$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft File: A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft (raw, json) Hash identifier: lDr2bg7LTfcXihrh2OLCoS82C+ZYbxOAlOWoeIVSuAM= Subject key identifier: 7C:27:C6:90:F9:0B:1D:E0:C7:9A:50:EF:0A:2A:36:AA:80:5F:F0:C8 Authority key identifier: A7:88:9B:33:86:7E:D2:BD:F1:5C:39:F7:22:D2:0B:AF:76:B4:20:EE Certificate issuer: /CN=A7889B33867ED2BDF15C39F722D20BAF76B420EE Certificate serial: 13AD2CB3F451F2D1C50932A4C682A350E53610BF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7889B33867ED2BDF15C39F722D20BAF76B420EE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 01:24:45 +0000 Manifest this update: Thu 03 Sep 2026 01:19:45 +0000 Manifest next update: Fri 04 Sep 2026 03:35:45 +0000 Files and hashes: 1: A7889B33867ED2BDF15C39F722D20BAF76B420EE.crl (hash: qEIgFsB8C+3YTb+958xif2ewaPnZxphlhNYYfpPQBsk=) 2: 3130332e3230322e3232372e302f32342d3234203d3e20313334363335.roa (hash: O/6Vse93iZ++RJMaxSdbmCU7yuXgswidaAAY3SDWRSc=) 3: 3130332e38342e3131372e302f32342d3234203d3e20313334363335.roa (hash: dkiEurQUbycXFg21P8maECsCJ68qwlxLVBuvs8trkqU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.crl rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7889B33867ED2BDF15C39F722D20BAF76B420EE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:ad:2c:b3:f4:51:f2:d1:c5:09:32:a4:c6:82:a3:50:e5:36:10:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7889B33867ED2BDF15C39F722D20BAF76B420EE Validity Not Before: Sep 3 01:19:45 2026 GMT Not After : Sep 4 03:35:45 2026 GMT Subject: CN=7C27C690F90B1DE0C79A50EF0A2A36AA805FF0C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5c:74:51:08:55:1f:8d:32:2b:d6:f4:2f:e1: ae:36:70:09:d2:f8:5a:4d:d8:c9:95:ac:14:47:0b: 2e:65:52:a7:67:e1:4d:5d:33:63:8d:48:a1:3f:37: 68:17:4c:f2:69:38:1e:1d:f1:1e:c2:dd:bb:a2:76: 77:4e:e1:8d:17:b8:bb:2c:18:ab:f0:a8:8e:4d:7b: 92:9e:48:7d:c1:dd:61:20:6a:bd:26:10:89:f4:29: 0c:90:58:a6:7f:25:30:29:d9:2d:3e:65:4f:b3:2c: 57:2e:3c:08:d7:c8:1c:74:d1:e7:1c:00:03:3f:fe: 23:74:df:00:ca:8b:a6:d3:a8:66:e6:74:bc:af:84: 21:c9:e8:2d:6c:86:0e:c6:5d:0d:e3:81:1e:30:02: f3:c0:ba:a4:75:f5:51:5b:c3:34:9c:84:bf:06:f7: 41:df:e1:62:9f:a2:61:19:a4:5c:a5:ad:68:5f:91: 5f:82:aa:e2:87:db:24:a3:76:73:e7:69:58:86:83: d3:9b:65:a6:48:c1:fd:16:de:b9:c1:ae:4b:1f:42: 23:76:d0:dd:9e:b6:fc:af:16:b4:4b:3e:30:15:32: e7:69:d2:4e:c6:a9:5b:8c:bd:60:56:1d:86:0b:f2: 91:5b:57:8c:37:e8:56:82:82:52:bb:37:91:e0:cf: b0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:27:C6:90:F9:0B:1D:E0:C7:9A:50:EF:0A:2A:36:AA:80:5F:F0:C8 X509v3 Authority Key Identifier: keyid:A7:88:9B:33:86:7E:D2:BD:F1:5C:39:F7:22:D2:0B:AF:76:B4:20:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7889B33867ED2BDF15C39F722D20BAF76B420EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:29:9d:1a:a5:69:69:b7:c7:cc:03:15:74:9f:aa:f1:d3:99: 66:f7:6c:6d:39:78:26:c4:29:96:f3:40:c7:3c:20:6f:c5:65: 47:62:ab:c2:49:09:30:ee:f5:59:ca:af:03:e3:1d:ce:1c:b0: b3:94:26:c2:d6:44:33:4e:67:62:0b:85:ef:8b:4b:cc:bc:47: 66:b2:51:3d:90:1b:81:b2:87:8c:34:9a:53:eb:00:22:9a:b0: d4:64:95:87:4a:8d:53:ee:29:bb:d1:96:10:18:4e:8e:b0:f1: fc:4d:a7:b9:09:4a:c6:8f:c4:72:e9:fd:98:47:7e:2c:0c:73: 10:04:8b:54:97:cc:e1:47:a4:e8:1e:4f:f5:e7:6d:49:fb:30: f0:fc:60:fa:7f:ad:82:68:71:cf:90:2a:f0:14:ea:41:73:47: b5:d7:97:57:83:93:ec:ba:5a:46:fb:ad:98:62:da:24:13:a9: eb:9e:02:a8:31:19:36:9d:70:d5:87:72:3f:17:20:73:3f:40: 6c:fb:e4:54:72:de:cd:1e:48:56:30:03:82:23:c0:cb:45:a0: e8:e5:66:d3:fa:75:d9:0b:d6:2e:d5:e7:a5:76:81:ca:0a:ff: 2c:6f:83:b7:59:83:14:c0:32:b1:76:21:ed:23:e5:22:4f:79: 7a:8f:90:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE60ss/RR8tHFCTKkxoKjUOU2EL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4ODlCMzM4NjdFRDJCREYxNUMzOUY3MjJEMjBCQUY3 NkI0MjBFRTAeFw0yNjA5MDMwMTE5NDVaFw0yNjA5MDQwMzM1NDVaMDMxMTAvBgNV BAMTKDdDMjdDNjkwRjkwQjFERTBDNzlBNTBFRjBBMkEzNkFBODA1RkYwQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoXHRRCFUfjTIr1vQv4a42cAnS +FpN2MmVrBRHCy5lUqdn4U1dM2ONSKE/N2gXTPJpOB4d8R7C3buidndO4Y0XuLss GKvwqI5Ne5KeSH3B3WEgar0mEIn0KQyQWKZ/JTAp2S0+ZU+zLFcuPAjXyBx00ecc AAM//iN03wDKi6bTqGbmdLyvhCHJ6C1shg7GXQ3jgR4wAvPAuqR19VFbwzSchL8G 90Hf4WKfomEZpFylrWhfkV+CquKH2ySjdnPnaViGg9ObZaZIwf0W3rnBrksfQiN2 0N2etvyvFrRLPjAVMudp0k7GqVuMvWBWHYYL8pFbV4w36FaCglK7N5Hgz7C1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfCfGkPkLHeDHmlDvCio2qoBf8MgwHwYDVR0j BBgwFoAUp4ibM4Z+0r3xXDn3ItILr3a0IO4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjEzMmE3NDAtYmQ3ZC00NmI4LWIxMGEtYTdhNzAzZTM1MGYyLzAvQTc4ODlCMzM4 NjdFRDJCREYxNUMzOUY3MjJEMjBCQUY3NkI0MjBFRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzg4OUIzMzg2N0VEMkJERjE1QzM5RjcyMkQyMEJBRjc2QjQy MEVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjEzMmE3NDAtYmQ3ZC00NmI4LWIx MGEtYTdhNzAzZTM1MGYyLzAvQTc4ODlCMzM4NjdFRDJCREYxNUMzOUY3MjJEMjBC QUY3NkI0MjBFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHApnRqlaWm3x8wDFXSfqvHTmWb3bG05eCbE KZbzQMc8IG/FZUdiq8JJCTDu9VnKrwPjHc4csLOUJsLWRDNOZ2ILhe+LS8y8R2ay UT2QG4Gyh4w0mlPrACKasNRklYdKjVPuKbvRlhAYTo6w8fxNp7kJSsaPxHLp/ZhH fiwMcxAEi1SXzOFHpOgeT/XnbUn7MPD8YPp/rYJocc+QKvAU6kFzR7XXl1eDk+y6 Wkb7rZhi2iQTqeueAqgxGTadcNWHcj8XIHM/QGz75FRy3s0eSFYwA4IjwMtFoOjl ZtP6ddkL1i7V56V2gcoK/yxvg7dZgxTAMrF2Ie0j5SJPeXqPkE8= -----END CERTIFICATE-----Generated at Thu Sep 3 05:56:32 2026 by rpki-client