$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft File: 7A8D4233922872A894E30E54D6874BEB416AD1DF.mft (raw, json) Hash identifier: 9xiscKCW5XkZ6yHrL/sQxQAOhd4QWx4vFu2murgINuQ= Subject key identifier: F7:8B:AC:80:2E:FF:F2:FF:B5:1C:50:2C:6B:D0:FC:D0:CB:B6:92:5C Authority key identifier: 7A:8D:42:33:92:28:72:A8:94:E3:0E:54:D6:87:4B:EB:41:6A:D1:DF Certificate issuer: /CN=7A8D4233922872A894E30E54D6874BEB416AD1DF Certificate serial: 66DBD594E4E4D714C8F82E77626CC69FF46A2567 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 14:45:01 +0000 Manifest this update: Thu 03 Sep 2026 14:40:01 +0000 Manifest next update: Fri 04 Sep 2026 15:02:01 +0000 Files and hashes: 1: 3137352e34352e3138392e302f32342d3234203d3e203436303139.roa (hash: pq7hgN0BYFvcOO4RibbiV4dskaN65Tn7+tm7b4Zi5ss=) 2: 3137352e34352e3138372e302f32342d3234203d3e203436303139.roa (hash: xJh5WIaBaJDKe0gD95hGnS6h/QKLhblXUfBYm2CvOr8=) 3: 3137352e34352e3139302e302f32342d3234203d3e203436303139.roa (hash: dMDlV7U3rxrCZhn5tU+/e2gI+6rTenrp0BfONLsgL+w=) 4: 3137352e34352e3138342e302f32342d3234203d3e203436303139.roa (hash: +5SwlM0I3old/JoBe0NfTcGocHsW0SZgVouHkTzMlXY=) 5: 3137352e34352e3138352e302f32342d3234203d3e203436303139.roa (hash: ycDYVFKlKUcCLkCPbyJWINzJ+1wnaqTl8G/ven1iST0=) 6: 323430353a383734303a3a2f33322d3438203d3e203436303139.roa (hash: tzOGo3sV/ZVReIoJFZdjUkPKBEoC+agfuEqkfoWV+Ls=) 7: 3137352e34352e3138362e302f32342d3234203d3e203436303139.roa (hash: sBqWwZZoNRCD+983cJNfmzhu/jryMMyC7TtCEQsfwzo=) 8: 7A8D4233922872A894E30E54D6874BEB416AD1DF.crl (hash: Nqzoi7IxQAb/5KK7x2um6nuJSLOUfwU/7JaawiqZLhg=) 9: 3137352e34352e3139312e302f32342d3234203d3e203436303139.roa (hash: QEaWwU/gLTd1+vXquoUrxupuBnvtpr2z+pW3ka5j1QM=) 10: 3137352e34352e3138342e302f32312d3231203d3e203436303139.roa (hash: Cy4evdxsXDlUgI456OCJSgkPxKW0rsUBqO0gVv2Oj9E=) 11: 3137352e34352e3138382e302f32342d3234203d3e203436303139.roa (hash: CU2pRJlByvKfQ/yJYZHsXqoQU8W2lpUHREOgbnxSIXI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.crl rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:db:d5:94:e4:e4:d7:14:c8:f8:2e:77:62:6c:c6:9f:f4:6a:25:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A8D4233922872A894E30E54D6874BEB416AD1DF Validity Not Before: Sep 3 14:40:01 2026 GMT Not After : Sep 4 15:02:01 2026 GMT Subject: CN=F78BAC802EFFF2FFB51C502C6BD0FCD0CBB6925C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2f:fc:79:ac:61:e5:f2:da:b7:c6:d5:2c:b6: e0:a9:15:49:4b:b6:b8:e6:27:19:65:f3:4e:23:84: c0:db:76:74:bd:23:42:79:6d:38:cc:11:b0:4f:a7: 2c:62:15:d9:9f:9a:2c:55:b1:53:5b:c8:6c:bf:e1: 52:89:69:03:1e:63:22:01:a4:b5:0f:1f:c1:36:71: b7:eb:22:1c:48:49:01:36:cc:9d:7f:c6:1d:5e:ff: 01:fd:af:50:11:94:2b:05:e4:45:63:f2:39:75:4a: ca:8a:91:74:b6:a4:33:69:e5:51:74:34:d5:ea:d1: 13:4b:3d:d2:7f:ae:2d:75:c7:dc:8e:78:e8:3d:35: 64:80:f3:b7:4c:07:9e:2c:0f:08:39:19:c4:ec:25: 7e:dd:45:08:36:ef:85:70:f6:f2:90:de:8b:9e:6d: b0:5f:41:38:e2:76:41:3f:46:15:ad:bd:5e:e1:0f: 5c:eb:68:c2:0c:38:ae:2a:34:a9:1c:72:25:c8:65: d2:e6:22:d2:79:4f:c9:67:a9:ca:ef:a5:84:22:7c: 6e:f9:e3:32:03:6b:89:d7:4f:a9:03:c4:1c:d1:ee: 0e:f2:34:4d:0d:d4:85:44:b8:98:5c:88:e6:cc:ef: 5a:47:61:73:cf:42:02:c9:83:4a:e8:dc:3b:dd:65: ae:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:8B:AC:80:2E:FF:F2:FF:B5:1C:50:2C:6B:D0:FC:D0:CB:B6:92:5C X509v3 Authority Key Identifier: keyid:7A:8D:42:33:92:28:72:A8:94:E3:0E:54:D6:87:4B:EB:41:6A:D1:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:21:25:ce:bf:ba:f0:78:5b:95:2d:76:8c:16:91:39:e0:09: f8:b7:44:37:f6:6f:02:19:70:f6:94:20:22:ac:2f:10:95:32: 2d:b3:eb:bc:ba:7d:1e:f2:db:23:08:8e:c3:9a:e0:6c:60:ad: 2e:bd:5f:6c:a6:4c:f2:cd:b9:eb:b5:8c:5a:4f:22:15:bb:2b: 27:bd:f0:55:3d:4a:c6:6e:1c:26:50:ae:71:9a:c2:ac:e7:d9: eb:ab:33:4c:12:c0:20:f1:28:82:09:02:dd:6d:16:e7:94:07: 97:cb:28:a4:65:4c:bd:87:26:0c:22:9a:95:d6:ab:84:16:72: e5:80:70:e9:30:a9:bc:01:4b:d0:d0:94:ac:86:cf:53:ea:e9: 15:f4:83:fa:4b:e3:e7:e2:b7:e3:1a:68:2c:5a:b2:5d:2b:ad: ba:4c:e9:cb:b2:5c:90:57:93:2c:6f:40:6a:c3:40:6c:53:9c: 95:5f:59:cf:65:95:db:d7:e1:65:ab:79:b7:68:71:f9:9a:ff: 95:7d:d3:da:03:bc:b0:66:58:74:94:3a:22:54:84:bc:88:eb: 42:de:35:83:3d:5f:db:7e:6d:dd:66:86:eb:a3:01:a6:47:a6: 66:8e:cf:ca:04:18:49:d5:ae:cf:3b:91:98:f9:d0:30:3e:1a: 48:05:a6:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZtvVlOTk1xTI+C53YmzGn/RqJWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E4RDQyMzM5MjI4NzJBODk0RTMwRTU0RDY4NzRCRUI0 MTZBRDFERjAeFw0yNjA5MDMxNDQwMDFaFw0yNjA5MDQxNTAyMDFaMDMxMTAvBgNV BAMTKEY3OEJBQzgwMkVGRkYyRkZCNTFDNTAyQzZCRDBGQ0QwQ0JCNjkyNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWL/x5rGHl8tq3xtUstuCpFUlL trjmJxll804jhMDbdnS9I0J5bTjMEbBPpyxiFdmfmixVsVNbyGy/4VKJaQMeYyIB pLUPH8E2cbfrIhxISQE2zJ1/xh1e/wH9r1ARlCsF5EVj8jl1SsqKkXS2pDNp5VF0 NNXq0RNLPdJ/ri11x9yOeOg9NWSA87dMB54sDwg5GcTsJX7dRQg274Vw9vKQ3oue bbBfQTjidkE/RhWtvV7hD1zraMIMOK4qNKkcciXIZdLmItJ5T8lnqcrvpYQifG75 4zIDa4nXT6kDxBzR7g7yNE0N1IVEuJhciObM71pHYXPPQgLJg0ro3DvdZa6bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU94usgC7/8v+1HFAsa9D80Mu2klwwHwYDVR0j BBgwFoAUeo1CM5IocqiU4w5U1odL60Fq0d8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJmNzFjOTEtMTYyNC00ZmMwLThjNjMtMmVmYWZkNDZmYmMxLzAvN0E4RDQyMzM5 MjI4NzJBODk0RTMwRTU0RDY4NzRCRUI0MTZBRDFERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QThENDIzMzkyMjg3MkE4OTRFMzBFNTRENjg3NEJFQjQxNkFE MURGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJmNzFjOTEtMTYyNC00ZmMwLThj NjMtMmVmYWZkNDZmYmMxLzAvN0E4RDQyMzM5MjI4NzJBODk0RTMwRTU0RDY4NzRC RUI0MTZBRDFERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABAhJc6/uvB4W5UtdowWkTngCfi3RDf2bwIZ cPaUICKsLxCVMi2z67y6fR7y2yMIjsOa4GxgrS69X2ymTPLNueu1jFpPIhW7Kye9 8FU9SsZuHCZQrnGawqzn2eurM0wSwCDxKIIJAt1tFueUB5fLKKRlTL2HJgwimpXW q4QWcuWAcOkwqbwBS9DQlKyGz1Pq6RX0g/pL4+fit+MaaCxasl0rrbpM6cuyXJBX kyxvQGrDQGxTnJVfWc9lldvX4WWrebdocfma/5V909oDvLBmWHSUOiJUhLyI60Le NYM9X9t+bd1mhuujAaZHpmaOz8oEGEnVrs87kZj50DA+GkgFpjU= -----END CERTIFICATE-----Generated at Thu Sep 3 20:48:38 2026 by rpki-client