$ rpki-client -vvvf rpki-rsync.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/03B040ED202D246E438A73DEA26426FBECEBB10D.mft File: 03B040ED202D246E438A73DEA26426FBECEBB10D.mft (raw, json) Hash identifier: 3LOjwIT4N+PQ7TZaKcGouBf1PYXgy+EYu2BrC/MYP6I= Subject key identifier: 8F:06:CF:D9:EF:21:A3:B2:55:DF:49:D4:A9:80:A4:04:F8:EA:AD:A0 Authority key identifier: 03:B0:40:ED:20:2D:24:6E:43:8A:73:DE:A2:64:26:FB:EC:EB:B1:0D Certificate issuer: /CN=03B040ED202D246E438A73DEA26426FBECEBB10D Certificate serial: 117C0CA3AF550878FF7CF8020361242CE6432510 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03B040ED202D246E438A73DEA26426FBECEBB10D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/03B040ED202D246E438A73DEA26426FBECEBB10D.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 11:21:03 +0000 Manifest this update: Thu 03 Sep 2026 11:16:03 +0000 Manifest next update: Fri 04 Sep 2026 14:20:03 +0000 Files and hashes: 1: 03B040ED202D246E438A73DEA26426FBECEBB10D.crl (hash: AbjaRpkgu2LZT+fPVx59Ll05Fq5ByPiwLkQ1nKiYWik=) 2: 3130332e3132342e3131322e302f32342d3234203d3e20313331313131.roa (hash: C5jQrGNmSHPl6nz+o4/GVoDQQPjQAT8dJlkaOBni5mA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/03B040ED202D246E438A73DEA26426FBECEBB10D.crl rsync://rpki-rsync.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/03B040ED202D246E438A73DEA26426FBECEBB10D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03B040ED202D246E438A73DEA26426FBECEBB10D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:7c:0c:a3:af:55:08:78:ff:7c:f8:02:03:61:24:2c:e6:43:25:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03B040ED202D246E438A73DEA26426FBECEBB10D Validity Not Before: Sep 3 11:16:03 2026 GMT Not After : Sep 4 14:20:03 2026 GMT Subject: CN=8F06CFD9EF21A3B255DF49D4A980A404F8EAADA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:99:90:85:1b:51:6b:11:93:01:dd:68:99:78: 9e:0d:c2:09:bf:7b:b8:81:b1:55:9d:e9:3e:cc:13: 63:f8:e2:fd:05:0d:36:6b:85:d6:e9:4d:ff:5b:db: fe:bf:91:b3:dd:54:6c:ab:97:1e:4a:2b:c5:09:05: f2:e4:ad:c4:3a:6a:c8:c2:50:c8:73:f6:c5:8e:f3: f6:af:aa:36:72:44:94:53:88:f9:65:ea:37:65:f2: dc:7e:53:4f:d9:73:9b:3c:4a:6a:1d:68:15:32:df: ff:72:a2:1c:19:34:0a:f9:95:fd:18:77:02:f3:91: c8:d6:44:f7:95:26:b2:7c:4f:08:e7:d5:11:e3:75: 9a:ca:63:12:69:44:09:54:d8:a5:32:03:92:c1:c4: 1d:32:ce:79:67:58:7a:3f:eb:5d:46:99:0e:b7:1f: 57:93:bb:c7:c7:e3:9c:75:4d:6e:39:f8:e4:b9:3c: a4:bf:9d:d4:3a:89:8c:5b:00:e1:87:07:b5:d4:27: ac:be:55:59:2c:87:3f:7e:2b:6d:a3:52:cc:a4:27: 06:ed:51:bb:0b:1f:df:9f:49:03:e5:b5:da:1f:bd: ce:5f:58:57:c6:04:18:11:15:b9:0e:b2:22:4c:cd: 10:cd:2e:51:df:3f:5d:70:f0:cd:c9:9d:20:30:14: 32:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:06:CF:D9:EF:21:A3:B2:55:DF:49:D4:A9:80:A4:04:F8:EA:AD:A0 X509v3 Authority Key Identifier: keyid:03:B0:40:ED:20:2D:24:6E:43:8A:73:DE:A2:64:26:FB:EC:EB:B1:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/03B040ED202D246E438A73DEA26426FBECEBB10D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03B040ED202D246E438A73DEA26426FBECEBB10D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/03B040ED202D246E438A73DEA26426FBECEBB10D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:62:20:4d:11:a2:5c:1e:af:1c:9a:24:fa:d9:33:01:78:b3: 60:2a:6d:5d:ce:3a:47:ef:e0:76:48:39:75:99:dd:3a:a6:e2: 51:8b:f8:e5:2e:8e:be:3e:77:cb:b5:0c:6c:77:db:fd:8f:6c: 55:57:ee:1e:04:b4:75:12:55:14:6b:15:02:ce:e3:53:c3:bc: fa:7e:d1:2d:4a:3a:c0:79:71:b0:ac:f0:87:9f:2c:2e:65:51: 78:31:fe:e5:1a:ec:3a:16:ec:51:33:85:ff:30:65:29:4f:d3: b1:cc:a9:c4:02:05:4b:4c:d4:eb:e8:25:3d:71:72:af:6b:7a: 9d:b6:2e:17:73:1f:ff:c9:cb:95:14:77:3a:e5:cf:37:8f:dc: f2:e7:34:0b:83:d0:81:47:cc:c2:9f:8e:23:3d:fe:1a:d5:40: 8a:97:8e:67:c9:29:44:4f:3a:e2:f0:d8:73:9b:a9:35:3b:7b: 4f:39:04:9a:03:ea:17:d0:b1:90:ad:49:80:39:b4:ed:ad:5f: a4:fa:66:af:8e:ed:d1:ef:5b:8d:5f:4a:86:a5:bc:2c:d3:54: 70:aa:e6:a3:05:28:d3:88:e5:17:cf:ac:b9:23:88:8d:e0:de: 19:80:c4:95:93:b1:bd:d4:63:69:d7:4e:db:4b:22:ce:4a:3d: 4a:7b:af:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEXwMo69VCHj/fPgCA2EkLOZDJRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNCMDQwRUQyMDJEMjQ2RTQzOEE3M0RFQTI2NDI2RkJF Q0VCQjEwRDAeFw0yNjA5MDMxMTE2MDNaFw0yNjA5MDQxNDIwMDNaMDMxMTAvBgNV BAMTKDhGMDZDRkQ5RUYyMUEzQjI1NURGNDlENEE5ODBBNDA0RjhFQUFEQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9mZCFG1FrEZMB3WiZeJ4Nwgm/ e7iBsVWd6T7ME2P44v0FDTZrhdbpTf9b2/6/kbPdVGyrlx5KK8UJBfLkrcQ6asjC UMhz9sWO8/avqjZyRJRTiPll6jdl8tx+U0/Zc5s8SmodaBUy3/9yohwZNAr5lf0Y dwLzkcjWRPeVJrJ8Twjn1RHjdZrKYxJpRAlU2KUyA5LBxB0yznlnWHo/611GmQ63 H1eTu8fH45x1TW45+OS5PKS/ndQ6iYxbAOGHB7XUJ6y+VVkshz9+K22jUsykJwbt UbsLH9+fSQPltdofvc5fWFfGBBgRFbkOsiJMzRDNLlHfP11w8M3JnSAwFDLdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjwbP2e8ho7JV30nUqYCkBPjqraAwHwYDVR0j BBgwFoAUA7BA7SAtJG5DinPeomQm++zrsQ0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ3ZjhmNDQtMjc3ZC00NWUxLWIyMTMtMDUxMTdmZGUzY2IwLzAvMDNCMDQwRUQy MDJEMjQ2RTQzOEE3M0RFQTI2NDI2RkJFQ0VCQjEwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wM0IwNDBFRDIwMkQyNDZFNDM4QTczREVBMjY0MjZGQkVDRUJC MTBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ3ZjhmNDQtMjc3ZC00NWUxLWIy MTMtMDUxMTdmZGUzY2IwLzAvMDNCMDQwRUQyMDJEMjQ2RTQzOEE3M0RFQTI2NDI2 RkJFQ0VCQjEwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhiIE0RolwerxyaJPrZMwF4s2AqbV3OOkfv 4HZIOXWZ3Tqm4lGL+OUujr4+d8u1DGx32/2PbFVX7h4EtHUSVRRrFQLO41PDvPp+ 0S1KOsB5cbCs8IefLC5lUXgx/uUa7DoW7FEzhf8wZSlP07HMqcQCBUtM1OvoJT1x cq9rep22LhdzH//Jy5UUdzrlzzeP3PLnNAuD0IFHzMKfjiM9/hrVQIqXjmfJKURP OuLw2HObqTU7e085BJoD6hfQsZCtSYA5tO2tX6T6Zq+O7dHvW41fSoalvCzTVHCq 5qMFKNOI5RfPrLkjiI3g3hmAxJWTsb3UY2nXTttLIs5KPUp7r70= -----END CERTIFICATE-----Generated at Thu Sep 3 14:18:22 2026 by rpki-client