$ rpki-client -vvvf rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft File: D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft (raw, json) Hash identifier: uHLVJMtnFECHzrvxolVV7iNu29xv3plrYHu7jQe2a0M= Subject key identifier: E4:46:7C:C9:27:11:52:44:51:D7:A3:74:4A:F0:02:8B:51:F9:09:E8 Authority key identifier: D7:B3:D2:9A:1C:58:F2:A7:64:EF:71:D9:0E:EB:34:A0:85:23:E1:4B Certificate issuer: /CN=D7B3D29A1C58F2A764EF71D90EEB34A08523E14B Certificate serial: 666BC88F188C610406B07778A88B5D154AA38242 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft Manifest number: AA Signing time: Thu 03 Sep 2026 15:05:23 +0000 Manifest this update: Thu 03 Sep 2026 15:00:23 +0000 Manifest next update: Fri 04 Sep 2026 15:47:23 +0000 Files and hashes: 1: 323430373a373234303a3a2f33322d3438203d3e203538383230.roa (hash: pbfRu1u/17aE+5jbLOXSjK5kSHLY3NJFYSy/GgweGtc=) 2: 3130332e3135322e3234322e302f32342d3234203d3e20313339343536.roa (hash: QnjSCWkwabhUboJKZ28QBKGbgaSMy7Q0+XqOshpVH5I=) 3: 3130332e3135322e3234322e302f32332d3233203d3e203538383230.roa (hash: UfSTsOVMmUHhlSuicPfv/acnVZkznnLyaQTNx0s5r/I=) 4: 323430373a373234303a3a2f33322d3332203d3e203538383230.roa (hash: XbL3x6HL60HenYCDQv+H+1fWOEpLqL6GUYrIDXhN5Ec=) 5: 3130332e3135322e3234332e302f32342d3234203d3e20313339343536.roa (hash: 1SUvsGX664dyT73KTnssj6SLYMQJcE1PRfUOLl0J8A0=) 6: D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.crl (hash: mNPHNjwiok73XtTAuP8VUqlmiqGCDIAXqNfqkXjB6DY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.crl rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:6b:c8:8f:18:8c:61:04:06:b0:77:78:a8:8b:5d:15:4a:a3:82:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7B3D29A1C58F2A764EF71D90EEB34A08523E14B Validity Not Before: Sep 3 15:00:23 2026 GMT Not After : Sep 4 15:47:23 2026 GMT Subject: CN=E4467CC92711524451D7A3744AF0028B51F909E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:93:cb:9a:3a:19:dd:4b:cf:63:98:f5:3f:3d: df:5a:46:bc:b5:31:46:b3:3d:64:41:fc:f1:d6:22: bf:34:f9:58:bd:ee:1e:e7:02:e1:82:2a:18:44:63: 15:77:ae:19:20:53:81:73:f7:8c:a3:1b:a9:37:82: 47:62:b1:f5:c7:0a:8b:8b:d6:bf:d0:33:fb:ed:8c: 99:71:1d:ac:a6:31:2c:fb:22:e3:ab:68:13:99:35: 5a:31:86:7f:52:5f:50:16:ff:2e:0b:9f:6f:9c:3e: 72:f3:22:cf:45:3c:77:d5:e2:e4:53:10:92:15:60: 0c:39:7a:a7:e2:37:fe:00:fd:51:fc:7d:91:74:22: 68:c5:6f:a2:a6:50:bd:aa:34:59:27:ad:e0:63:4c: c1:da:dc:b7:a7:04:7a:5e:32:04:f6:17:16:5a:a6: 32:2a:8b:d8:da:58:63:ce:08:a3:d6:ca:1f:e2:35: 71:2d:80:df:dc:55:7b:de:5a:83:10:59:24:19:c2: 55:b0:b9:21:37:d0:f5:c3:3a:1a:57:1e:72:b3:cb: be:5a:29:a4:56:58:8a:1f:5c:32:bb:ee:31:56:b7: 9a:82:84:13:0b:b9:58:96:6c:30:a5:1d:84:6a:6f: e7:cc:37:9f:59:00:41:84:ec:26:8b:9c:b9:8f:1c: 8c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:46:7C:C9:27:11:52:44:51:D7:A3:74:4A:F0:02:8B:51:F9:09:E8 X509v3 Authority Key Identifier: keyid:D7:B3:D2:9A:1C:58:F2:A7:64:EF:71:D9:0E:EB:34:A0:85:23:E1:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/D7B3D29A1C58F2A764EF71D90EEB34A08523E14B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:92:a5:96:8b:c1:14:11:8d:12:4c:6b:e2:be:e4:70:33:da: 0c:64:39:22:1e:6a:15:0c:49:52:64:10:67:98:aa:ea:0e:88: 94:01:69:1f:b1:6b:3b:37:00:c5:0f:a5:e1:95:f2:b3:1c:18: f2:15:26:6d:db:70:d5:a1:1b:84:cd:c6:94:fb:16:e8:42:42: 12:12:bc:2a:f0:03:d7:89:8d:a9:ea:fd:ff:24:0d:b9:cf:c6: 60:64:4a:df:da:44:66:73:02:33:77:3f:18:60:f5:8d:ac:9c: 6a:e1:2a:ff:8f:41:98:cf:03:53:fc:90:c4:e9:9e:cc:8f:3d: 0c:41:20:0e:8d:1d:fe:f4:dc:a7:fd:07:15:24:86:8b:ea:54: e3:17:31:24:a6:a3:a8:19:26:60:f9:c2:61:e4:58:21:8b:b2: ab:ce:86:81:02:b1:f2:60:1e:9f:42:72:67:e4:88:72:3c:4c: d1:b8:a2:1d:7e:cb:a0:3c:98:71:56:70:4b:02:b4:0a:52:99: 87:62:59:6a:a2:a5:44:15:43:c2:9b:4f:01:6f:d8:a4:5c:b5: 3e:ff:9d:01:ca:1d:68:60:d4:9b:24:a0:2a:6d:ff:6a:4d:d2: 5d:a7:05:10:06:e6:38:1b:6f:40:00:14:10:65:d2:29:b9:02: c8:41:60:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZmvIjxiMYQQGsHd4qItdFUqjgkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdCM0QyOUExQzU4RjJBNzY0RUY3MUQ5MEVFQjM0QTA4 NTIzRTE0QjAeFw0yNjA5MDMxNTAwMjNaFw0yNjA5MDQxNTQ3MjNaMDMxMTAvBgNV BAMTKEU0NDY3Q0M5MjcxMTUyNDQ1MUQ3QTM3NDRBRjAwMjhCNTFGOTA5RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAk8uaOhndS89jmPU/Pd9aRry1 MUazPWRB/PHWIr80+Vi97h7nAuGCKhhEYxV3rhkgU4Fz94yjG6k3gkdisfXHCouL 1r/QM/vtjJlxHaymMSz7IuOraBOZNVoxhn9SX1AW/y4Ln2+cPnLzIs9FPHfV4uRT EJIVYAw5eqfiN/4A/VH8fZF0ImjFb6KmUL2qNFknreBjTMHa3LenBHpeMgT2FxZa pjIqi9jaWGPOCKPWyh/iNXEtgN/cVXveWoMQWSQZwlWwuSE30PXDOhpXHnKzy75a KaRWWIofXDK77jFWt5qChBMLuViWbDClHYRqb+fMN59ZAEGE7CaLnLmPHIzJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5EZ8yScRUkRR16N0SvACi1H5CegwHwYDVR0j BBgwFoAU17PSmhxY8qdk73HZDus0oIUj4UswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjRiYTY3NzgtYjE2ZC00YmE4LTk4NGYtMzRlNDE5ZmM5YzQ5LzAvRDdCM0QyOUEx QzU4RjJBNzY0RUY3MUQ5MEVFQjM0QTA4NTIzRTE0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EN0IzRDI5QTFDNThGMkE3NjRFRjcxRDkwRUVCMzRBMDg1MjNF MTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjRiYTY3NzgtYjE2ZC00YmE4LTk4 NGYtMzRlNDE5ZmM5YzQ5LzAvRDdCM0QyOUExQzU4RjJBNzY0RUY3MUQ5MEVFQjM0 QTA4NTIzRTE0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKSpZaLwRQRjRJMa+K+5HAz2gxkOSIeahUM SVJkEGeYquoOiJQBaR+xazs3AMUPpeGV8rMcGPIVJm3bcNWhG4TNxpT7FuhCQhIS vCrwA9eJjanq/f8kDbnPxmBkSt/aRGZzAjN3Pxhg9Y2snGrhKv+PQZjPA1P8kMTp nsyPPQxBIA6NHf703Kf9BxUkhovqVOMXMSSmo6gZJmD5wmHkWCGLsqvOhoECsfJg Hp9CcmfkiHI8TNG4oh1+y6A8mHFWcEsCtApSmYdiWWqipUQVQ8KbTwFv2KRctT7/ nQHKHWhg1JskoCpt/2pN0l2nBRAG5jgbb0AAFBBl0im5AshBYGQ= -----END CERTIFICATE-----Generated at Fri Sep 4 00:59:57 2026 by rpki-client