$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.mft File: 7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.mft (raw, json) Hash identifier: CLV5H0tQJ8VQ1nCkjd6gKbZZaY2XC5uiGv6AUFrXE+E= Subject key identifier: 2E:43:AC:6E:61:51:40:AC:00:36:7D:92:67:07:00:FE:6A:E0:7B:D2 Authority key identifier: 7D:51:3C:A0:27:0A:04:6B:FF:27:E9:C4:9D:A0:E9:90:3C:DD:2C:0C Certificate issuer: /CN=7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C Certificate serial: 57CF0ACD6A95CB91F2C97CE0A1C0853F6AD6E109 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.mft Manifest number: A7 Signing time: Fri 04 Sep 2026 10:08:47 +0000 Manifest this update: Fri 04 Sep 2026 10:03:47 +0000 Manifest next update: Sat 05 Sep 2026 13:23:47 +0000 Files and hashes: 1: 3130332e3134372e31302e302f32332d3234203d3e20313339393435.roa (hash: GymIgmPh7c7AFMEkOazrLmR+HafDOGSOnyaAyUzJOWU=) 2: 7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.crl (hash: QuNzfDLyjk92gAXf7CscgP3wfGFwVw89YcV98uwUXsc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.crl rsync://rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 04:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:cf:0a:cd:6a:95:cb:91:f2:c9:7c:e0:a1:c0:85:3f:6a:d6:e1:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C Validity Not Before: Sep 4 10:03:47 2026 GMT Not After : Sep 5 13:23:47 2026 GMT Subject: CN=2E43AC6E615140AC00367D92670700FE6AE07BD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fe:db:34:6d:28:f4:37:3e:ef:f0:19:46:b5: 54:29:5b:82:39:76:39:fa:8f:a9:89:79:70:7a:0e: 72:03:5b:44:52:9b:5d:30:65:1c:8a:86:51:ec:c0: f4:0f:01:7b:70:b1:f3:88:5f:67:01:73:92:35:69: 23:87:6c:c0:18:c7:9a:e3:89:ed:9d:cd:af:f6:08: 74:f0:20:9e:34:dd:7a:ce:f4:bb:1f:4c:2e:44:0a: 22:6b:2e:65:da:38:0a:63:4c:92:c7:53:bf:42:6e: bb:51:f7:3a:e0:74:bc:70:04:af:64:f7:04:02:8c: 31:8f:43:c7:16:26:4e:8b:e3:94:0d:53:3b:2e:c9: f8:dc:c1:9c:a7:62:84:a7:71:4e:29:92:4c:ad:c7: 60:82:3d:e8:6c:de:f9:bb:d5:c7:de:fe:68:7a:38: 7d:9e:27:8d:b8:97:93:5d:4f:25:da:5a:18:55:63: 91:ab:d5:ad:77:e8:22:4d:00:d8:c4:12:60:4e:0d: b8:bc:36:74:a3:7e:93:9f:0e:59:1a:fe:80:81:aa: 67:1e:78:67:6c:fd:ac:d5:4f:e0:8f:db:0f:86:b6: 19:69:de:6f:f2:e1:0a:43:33:cb:de:6f:21:cd:fd: a5:b2:fa:91:b0:2f:ee:21:76:6d:06:19:64:4c:f5: 78:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:43:AC:6E:61:51:40:AC:00:36:7D:92:67:07:00:FE:6A:E0:7B:D2 X509v3 Authority Key Identifier: keyid:7D:51:3C:A0:27:0A:04:6B:FF:27:E9:C4:9D:A0:E9:90:3C:DD:2C:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:a2:e6:d3:d9:8d:0a:a3:58:9e:b3:c2:0e:26:66:53:83:b5: eb:87:77:89:ab:de:2b:f2:5b:56:11:52:20:0e:cd:3d:1e:f4: b1:92:e6:e2:87:c1:66:a2:ba:d4:d5:2e:b0:8e:e6:d4:38:d9: 96:ca:9b:a9:2e:cb:85:16:df:bd:58:47:c4:36:f9:74:19:2d: 10:7f:a8:b7:50:b6:e4:2e:76:14:c7:b9:29:0e:ec:d8:3f:73: c3:13:76:3b:9d:f1:c7:17:e1:16:16:6f:f6:83:82:7a:a4:b5: f2:e3:fb:53:c7:68:7f:c7:c2:0b:67:7b:26:71:b6:c6:b4:e9: 3d:20:99:d2:65:b8:c4:b9:10:17:19:e1:4e:42:1f:7a:2b:b3: 81:74:80:74:9f:94:fb:82:60:1e:fc:ef:ad:77:39:b7:66:2f: f9:7e:be:b7:98:fb:62:f0:d8:f1:4f:87:f8:b7:54:ec:67:63: 8b:ed:0a:fd:4e:58:ef:b2:2f:ad:ee:da:47:d8:94:08:68:9d: 0d:bd:54:d4:79:cd:b9:e0:00:a0:b3:10:dd:2c:a8:61:9a:2b: 3d:cb:73:ca:35:7b:38:0b:72:da:bf:7c:bf:66:65:10:df:e1: 1a:0a:e1:43:5c:a7:ab:87:e3:f7:59:52:52:e2:88:ef:a0:59: a9:02:15:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV88KzWqVy5HyyXzgocCFP2rW4QkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MTNDQTAyNzBBMDQ2QkZGMjdFOUM0OURBMEU5OTAz Q0REMkMwQzAeFw0yNjA5MDQxMDAzNDdaFw0yNjA5MDUxMzIzNDdaMDMxMTAvBgNV BAMTKDJFNDNBQzZFNjE1MTQwQUMwMDM2N0Q5MjY3MDcwMEZFNkFFMDdCRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ/ts0bSj0Nz7v8BlGtVQpW4I5 djn6j6mJeXB6DnIDW0RSm10wZRyKhlHswPQPAXtwsfOIX2cBc5I1aSOHbMAYx5rj ie2dza/2CHTwIJ403XrO9LsfTC5ECiJrLmXaOApjTJLHU79CbrtR9zrgdLxwBK9k 9wQCjDGPQ8cWJk6L45QNUzsuyfjcwZynYoSncU4pkkytx2CCPehs3vm71cfe/mh6 OH2eJ424l5NdTyXaWhhVY5Gr1a136CJNANjEEmBODbi8NnSjfpOfDlka/oCBqmce eGds/azVT+CP2w+Gthlp3m/y4QpDM8vebyHN/aWy+pGwL+4hdm0GGWRM9XhZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULkOsbmFRQKwANn2SZwcA/mrge9IwHwYDVR0j BBgwFoAUfVE8oCcKBGv/J+nEnaDpkDzdLAwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTU2MmNmM2QtZDlmNy00OGE5LTkxNTktOWYwZDdhNDc2NzkwLzAvN0Q1MTNDQTAy NzBBMDQ2QkZGMjdFOUM0OURBMEU5OTAzQ0REMkMwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDUxM0NBMDI3MEEwNDZCRkYyN0U5QzQ5REEwRTk5MDNDREQy QzBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTU2MmNmM2QtZDlmNy00OGE5LTkx NTktOWYwZDdhNDc2NzkwLzAvN0Q1MTNDQTAyNzBBMDQ2QkZGMjdFOUM0OURBMEU5 OTAzQ0REMkMwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGi5tPZjQqjWJ6zwg4mZlODteuHd4mr3ivy W1YRUiAOzT0e9LGS5uKHwWaiutTVLrCO5tQ42ZbKm6kuy4UW371YR8Q2+XQZLRB/ qLdQtuQudhTHuSkO7Ng/c8MTdjud8ccX4RYWb/aDgnqktfLj+1PHaH/HwgtneyZx tsa06T0gmdJluMS5EBcZ4U5CH3ors4F0gHSflPuCYB787613ObdmL/l+vreY+2Lw 2PFPh/i3VOxnY4vtCv1OWO+yL63u2kfYlAhonQ29VNR5zbngAKCzEN0sqGGaKz3L c8o1ezgLctq/fL9mZRDf4RoK4UNcp6uH4/dZUlLiiO+gWakCFUE= -----END CERTIFICATE-----Generated at Fri Sep 4 15:25:44 2026 by rpki-client