0A:CB:27:CE:4A:C4:66:E5:33:8B:30:E2:06:71:1D:DD Certificate issuer: /CN=7E5852640ACB27CE4AC466E5338B30E206711DDD Certificate serial: 25553B2465459368597789BD1041A40AA07300DF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 23:55:09 +0000 Manifest this update: Fri 25 Sep 2026 23:50:09 +0000 Manifest next update: Sun 27 Sep 2026 01:44:09 +0000 Files and hashes: 1: 7E5852640ACB27CE4AC466E5338B30E206711DDD.crl (hash: xntVq8Qk1P24o5NpOC6Q1cgWTbxQvyGl/DANbaFZkrY=) 2: 3130332e32322e3231362e302f32342d3234203d3e20313530323631.roa (hash: 1PUWFE0HvObC84cJz28KwHOs36xPuTELe/I8Yxh+ht0=) 3: 3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa (hash: 8hArOQkZgNmI16L0WGc7RzZ5Ruf+DKiwdMQ56yopHsU=) 4: 3130332e32322e3231372e302f32342d3234203d3e20313530323631.roa (hash: zgUoXY12HmCoiLv/YyPkviXHygAhdx3kmWkfk7KOXTU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.crl rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:55:3b:24:65:45:93:68:59:77:89:bd:10:41:a4:0a:a0:73:00:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E5852640ACB27CE4AC466E5338B30E206711DDD Validity Not Before: Sep 25 23:50:09 2026 GMT Not After : Sep 27 01:44:09 2026 GMT Subject: CN=994CA29D866D376DD510375BB19D327E1E4DBFA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3c:94:d0:d9:55:4a:8a:66:7d:65:d8:77:56: a2:06:a0:ba:3b:0b:59:2f:cf:98:c0:ce:0b:71:40: 25:04:92:a8:0e:3b:3d:af:64:ab:53:32:cd:8e:91: 9a:5b:6b:72:fd:59:bc:6c:14:27:2d:4a:43:9c:5c: 37:94:64:1c:b6:87:26:6b:06:a2:4a:f9:12:4d:dc: 0f:80:0f:a8:cb:32:bd:9e:49:0c:d8:98:18:f0:0a: c9:b2:e8:35:86:3e:6d:ed:7f:7a:75:7e:21:ba:63: d7:3c:5c:dd:d4:23:a3:13:17:ef:15:a8:4a:a8:ff: 89:64:5d:29:00:87:ea:7c:2c:36:51:7c:af:fc:62: e8:3b:f6:1c:a0:ff:2b:7d:bd:64:a9:bb:4b:56:80: 45:a5:e8:fb:fc:6c:4c:ce:60:4f:e9:c2:7a:0e:0d: 62:80:6a:b1:c9:0e:9e:18:93:1a:00:12:16:21:7c: a3:28:bc:b7:93:be:39:95:ff:98:21:78:bd:e6:27: 62:9b:9b:20:52:5b:b4:c3:1d:1b:72:ef:29:12:86: 3d:e0:9b:f6:4c:a2:7e:4a:6c:5a:50:58:59:1d:22: 73:d3:c3:0e:a8:08:c4:96:f9:b3:91:2b:5e:94:06: f4:37:4c:26:4f:78:3c:b8:dc:24:e3:a4:d6:c2:c9: 2d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:4C:A2:9D:86:6D:37:6D:D5:10:37:5B:B1:9D:32:7E:1E:4D:BF:A5 X509v3 Authority Key Identifier: keyid:7E:58:52:64:0A:CB:27:CE:4A:C4:66:E5:33:8B:30:E2:06:71:1D:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:db:cd:33:8f:f4:1d:89:3b:1b:9f:64:1d:3d:8f:b0:94:8d: 64:cf:40:13:d6:20:77:46:06:a7:ae:06:c2:a3:9c:93:6c:06: ef:a5:34:36:bc:e8:a8:10:3b:b5:d4:d2:b3:bb:01:ef:ad:c8: fd:3f:ce:4e:d9:cd:fe:65:96:9d:1d:73:88:d3:b3:f6:b6:82: 54:be:8f:5c:38:6d:28:01:d6:1a:89:ec:d6:ed:6b:de:9a:4f: 5e:76:63:9d:f0:8e:3e:fd:b4:93:5c:0e:d4:26:0b:a3:58:e3: 8e:99:d1:f0:c5:06:3f:98:9a:68:7f:be:0e:b1:58:7e:72:fb: 71:86:72:09:d6:d4:a9:e5:48:20:5c:14:e9:89:28:13:67:2c: 13:9b:97:87:05:ea:3a:4f:04:34:27:7a:09:a3:d3:f0:b1:02: b8:01:d0:24:72:41:3b:82:d0:d5:3d:df:82:7e:a8:f3:6a:70: 0b:66:e8:ae:76:36:75:4e:3d:e3:06:e2:a5:fe:94:f9:1f:c5: 2e:f8:b0:35:da:42:67:32:c2:84:7c:42:77:4c:85:39:c9:dd: 44:57:70:d5:89:59:00:83:f2:37:52:30:07:dc:b3:dd:ea:6b: 6f:a3:c5:1f:4f:e6:c9:b8:0f:da:b5:5e:40:2b:1c:2f:66:65: 27:d1:73:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJVU7JGVFk2hZd4m9EEGkCqBzAN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U1ODUyNjQwQUNCMjdDRTRBQzQ2NkU1MzM4QjMwRTIw NjcxMURERDAeFw0yNjA5MjUyMzUwMDlaFw0yNjA5MjcwMTQ0MDlaMDMxMTAvBgNV BAMTKDk5NENBMjlEODY2RDM3NkRENTEwMzc1QkIxOUQzMjdFMUU0REJGQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClPJTQ2VVKimZ9Zdh3VqIGoLo7 C1kvz5jAzgtxQCUEkqgOOz2vZKtTMs2OkZpba3L9WbxsFCctSkOcXDeUZBy2hyZr BqJK+RJN3A+AD6jLMr2eSQzYmBjwCsmy6DWGPm3tf3p1fiG6Y9c8XN3UI6MTF+8V qEqo/4lkXSkAh+p8LDZRfK/8Yug79hyg/yt9vWSpu0tWgEWl6Pv8bEzOYE/pwnoO DWKAarHJDp4YkxoAEhYhfKMovLeTvjmV/5gheL3mJ2KbmyBSW7TDHRty7ykShj3g m/ZMon5KbFpQWFkdInPTww6oCMSW+bORK16UBvQ3TCZPeDy43CTjpNbCyS1/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmUyinYZtN23VEDdbsZ0yfh5Nv6UwHwYDVR0j BBgwFoAUflhSZArLJ85KxGblM4sw4gZxHd0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU0NjA3ZjAtMTcwMS00OWIxLTkxZmYtYjFiZWQ1Y2JkZWQxLzAvN0U1ODUyNjQw QUNCMjdDRTRBQzQ2NkU1MzM4QjMwRTIwNjcxMURERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RTU4NTI2NDBBQ0IyN0NFNEFDNDY2RTUzMzhCMzBFMjA2NzEx RERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU0NjA3ZjAtMTcwMS00OWIxLTkx ZmYtYjFiZWQ1Y2JkZWQxLzAvN0U1ODUyNjQwQUNCMjdDRTRBQzQ2NkU1MzM4QjMw RTIwNjcxMURERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHbzTOP9B2JOxufZB09j7CUjWTPQBPWIHdG BqeuBsKjnJNsBu+lNDa86KgQO7XU0rO7Ae+tyP0/zk7Zzf5llp0dc4jTs/a2glS+ j1w4bSgB1hqJ7Nbta96aT152Y53wjj79tJNcDtQmC6NY446Z0fDFBj+Ymmh/vg6x WH5y+3GGcgnW1KnlSCBcFOmJKBNnLBObl4cF6jpPBDQnegmj0/CxArgB0CRyQTuC 0NU934J+qPNqcAtm6K52NnVOPeMG4qX+lPkfxS74sDXaQmcywoR8QndMhTnJ3URX cNWJWQCD8jdSMAfcs93qa2+jxR9P5sm4D9q1XkArHC9mZSfRc4w= -----END CERTIFICATE-----Generated at Sat Sep 26 05:46:45 2026 by rpki-client