$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft File: C7CDFA6BC067C7A495919AAD0E26180B86353954.mft (raw, json) Hash identifier: E1gv3YlgRRFhHUvvAWxrzJmapsztPHBOkxvxmrnFuQY= Subject key identifier: 32:80:25:04:22:96:B3:8D:8E:C1:3F:2B:49:2F:25:06:09:22:D2:8F Authority key identifier: C7:CD:FA:6B:C0:67:C7:A4:95:91:9A:AD:0E:26:18:0B:86:35:39:54 Certificate issuer: /CN=C7CDFA6BC067C7A495919AAD0E26180B86353954 Certificate serial: 5B31F7751E73FCFA22ADF841A97DBB4B384ADF17 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft Manifest number: BE Signing time: Sun 20 Sep 2026 15:51:38 +0000 Manifest this update: Sun 20 Sep 2026 15:46:38 +0000 Manifest next update: Mon 21 Sep 2026 16:36:38 +0000 Files and hashes: 1: 3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa (hash: LgH9oXeBcuQFeopdycllX9ZwgANBmbEdowpLFMRb868=) 2: 3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa (hash: 0iLOUhfmWoIB+lxiDVooYY80mjdqjMFktAq2sVeC4n8=) 3: 3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa (hash: pSVzT2vio9bf7LUyfGmLirM4hVE1PKigRBwf0BFNg8U=) 4: C7CDFA6BC067C7A495919AAD0E26180B86353954.crl (hash: +697O7Av4M0igvRNHTSHzRnFEBjubM8mhWRW5mwmoxI=) 5: 323030313a6466313a366263303a3a2f34382d3438203d3e20313431363036.roa (hash: I79Q34o1f2vuvFl40hYKqigyJvsHaAMckuqi63LU5sQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.crl rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 16:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:31:f7:75:1e:73:fc:fa:22:ad:f8:41:a9:7d:bb:4b:38:4a:df:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7CDFA6BC067C7A495919AAD0E26180B86353954 Validity Not Before: Sep 20 15:46:38 2026 GMT Not After : Sep 21 16:36:38 2026 GMT Subject: CN=328025042296B38D8EC13F2B492F25060922D28F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ea:20:84:9a:e3:83:68:8f:c9:69:17:77:fa: 26:cc:a0:e2:22:70:0b:8a:19:ff:62:3d:89:86:3d: be:ff:26:18:82:57:ff:0c:1c:03:de:6e:d2:dd:e1: 99:74:aa:c8:99:b7:12:67:47:0c:ba:92:5e:f7:78: 9b:c2:f2:bd:d3:34:1c:22:75:bd:bf:94:b5:e2:44: b4:3f:54:53:74:f3:6d:3e:fc:24:09:52:f3:5d:72: cc:ed:b7:25:ab:b1:6c:6a:df:b3:ed:f2:70:e4:c6: ba:93:02:ed:72:5e:84:89:4b:34:0c:ae:5c:6f:03: 4e:ca:b0:10:64:b2:95:28:67:15:b7:b4:2b:b5:39: 97:3a:16:60:a4:b3:fd:6a:2c:22:ac:53:b0:8f:04: 7f:e0:27:18:fd:b7:10:42:74:23:32:84:fa:70:90: 88:e4:52:a8:12:bd:17:64:ed:cf:15:59:cf:71:57: 2c:17:56:af:02:8c:74:cd:27:80:f6:d4:37:0f:9e: 1d:88:7a:1b:e9:48:0c:d4:b7:53:a6:e3:5f:72:29: ab:14:d5:16:a1:9d:75:c7:c8:54:fd:1a:16:1a:ef: 5e:92:ab:02:f0:3d:00:1a:3f:63:60:f9:22:e9:6b: 7e:4c:95:1b:69:4c:6d:2f:02:88:9c:ec:77:7d:8f: 5e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:80:25:04:22:96:B3:8D:8E:C1:3F:2B:49:2F:25:06:09:22:D2:8F X509v3 Authority Key Identifier: keyid:C7:CD:FA:6B:C0:67:C7:A4:95:91:9A:AD:0E:26:18:0B:86:35:39:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:4a:5f:88:73:d2:c5:68:e3:5f:b4:e5:2d:a0:ab:6a:91:d0: a3:24:38:b3:99:f4:8f:be:34:16:75:58:f7:09:3c:26:bb:de: 55:4d:b0:37:d8:ef:a7:5b:cf:91:15:01:9d:b4:c9:15:7b:93: 6b:7b:45:6c:5b:3a:10:73:b1:74:af:36:bf:c5:79:30:bc:a6: 56:b0:2b:c5:eb:b1:e0:a4:a3:f9:d3:22:c9:e2:bd:b7:45:b4: 6f:58:60:fc:ed:f1:69:ab:a6:32:cd:6d:2c:25:c6:17:cb:94: 15:08:49:0b:c3:8e:01:a5:a8:a9:39:8a:b5:ee:c5:26:66:a0: c5:53:c2:af:75:fe:30:07:07:df:10:47:f5:8b:17:64:cb:08: 1b:1e:e9:24:89:f1:81:1e:33:3d:d2:d6:0a:9e:e1:f3:38:64: 89:3b:7a:5d:c1:8c:71:06:2e:45:a7:48:f4:1c:97:64:d3:f8: 0a:65:17:73:96:d6:d0:3c:b0:e4:39:07:eb:45:89:c2:34:89: fa:de:e0:b4:fe:3b:51:85:56:b0:1e:36:f2:6c:7b:af:9b:e1: 92:c2:85:b7:c4:44:f5:d0:53:56:82:b0:cd:2f:1e:ab:c9:94: 13:06:17:8c:19:4b:23:28:5a:60:ee:d8:91:fc:f3:bb:71:d3: d5:01:7b:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWzH3dR5z/PoirfhBqX27SzhK3xcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdDREZBNkJDMDY3QzdBNDk1OTE5QUFEMEUyNjE4MEI4 NjM1Mzk1NDAeFw0yNjA5MjAxNTQ2MzhaFw0yNjA5MjExNjM2MzhaMDMxMTAvBgNV BAMTKDMyODAyNTA0MjI5NkIzOEQ4RUMxM0YyQjQ5MkYyNTA2MDkyMkQyOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx6iCEmuODaI/JaRd3+ibMoOIi cAuKGf9iPYmGPb7/JhiCV/8MHAPebtLd4Zl0qsiZtxJnRwy6kl73eJvC8r3TNBwi db2/lLXiRLQ/VFN0820+/CQJUvNdcszttyWrsWxq37Pt8nDkxrqTAu1yXoSJSzQM rlxvA07KsBBkspUoZxW3tCu1OZc6FmCks/1qLCKsU7CPBH/gJxj9txBCdCMyhPpw kIjkUqgSvRdk7c8VWc9xVywXVq8CjHTNJ4D21DcPnh2IehvpSAzUt1Om419yKasU 1RahnXXHyFT9GhYa716SqwLwPQAaP2Ng+SLpa35MlRtpTG0vAoic7Hd9j14rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMoAlBCKWs42OwT8rSS8lBgki0o8wHwYDVR0j BBgwFoAUx836a8Bnx6SVkZqtDiYYC4Y1OVQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ2NGJmNmEtNDMwMi00NjBmLTk2NjktMDlhNTBhNzNhZjFhLzAvQzdDREZBNkJD MDY3QzdBNDk1OTE5QUFEMEUyNjE4MEI4NjM1Mzk1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DN0NERkE2QkMwNjdDN0E0OTU5MTlBQUQwRTI2MTgwQjg2MzUz OTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ2NGJmNmEtNDMwMi00NjBmLTk2 NjktMDlhNTBhNzNhZjFhLzAvQzdDREZBNkJDMDY3QzdBNDk1OTE5QUFEMEUyNjE4 MEI4NjM1Mzk1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNKX4hz0sVo41+05S2gq2qR0KMkOLOZ9I++ NBZ1WPcJPCa73lVNsDfY76dbz5EVAZ20yRV7k2t7RWxbOhBzsXSvNr/FeTC8plaw K8XrseCko/nTIsnivbdFtG9YYPzt8WmrpjLNbSwlxhfLlBUISQvDjgGlqKk5irXu xSZmoMVTwq91/jAHB98QR/WLF2TLCBse6SSJ8YEeMz3S1gqe4fM4ZIk7el3BjHEG LkWnSPQcl2TT+AplF3OW1tA8sOQ5B+tFicI0ifre4LT+O1GFVrAeNvJse6+b4ZLC hbfERPXQU1aCsM0vHqvJlBMGF4wZSyMoWmDu2JH887tx09UBe3s= -----END CERTIFICATE-----Generated at Mon Sep 21 09:45:24 2026 by rpki-client