$ rpki-client -vvvf rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft File: E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft (raw, json) Hash identifier: Vx+C+I4yWePeILJiTR1b4Y4UBpljIrOzx/o+GTUpgHE= Subject key identifier: D0:A7:5C:A3:CA:7A:28:06:40:2E:EA:83:DD:40:A2:29:39:57:2D:90 Authority key identifier: E5:DA:21:DB:76:CE:91:D6:EF:72:48:2F:FD:FE:02:16:9A:6C:C8:08 Certificate issuer: /CN=E5DA21DB76CE91D6EF72482FFDFE02169A6CC808 Certificate serial: 147FB3BD24D9F3BE89B6320832C5D187B35173C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 13:48:45 +0000 Manifest this update: Thu 03 Sep 2026 13:43:45 +0000 Manifest next update: Fri 04 Sep 2026 13:54:45 +0000 Files and hashes: 1: 3130332e3136362e3235342e302f32342d3234203d3e20313431393636.roa (hash: oYW4sdySDReabIUJh8DtwbQ7r9wux6oX5lpHgcktZMY=) 2: E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.crl (hash: c6CtH7zy2/iCFnElpB4xT1Wa98K1MMR8nmm51wZNakA=) 3: 3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa (hash: lQVIlc5Ok7o6clRzLcj2IsYBHTzNzicGxWqDtjOXTeQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.crl rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:7f:b3:bd:24:d9:f3:be:89:b6:32:08:32:c5:d1:87:b3:51:73:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5DA21DB76CE91D6EF72482FFDFE02169A6CC808 Validity Not Before: Sep 3 13:43:45 2026 GMT Not After : Sep 4 13:54:45 2026 GMT Subject: CN=D0A75CA3CA7A2806402EEA83DD40A22939572D90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c5:c3:c1:64:fa:00:f5:f3:37:26:3d:3f:80: 6f:dd:d1:b2:96:9d:20:3c:b5:17:a1:9e:0a:c9:dc: 4a:35:67:66:2d:f7:75:32:65:93:69:64:f5:7e:38: 00:a7:fd:14:8d:e8:c9:ac:24:e2:a4:3d:e5:20:39: c0:c5:92:4f:14:34:c4:3f:e1:80:8f:2a:6f:cd:6f: 64:83:e3:14:25:a4:2b:62:59:ed:ac:02:5b:78:c6: 56:d1:fc:eb:3f:12:8b:c4:9d:d6:76:90:17:a2:e7: fd:41:9a:6d:a6:92:3a:24:4a:96:9a:e1:25:31:66: 28:48:9b:59:7e:c4:85:36:cf:97:f3:6b:2a:b3:33: 14:d5:18:7e:ce:c7:59:77:9e:55:43:62:56:b7:2a: ef:86:ca:60:d7:29:3b:ce:e7:5e:2a:68:10:27:31: b0:d1:f4:73:ae:ae:de:11:aa:f8:3d:55:ae:3b:30: 8d:46:71:59:ba:e3:0e:52:28:cb:b5:36:9a:eb:c5: 4f:c9:d9:01:20:14:8c:df:d6:c6:4e:90:c6:91:db: 33:03:2d:cf:6f:11:64:6f:24:3f:cb:08:12:b3:3f: 10:e5:c5:17:b5:80:73:ce:18:27:7d:27:89:77:7c: 94:41:c4:b1:aa:5a:65:cc:90:54:d0:1e:3c:48:45: 85:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A7:5C:A3:CA:7A:28:06:40:2E:EA:83:DD:40:A2:29:39:57:2D:90 X509v3 Authority Key Identifier: keyid:E5:DA:21:DB:76:CE:91:D6:EF:72:48:2F:FD:FE:02:16:9A:6C:C8:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:93:7d:f9:36:65:8a:e2:ec:8b:b2:0c:39:59:b2:e2:d2:ba: 92:51:31:46:df:17:a4:37:d7:55:19:6f:3f:0d:36:9b:dc:c2: ca:2f:04:94:be:ab:39:cc:26:4d:5a:ec:39:d4:f7:4b:60:a4: 14:4f:26:59:b1:3e:41:e1:62:df:5f:ef:72:40:3e:2a:ee:2c: ec:1f:ea:ac:49:08:3e:bb:ef:c7:e9:ba:58:ac:aa:a6:4d:17: 2e:84:29:00:1c:d1:8e:30:e2:1f:3b:c8:9d:50:5a:b6:d9:c7: 4f:29:37:19:d4:34:43:ba:df:b7:9d:d7:11:71:ad:02:20:9b: 1a:1f:29:cc:78:b3:50:32:39:13:00:de:fd:23:c1:24:1e:d1: 4b:93:c6:b3:5a:93:1b:9c:e7:08:b2:a3:b2:50:a2:16:b7:5a: 0f:24:54:27:fc:72:25:c1:00:38:61:ee:67:2e:37:ed:55:2b: 7c:c3:e8:6b:9c:35:98:62:6f:a9:75:84:9b:8a:96:01:04:c7: 81:01:06:da:e2:1f:70:87:ca:a9:b7:06:9e:dc:36:e4:2f:77: 6b:62:d8:64:15:ed:b6:9a:55:4b:bf:68:be:ce:03:44:59:64: c9:2c:1d:33:2f:c3:eb:88:6a:8a:54:95:37:fd:15:55:5e:2f: 33:05:25:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFH+zvSTZ876JtjIIMsXRh7NRc8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVEQTIxREI3NkNFOTFENkVGNzI0ODJGRkRGRTAyMTY5 QTZDQzgwODAeFw0yNjA5MDMxMzQzNDVaFw0yNjA5MDQxMzU0NDVaMDMxMTAvBgNV BAMTKEQwQTc1Q0EzQ0E3QTI4MDY0MDJFRUE4M0RENDBBMjI5Mzk1NzJEOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDExcPBZPoA9fM3Jj0/gG/d0bKW nSA8tRehngrJ3Eo1Z2Yt93UyZZNpZPV+OACn/RSN6MmsJOKkPeUgOcDFkk8UNMQ/ 4YCPKm/Nb2SD4xQlpCtiWe2sAlt4xlbR/Os/EovEndZ2kBei5/1Bmm2mkjokSpaa 4SUxZihIm1l+xIU2z5fzayqzMxTVGH7Ox1l3nlVDYla3Ku+GymDXKTvO514qaBAn MbDR9HOurt4Rqvg9Va47MI1GcVm64w5SKMu1NprrxU/J2QEgFIzf1sZOkMaR2zMD Lc9vEWRvJD/LCBKzPxDlxRe1gHPOGCd9J4l3fJRBxLGqWmXMkFTQHjxIRYXfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Kdco8p6KAZALuqD3UCiKTlXLZAwHwYDVR0j BBgwFoAU5doh23bOkdbvckgv/f4CFppsyAgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDI5Zjg5MDItMWEwNi00NWE4LWE5OTgtNzJlNDZhYWFlOGZjLzAvRTVEQTIxREI3 NkNFOTFENkVGNzI0ODJGRkRGRTAyMTY5QTZDQzgwOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNURBMjFEQjc2Q0U5MUQ2RUY3MjQ4MkZGREZFMDIxNjlBNkND ODA4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDI5Zjg5MDItMWEwNi00NWE4LWE5 OTgtNzJlNDZhYWFlOGZjLzAvRTVEQTIxREI3NkNFOTFENkVGNzI0ODJGRkRGRTAy MTY5QTZDQzgwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESTffk2ZYri7IuyDDlZsuLSupJRMUbfF6Q3 11UZbz8NNpvcwsovBJS+qznMJk1a7DnU90tgpBRPJlmxPkHhYt9f73JAPiruLOwf 6qxJCD6778fpulisqqZNFy6EKQAc0Y4w4h87yJ1QWrbZx08pNxnUNEO637ed1xFx rQIgmxofKcx4s1AyORMA3v0jwSQe0UuTxrNakxuc5wiyo7JQoha3Wg8kVCf8ciXB ADhh7mcuN+1VK3zD6GucNZhib6l1hJuKlgEEx4EBBtriH3CHyqm3Bp7cNuQvd2ti 2GQV7baaVUu/aL7OA0RZZMksHTMvw+uIaopUlTf9FVVeLzMFJTg= -----END CERTIFICATE-----Generated at Thu Sep 3 20:06:43 2026 by rpki-client