$ rpki-client -vvvf rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft File: E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft (raw, json) Hash identifier: fA4J3swXkqxCSwGeb1GJM+FGWQZ20IMWqVKh24UrNN4= Subject key identifier: A2:6B:F1:A5:78:F3:F4:08:F3:E6:3E:2B:32:7F:43:5C:B7:89:F2:C8 Authority key identifier: E3:0A:78:29:4D:1A:6B:6A:63:D2:7E:37:DD:6F:C6:E7:B8:0F:9E:D2 Certificate issuer: /CN=E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2 Certificate serial: 3409E276E569C721AEC907CFA0F394ED212669A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft Manifest number: A7 Signing time: Wed 02 Sep 2026 10:41:39 +0000 Manifest this update: Wed 02 Sep 2026 10:36:39 +0000 Manifest next update: Thu 03 Sep 2026 12:54:39 +0000 Files and hashes: 1: 3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa (hash: OU9KpCVaFyFqRPmbCa6ZHBE8msf8iFpD0/BG/bOi1fc=) 2: 323430373a633663303a3a2f33322d3438203d3e20313432333634.roa (hash: PIAfDzknn9MyXCe2w271kJi6m07dYGdxpQ/h99WENdo=) 3: E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.crl (hash: ezwdOhxxu0AHjv+OklAHV9IdioXkGOKIwo5fuhG+9cw=) 4: 3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa (hash: SLypnwrf3BxVH5EVMKZIAtA3FLjbxPQy2OlEBbQP8b8=) 5: 3130332e3137302e3130302e302f32342d3234203d3e20313432333634.roa (hash: G9l0N/5Yff3x6/dE83tqKmpystb7dUXqvchJKY01Vfc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.crl rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 12:54:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:09:e2:76:e5:69:c7:21:ae:c9:07:cf:a0:f3:94:ed:21:26:69:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2 Validity Not Before: Sep 2 10:36:39 2026 GMT Not After : Sep 3 12:54:39 2026 GMT Subject: CN=A26BF1A578F3F408F3E63E2B327F435CB789F2C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b3:f5:48:95:c8:8c:5b:d1:e6:4b:4e:ea:ce: 54:65:15:9b:2b:02:fd:4c:a0:23:50:e0:33:d6:63: d9:3f:e3:e7:7d:50:06:77:bb:dd:f3:74:21:59:e7: 49:7e:ed:6a:a0:f5:30:da:79:c5:af:9b:e1:c2:3f: 48:8e:6f:c8:a6:88:8a:97:7c:32:ad:c0:2b:be:71: da:12:ce:99:a2:31:f4:e6:35:8f:44:0b:6e:b5:51: 4e:0c:9d:4f:70:55:03:57:99:45:55:60:9b:ba:fb: 26:6c:f4:5a:be:d6:62:6b:9a:86:84:b9:95:5a:cb: 39:ec:24:8c:c0:1a:40:28:25:c9:00:aa:fd:fd:d2: 0d:1c:ef:10:66:c0:c7:1a:25:db:8c:f4:b4:80:e3: e7:b5:b2:f1:db:98:b7:ce:e1:31:c8:16:33:0c:ab: 75:81:a2:f2:a9:df:14:cc:69:25:e6:98:be:d6:5f: b7:da:0d:86:c8:c2:01:6a:1c:66:c9:a4:6f:6c:db: c9:37:49:e9:4f:59:aa:b2:e0:99:2c:70:4c:5a:b0: 93:0e:bc:dd:7d:e4:04:eb:bd:4e:67:16:59:7a:20: 40:7d:0e:78:54:42:7c:ab:bf:ae:b4:de:81:33:1b: 29:c5:fc:3a:e6:ae:d2:04:3b:60:a4:c5:4c:c0:b9: d1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6B:F1:A5:78:F3:F4:08:F3:E6:3E:2B:32:7F:43:5C:B7:89:F2:C8 X509v3 Authority Key Identifier: keyid:E3:0A:78:29:4D:1A:6B:6A:63:D2:7E:37:DD:6F:C6:E7:B8:0F:9E:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:de:66:e9:05:d3:0c:7a:5b:ef:4e:b6:0f:67:4d:c4:35:c6: 90:ac:c8:7f:c4:8c:8a:bc:1e:3b:70:93:77:20:b5:37:7a:e5: ae:2a:39:ef:67:9f:c2:49:df:2e:0c:7f:9e:1a:e2:f3:52:07: 07:38:0f:e4:17:6f:4e:c0:7e:d0:95:df:1b:96:ee:a9:22:10: 5a:43:3a:ef:f0:a1:15:bc:ee:7c:70:8c:a2:2c:c2:4b:73:b4: da:b3:20:b7:b5:63:1d:20:9a:75:c9:c1:1d:3d:86:fb:10:2f: d4:51:7c:fc:23:f0:93:c0:cd:c3:0d:1e:ad:cc:df:63:f1:0e: 22:f3:af:dd:97:99:15:bb:da:45:dc:bc:e5:2d:f0:c0:41:f8: 4a:f5:19:99:11:69:09:a8:2b:1b:cf:96:f6:38:20:e4:44:a6: dd:f5:bd:76:59:dc:eb:09:1d:b0:0e:c6:d3:4f:74:a9:c6:ba: 93:bd:09:bc:cf:97:3f:89:de:0e:9d:36:4d:00:9c:b4:26:8d: a4:36:c2:23:d3:0d:c7:d4:29:05:17:ba:bf:f3:51:55:a9:fa: 2d:00:3f:fc:04:0b:bb:1e:57:9d:6a:d0:5f:6b:78:e4:89:95: 46:f0:9a:84:c0:2b:60:fe:5d:65:f4:77:84:85:dc:3c:3b:80: f9:ca:a5:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNAniduVpxyGuyQfPoPOU7SEmaaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMwQTc4Mjk0RDFBNkI2QTYzRDI3RTM3REQ2RkM2RTdC ODBGOUVEMjAeFw0yNjA5MDIxMDM2MzlaFw0yNjA5MDMxMjU0MzlaMDMxMTAvBgNV BAMTKEEyNkJGMUE1NzhGM0Y0MDhGM0U2M0UyQjMyN0Y0MzVDQjc4OUYyQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCms/VIlciMW9HmS07qzlRlFZsr Av1MoCNQ4DPWY9k/4+d9UAZ3u93zdCFZ50l+7Wqg9TDaecWvm+HCP0iOb8imiIqX fDKtwCu+cdoSzpmiMfTmNY9EC261UU4MnU9wVQNXmUVVYJu6+yZs9Fq+1mJrmoaE uZVayznsJIzAGkAoJckAqv390g0c7xBmwMcaJduM9LSA4+e1svHbmLfO4THIFjMM q3WBovKp3xTMaSXmmL7WX7faDYbIwgFqHGbJpG9s28k3SelPWaqy4JkscExasJMO vN195ATrvU5nFll6IEB9DnhUQnyrv6603oEzGynF/DrmrtIEO2CkxUzAudGFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUomvxpXjz9Ajz5j4rMn9DXLeJ8sgwHwYDVR0j BBgwFoAU4wp4KU0aa2pj0n433W/G57gPntIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTYxY2Y3NzctOGFkZi00ZWYxLThkNmYtOTg2MmM1NTYyMGVhLzAvRTMwQTc4Mjk0 RDFBNkI2QTYzRDI3RTM3REQ2RkM2RTdCODBGOUVEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMzBBNzgyOTREMUE2QjZBNjNEMjdFMzdERDZGQzZFN0I4MEY5 RUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTYxY2Y3NzctOGFkZi00ZWYxLThk NmYtOTg2MmM1NTYyMGVhLzAvRTMwQTc4Mjk0RDFBNkI2QTYzRDI3RTM3REQ2RkM2 RTdCODBGOUVEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOLeZukF0wx6W+9Otg9nTcQ1xpCsyH/EjIq8 Hjtwk3cgtTd65a4qOe9nn8JJ3y4Mf54a4vNSBwc4D+QXb07AftCV3xuW7qkiEFpD Ou/woRW87nxwjKIswktztNqzILe1Yx0gmnXJwR09hvsQL9RRfPwj8JPAzcMNHq3M 32PxDiLzr92XmRW72kXcvOUt8MBB+Er1GZkRaQmoKxvPlvY4IOREpt31vXZZ3OsJ HbAOxtNPdKnGupO9CbzPlz+J3g6dNk0AnLQmjaQ2wiPTDcfUKQUXur/zUVWp+i0A P/wEC7seV51q0F9reOSJlUbwmoTAK2D+XWX0d4SF3Dw7gPnKpUs= -----END CERTIFICATE-----Generated at Thu Sep 3 05:58:56 2026 by rpki-client