$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/7E396DC08063D89F8DA97A09F6739E4E6EA00BF9.mft File: 7E396DC08063D89F8DA97A09F6739E4E6EA00BF9.mft (raw, json) Hash identifier: c3EfsdAcfAuWc2FM4olt277D0XqvfuMwHtzlruXH0k8= Subject key identifier: 43:38:78:06:B8:5E:14:A7:BF:8C:91:29:F7:58:7C:A8:33:EC:29:A8 Authority key identifier: 7E:39:6D:C0:80:63:D8:9F:8D:A9:7A:09:F6:73:9E:4E:6E:A0:0B:F9 Certificate issuer: /CN=7E396DC08063D89F8DA97A09F6739E4E6EA00BF9 Certificate serial: 452C87CD7763F59CDF77076F560B474B95276762 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E396DC08063D89F8DA97A09F6739E4E6EA00BF9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/7E396DC08063D89F8DA97A09F6739E4E6EA00BF9.mft Manifest number: A8 Signing time: Fri 04 Sep 2026 05:17:58 +0000 Manifest this update: Fri 04 Sep 2026 05:12:58 +0000 Manifest next update: Sat 05 Sep 2026 09:04:58 +0000 Files and hashes: 1: 7E396DC08063D89F8DA97A09F6739E4E6EA00BF9.crl (hash: S08H2tU18Ko/LdnSvMO80oKg7JepF3L2TLbFRImz9f4=) 2: 3130332e3138342e3138332e302f32342d3234203d3e20313439393631.roa (hash: nSbG5Aubx/R8t9wZYLZJODyqF5GhZgVw7+j6TizEJ40=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/7E396DC08063D89F8DA97A09F6739E4E6EA00BF9.crl rsync://rpki-rsync.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/7E396DC08063D89F8DA97A09F6739E4E6EA00BF9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E396DC08063D89F8DA97A09F6739E4E6EA00BF9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 04:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:2c:87:cd:77:63:f5:9c:df:77:07:6f:56:0b:47:4b:95:27:67:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E396DC08063D89F8DA97A09F6739E4E6EA00BF9 Validity Not Before: Sep 4 05:12:58 2026 GMT Not After : Sep 5 09:04:58 2026 GMT Subject: CN=43387806B85E14A7BF8C9129F7587CA833EC29A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:eb:81:d7:69:d6:2d:69:20:53:6a:38:bc:43: a2:cb:fc:b4:8d:28:56:d6:14:be:de:54:2a:63:07: cb:24:f1:66:95:83:d4:d0:93:bc:68:7a:6f:79:29: d2:a1:fc:d4:e0:31:06:66:6c:2b:e6:3b:12:8e:00: 1a:76:8e:bb:95:68:36:65:66:bb:ca:ae:22:88:96: c0:f9:63:7e:dc:3a:95:14:41:71:91:02:af:87:cc: 25:7d:11:d3:9c:4a:50:9b:b2:a5:2b:c8:54:67:b4: ed:ec:6a:b1:20:00:32:90:6f:c8:12:73:1d:42:a3: 09:6d:de:25:dc:7b:8f:fd:c1:a9:bf:10:c7:94:46: 07:f2:0b:78:d1:34:a0:71:ed:57:20:b7:3a:51:8a: 85:ce:72:a1:ad:66:af:2c:05:c1:cf:0a:1b:3c:cd: 34:b6:e1:4e:c8:a7:da:69:93:b3:60:a1:3b:64:6f: 64:e6:eb:27:98:8a:00:79:e9:75:1a:e8:0e:6b:e7: 6d:c4:6d:0f:ce:21:1c:7a:59:6f:b4:0c:5d:03:ed: 35:94:13:fe:3f:f5:30:9e:e7:57:2d:22:b6:60:52: 82:66:85:20:58:52:bc:88:31:00:34:97:a9:47:32: c1:94:68:b7:c6:93:64:57:c0:0a:4b:ca:1f:a1:4a: 61:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:38:78:06:B8:5E:14:A7:BF:8C:91:29:F7:58:7C:A8:33:EC:29:A8 X509v3 Authority Key Identifier: keyid:7E:39:6D:C0:80:63:D8:9F:8D:A9:7A:09:F6:73:9E:4E:6E:A0:0B:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/7E396DC08063D89F8DA97A09F6739E4E6EA00BF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E396DC08063D89F8DA97A09F6739E4E6EA00BF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/7E396DC08063D89F8DA97A09F6739E4E6EA00BF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:1b:b4:d3:f9:3e:00:43:d0:ea:06:00:b8:7a:14:59:a2:f7: cc:12:8f:ff:7f:01:26:c4:49:84:68:e0:01:87:5b:2d:6f:8a: a0:f1:74:c1:37:a1:cd:52:4f:fb:4f:9d:1d:9a:1f:86:87:0e: 37:a0:e4:68:a1:ff:55:eb:17:cb:f7:34:f3:49:60:d3:b3:78: 05:87:a5:cd:d2:1f:0a:5c:7e:e2:4a:0b:ef:c4:70:c1:f1:de: b0:d2:27:3d:72:55:8b:c5:4d:9d:57:5d:3d:67:60:94:6e:25: e8:9e:0b:ce:26:59:b6:90:76:7e:fe:6d:c8:30:9c:e9:3f:aa: 54:b2:e1:a2:34:23:06:8d:70:34:0e:cc:b7:e3:3b:af:00:85: 73:96:10:b2:04:8e:3e:f5:05:61:e2:a7:88:70:05:67:32:f0: a4:34:3f:b2:f9:81:fb:cf:33:d7:7c:b6:64:40:dc:e9:a9:3e: 66:e4:df:5a:1e:cd:b5:24:d3:72:c2:9f:44:78:95:90:20:9b: 9c:76:5d:3e:b6:4e:f0:28:ea:70:dc:78:4a:96:f5:fa:35:88: 82:dc:6c:cc:ba:c8:f5:36:b9:8c:ae:fa:e8:ef:72:4c:45:da: d1:c9:fd:7a:c0:25:db:5d:5e:d1:05:f0:b9:b7:a0:d5:88:b6: 3a:45:32:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURSyHzXdj9ZzfdwdvVgtHS5UnZ2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0UzOTZEQzA4MDYzRDg5RjhEQTk3QTA5RjY3MzlFNEU2 RUEwMEJGOTAeFw0yNjA5MDQwNTEyNThaFw0yNjA5MDUwOTA0NThaMDMxMTAvBgNV BAMTKDQzMzg3ODA2Qjg1RTE0QTdCRjhDOTEyOUY3NTg3Q0E4MzNFQzI5QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk64HXadYtaSBTaji8Q6LL/LSN KFbWFL7eVCpjB8sk8WaVg9TQk7xoem95KdKh/NTgMQZmbCvmOxKOABp2jruVaDZl ZrvKriKIlsD5Y37cOpUUQXGRAq+HzCV9EdOcSlCbsqUryFRntO3sarEgADKQb8gS cx1Cowlt3iXce4/9wam/EMeURgfyC3jRNKBx7VcgtzpRioXOcqGtZq8sBcHPChs8 zTS24U7Ip9ppk7NgoTtkb2Tm6yeYigB56XUa6A5r523EbQ/OIRx6WW+0DF0D7TWU E/4/9TCe51ctIrZgUoJmhSBYUryIMQA0l6lHMsGUaLfGk2RXwApLyh+hSmFfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQzh4BrheFKe/jJEp91h8qDPsKagwHwYDVR0j BBgwFoAUfjltwIBj2J+NqXoJ9nOeTm6gC/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjI3MTgwNmMtNDNkMC00NjQ2LThjOGQtNjExMTdjMjM0MWEwLzAvN0UzOTZEQzA4 MDYzRDg5RjhEQTk3QTA5RjY3MzlFNEU2RUEwMEJGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RTM5NkRDMDgwNjNEODlGOERBOTdBMDlGNjczOUU0RTZFQTAw QkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjI3MTgwNmMtNDNkMC00NjQ2LThj OGQtNjExMTdjMjM0MWEwLzAvN0UzOTZEQzA4MDYzRDg5RjhEQTk3QTA5RjY3MzlF NEU2RUEwMEJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8btNP5PgBD0OoGALh6FFmi98wSj/9/ASbE SYRo4AGHWy1viqDxdME3oc1ST/tPnR2aH4aHDjeg5Gih/1XrF8v3NPNJYNOzeAWH pc3SHwpcfuJKC+/EcMHx3rDSJz1yVYvFTZ1XXT1nYJRuJeieC84mWbaQdn7+bcgw nOk/qlSy4aI0IwaNcDQOzLfjO68AhXOWELIEjj71BWHip4hwBWcy8KQ0P7L5gfvP M9d8tmRA3OmpPmbk31oezbUk03LCn0R4lZAgm5x2XT62TvAo6nDceEqW9fo1iILc bMy6yPU2uYyu+ujvckxF2tHJ/XrAJdtdXtEF8Lm3oNWItjpFMpU= -----END CERTIFICATE-----Generated at Fri Sep 4 15:25:38 2026 by rpki-client