$ rpki-client -vvvf rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft File: 853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft (raw, json) Hash identifier: Pp34BqPW9to4+kA7RfVQ7KoLGQ2nzjgtBbqUcyIvP3Y= Subject key identifier: 16:4F:6B:CA:E7:05:5D:90:7F:38:22:99:56:CB:53:6F:FB:96:94:A8 Authority key identifier: 85:3E:DD:7A:B3:EF:9A:13:A0:77:9F:26:12:78:6F:6D:2D:7C:08:BE Certificate issuer: /CN=853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE Certificate serial: 0A8FB23F327B3F6EF58F6F223EF62E262B79E6F2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 07:21:38 +0000 Manifest this update: Thu 03 Sep 2026 07:16:38 +0000 Manifest next update: Fri 04 Sep 2026 10:26:38 +0000 Files and hashes: 1: 3130332e3132342e3139382e302f32342d3234203d3e20313338303936.roa (hash: 07pLPD2WlKL+vB7ypQ2CjBacLrYgbCjaYdQZk1Lj438=) 2: 3130332e3132342e3139392e302f32342d3234203d3e20313338303936.roa (hash: fxSYsouQPJ65g7CwW1EnalKBkWjJiK50KJBFUAXhZzA=) 3: 3130332e3132342e3139362e302f32342d3234203d3e20313338303936.roa (hash: fgQOQ1ZPs6+mRIJ9mhffQJjtFV+ZjnGnsOoWLbAN6Mo=) 4: 3130332e3132342e3139372e302f32342d3234203d3e20313338303936.roa (hash: nJl837iJi/5SwBSDbdYVongO7p9uzBZcmTZb0XAZTJk=) 5: 853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.crl (hash: aSdGx1ArdblH+jKHSklFLyNF6NRgOKLxQ7N4+1cbmb0=) 6: 323430333a653434303a3a2f33322d3332203d3e20313338303936.roa (hash: VwsatNn5AXuJ/LUW+n8JXwWEwiaViEVC741lbFCSMBE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.crl rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 10:26:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:8f:b2:3f:32:7b:3f:6e:f5:8f:6f:22:3e:f6:2e:26:2b:79:e6:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE Validity Not Before: Sep 3 07:16:38 2026 GMT Not After : Sep 4 10:26:38 2026 GMT Subject: CN=164F6BCAE7055D907F38229956CB536FFB9694A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:10:ea:99:2b:c3:6f:78:4e:6a:9b:1b:8e:ec: f9:b1:3e:1a:6f:25:9d:71:db:a0:7a:35:5f:4b:34: 07:98:a5:c7:4d:ca:e1:43:ed:a2:d8:4e:aa:25:97: 7f:51:a5:b2:92:5f:74:8d:b3:79:09:62:35:26:0f: 8c:86:c0:30:9e:be:6d:f8:2b:3f:a0:b1:54:d2:c2: 34:4f:1d:35:06:af:ce:7e:1d:5c:df:9c:53:39:7c: 44:99:5f:52:01:6c:9b:27:bf:21:d6:49:8a:78:00: 77:33:73:c9:49:ba:b2:99:ef:74:8c:a4:6a:41:1b: 8d:c2:19:75:ab:6f:0f:29:3b:d6:c3:bc:74:4e:0b: b5:cf:bf:1f:0d:8f:5c:4a:02:f4:36:c8:c5:fa:fb: 7f:8d:e5:1e:7b:e5:9d:9d:5c:02:e5:12:01:ee:3a: 82:08:75:02:82:68:f4:9c:e1:c8:83:f5:96:34:f7: 77:dd:cd:47:00:ef:4b:8f:16:04:92:c4:13:c7:c3: 65:f8:f2:f1:31:f6:60:bf:c6:a4:08:75:f1:a6:52: 37:cd:f9:33:2b:fc:f1:61:e0:5a:03:17:b7:7a:53: 5c:90:e2:53:f4:0e:ce:9f:5c:3a:c5:81:30:5e:0c: d5:6d:df:8a:4d:d3:7f:0e:7a:e7:85:8e:16:19:bb: 7a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:4F:6B:CA:E7:05:5D:90:7F:38:22:99:56:CB:53:6F:FB:96:94:A8 X509v3 Authority Key Identifier: keyid:85:3E:DD:7A:B3:EF:9A:13:A0:77:9F:26:12:78:6F:6D:2D:7C:08:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/853EDD7AB3EF9A13A0779F2612786F6D2D7C08BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:aa:c6:0f:42:de:72:69:92:e7:88:23:07:4b:e8:66:c5:06: 66:68:bf:21:00:4b:ac:20:69:a6:1d:64:21:7b:e0:23:cc:a5: 36:0b:90:b3:09:a3:d3:06:80:a6:c7:c6:8e:d4:b1:de:35:32: 56:f0:7f:ef:81:ba:dc:37:a0:f5:59:7d:02:68:f4:bb:c6:72: 36:a8:a7:05:24:b7:69:ef:3d:c6:91:8d:81:7b:0b:00:43:66: 99:8e:63:e6:b6:92:3a:06:32:9a:10:a6:e3:dd:6f:3b:66:6d: ab:a8:14:9a:64:b0:15:31:68:e4:31:25:82:4d:13:38:7f:73: a3:c6:7a:46:ff:88:48:9a:b5:55:8d:f6:14:78:dd:25:c6:1a: 62:e4:f2:4e:50:99:18:d9:cb:f9:29:95:70:7c:21:9d:a0:38: 4d:62:34:e8:a1:1f:f8:77:ad:6c:cf:22:fd:c7:7a:a2:16:2a: b4:47:39:45:2a:de:d1:7c:24:96:dd:a5:3b:5c:4d:e2:a2:a4: 44:c0:37:ae:08:85:e4:87:dc:84:2e:f9:79:61:03:50:22:65: 3b:7f:b8:19:27:1c:25:3f:1d:19:e1:ae:0b:3d:19:b9:51:2f: 62:14:e1:18:52:c7:e6:d8:cd:4b:e2:85:58:4b:04:de:d5:ed: b3:fa:34:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCo+yPzJ7P271j28iPvYuJit55vIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUzRUREN0FCM0VGOUExM0EwNzc5RjI2MTI3ODZGNkQy RDdDMDhCRTAeFw0yNjA5MDMwNzE2MzhaFw0yNjA5MDQxMDI2MzhaMDMxMTAvBgNV BAMTKDE2NEY2QkNBRTcwNTVEOTA3RjM4MjI5OTU2Q0I1MzZGRkI5Njk0QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSEOqZK8NveE5qmxuO7PmxPhpv JZ1x26B6NV9LNAeYpcdNyuFD7aLYTqoll39RpbKSX3SNs3kJYjUmD4yGwDCevm34 Kz+gsVTSwjRPHTUGr85+HVzfnFM5fESZX1IBbJsnvyHWSYp4AHczc8lJurKZ73SM pGpBG43CGXWrbw8pO9bDvHROC7XPvx8Nj1xKAvQ2yMX6+3+N5R575Z2dXALlEgHu OoIIdQKCaPSc4ciD9ZY093fdzUcA70uPFgSSxBPHw2X48vEx9mC/xqQIdfGmUjfN +TMr/PFh4FoDF7d6U1yQ4lP0Ds6fXDrFgTBeDNVt34pN038OeueFjhYZu3qJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFk9ryucFXZB/OCKZVstTb/uWlKgwHwYDVR0j BBgwFoAUhT7derPvmhOgd58mEnhvbS18CL4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDVkZmY5YjMtOTA0MS00ZGQ2LWI3YWItMDIwNjBkNjVkMDlhLzAvODUzRUREN0FC M0VGOUExM0EwNzc5RjI2MTI3ODZGNkQyRDdDMDhCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTNFREQ3QUIzRUY5QTEzQTA3NzlGMjYxMjc4NkY2RDJEN0Mw OEJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDVkZmY5YjMtOTA0MS00ZGQ2LWI3 YWItMDIwNjBkNjVkMDlhLzAvODUzRUREN0FCM0VGOUExM0EwNzc5RjI2MTI3ODZG NkQyRDdDMDhCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALqqxg9C3nJpkueIIwdL6GbFBmZovyEAS6wg aaYdZCF74CPMpTYLkLMJo9MGgKbHxo7Usd41Mlbwf++Butw3oPVZfQJo9LvGcjao pwUkt2nvPcaRjYF7CwBDZpmOY+a2kjoGMpoQpuPdbztmbauoFJpksBUxaOQxJYJN Ezh/c6PGekb/iEiatVWN9hR43SXGGmLk8k5QmRjZy/kplXB8IZ2gOE1iNOihH/h3 rWzPIv3HeqIWKrRHOUUq3tF8JJbdpTtcTeKipETAN64IheSH3IQu+XlhA1AiZTt/ uBknHCU/HRnhrgs9GblRL2IU4RhSx+bYzUvihVhLBN7V7bP6NI4= -----END CERTIFICATE-----Generated at Thu Sep 3 19:23:19 2026 by rpki-client