$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft File: C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft (raw, json) Hash identifier: O5hX8d3KjL8WuibAtQkj7ReWNM+ajdV5h3ux+wP+DRo= Subject key identifier: 0A:A7:FF:84:4F:DC:98:14:7C:21:A8:A8:48:0F:92:5E:88:4D:E3:4E Authority key identifier: C7:AF:EA:46:9B:71:F5:3F:5D:E5:7E:84:04:03:A9:F9:FE:D4:17:40 Certificate issuer: /CN=C7AFEA469B71F53F5DE57E840403A9F9FED41740 Certificate serial: 4B5C02A36689F5869936EE08AF286FD5FF1A0BD7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 12:41:10 +0000 Manifest this update: Fri 25 Sep 2026 12:36:10 +0000 Manifest next update: Sat 26 Sep 2026 16:15:10 +0000 Files and hashes: 1: 3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa (hash: K7PbjaFE0zSsIAVA9HPV3S0+MEAkd6bF/CX8cBvwHhQ=) 2: C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl (hash: M5umC/CU8GImH1p3PVMylknHt9SmBlT8YopScFQdR5I=) 3: 3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa (hash: U97xPJjDuxOPre3lfJTSP17ykfoHncWKjzWt6fvO8OU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 16:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:5c:02:a3:66:89:f5:86:99:36:ee:08:af:28:6f:d5:ff:1a:0b:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7AFEA469B71F53F5DE57E840403A9F9FED41740 Validity Not Before: Sep 25 12:36:10 2026 GMT Not After : Sep 26 16:15:10 2026 GMT Subject: CN=0AA7FF844FDC98147C21A8A8480F925E884DE34E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1b:5f:b1:c9:3a:aa:f2:16:59:99:e0:fe:f8: 7e:09:2e:5b:03:29:19:d5:45:a2:90:d6:ad:ac:67: 42:ae:7d:51:67:ce:04:12:a8:35:95:7e:51:99:68: c7:32:9e:b9:b5:a6:80:5c:30:43:e7:f6:41:39:c4: a5:bb:67:7f:07:71:f9:3d:ea:bf:be:4a:d6:77:03: 66:1e:6f:6b:f7:bf:20:18:5a:3b:59:42:7c:6a:45: 4a:dc:c0:c5:4a:a8:48:c7:d9:ee:f1:8d:f9:98:02: 29:67:75:a1:9b:3e:e7:51:78:f9:d4:e6:b3:70:f0: 76:f5:ce:d5:ee:25:ac:12:3a:e4:75:5f:8a:cc:7d: cf:6a:52:a5:84:2b:c8:18:16:b9:36:f1:97:8b:bb: bd:90:49:9f:3c:f8:8e:39:a1:f4:13:3f:6e:7b:5d: 80:87:28:42:fc:51:3d:ab:23:f7:b1:54:69:d8:ce: f5:4f:ba:2f:26:23:44:77:bf:f8:cd:4b:37:7d:c6: fb:aa:41:07:31:35:ea:ed:0e:6b:a9:ee:05:ab:37: 88:e2:1d:dd:3c:e4:0d:52:87:a6:f8:30:81:bd:e6: 34:f9:a2:d6:9d:52:f2:da:49:25:95:fc:64:c8:1f: 2a:67:a6:b0:0e:ca:57:85:0b:92:c8:c7:95:97:62: c3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A7:FF:84:4F:DC:98:14:7C:21:A8:A8:48:0F:92:5E:88:4D:E3:4E X509v3 Authority Key Identifier: keyid:C7:AF:EA:46:9B:71:F5:3F:5D:E5:7E:84:04:03:A9:F9:FE:D4:17:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:36:cb:ed:0f:e6:c4:af:d2:f1:b3:91:0d:83:01:92:ea:9d: 05:bc:8d:fb:b7:0f:6e:98:5c:bb:0e:85:e8:d4:29:5f:10:9d: e8:35:b4:57:fa:70:7e:ae:05:25:eb:14:d9:da:7b:38:03:8a: 8e:48:1c:5d:a4:90:30:06:3a:7e:aa:0f:50:55:b9:1d:f5:f3: 98:ea:47:76:ee:32:b7:86:84:34:c2:19:11:c4:8f:c6:9a:94: 67:87:a7:6e:18:f2:32:5f:75:68:b7:8e:aa:4d:af:02:40:65: 41:8f:05:66:c6:11:79:f6:a2:00:56:77:dd:d3:f0:0a:02:75: cf:a3:14:8c:5c:85:ec:5f:0c:ac:77:bb:73:26:4f:22:f2:c3: a9:cd:e5:56:62:04:7a:62:86:2f:cb:c6:96:9e:5d:dc:20:af: 39:8c:19:e2:ab:db:4e:c3:b9:58:6d:90:d8:02:e7:78:dc:4e: 6b:ec:7e:08:c5:10:e8:30:ea:3f:32:8e:6b:81:78:ec:e1:bf: 96:60:58:22:66:44:90:e0:0a:a6:bb:fb:bf:d0:c5:23:23:76: a2:2b:29:85:10:fc:72:ab:58:65:c1:1b:1a:23:b3:a8:3f:1b: 11:ac:fa:02:5b:4f:df:3c:f3:fe:0f:61:dc:b5:cf:b9:5b:09: 9d:b0:ea:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS1wCo2aJ9YaZNu4Iryhv1f8aC9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdBRkVBNDY5QjcxRjUzRjVERTU3RTg0MDQwM0E5RjlG RUQ0MTc0MDAeFw0yNjA5MjUxMjM2MTBaFw0yNjA5MjYxNjE1MTBaMDMxMTAvBgNV BAMTKDBBQTdGRjg0NEZEQzk4MTQ3QzIxQThBODQ4MEY5MjVFODg0REUzNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbG1+xyTqq8hZZmeD++H4JLlsD KRnVRaKQ1q2sZ0KufVFnzgQSqDWVflGZaMcynrm1poBcMEPn9kE5xKW7Z38Hcfk9 6r++StZ3A2Yeb2v3vyAYWjtZQnxqRUrcwMVKqEjH2e7xjfmYAilndaGbPudRePnU 5rNw8Hb1ztXuJawSOuR1X4rMfc9qUqWEK8gYFrk28ZeLu72QSZ88+I45ofQTP257 XYCHKEL8UT2rI/exVGnYzvVPui8mI0R3v/jNSzd9xvuqQQcxNertDmup7gWrN4ji Hd085A1Sh6b4MIG95jT5otadUvLaSSWV/GTIHypnprAOyleFC5LIx5WXYsOZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCqf/hE/cmBR8IaioSA+SXohN404wHwYDVR0j BBgwFoAUx6/qRptx9T9d5X6EBAOp+f7UF0AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2FjNGQ3NWUtM2RhOC00OTkwLTgwNDItN2UwZWNmNTlmMTNiLzAvQzdBRkVBNDY5 QjcxRjUzRjVERTU3RTg0MDQwM0E5RjlGRUQ0MTc0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DN0FGRUE0NjlCNzFGNTNGNURFNTdFODQwNDAzQTlGOUZFRDQx NzQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2FjNGQ3NWUtM2RhOC00OTkwLTgw NDItN2UwZWNmNTlmMTNiLzAvQzdBRkVBNDY5QjcxRjUzRjVERTU3RTg0MDQwM0E5 RjlGRUQ0MTc0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALA2y+0P5sSv0vGzkQ2DAZLqnQW8jfu3D26Y XLsOhejUKV8Qneg1tFf6cH6uBSXrFNnaezgDio5IHF2kkDAGOn6qD1BVuR3185jq R3buMreGhDTCGRHEj8aalGeHp24Y8jJfdWi3jqpNrwJAZUGPBWbGEXn2ogBWd93T 8AoCdc+jFIxchexfDKx3u3MmTyLyw6nN5VZiBHpihi/LxpaeXdwgrzmMGeKr207D uVhtkNgC53jcTmvsfgjFEOgw6j8yjmuBeOzhv5ZgWCJmRJDgCqa7+7/QxSMjdqIr KYUQ/HKrWGXBGxojs6g/GxGs+gJbT9888/4PYdy1z7lbCZ2w6tI= -----END CERTIFICATE-----Generated at Fri Sep 25 19:17:56 2026 by rpki-client