$ rpki-client -vvvf rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft File: 7C6942D9E39D2E0708854282CB6A37230729EB7C.mft (raw, json) Hash identifier: 1rj0vEDkLft5Z+ah11mmeahL5wby2nihykbSIzygyng= Subject key identifier: C3:D0:74:9E:3E:61:29:A7:B4:B2:0E:2B:92:4C:BB:41:E0:6A:89:48 Authority key identifier: 7C:69:42:D9:E3:9D:2E:07:08:85:42:82:CB:6A:37:23:07:29:EB:7C Certificate issuer: /CN=7C6942D9E39D2E0708854282CB6A37230729EB7C Certificate serial: 54CDD8C00E222B8DA9C617F2920F31B50314262E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft Manifest number: BE Signing time: Mon 21 Sep 2026 22:34:34 +0000 Manifest this update: Mon 21 Sep 2026 22:29:34 +0000 Manifest next update: Tue 22 Sep 2026 22:45:34 +0000 Files and hashes: 1: 3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa (hash: JAIdekl6qx6Yav3DLzW5vQbW9XO1mtiJq5doPkJbVhQ=) 2: 7C6942D9E39D2E0708854282CB6A37230729EB7C.crl (hash: AzsLv6TgKySRgVQh/Qts8p1phxHCJiyfvhnINN5wMTI=) 3: 3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa (hash: 81IWbLsi74joj24luAk9XXdkDSmApQhMyYOQhkwPoaQ=) 4: 3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa (hash: a/D2rVaWkVN5pmkQwkGcUtFXfVxfJlNH614eeRJToo8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.crl rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:45:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:cd:d8:c0:0e:22:2b:8d:a9:c6:17:f2:92:0f:31:b5:03:14:26:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C6942D9E39D2E0708854282CB6A37230729EB7C Validity Not Before: Sep 21 22:29:34 2026 GMT Not After : Sep 22 22:45:34 2026 GMT Subject: CN=C3D0749E3E6129A7B4B20E2B924CBB41E06A8948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:32:f4:46:8c:ca:82:2b:b1:7e:85:e4:59:a1: 52:68:c4:03:b1:90:87:0a:7a:6c:c1:a8:98:74:89: ba:e0:2b:15:d0:d5:19:4f:61:29:a5:ec:46:16:86: 87:10:0b:48:47:67:bc:82:57:69:cf:a1:d5:87:08: cc:8f:db:69:1f:dd:5f:9d:3a:7e:ac:59:e3:39:14: 76:d6:51:ba:c3:23:2e:b9:41:2c:bd:88:35:70:5c: cf:c6:3e:24:fc:3f:fb:bb:d7:6d:b8:94:82:84:a9: 39:69:94:18:6b:4e:07:b6:c8:a2:aa:62:22:29:cd: 1a:c3:32:1a:89:af:45:0b:db:01:d8:e0:54:de:6f: f8:c9:96:8c:0f:c7:9f:70:84:ee:42:f7:25:00:61: 99:de:c4:89:d6:41:8b:13:db:b0:ee:c8:58:a4:96: 66:16:4a:79:de:b9:e8:7b:94:39:63:5f:2d:e5:2c: fd:01:83:c9:7f:13:67:a5:bc:d5:6b:4d:c7:88:c8: 1c:0d:19:83:f1:ec:da:f8:b4:fe:4d:90:41:cb:80: e0:0f:3d:c5:c4:3e:bd:45:92:f0:1c:79:30:4a:33: 50:1a:ba:39:0c:f2:e6:1f:33:07:12:4d:50:a0:d7: c1:cb:ab:9d:da:42:fa:46:cf:b9:c0:f3:a5:14:16: 49:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D0:74:9E:3E:61:29:A7:B4:B2:0E:2B:92:4C:BB:41:E0:6A:89:48 X509v3 Authority Key Identifier: keyid:7C:69:42:D9:E3:9D:2E:07:08:85:42:82:CB:6A:37:23:07:29:EB:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:9b:16:4c:91:fb:22:43:ff:bf:c8:43:32:88:ae:6f:15:e0: e3:7f:14:80:7f:f2:df:43:73:ce:e4:96:a4:63:08:2a:6f:a7: 31:55:77:f6:dc:0a:f5:62:ab:97:56:79:3e:b9:de:6f:ab:60: a8:08:7a:2b:f1:cc:65:58:24:eb:73:d0:d8:8c:42:42:14:1a: 99:1d:db:02:d8:30:2d:98:83:4c:b4:2f:88:17:b5:f8:b3:9f: 8f:43:35:14:1f:e9:60:c4:12:2d:e4:ad:fe:6d:88:e3:0d:9b: fe:75:50:b7:ed:a6:d4:3d:6f:d3:7e:f3:6f:8b:d4:7a:2f:a4: fc:70:c8:37:49:15:d1:7f:48:80:5c:b4:bd:d8:79:e1:58:4e: 0c:55:d6:dc:77:04:47:c0:6f:c6:68:08:dd:4d:64:d3:c6:aa: 8e:9a:35:cf:59:f9:e3:5a:0b:68:c6:a5:eb:bf:ba:9e:53:11: 7e:78:e5:e6:31:84:8d:cf:02:9d:37:94:43:d3:af:e7:cc:09: 51:14:ee:41:9e:29:a9:aa:51:37:e3:dc:76:74:dd:27:19:b5: 4e:84:ac:eb:1a:37:55:a8:9a:be:c6:b8:9f:e7:0c:4f:d7:3a: 5c:ef:53:f9:5a:55:6b:96:23:8d:8a:a3:68:4e:e3:58:30:51: 11:58:3c:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVM3YwA4iK42pxhfykg8xtQMUJi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M2OTQyRDlFMzlEMkUwNzA4ODU0MjgyQ0I2QTM3MjMw NzI5RUI3QzAeFw0yNjA5MjEyMjI5MzRaFw0yNjA5MjIyMjQ1MzRaMDMxMTAvBgNV BAMTKEMzRDA3NDlFM0U2MTI5QTdCNEIyMEUyQjkyNENCQjQxRTA2QTg5NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgMvRGjMqCK7F+heRZoVJoxAOx kIcKemzBqJh0ibrgKxXQ1RlPYSml7EYWhocQC0hHZ7yCV2nPodWHCMyP22kf3V+d On6sWeM5FHbWUbrDIy65QSy9iDVwXM/GPiT8P/u71224lIKEqTlplBhrTge2yKKq YiIpzRrDMhqJr0UL2wHY4FTeb/jJlowPx59whO5C9yUAYZnexInWQYsT27DuyFik lmYWSnneueh7lDljXy3lLP0Bg8l/E2elvNVrTceIyBwNGYPx7Nr4tP5NkEHLgOAP PcXEPr1FkvAceTBKM1AaujkM8uYfMwcSTVCg18HLq53aQvpGz7nA86UUFkkHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw9B0nj5hKae0sg4rkky7QeBqiUgwHwYDVR0j BBgwFoAUfGlC2eOdLgcIhUKCy2o3Iwcp63wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODZiZDU1MzgtNDI3MC00MTJkLTlkNjYtYzJiNTE1N2QzZDZlLzAvN0M2OTQyRDlF MzlEMkUwNzA4ODU0MjgyQ0I2QTM3MjMwNzI5RUI3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QzY5NDJEOUUzOUQyRTA3MDg4NTQyODJDQjZBMzcyMzA3MjlF QjdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODZiZDU1MzgtNDI3MC00MTJkLTlk NjYtYzJiNTE1N2QzZDZlLzAvN0M2OTQyRDlFMzlEMkUwNzA4ODU0MjgyQ0I2QTM3 MjMwNzI5RUI3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWbFkyR+yJD/7/IQzKIrm8V4ON/FIB/8t9D c87klqRjCCpvpzFVd/bcCvViq5dWeT653m+rYKgIeivxzGVYJOtz0NiMQkIUGpkd 2wLYMC2Yg0y0L4gXtfizn49DNRQf6WDEEi3krf5tiOMNm/51ULftptQ9b9N+82+L 1HovpPxwyDdJFdF/SIBctL3YeeFYTgxV1tx3BEfAb8ZoCN1NZNPGqo6aNc9Z+eNa C2jGpeu/up5TEX545eYxhI3PAp03lEPTr+fMCVEU7kGeKamqUTfj3HZ03ScZtU6E rOsaN1Womr7GuJ/nDE/XOlzvU/laVWuWI42Ko2hO41gwURFYPNs= -----END CERTIFICATE-----Generated at Tue Sep 22 11:12:55 2026 by rpki-client