$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft File: 0987C7F8639A5EC739826F640C8E04FD53A0800E.mft (raw, json) Hash identifier: 18x2nng44U+CVydlptBA+rxbdQ7hqfG0MKBtio08jXA= Subject key identifier: C6:DD:C0:5E:EC:FE:0D:2B:E8:E2:DD:15:E6:84:E2:88:D9:DA:5D:59 Authority key identifier: 09:87:C7:F8:63:9A:5E:C7:39:82:6F:64:0C:8E:04:FD:53:A0:80:0E Certificate issuer: /CN=0987C7F8639A5EC739826F640C8E04FD53A0800E Certificate serial: 3A869B5676BCDF70E021BFED0186E8358AC0FE27 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft Manifest number: A6 Signing time: Wed 02 Sep 2026 21:44:36 +0000 Manifest this update: Wed 02 Sep 2026 21:39:36 +0000 Manifest next update: Thu 03 Sep 2026 22:14:36 +0000 Files and hashes: 1: 3130332e3137352e34372e302f32342d3234203d3e20313437313039.roa (hash: s3V5AB5+bA2d5/svBoGY/0k9sggx8nw5uup6zerO5YY=) 2: 3130332e3137352e34362e302f32342d3234203d3e20313437313039.roa (hash: rwJybuB0Xuh51eX44OUj0FA9N+xl/VzvgF/HSTs9GfM=) 3: 0987C7F8639A5EC739826F640C8E04FD53A0800E.crl (hash: iT1o6ce5/IUfVlp57NeO34zDPyKGmp7+ewODzSzF/AE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.crl rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:86:9b:56:76:bc:df:70:e0:21:bf:ed:01:86:e8:35:8a:c0:fe:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0987C7F8639A5EC739826F640C8E04FD53A0800E Validity Not Before: Sep 2 21:39:36 2026 GMT Not After : Sep 3 22:14:36 2026 GMT Subject: CN=C6DDC05EECFE0D2BE8E2DD15E684E288D9DA5D59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:af:ab:d1:3a:2e:f3:f6:70:8a:05:2b:16:61: e0:eb:9b:87:d6:d5:e5:63:6a:74:44:a6:95:48:24: da:c7:1a:0d:56:b3:3e:fc:33:10:9b:98:91:7c:eb: a2:4c:8e:cc:20:e6:61:48:ff:c6:78:c1:83:4e:56: 8a:40:36:6c:40:f3:6a:fc:2a:b5:c1:e0:da:b0:2f: cd:37:00:ab:7e:04:56:eb:d1:36:6a:f3:2f:db:0b: ad:64:64:aa:f3:c8:86:b8:11:b0:82:f5:57:0a:99: e3:75:39:a8:e3:1c:81:92:6d:1d:1c:93:cb:e6:89: 08:72:3b:48:e8:f9:14:ba:69:e0:06:26:93:b9:56: fd:71:37:66:dc:55:bd:f6:05:6a:e9:25:21:60:82: c2:fb:ff:db:4e:e2:58:6f:d3:45:67:e5:b1:e5:90: ba:5a:d0:e6:5d:cf:42:65:16:d6:ce:14:a5:98:9e: 36:45:91:03:de:05:20:ba:46:03:4d:fe:8b:e3:04: 2b:30:01:52:eb:b7:59:09:76:84:ee:3a:47:cd:34: d1:42:81:0c:8a:8c:5c:49:33:ee:5a:c4:9a:b2:dc: f5:8a:86:c3:79:96:d2:65:e7:9d:6b:bd:e7:5c:17: e8:24:3c:f7:54:0f:ed:75:21:a0:c2:62:ea:4e:79: b4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DD:C0:5E:EC:FE:0D:2B:E8:E2:DD:15:E6:84:E2:88:D9:DA:5D:59 X509v3 Authority Key Identifier: keyid:09:87:C7:F8:63:9A:5E:C7:39:82:6F:64:0C:8E:04:FD:53:A0:80:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b5:db:b2:fb:b5:07:57:10:5b:92:85:42:af:04:37:5e:e2: ba:0c:70:89:75:5b:9f:b1:e5:5d:1f:b0:c3:7c:c1:03:8a:15: 94:39:f8:6e:a8:23:8d:08:cd:f2:b1:27:16:9b:a4:93:fb:f1: 87:be:5c:8b:21:2c:fa:fa:c5:74:0b:f3:e1:ba:1d:ad:2f:07: 77:5e:76:2f:f8:19:e0:36:7e:15:0a:47:ed:66:17:2d:98:5b: 1b:32:c0:8c:99:83:27:6d:13:de:66:a6:3e:2a:fc:46:fd:5c: 32:80:61:32:69:dd:6d:e5:ba:de:35:1e:1a:fa:9e:22:3d:20: 10:f4:36:ff:f9:7e:1b:0e:27:cd:fa:7b:89:fa:5a:64:70:27: 68:e9:b8:29:12:df:6d:86:f9:7e:68:b4:10:24:22:ab:ef:94: 9f:a1:14:b0:6c:3d:07:e6:b3:64:fd:0e:57:5d:47:6a:2a:8e: aa:12:da:e1:87:da:0c:49:39:74:b2:68:e2:58:97:76:0f:1c: 9b:dc:fb:77:28:53:8a:69:23:a0:5b:ab:ef:d1:74:c0:ce:84: 94:16:ab:de:83:79:87:bd:f5:a6:7a:6b:78:13:59:4e:7e:40: c7:b2:a2:db:38:87:98:6e:6d:12:98:6b:3c:6d:d9:ea:ad:03: d9:6f:17:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOoabVna833DgIb/tAYboNYrA/icwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4N0M3Rjg2MzlBNUVDNzM5ODI2RjY0MEM4RTA0RkQ1 M0EwODAwRTAeFw0yNjA5MDIyMTM5MzZaFw0yNjA5MDMyMjE0MzZaMDMxMTAvBgNV BAMTKEM2RERDMDVFRUNGRTBEMkJFOEUyREQxNUU2ODRFMjg4RDlEQTVENTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMr6vROi7z9nCKBSsWYeDrm4fW 1eVjanREppVIJNrHGg1Wsz78MxCbmJF866JMjswg5mFI/8Z4wYNOVopANmxA82r8 KrXB4NqwL803AKt+BFbr0TZq8y/bC61kZKrzyIa4EbCC9VcKmeN1OajjHIGSbR0c k8vmiQhyO0jo+RS6aeAGJpO5Vv1xN2bcVb32BWrpJSFggsL7/9tO4lhv00Vn5bHl kLpa0OZdz0JlFtbOFKWYnjZFkQPeBSC6RgNN/ovjBCswAVLrt1kJdoTuOkfNNNFC gQyKjFxJM+5axJqy3PWKhsN5ltJl551rvedcF+gkPPdUD+11IaDCYupOebQ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxt3AXuz+DSvo4t0V5oTiiNnaXVkwHwYDVR0j BBgwFoAUCYfH+GOaXsc5gm9kDI4E/VOggA4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDYzOGJkMjEtYmU1Ni00MmI0LTgyNzgtMDU0MDVkY2U1ZTg4LzAvMDk4N0M3Rjg2 MzlBNUVDNzM5ODI2RjY0MEM4RTA0RkQ1M0EwODAwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOTg3QzdGODYzOUE1RUM3Mzk4MjZGNjQwQzhFMDRGRDUzQTA4 MDBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDYzOGJkMjEtYmU1Ni00MmI0LTgy NzgtMDU0MDVkY2U1ZTg4LzAvMDk4N0M3Rjg2MzlBNUVDNzM5ODI2RjY0MEM4RTA0 RkQ1M0EwODAwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2127L7tQdXEFuShUKvBDde4roMcIl1W5+x 5V0fsMN8wQOKFZQ5+G6oI40IzfKxJxabpJP78Ye+XIshLPr6xXQL8+G6Ha0vB3de di/4GeA2fhUKR+1mFy2YWxsywIyZgydtE95mpj4q/Eb9XDKAYTJp3W3lut41Hhr6 niI9IBD0Nv/5fhsOJ836e4n6WmRwJ2jpuCkS322G+X5otBAkIqvvlJ+hFLBsPQfm s2T9DlddR2oqjqoS2uGH2gxJOXSyaOJYl3YPHJvc+3coU4ppI6Bbq+/RdMDOhJQW q96DeYe99aZ6a3gTWU5+QMeyots4h5hubRKYazxt2eqtA9lvF98= -----END CERTIFICATE-----Generated at Thu Sep 3 09:27:46 2026 by rpki-client