$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft File: A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft (raw, json) Hash identifier: IpaB3LxrbjP2132hPKtP9Twr9puAVfQR9eSFpKHPTms= Subject key identifier: A3:CA:87:4A:F1:26:2A:04:2C:3C:2C:45:86:4B:6C:0A:6A:67:D7:77 Authority key identifier: A7:F2:57:AB:23:3C:8B:2F:1C:63:88:FC:B9:4F:34:20:60:63:AC:A7 Certificate issuer: /CN=A7F257AB233C8B2F1C6388FCB94F34206063ACA7 Certificate serial: 13A37E7BF4F592FDA928B999807D8AB3619DB64C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 00:54:11 +0000 Manifest this update: Thu 03 Sep 2026 00:49:11 +0000 Manifest next update: Fri 04 Sep 2026 04:17:11 +0000 Files and hashes: 1: A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl (hash: Qt1klnX+ZGDQ6utGaaWMQFT9/1ZrJ2RjMGBKrp/CGfE=) 2: 32372e3131322e37372e302f32342d3234203d3e20313430343832.roa (hash: EYrB9WmEEsZBQC1BtxA6FgRk0osKm3o1jztWowdaQE0=) 3: 3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa (hash: GkQ8eVgQ8r/gDw/x4qIJQCYsnJYsQySSoX0lOgA5GAk=) 4: 3130332e3233312e3137312e302f32342d3234203d3e20313430343832.roa (hash: 5YtXBJW+pcjkjSSkT2eyu+9IHPZhAt7snHtZn/2zdlI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 04:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:a3:7e:7b:f4:f5:92:fd:a9:28:b9:99:80:7d:8a:b3:61:9d:b6:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7F257AB233C8B2F1C6388FCB94F34206063ACA7 Validity Not Before: Sep 3 00:49:11 2026 GMT Not After : Sep 4 04:17:11 2026 GMT Subject: CN=A3CA874AF1262A042C3C2C45864B6C0A6A67D777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:b0:0c:fa:73:43:52:2d:56:18:dd:84:9d: 02:b0:33:8a:a3:b7:de:33:4c:a7:8a:b2:91:86:b1: 68:08:ec:2a:61:fe:c9:ad:3e:94:71:ab:a5:7b:eb: 8c:44:cc:25:18:24:cb:ae:50:ce:45:b9:e7:45:78: 50:2d:82:66:97:68:2c:8c:5b:b4:e0:7d:59:8f:92: c9:40:17:9e:60:73:78:5c:d3:2a:44:70:e7:ed:85: b5:cd:5b:ab:ab:1c:f2:de:48:aa:c0:8b:1a:49:c8: b5:69:d6:e9:17:30:b9:f5:00:08:fc:69:97:f8:ba: d1:06:e2:77:6d:c0:cd:4f:5b:50:d1:11:ef:f3:62: 70:45:e8:3c:1d:c9:62:02:ac:25:a8:d7:87:3e:1a: 09:9e:15:6a:a5:83:75:85:e8:77:67:18:5c:a2:d5: 8d:df:96:41:a5:e2:d6:bf:0d:3c:71:1b:07:4e:27: 3e:43:c5:57:a0:25:15:ac:38:25:22:bd:ea:c6:9e: 91:78:86:83:46:16:f6:1a:d4:23:4c:84:07:24:b9: b0:17:96:2c:03:4e:e4:b3:6a:c7:d1:8c:92:cd:11: b4:4d:e1:d6:84:38:a4:71:eb:cb:41:9c:f7:a3:88: 32:c9:88:b9:59:dd:bd:62:9f:65:99:d7:e1:4e:38: 83:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CA:87:4A:F1:26:2A:04:2C:3C:2C:45:86:4B:6C:0A:6A:67:D7:77 X509v3 Authority Key Identifier: keyid:A7:F2:57:AB:23:3C:8B:2F:1C:63:88:FC:B9:4F:34:20:60:63:AC:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:14:1d:4c:38:7e:44:f0:ca:9c:ee:80:e6:36:f8:a8:2e:62: 64:c3:b9:ab:cd:75:6f:ab:fa:d2:e0:28:d9:76:19:6e:7e:b3: bf:c7:af:46:b2:f0:05:ed:79:06:94:43:0f:d7:24:5b:63:b0: 06:df:ad:6b:33:20:10:c5:15:4b:d2:ec:41:68:fb:b1:cc:29: ef:7f:7d:59:69:e6:3b:a6:f4:aa:0e:2f:ef:09:ec:37:ac:ad: e9:fa:36:52:24:f3:ea:03:d2:47:21:f4:f7:da:e3:66:b6:7c: 5f:de:9a:f4:b0:0f:46:b5:01:1f:a7:c1:83:bf:9e:ff:5c:b0: 4f:0e:a6:cf:ff:51:4c:4e:85:91:58:09:f1:42:07:49:d0:a6: 34:41:68:01:8e:f2:5a:2c:86:21:f1:ac:f1:bb:77:9b:47:81: aa:25:15:1d:a5:98:d3:c0:bb:87:20:c5:c3:d1:0b:b3:b0:62: 49:2a:85:19:bb:90:33:7d:5d:d8:d5:da:9a:9d:14:73:29:c0: 46:81:bd:86:21:a6:81:43:1d:f1:2d:49:6f:b4:05:f2:c3:46: c1:c9:44:db:ec:91:37:e8:cc:9a:74:89:d6:6d:56:22:36:4b: 84:09:7d:a7:0d:c2:27:3f:ff:ca:9e:fe:4b:d1:f8:e7:dd:93: fe:8f:f6:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE6N+e/T1kv2pKLmZgH2Ks2GdtkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdGMjU3QUIyMzNDOEIyRjFDNjM4OEZDQjk0RjM0MjA2 MDYzQUNBNzAeFw0yNjA5MDMwMDQ5MTFaFw0yNjA5MDQwNDE3MTFaMDMxMTAvBgNV BAMTKEEzQ0E4NzRBRjEyNjJBMDQyQzNDMkM0NTg2NEI2QzBBNkE2N0Q3NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3DrAM+nNDUi1WGN2EnQKwM4qj t94zTKeKspGGsWgI7Cph/smtPpRxq6V764xEzCUYJMuuUM5FuedFeFAtgmaXaCyM W7TgfVmPkslAF55gc3hc0ypEcOfthbXNW6urHPLeSKrAixpJyLVp1ukXMLn1AAj8 aZf4utEG4ndtwM1PW1DREe/zYnBF6DwdyWICrCWo14c+GgmeFWqlg3WF6HdnGFyi 1Y3flkGl4ta/DTxxGwdOJz5DxVegJRWsOCUiverGnpF4hoNGFvYa1CNMhAckubAX liwDTuSzasfRjJLNEbRN4daEOKRx68tBnPejiDLJiLlZ3b1in2WZ1+FOOIMtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo8qHSvEmKgQsPCxFhktsCmpn13cwHwYDVR0j BBgwFoAUp/JXqyM8iy8cY4j8uU80IGBjrKcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWU2ZmYzOGQtZTU0Ny00ZjczLWJiMzAtMmIxNGMwOGM4OWZiLzAvQTdGMjU3QUIy MzNDOEIyRjFDNjM4OEZDQjk0RjM0MjA2MDYzQUNBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BN0YyNTdBQjIzM0M4QjJGMUM2Mzg4RkNCOTRGMzQyMDYwNjNB Q0E3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWU2ZmYzOGQtZTU0Ny00ZjczLWJi MzAtMmIxNGMwOGM4OWZiLzAvQTdGMjU3QUIyMzNDOEIyRjFDNjM4OEZDQjk0RjM0 MjA2MDYzQUNBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkUHUw4fkTwypzugOY2+KguYmTDuavNdW+r +tLgKNl2GW5+s7/Hr0ay8AXteQaUQw/XJFtjsAbfrWszIBDFFUvS7EFo+7HMKe9/ fVlp5jum9KoOL+8J7Desren6NlIk8+oD0kch9Pfa42a2fF/emvSwD0a1AR+nwYO/ nv9csE8Ops//UUxOhZFYCfFCB0nQpjRBaAGO8loshiHxrPG7d5tHgaolFR2lmNPA u4cgxcPRC7OwYkkqhRm7kDN9XdjV2pqdFHMpwEaBvYYhpoFDHfEtSW+0BfLDRsHJ RNvskTfozJp0idZtViI2S4QJfacNwic//8qe/kvR+Ofdk/6P9ms= -----END CERTIFICATE-----Generated at Thu Sep 3 16:21:20 2026 by rpki-client