$ rpki-client -vvvf rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft File: 4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft (raw, json) Hash identifier: Xx6FGhPeHEtiMpf+TRnO0dNIQ9b761/Je6wMf0ZOsX0= Subject key identifier: 1E:7B:0A:81:D2:56:0A:4E:64:7B:97:37:8A:8A:0A:79:BB:C7:5B:A5 Authority key identifier: 4D:4B:F8:4E:7D:6F:39:D6:27:BE:5B:50:A9:17:31:5D:FE:BF:15:15 Certificate issuer: /CN=4D4BF84E7D6F39D627BE5B50A917315DFEBF1515 Certificate serial: 7E0746DD8EFF927DC184F038EAED047F2E5C2254 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft Manifest number: A7 Signing time: Fri 04 Sep 2026 01:33:33 +0000 Manifest this update: Fri 04 Sep 2026 01:28:33 +0000 Manifest next update: Sat 05 Sep 2026 01:34:33 +0000 Files and hashes: 1: 3230322e35312e31362e302f32332d3234203d3e203233393530.roa (hash: NFMSe8jpXIOrJJynKVDw112aSae0hUPV8Ycnly1ty30=) 2: 3230322e35312e31392e302f32342d3234203d3e203233393530.roa (hash: kEQuuE3MZPluiYnypOmYBPYLGkYCAstrSIg304qTUMU=) 3: 3230322e35312e32312e302f32342d3234203d3e20313439343039.roa (hash: xBC6wC0qaSZA17wYqb5z2deY4tddRBLazqglI6ol9r0=) 4: 4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl (hash: KGc0lGszpXKI/d0y4j1xymAXUt1WV9IA+8eIoEbGta0=) 5: 3230322e35312e32302e302f32342d3234203d3e20313439343039.roa (hash: pqH7WpxtojGs6NyUT0vVoZIYUBKEAJzFb6PabPXpeUg=) 6: 3230322e35312e32302e302f32332d3234203d3e20313439343039.roa (hash: j4hOV3opgjAagd+hKmonrIvCvECab8tS3BbyVP+3UsM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:07:46:dd:8e:ff:92:7d:c1:84:f0:38:ea:ed:04:7f:2e:5c:22:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D4BF84E7D6F39D627BE5B50A917315DFEBF1515 Validity Not Before: Sep 4 01:28:33 2026 GMT Not After : Sep 5 01:34:33 2026 GMT Subject: CN=1E7B0A81D2560A4E647B97378A8A0A79BBC75BA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:84:dc:eb:a5:a8:31:24:d6:65:64:bd:9e:1c: 6d:d0:38:ab:a1:c8:14:3f:2d:4e:ab:40:ae:d0:4e: 54:bb:cf:42:ce:3b:71:48:f7:5e:9b:8d:07:11:7e: 8c:96:b7:e5:8f:7f:fe:76:4c:0b:e0:f8:80:56:e6: 77:83:0e:52:03:65:ef:b0:78:85:9d:15:8d:70:53: dc:96:25:3c:c1:4c:10:63:34:23:c7:23:9f:dc:f2: de:d1:af:be:87:ea:d7:f1:7c:48:94:ea:f3:bf:5a: e0:ed:6d:fd:5c:c7:27:15:a4:7b:f4:6a:3c:08:27: 4d:2d:c6:66:e7:00:12:00:fe:ce:37:d3:53:1b:72: 81:ed:7f:8b:a1:12:ba:40:47:50:55:30:27:40:27: 03:00:d1:8a:48:18:b8:91:07:2f:23:61:8c:65:70: c4:45:62:b9:98:7d:db:dc:0d:b3:43:fb:21:f9:84: 7f:c1:e5:96:e0:40:0b:67:f4:b4:d3:33:ba:c0:eb: 85:29:ff:89:70:40:cb:81:23:ac:44:64:73:44:ff: c9:3f:d9:9d:a6:47:f4:70:6c:6e:6e:38:af:36:a3: 7c:4b:f7:d5:1e:0c:81:5c:96:31:d9:f4:7d:bf:73: 66:8d:dc:be:ed:a3:5b:81:8b:d9:29:e8:3a:d9:ed: ec:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7B:0A:81:D2:56:0A:4E:64:7B:97:37:8A:8A:0A:79:BB:C7:5B:A5 X509v3 Authority Key Identifier: keyid:4D:4B:F8:4E:7D:6F:39:D6:27:BE:5B:50:A9:17:31:5D:FE:BF:15:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:e3:c6:a7:e8:04:7a:53:7f:cf:19:8d:a2:2a:0a:6d:d1:31: bf:72:81:12:eb:71:5e:f4:1f:1d:ad:d4:a1:80:f2:3b:33:0f: 9b:14:02:1e:38:91:a2:83:0d:06:f4:46:0f:35:13:68:e5:68: 70:bc:9b:a6:a9:c6:10:4d:c8:16:0f:d1:6d:60:0d:14:2d:12: e3:d6:b6:3f:c4:4f:f2:18:47:19:30:c2:43:7c:c7:53:15:47: 68:0c:d6:42:37:fb:00:7b:6e:a6:10:d4:5a:5c:5c:2d:10:90: cd:a4:0d:3b:db:f6:1c:cf:ac:57:42:82:c0:42:d6:de:cf:ab: 90:9c:37:80:68:d7:18:71:83:4b:45:54:87:87:87:00:65:28: 1f:3b:c5:70:d3:cf:88:49:be:88:42:ac:35:07:e7:f1:bf:2e: 53:4a:33:8a:5d:bd:72:c9:6a:d2:0b:f6:e8:cb:15:dc:c4:78: 14:d9:07:5a:d8:b4:92:46:a8:a7:68:9d:fe:bc:b7:a1:33:95: f4:b3:e6:41:31:cb:e3:55:c9:c9:14:8a:11:76:9f:a8:6b:39: 59:d3:2c:e1:d9:a7:4b:4f:a2:be:5f:8d:8d:34:f5:25:c2:97: 46:1a:f4:32:15:e9:d2:6e:af:ed:de:9d:dd:38:e3:a8:cd:f0: f9:dd:57:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfgdG3Y7/kn3BhPA46u0Efy5cIlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ0QkY4NEU3RDZGMzlENjI3QkU1QjUwQTkxNzMxNURG RUJGMTUxNTAeFw0yNjA5MDQwMTI4MzNaFw0yNjA5MDUwMTM0MzNaMDMxMTAvBgNV BAMTKDFFN0IwQTgxRDI1NjBBNEU2NDdCOTczNzhBOEEwQTc5QkJDNzVCQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6hNzrpagxJNZlZL2eHG3QOKuh yBQ/LU6rQK7QTlS7z0LOO3FI916bjQcRfoyWt+WPf/52TAvg+IBW5neDDlIDZe+w eIWdFY1wU9yWJTzBTBBjNCPHI5/c8t7Rr76H6tfxfEiU6vO/WuDtbf1cxycVpHv0 ajwIJ00txmbnABIA/s4301MbcoHtf4uhErpAR1BVMCdAJwMA0YpIGLiRBy8jYYxl cMRFYrmYfdvcDbND+yH5hH/B5ZbgQAtn9LTTM7rA64Up/4lwQMuBI6xEZHNE/8k/ 2Z2mR/RwbG5uOK82o3xL99UeDIFcljHZ9H2/c2aN3L7to1uBi9kp6DrZ7ezbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHnsKgdJWCk5ke5c3iooKebvHW6UwHwYDVR0j BBgwFoAUTUv4Tn1vOdYnvltQqRcxXf6/FRUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk0ZTZiMmQtM2RkYi00NmViLTgzZWYtYzk5YjIwMDM3ODNmLzAvNEQ0QkY4NEU3 RDZGMzlENjI3QkU1QjUwQTkxNzMxNURGRUJGMTUxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDRCRjg0RTdENkYzOUQ2MjdCRTVCNTBBOTE3MzE1REZFQkYx NTE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk0ZTZiMmQtM2RkYi00NmViLTgz ZWYtYzk5YjIwMDM3ODNmLzAvNEQ0QkY4NEU3RDZGMzlENjI3QkU1QjUwQTkxNzMx NURGRUJGMTUxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXjxqfoBHpTf88ZjaIqCm3RMb9ygRLrcV70 Hx2t1KGA8jszD5sUAh44kaKDDQb0Rg81E2jlaHC8m6apxhBNyBYP0W1gDRQtEuPW tj/ET/IYRxkwwkN8x1MVR2gM1kI3+wB7bqYQ1FpcXC0QkM2kDTvb9hzPrFdCgsBC 1t7Pq5CcN4Bo1xhxg0tFVIeHhwBlKB87xXDTz4hJvohCrDUH5/G/LlNKM4pdvXLJ atIL9ujLFdzEeBTZB1rYtJJGqKdonf68t6EzlfSz5kExy+NVyckUihF2n6hrOVnT LOHZp0tPor5fjY009SXCl0Ya9DIV6dJur+3end0446jN8PndV8U= -----END CERTIFICATE-----Generated at Fri Sep 4 04:00:26 2026 by rpki-client