$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft File: A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft (raw, json) Hash identifier: xh+TPRP+Xo+aGF4+KYBqu44cO6BbUWkf61LxcwcD1/U= Subject key identifier: 5E:EC:02:3A:9A:E0:E8:E3:44:95:E5:3B:07:6F:2C:1F:9E:4D:5F:EE Authority key identifier: A8:B7:FD:04:F9:C2:A7:D6:EF:8E:53:27:92:F9:C8:03:D1:2F:A1:AA Certificate issuer: /CN=A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA Certificate serial: 62A8B90800074A3DFC5825EF12195E7C127C8CCA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft Manifest number: A6 Signing time: Wed 02 Sep 2026 22:25:33 +0000 Manifest this update: Wed 02 Sep 2026 22:20:33 +0000 Manifest next update: Fri 04 Sep 2026 00:05:33 +0000 Files and hashes: 1: 3130332e3138362e3230342e302f32342d3234203d3e20313439373233.roa (hash: 6SPqfWofEqX1QD5UAEMH2hqU1phhUwtiErMkzEVth0s=) 2: A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.crl (hash: x8beT20LMY50rY+cNxNafBFOpMiipQOYqzp7VQAPNUE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.crl rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:a8:b9:08:00:07:4a:3d:fc:58:25:ef:12:19:5e:7c:12:7c:8c:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA Validity Not Before: Sep 2 22:20:33 2026 GMT Not After : Sep 4 00:05:33 2026 GMT Subject: CN=5EEC023A9AE0E8E34495E53B076F2C1F9E4D5FEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:da:2a:44:2d:fb:91:5c:0c:79:0d:98:f7:fe: 9c:a9:77:b9:15:4d:2a:04:fd:4c:14:26:5f:71:f0: 4b:9c:c2:f2:5d:39:69:ba:03:24:bb:b3:0f:87:28: e4:19:49:84:75:33:35:a4:c4:23:cf:65:87:2c:e6: be:64:04:cb:08:09:e6:aa:18:c9:12:f8:8c:88:6c: b6:da:37:e5:37:61:e2:c8:0b:cc:e1:6e:2c:d1:ea: 1e:9c:44:0c:87:d6:9e:d5:03:fb:a2:35:62:ac:71: 3c:bb:69:7d:b1:49:08:0a:f9:ef:d8:29:e6:38:e1: 45:1a:92:6c:1a:22:18:fc:0a:c1:cc:0b:c1:87:38: e0:61:63:62:b2:88:15:de:ab:1b:25:e7:69:ad:7d: e6:c3:89:0d:3f:9b:c5:dc:31:1c:3d:ea:96:fd:d8: 31:ba:5a:0f:38:6e:0c:49:6e:6c:4e:dd:7d:15:f9: 24:e6:6b:94:84:f0:93:54:67:cc:eb:75:e0:70:31: 0d:34:27:7a:a2:a6:60:77:7a:65:b5:5f:39:b5:9d: 2b:88:f8:20:8f:0f:8a:17:5d:4d:f3:81:5d:21:cd: 2e:4a:a3:e1:87:bd:2f:2c:63:20:bf:7a:4e:1d:54: ea:0f:e7:e1:73:84:1f:a8:a8:ac:d7:13:5f:15:b5: 8a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:EC:02:3A:9A:E0:E8:E3:44:95:E5:3B:07:6F:2C:1F:9E:4D:5F:EE X509v3 Authority Key Identifier: keyid:A8:B7:FD:04:F9:C2:A7:D6:EF:8E:53:27:92:F9:C8:03:D1:2F:A1:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:fc:f8:ae:b8:7d:22:63:f5:c1:24:20:d0:dd:8b:4a:f5:f3: e4:54:c2:53:29:56:cd:fb:35:18:1f:64:c2:5a:4b:51:0d:08: be:d1:ae:9b:01:23:71:38:d2:8c:52:f5:33:24:fc:cc:0c:b9: c7:2c:d8:8d:c5:83:70:8a:6f:c5:a3:40:89:a8:36:50:57:ea: 99:76:82:62:7b:ff:55:9c:97:2f:c5:94:56:cc:21:3b:a9:f2: 5e:47:f0:a0:50:2c:7f:0d:19:28:cd:9f:dc:bc:2e:19:7d:0e: 79:cc:fd:2d:be:61:0d:81:f7:21:d9:b7:55:a5:72:1e:7f:46: da:13:5b:10:cd:14:5b:a4:e6:ca:b1:2e:b2:19:33:af:d1:07: 9b:42:4c:d9:02:0d:7c:fc:07:07:39:e0:f7:1d:7f:22:36:9a: 2c:84:90:76:18:11:d0:f9:e5:2b:21:48:16:7e:8e:3c:96:cb: 93:e3:9d:c5:b1:e6:c9:b5:80:99:bb:92:fa:04:24:05:31:ca: 57:75:0d:2c:cc:e4:f8:f7:2b:8a:50:59:00:0c:ae:50:9d:c0: ee:6d:a9:eb:55:81:7b:93:60:ef:a4:30:d1:9d:15:e4:64:40: f4:1e:e8:cb:46:6a:02:a2:10:19:3a:e0:11:21:40:ad:67:d2: 56:73:3e:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYqi5CAAHSj38WCXvEhlefBJ8jMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThCN0ZEMDRGOUMyQTdENkVGOEU1MzI3OTJGOUM4MDNE MTJGQTFBQTAeFw0yNjA5MDIyMjIwMzNaFw0yNjA5MDQwMDA1MzNaMDMxMTAvBgNV BAMTKDVFRUMwMjNBOUFFMEU4RTM0NDk1RTUzQjA3NkYyQzFGOUU0RDVGRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr2ipELfuRXAx5DZj3/pypd7kV TSoE/UwUJl9x8EucwvJdOWm6AyS7sw+HKOQZSYR1MzWkxCPPZYcs5r5kBMsICeaq GMkS+IyIbLbaN+U3YeLIC8zhbizR6h6cRAyH1p7VA/uiNWKscTy7aX2xSQgK+e/Y KeY44UUakmwaIhj8CsHMC8GHOOBhY2KyiBXeqxsl52mtfebDiQ0/m8XcMRw96pb9 2DG6Wg84bgxJbmxO3X0V+STma5SE8JNUZ8zrdeBwMQ00J3qipmB3emW1Xzm1nSuI +CCPD4oXXU3zgV0hzS5Ko+GHvS8sYyC/ek4dVOoP5+FzhB+oqKzXE18VtYp1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXuwCOprg6ONEleU7B28sH55NX+4wHwYDVR0j BBgwFoAUqLf9BPnCp9bvjlMnkvnIA9EvoaowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDc2ODBkMGQtZTI0MC00YWFmLWJjMjMtMjgyMzU5MzczMjg5LzAvQThCN0ZEMDRG OUMyQTdENkVGOEU1MzI3OTJGOUM4MDNEMTJGQTFBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOEI3RkQwNEY5QzJBN0Q2RUY4RTUzMjc5MkY5QzgwM0QxMkZB MUFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDc2ODBkMGQtZTI0MC00YWFmLWJj MjMtMjgyMzU5MzczMjg5LzAvQThCN0ZEMDRGOUMyQTdENkVGOEU1MzI3OTJGOUM4 MDNEMTJGQTFBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEf8+K64fSJj9cEkINDdi0r18+RUwlMpVs37 NRgfZMJaS1ENCL7RrpsBI3E40oxS9TMk/MwMuccs2I3Fg3CKb8WjQImoNlBX6pl2 gmJ7/1Wcly/FlFbMITup8l5H8KBQLH8NGSjNn9y8Lhl9DnnM/S2+YQ2B9yHZt1Wl ch5/RtoTWxDNFFuk5sqxLrIZM6/RB5tCTNkCDXz8Bwc54PcdfyI2miyEkHYYEdD5 5SshSBZ+jjyWy5PjncWx5sm1gJm7kvoEJAUxyld1DSzM5Pj3K4pQWQAMrlCdwO5t qetVgXuTYO+kMNGdFeRkQPQe6MtGagKiEBk64BEhQK1n0lZzPok= -----END CERTIFICATE-----Generated at Thu Sep 3 09:27:21 2026 by rpki-client