$ rpki-client -vvvf rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft File: E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft (raw, json) Hash identifier: KwkiA1JaElkZpVdUubE5ajBFtXD8DK/Vvy2fHmoIm/o= Subject key identifier: 29:04:BA:C4:A6:44:41:67:7E:5C:F5:00:05:B4:38:21:D4:AC:99:3E Authority key identifier: E3:0A:78:29:4D:1A:6B:6A:63:D2:7E:37:DD:6F:C6:E7:B8:0F:9E:D2 Certificate issuer: /CN=E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2 Certificate serial: 488EF5B95223E2CDE2BB918EC3A855B8AEED5CA3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft Manifest number: A8 Signing time: Thu 03 Sep 2026 04:58:54 +0000 Manifest this update: Thu 03 Sep 2026 04:53:54 +0000 Manifest next update: Fri 04 Sep 2026 07:40:54 +0000 Files and hashes: 1: 3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa (hash: SLypnwrf3BxVH5EVMKZIAtA3FLjbxPQy2OlEBbQP8b8=) 2: 3130332e3137302e3130302e302f32342d3234203d3e20313432333634.roa (hash: G9l0N/5Yff3x6/dE83tqKmpystb7dUXqvchJKY01Vfc=) 3: E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.crl (hash: 73UIZyHxZX5Ht4JDMRd+P33pg8eS29o0Mm1aGxaGYA0=) 4: 3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa (hash: OU9KpCVaFyFqRPmbCa6ZHBE8msf8iFpD0/BG/bOi1fc=) 5: 323430373a633663303a3a2f33322d3438203d3e20313432333634.roa (hash: PIAfDzknn9MyXCe2w271kJi6m07dYGdxpQ/h99WENdo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.crl rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:8e:f5:b9:52:23:e2:cd:e2:bb:91:8e:c3:a8:55:b8:ae:ed:5c:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2 Validity Not Before: Sep 3 04:53:54 2026 GMT Not After : Sep 4 07:40:54 2026 GMT Subject: CN=2904BAC4A64441677E5CF50005B43821D4AC993E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f4:ed:fc:ab:36:2b:a3:1b:22:48:a5:91:52: b3:d6:07:eb:59:3a:93:c4:c4:93:ba:1a:af:95:75: 00:2f:53:34:8c:ac:84:09:d5:49:59:50:99:9a:e0: 58:62:20:e6:a6:51:97:bc:0f:78:31:a6:f7:c9:21: ec:25:a7:a5:85:60:b8:8f:c0:8e:0a:de:bc:b3:90: ac:13:25:15:e0:a9:53:28:3e:ee:93:b3:31:da:93: c3:08:c9:af:48:b9:c0:f8:d8:2b:cd:48:7c:51:03: 09:99:9d:b6:39:85:1b:9c:30:4f:29:f8:35:bc:1b: 50:6e:c7:99:ec:93:22:e5:32:1c:4d:3f:e7:17:40: 42:bc:d1:94:ab:fb:36:03:cf:7e:eb:54:66:c6:d7: 49:92:c0:b2:bd:49:de:db:eb:12:8f:33:9a:a5:93: 26:a8:f3:ca:99:2d:eb:db:55:e1:dd:73:00:e2:64: 25:54:55:ad:50:a9:3b:ca:ad:f8:1c:d5:2d:df:23: 1d:4a:81:96:e4:6d:78:b7:44:e5:29:bc:32:12:9c: 93:33:32:05:7e:9c:cc:2e:0f:a5:7b:ee:0f:da:b3: fb:51:14:ea:90:7d:bc:05:17:b1:b2:3d:91:b7:e8: 27:c3:ca:d5:0a:d8:35:65:60:0d:42:d1:cf:7b:f8: 96:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:04:BA:C4:A6:44:41:67:7E:5C:F5:00:05:B4:38:21:D4:AC:99:3E X509v3 Authority Key Identifier: keyid:E3:0A:78:29:4D:1A:6B:6A:63:D2:7E:37:DD:6F:C6:E7:B8:0F:9E:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:40:0c:4b:a1:26:be:0c:6b:65:8b:a6:3e:ab:cd:e8:e3:ff: a9:d3:b4:3f:62:3e:6e:2a:fd:84:62:b9:fa:a2:0b:94:9e:20: f7:34:dd:15:ea:91:9d:60:69:e8:6c:24:ca:23:79:3a:d9:69: 31:44:bc:4b:4b:44:0e:f3:d3:49:c2:f3:50:28:dd:6f:86:13: 9b:18:1a:c4:f8:43:b8:2e:f7:0b:9b:82:2d:d2:56:b1:82:b6: ae:cb:36:80:a0:b7:ce:72:04:d1:7f:26:ef:f6:fc:05:1b:e9: 46:bd:02:85:d0:fa:26:57:2d:25:42:8f:71:ab:cc:22:55:85: a1:dd:78:14:b4:a9:10:22:fd:3c:69:cc:b3:fc:e8:0b:d2:4b: 87:ff:c6:4c:78:67:6f:0f:82:31:07:c4:63:cb:e2:b7:6b:3d: a0:df:20:7c:17:b1:c0:3c:72:77:8e:5e:5f:e6:7c:da:00:36: 04:17:e3:ec:78:dd:cc:af:b2:59:ee:e4:21:4a:5c:6e:84:8e: ff:d7:fc:fd:91:76:38:72:2e:55:6e:62:b6:9e:57:e4:cf:00: de:35:93:4a:a0:62:2b:a5:30:0e:25:eb:03:21:f4:48:ce:65: 84:cc:dd:f3:cd:7e:8e:75:8a:85:3e:bc:8f:ce:c8:cd:ea:12: 3b:f8:ad:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSI71uVIj4s3iu5GOw6hVuK7tXKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMwQTc4Mjk0RDFBNkI2QTYzRDI3RTM3REQ2RkM2RTdC ODBGOUVEMjAeFw0yNjA5MDMwNDUzNTRaFw0yNjA5MDQwNzQwNTRaMDMxMTAvBgNV BAMTKDI5MDRCQUM0QTY0NDQxNjc3RTVDRjUwMDA1QjQzODIxRDRBQzk5M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH9O38qzYroxsiSKWRUrPWB+tZ OpPExJO6Gq+VdQAvUzSMrIQJ1UlZUJma4FhiIOamUZe8D3gxpvfJIewlp6WFYLiP wI4K3ryzkKwTJRXgqVMoPu6TszHak8MIya9IucD42CvNSHxRAwmZnbY5hRucME8p +DW8G1Bux5nskyLlMhxNP+cXQEK80ZSr+zYDz37rVGbG10mSwLK9Sd7b6xKPM5ql kyao88qZLevbVeHdcwDiZCVUVa1QqTvKrfgc1S3fIx1KgZbkbXi3ROUpvDISnJMz MgV+nMwuD6V77g/as/tRFOqQfbwFF7GyPZG36CfDytUK2DVlYA1C0c97+JanAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKQS6xKZEQWd+XPUABbQ4IdSsmT4wHwYDVR0j BBgwFoAU4wp4KU0aa2pj0n433W/G57gPntIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTYxY2Y3NzctOGFkZi00ZWYxLThkNmYtOTg2MmM1NTYyMGVhLzAvRTMwQTc4Mjk0 RDFBNkI2QTYzRDI3RTM3REQ2RkM2RTdCODBGOUVEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMzBBNzgyOTREMUE2QjZBNjNEMjdFMzdERDZGQzZFN0I4MEY5 RUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTYxY2Y3NzctOGFkZi00ZWYxLThk NmYtOTg2MmM1NTYyMGVhLzAvRTMwQTc4Mjk0RDFBNkI2QTYzRDI3RTM3REQ2RkM2 RTdCODBGOUVEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtADEuhJr4Ma2WLpj6rzejj/6nTtD9iPm4q /YRiufqiC5SeIPc03RXqkZ1gaehsJMojeTrZaTFEvEtLRA7z00nC81Ao3W+GE5sY GsT4Q7gu9wubgi3SVrGCtq7LNoCgt85yBNF/Ju/2/AUb6Ua9AoXQ+iZXLSVCj3Gr zCJVhaHdeBS0qRAi/TxpzLP86AvSS4f/xkx4Z28PgjEHxGPL4rdrPaDfIHwXscA8 cneOXl/mfNoANgQX4+x43cyvslnu5CFKXG6Ejv/X/P2RdjhyLlVuYraeV+TPAN41 k0qgYiulMA4l6wMh9EjOZYTM3fPNfo51ioU+vI/OyM3qEjv4rYk= -----END CERTIFICATE-----Generated at Thu Sep 3 10:15:03 2026 by rpki-client