$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft File: A7EC36E89BE7B48874142363CBDE6AF22273C559.mft (raw, json) Hash identifier: O369mKcmnCdJZkSoU3viUm7vr7hsv8N7GYEcig4BNbw= Subject key identifier: DF:AD:63:4F:E7:3E:FF:3C:2C:B8:A5:F2:9E:14:9F:D5:DC:C0:74:80 Authority key identifier: A7:EC:36:E8:9B:E7:B4:88:74:14:23:63:CB:DE:6A:F2:22:73:C5:59 Certificate issuer: /CN=A7EC36E89BE7B48874142363CBDE6AF22273C559 Certificate serial: 669D17B0AA514B41093D753C0C7FF693B1B632AE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft Manifest number: BC Signing time: Sun 20 Sep 2026 04:02:04 +0000 Manifest this update: Sun 20 Sep 2026 03:57:04 +0000 Manifest next update: Mon 21 Sep 2026 05:04:04 +0000 Files and hashes: 1: 3130332e3233392e32322e302f32342d3234203d3e20313336383635.roa (hash: 0JVt6Zu0M/Ga29cquq7tcggAAo9qmUWZlK+5RkmIrXg=) 2: A7EC36E89BE7B48874142363CBDE6AF22273C559.crl (hash: fLeg83A/d+Ea6PgGoOtVmr301KmA3pxHBKd4R/6jSt4=) 3: 3130332e3233392e32332e302f32342d3234203d3e20313336383635.roa (hash: +PzA369vX1gC5i4jACzVnnj39MhVu80F0pvVZunJO1g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.crl rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 05:04:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:9d:17:b0:aa:51:4b:41:09:3d:75:3c:0c:7f:f6:93:b1:b6:32:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7EC36E89BE7B48874142363CBDE6AF22273C559 Validity Not Before: Sep 20 03:57:04 2026 GMT Not After : Sep 21 05:04:04 2026 GMT Subject: CN=DFAD634FE73EFF3C2CB8A5F29E149FD5DCC07480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5e:3d:ef:ec:92:32:fa:1d:47:5b:e6:41:f4: 32:71:18:d8:fb:a4:5b:23:40:52:5c:b3:4b:a1:ea: 8a:66:8b:04:a3:3b:a9:e7:20:85:df:1b:c2:cc:12: 89:c6:93:db:54:4f:60:13:1f:90:82:05:29:78:a2: 47:d4:36:c8:e8:35:8b:29:71:e7:4e:14:a8:53:f7: 45:75:76:34:6b:9d:48:93:77:4c:61:d5:6d:a4:83: 19:bf:5f:01:b9:d3:6d:cb:3c:89:f8:88:66:a1:45: b0:ce:14:98:af:86:75:53:27:51:ae:2b:04:90:63: 1f:a2:e9:d8:46:9f:46:ff:ad:5e:ce:ae:80:b5:fb: fd:82:e5:84:02:60:6a:5b:27:8c:b7:d0:2c:bf:c6: 4d:c3:c8:49:21:b4:f0:8c:45:01:19:86:ca:05:1c: 90:35:d4:00:03:17:0d:d0:ea:93:8d:1c:b7:72:0c: 58:c0:60:4d:d3:68:43:66:c7:10:4c:0f:94:52:e7: 49:25:5c:96:63:81:f9:44:c0:58:78:1b:37:8f:33: ea:bb:95:3d:9b:6b:c1:d3:2e:ef:52:af:d1:33:38: 94:87:dd:d5:9f:8b:62:de:a3:61:72:a1:2c:21:44: d0:17:e0:75:fd:90:f8:ff:17:3e:a8:dc:c6:22:a0: be:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:AD:63:4F:E7:3E:FF:3C:2C:B8:A5:F2:9E:14:9F:D5:DC:C0:74:80 X509v3 Authority Key Identifier: keyid:A7:EC:36:E8:9B:E7:B4:88:74:14:23:63:CB:DE:6A:F2:22:73:C5:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:a3:81:ef:e1:fb:27:7c:90:b2:83:d9:44:51:8c:76:63:e2: b9:12:2a:f4:89:6c:ce:1f:07:e7:9a:fc:69:1f:40:7b:3d:6b: b1:03:6c:35:f8:57:4e:a5:9d:ac:6c:c5:95:c0:ee:0e:84:d2: c5:85:d3:5b:8a:45:f2:0d:b4:a5:11:a3:7f:67:3a:ca:65:15: ef:2a:c8:9d:1c:b0:b3:3b:15:2f:51:b1:19:88:a3:34:f1:3d: ec:8e:05:ce:e5:54:c5:45:2b:29:83:05:e7:4f:97:64:7c:05: b9:c0:bc:a7:68:99:6a:7c:de:e7:54:c3:cc:48:5d:f1:ce:41: e1:51:b3:33:1d:3f:22:6a:16:7d:a0:ec:62:84:d9:15:5f:9f: 24:d0:1e:b1:ad:f3:a6:c8:57:f2:44:8b:dd:87:7c:bc:c2:85: 82:39:af:8c:34:e2:92:fa:23:ae:aa:27:8c:41:0c:60:28:73: 33:94:a4:42:dc:cd:f1:03:98:68:52:12:6d:0e:02:9f:eb:45: 58:46:db:02:fd:c7:76:2e:e3:18:3d:1f:c4:d7:c1:6b:bf:0c: 33:fa:05:82:31:c1:47:85:b5:6b:f8:86:62:69:fa:a9:5d:47: 8a:54:05:25:bd:1b:f1:0e:c7:35:80:02:20:b1:0b:f4:16:10: c8:9b:56:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZp0XsKpRS0EJPXU8DH/2k7G2Mq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdFQzM2RTg5QkU3QjQ4ODc0MTQyMzYzQ0JERTZBRjIy MjczQzU1OTAeFw0yNjA5MjAwMzU3MDRaFw0yNjA5MjEwNTA0MDRaMDMxMTAvBgNV BAMTKERGQUQ2MzRGRTczRUZGM0MyQ0I4QTVGMjlFMTQ5RkQ1RENDMDc0ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyXj3v7JIy+h1HW+ZB9DJxGNj7 pFsjQFJcs0uh6opmiwSjO6nnIIXfG8LMEonGk9tUT2ATH5CCBSl4okfUNsjoNYsp cedOFKhT90V1djRrnUiTd0xh1W2kgxm/XwG5023LPIn4iGahRbDOFJivhnVTJ1Gu KwSQYx+i6dhGn0b/rV7OroC1+/2C5YQCYGpbJ4y30Cy/xk3DyEkhtPCMRQEZhsoF HJA11AADFw3Q6pONHLdyDFjAYE3TaENmxxBMD5RS50klXJZjgflEwFh4GzePM+q7 lT2ba8HTLu9Sr9EzOJSH3dWfi2Leo2FyoSwhRNAX4HX9kPj/Fz6o3MYioL7pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU361jT+c+/zwsuKXynhSf1dzAdIAwHwYDVR0j BBgwFoAUp+w26JvntIh0FCNjy95q8iJzxVkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjM5ODA2M2UtNTdhMS00MGYyLTg1MjctNGQwYTY5YzVkNjQ3LzAvQTdFQzM2RTg5 QkU3QjQ4ODc0MTQyMzYzQ0JERTZBRjIyMjczQzU1OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BN0VDMzZFODlCRTdCNDg4NzQxNDIzNjNDQkRFNkFGMjIyNzND NTU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjM5ODA2M2UtNTdhMS00MGYyLTg1 MjctNGQwYTY5YzVkNjQ3LzAvQTdFQzM2RTg5QkU3QjQ4ODc0MTQyMzYzQ0JERTZB RjIyMjczQzU1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMWjge/h+yd8kLKD2URRjHZj4rkSKvSJbM4f B+ea/GkfQHs9a7EDbDX4V06lnaxsxZXA7g6E0sWF01uKRfINtKURo39nOsplFe8q yJ0csLM7FS9RsRmIozTxPeyOBc7lVMVFKymDBedPl2R8BbnAvKdomWp83udUw8xI XfHOQeFRszMdPyJqFn2g7GKE2RVfnyTQHrGt86bIV/JEi92HfLzChYI5r4w04pL6 I66qJ4xBDGAoczOUpELczfEDmGhSEm0OAp/rRVhG2wL9x3Yu4xg9H8TXwWu/DDP6 BYIxwUeFtWv4hmJp+qldR4pUBSW9G/EOxzWAAiCxC/QWEMibVmU= -----END CERTIFICATE-----Generated at Sun Sep 20 17:58:16 2026 by rpki-client