$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.mft File: 7CB53701F9A5E6CBB24596105D30044B647BBC84.mft (raw, json) Hash identifier: SpzDoRGIqKYBK9qW6TkWLPwO+fOzRytgja/uaucvLRI= Subject key identifier: 14:E6:40:DF:FB:F0:13:8D:CF:33:04:57:7D:58:B9:FE:1E:2A:3F:23 Authority key identifier: 7C:B5:37:01:F9:A5:E6:CB:B2:45:96:10:5D:30:04:4B:64:7B:BC:84 Certificate issuer: /CN=7CB53701F9A5E6CBB24596105D30044B647BBC84 Certificate serial: 6F5E7516B079F696986915777F4D175917E1AF8B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.mft Manifest number: BC Signing time: Mon 21 Sep 2026 04:11:51 +0000 Manifest this update: Mon 21 Sep 2026 04:06:51 +0000 Manifest next update: Tue 22 Sep 2026 07:28:51 +0000 Files and hashes: 1: 323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa (hash: xUUMr5UQK8a0ejdjAN7lpyb+LyL+cS2jPdq1m4lezwg=) 2: 7CB53701F9A5E6CBB24596105D30044B647BBC84.crl (hash: 2U0O3p3+UCc8GXwvMVyTcaknc3kLE53zdQtH5uBj9IQ=) 3: 3130332e3135332e34322e302f32332d3234203d3e20313430343434.roa (hash: h8+dhgJZAVYl5vhc9z1CI3Q73pMj8I+xGu7T9NSMlIk=) 4: 3130332e3135332e34322e302f32342d3234203d3e20313430343434.roa (hash: unGiwDFaGahe7tpg1Hffc3jKyo8NlWLKseBqlIlvILo=) 5: 3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa (hash: HK/N3jJS+JzZ86LurZHVJQHoGpVJnd2NzI7n/JqdXTw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.crl rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:5e:75:16:b0:79:f6:96:98:69:15:77:7f:4d:17:59:17:e1:af:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB53701F9A5E6CBB24596105D30044B647BBC84 Validity Not Before: Sep 21 04:06:51 2026 GMT Not After : Sep 22 07:28:51 2026 GMT Subject: CN=14E640DFFBF0138DCF3304577D58B9FE1E2A3F23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1d:1f:58:39:77:8f:1c:57:2f:83:82:17:d2: 92:eb:ff:cb:87:3b:9f:b8:cc:5b:c3:8e:7d:e4:e6: 40:5b:c3:aa:82:95:08:02:4d:be:85:b3:33:48:35: 65:83:dd:31:c3:d8:81:9a:d9:49:71:db:f8:1b:d9: 57:9e:62:d5:8f:83:bf:3a:35:0e:cf:54:94:4c:fc: 33:b5:07:ab:07:4f:c8:b8:50:fb:cb:47:85:f1:1c: b0:45:7e:6c:53:b1:d4:3c:db:67:1f:f8:e4:76:15: af:f5:1d:32:82:56:73:24:a9:ea:3d:17:c5:fe:47: 9d:64:de:3e:52:ff:46:8e:f8:87:ba:2d:53:61:6b: b8:4d:1e:b8:be:a8:00:d9:c1:f7:d3:6e:cd:bb:2a: 97:62:38:49:91:2f:bb:ee:2c:48:2f:43:24:ed:af: ac:1c:15:6f:eb:0f:8e:82:83:52:21:a7:fb:f3:ce: db:34:19:ff:6c:05:9e:3a:b2:07:4f:67:74:b8:c1: 78:01:48:62:99:7e:12:2c:a4:03:13:3e:72:19:be: 79:41:fa:44:71:52:3f:52:00:c5:30:e9:90:52:06: b9:ee:3b:51:84:0b:f0:f5:f2:da:d1:0f:75:90:14: c4:88:f0:b4:b0:3a:83:b0:7d:e1:ff:0c:0e:3b:f3: fa:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E6:40:DF:FB:F0:13:8D:CF:33:04:57:7D:58:B9:FE:1E:2A:3F:23 X509v3 Authority Key Identifier: keyid:7C:B5:37:01:F9:A5:E6:CB:B2:45:96:10:5D:30:04:4B:64:7B:BC:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:b5:be:f0:98:cf:2c:83:fb:3a:31:28:47:2c:75:d9:e3:ba: 61:56:b5:fb:6f:ce:88:40:57:0a:5d:39:0b:eb:de:c7:5b:90: a7:18:bb:7c:10:68:c7:1c:19:38:18:b2:7e:df:e0:7d:de:fb: bb:dd:a1:21:43:d6:73:56:07:18:ac:07:56:e1:b4:86:5a:cd: 27:14:bd:4e:9d:cd:2f:18:ee:a8:19:82:72:76:03:0a:29:e9: 6b:fa:e1:e1:e2:32:fe:fb:36:bb:06:f6:7e:52:22:05:6b:64: 9c:8b:ae:cd:7f:42:59:93:b2:c7:96:a3:84:1a:5f:d7:c6:1d: 2f:13:f1:b8:23:63:2f:1b:5f:07:0b:e4:02:a4:20:6b:fa:0f: e5:1c:07:9c:b3:44:12:e9:fc:b5:bc:57:1b:cb:57:44:13:d8: f1:2f:26:f4:3d:72:8a:87:99:77:5e:40:96:2f:2b:fb:c7:cc: a6:33:f9:2d:07:84:7c:c3:bc:62:3c:ea:be:d5:54:15:8a:6f: d6:4b:74:19:9b:27:f6:5a:ab:e9:d6:08:31:d4:64:64:d5:66: 25:85:b2:90:3e:36:5a:d6:85:11:52:bf:8c:50:14:69:f4:a0: 92:11:8a:7c:cc:ca:47:87:d1:b3:b3:c4:77:27:25:4d:ca:a9: c1:8b:77:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb151FrB59paYaRV3f00XWRfhr4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCNTM3MDFGOUE1RTZDQkIyNDU5NjEwNUQzMDA0NEI2 NDdCQkM4NDAeFw0yNjA5MjEwNDA2NTFaFw0yNjA5MjIwNzI4NTFaMDMxMTAvBgNV BAMTKDE0RTY0MERGRkJGMDEzOERDRjMzMDQ1NzdENThCOUZFMUUyQTNGMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8HR9YOXePHFcvg4IX0pLr/8uH O5+4zFvDjn3k5kBbw6qClQgCTb6FszNINWWD3THD2IGa2Ulx2/gb2VeeYtWPg786 NQ7PVJRM/DO1B6sHT8i4UPvLR4XxHLBFfmxTsdQ822cf+OR2Fa/1HTKCVnMkqeo9 F8X+R51k3j5S/0aO+Ie6LVNha7hNHri+qADZwffTbs27KpdiOEmRL7vuLEgvQyTt r6wcFW/rD46Cg1Ihp/vzzts0Gf9sBZ46sgdPZ3S4wXgBSGKZfhIspAMTPnIZvnlB +kRxUj9SAMUw6ZBSBrnuO1GEC/D18trRD3WQFMSI8LSwOoOwfeH/DA478/oPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFOZA3/vwE43PMwRXfVi5/h4qPyMwHwYDVR0j BBgwFoAUfLU3Afml5suyRZYQXTAES2R7vIQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzcxMTU1OWUtZDVlYy00YzE5LWIzMzUtZWUyOWRkZmJiOWQ1LzAvN0NCNTM3MDFG OUE1RTZDQkIyNDU5NjEwNUQzMDA0NEI2NDdCQkM4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Q0I1MzcwMUY5QTVFNkNCQjI0NTk2MTA1RDMwMDQ0QjY0N0JC Qzg0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzcxMTU1OWUtZDVlYy00YzE5LWIz MzUtZWUyOWRkZmJiOWQ1LzAvN0NCNTM3MDFGOUE1RTZDQkIyNDU5NjEwNUQzMDA0 NEI2NDdCQkM4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADO1vvCYzyyD+zoxKEcsddnjumFWtftvzohA VwpdOQvr3sdbkKcYu3wQaMccGTgYsn7f4H3e+7vdoSFD1nNWBxisB1bhtIZazScU vU6dzS8Y7qgZgnJ2Awop6Wv64eHiMv77NrsG9n5SIgVrZJyLrs1/QlmTsseWo4Qa X9fGHS8T8bgjYy8bXwcL5AKkIGv6D+UcB5yzRBLp/LW8VxvLV0QT2PEvJvQ9coqH mXdeQJYvK/vHzKYz+S0HhHzDvGI86r7VVBWKb9ZLdBmbJ/Zaq+nWCDHUZGTVZiWF spA+NlrWhRFSv4xQFGn0oJIRinzMykeH0bOzxHcnJU3KqcGLd6I= -----END CERTIFICATE-----Generated at Mon Sep 21 16:29:03 2026 by rpki-client