$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.mft File: A7B168CE466AE74446B650CF824618958D3868FC.mft (raw, json) Hash identifier: U/z22LovmWaz62c9xColokdu6CIaDgpNuC6DQDQc7bc= Subject key identifier: 4B:62:FA:6A:CC:86:C9:0E:F5:24:CB:C5:A4:09:41:A1:14:B2:30:99 Authority key identifier: A7:B1:68:CE:46:6A:E7:44:46:B6:50:CF:82:46:18:95:8D:38:68:FC Certificate issuer: /CN=A7B168CE466AE74446B650CF824618958D3868FC Certificate serial: 2A234768A76BBE4A7E85AA6B835FBCF748F50EFF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7B168CE466AE74446B650CF824618958D3868FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.mft Manifest number: BE Signing time: Mon 21 Sep 2026 06:39:48 +0000 Manifest this update: Mon 21 Sep 2026 06:34:48 +0000 Manifest next update: Tue 22 Sep 2026 08:01:48 +0000 Files and hashes: 1: 3130332e3136332e3232382e302f32332d3233203d3e20313431383935.roa (hash: kCAtVDp2awFC3xbza6XlA3+xlFRuKEHRN2FrGan864A=) 2: 3130332e3136332e3232392e302f32342d3234203d3e20313431383935.roa (hash: A6gvhW7lfvQRxs5cFOMF6l/Sth1dI8OrQvYNut71iwg=) 3: A7B168CE466AE74446B650CF824618958D3868FC.crl (hash: RwLBDX2iYt5FIZNpyf74VLNUcNs/aWPdVrYmVpqzUfo=) 4: 3130332e3136332e3232382e302f32342d3234203d3e20313431383935.roa (hash: urKuF7qIfembxoDL1G+OM4hGHzA+dqqgmvFYbfpX2IQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.crl rsync://rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7B168CE466AE74446B650CF824618958D3868FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:23:47:68:a7:6b:be:4a:7e:85:aa:6b:83:5f:bc:f7:48:f5:0e:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7B168CE466AE74446B650CF824618958D3868FC Validity Not Before: Sep 21 06:34:48 2026 GMT Not After : Sep 22 08:01:48 2026 GMT Subject: CN=4B62FA6ACC86C90EF524CBC5A40941A114B23099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0e:1e:b3:6c:9b:14:53:64:ef:2d:b8:68:a7: 0d:ba:87:a3:d5:83:c9:d0:eb:48:5e:44:23:bd:4c: b8:8f:48:83:4c:c9:4d:d6:3b:43:7e:98:5f:eb:62: 94:6f:94:6f:bc:d8:62:52:86:53:13:55:d6:a2:d8: be:56:c1:a8:7c:95:28:75:c7:4e:52:d5:57:29:39: a3:7b:d1:85:12:a3:f6:b1:56:43:12:82:8d:43:c4: 0c:d5:e1:c7:c8:ea:cf:8d:a0:08:d0:b7:22:e7:58: 8a:8d:74:1a:fa:61:07:40:4d:90:8b:f2:d6:16:7c: c7:d5:eb:d7:cf:f8:7e:00:04:e2:b4:9e:58:80:93: 91:cf:c8:99:ae:12:d0:5c:d3:14:ec:6d:79:7f:e3: 32:a6:39:3d:d5:94:82:71:4a:fc:ec:94:91:ab:3b: 16:e2:ad:d0:4d:d0:8b:73:ed:af:54:36:8a:d7:e7: ff:ec:9c:1d:eb:aa:f6:d8:65:1a:71:26:6d:24:19: 37:78:41:67:33:9c:ca:5f:fd:4c:43:7f:3e:ed:ce: 30:50:4c:24:af:0b:29:36:c2:85:50:aa:75:18:9d: 91:52:86:15:35:ee:99:62:72:c6:ab:29:03:0f:1f: c3:7d:be:d0:6b:06:77:f1:20:cc:6a:00:45:fe:af: 70:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:62:FA:6A:CC:86:C9:0E:F5:24:CB:C5:A4:09:41:A1:14:B2:30:99 X509v3 Authority Key Identifier: keyid:A7:B1:68:CE:46:6A:E7:44:46:B6:50:CF:82:46:18:95:8D:38:68:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7B168CE466AE74446B650CF824618958D3868FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:1d:b3:48:89:ea:0c:45:e8:8c:93:20:81:0e:a7:cb:b2:39: a8:a5:52:7e:cc:93:f6:bf:64:80:67:c1:07:98:20:e5:c7:73: 60:61:29:0d:f6:0b:df:6b:46:1d:bf:c0:f7:8c:39:83:29:ef: 5f:06:6f:82:61:76:85:be:e7:d9:1b:74:4a:ee:c1:0c:38:38: cd:7e:99:ab:75:a8:b3:1c:4a:c2:c8:06:59:bb:18:fc:b6:78: a5:2d:50:23:07:2a:36:ff:88:d3:77:e8:92:d7:b1:ac:39:b8: 4f:d3:1c:40:83:e4:5e:3a:5a:ae:12:63:3e:9c:8d:a2:c0:af: e9:c7:c7:79:83:6a:f0:ba:1c:35:de:70:2b:68:a0:d7:7a:eb: 12:82:14:75:1b:ea:f9:13:cb:46:98:49:d9:78:c8:de:03:46: e2:6c:d5:2c:29:11:ec:09:9c:c7:2b:17:38:b1:dc:fa:5c:6f: b8:23:a4:5a:08:86:7a:a0:19:11:7e:d0:e9:20:f7:2d:8e:75: 62:30:30:3b:a0:45:e2:01:82:82:60:3e:00:89:18:c7:f9:57: 88:89:41:a9:6b:e8:37:5d:5d:bd:5e:59:d8:aa:1d:7f:96:63: 11:9b:e7:03:5c:94:8e:34:61:91:ac:78:4a:8a:83:48:25:80: 2d:e6:94:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKiNHaKdrvkp+haprg1+890j1Dv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdCMTY4Q0U0NjZBRTc0NDQ2QjY1MENGODI0NjE4OTU4 RDM4NjhGQzAeFw0yNjA5MjEwNjM0NDhaFw0yNjA5MjIwODAxNDhaMDMxMTAvBgNV BAMTKDRCNjJGQTZBQ0M4NkM5MEVGNTI0Q0JDNUE0MDk0MUExMTRCMjMwOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUDh6zbJsUU2TvLbhopw26h6PV g8nQ60heRCO9TLiPSINMyU3WO0N+mF/rYpRvlG+82GJShlMTVdai2L5Wwah8lSh1 x05S1VcpOaN70YUSo/axVkMSgo1DxAzV4cfI6s+NoAjQtyLnWIqNdBr6YQdATZCL 8tYWfMfV69fP+H4ABOK0nliAk5HPyJmuEtBc0xTsbXl/4zKmOT3VlIJxSvzslJGr OxbirdBN0Itz7a9UNorX5//snB3rqvbYZRpxJm0kGTd4QWcznMpf/UxDfz7tzjBQ TCSvCyk2woVQqnUYnZFShhU17plicsarKQMPH8N9vtBrBnfxIMxqAEX+r3BTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS2L6asyGyQ71JMvFpAlBoRSyMJkwHwYDVR0j BBgwFoAUp7FozkZq50RGtlDPgkYYlY04aPwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNkMGQ3ZmEtZDZmOC00YzIyLWI0OGEtNThiOGVkOGVkZGE3LzAvQTdCMTY4Q0U0 NjZBRTc0NDQ2QjY1MENGODI0NjE4OTU4RDM4NjhGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BN0IxNjhDRTQ2NkFFNzQ0NDZCNjUwQ0Y4MjQ2MTg5NThEMzg2 OEZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGNkMGQ3ZmEtZDZmOC00YzIyLWI0 OGEtNThiOGVkOGVkZGE3LzAvQTdCMTY4Q0U0NjZBRTc0NDQ2QjY1MENGODI0NjE4 OTU4RDM4NjhGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0ds0iJ6gxF6IyTIIEOp8uyOailUn7Mk/a/ ZIBnwQeYIOXHc2BhKQ32C99rRh2/wPeMOYMp718Gb4JhdoW+59kbdEruwQw4OM1+ mat1qLMcSsLIBlm7GPy2eKUtUCMHKjb/iNN36JLXsaw5uE/THECD5F46Wq4SYz6c jaLAr+nHx3mDavC6HDXecCtooNd66xKCFHUb6vkTy0aYSdl4yN4DRuJs1SwpEewJ nMcrFzix3Ppcb7gjpFoIhnqgGRF+0Okg9y2OdWIwMDugReIBgoJgPgCJGMf5V4iJ Qalr6DddXb1eWdiqHX+WYxGb5wNclI40YZGseEqKg0glgC3mlDs= -----END CERTIFICATE-----Generated at Mon Sep 21 16:36:35 2026 by rpki-client