$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.mft File: 84D8D73F40AAC54FA5471C49D1B0B26082108594.mft (raw, json) Hash identifier: x9LRiB9dxIirj1NaSCyjIZfrKQdmO5P48Z3/xkaCAOo= Subject key identifier: 7E:65:71:97:AA:79:77:AE:5C:B1:E3:26:C6:FE:F2:27:AC:B8:AA:1E Authority key identifier: 84:D8:D7:3F:40:AA:C5:4F:A5:47:1C:49:D1:B0:B2:60:82:10:85:94 Certificate issuer: /CN=84D8D73F40AAC54FA5471C49D1B0B26082108594 Certificate serial: 1A34A50681D80384BE002782EAAF63EF73D2C63E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84D8D73F40AAC54FA5471C49D1B0B26082108594.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 18:04:38 +0000 Manifest this update: Thu 03 Sep 2026 17:59:38 +0000 Manifest next update: Fri 04 Sep 2026 20:49:38 +0000 Files and hashes: 1: 3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa (hash: ZTH11IqUBjUloy94Wjo3h3nzkEwNWGDprNQQAIlXj6U=) 2: 84D8D73F40AAC54FA5471C49D1B0B26082108594.crl (hash: Xc+eWgWuVcZD0ea5qL4/v7Luhdd2ATj54YZB0QB55EA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.crl rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84D8D73F40AAC54FA5471C49D1B0B26082108594.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 20:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:34:a5:06:81:d8:03:84:be:00:27:82:ea:af:63:ef:73:d2:c6:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84D8D73F40AAC54FA5471C49D1B0B26082108594 Validity Not Before: Sep 3 17:59:38 2026 GMT Not After : Sep 4 20:49:38 2026 GMT Subject: CN=7E657197AA7977AE5CB1E326C6FEF227ACB8AA1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:19:0d:b8:b2:2c:c1:6e:aa:a0:51:ec:d7:a7: 3f:ff:53:5f:b9:a4:f8:62:58:ca:f3:24:42:9b:17: 5b:70:e9:93:5f:6d:9c:a4:35:3b:cd:ad:70:c8:14: 11:cd:d6:a9:3b:5c:29:18:7d:45:dd:eb:98:13:6f: 8e:1a:16:31:f6:91:06:55:9c:17:0d:ae:80:93:54: ad:bc:84:80:5c:5c:9a:0f:ea:e5:d0:c6:e2:35:fc: c1:6d:14:f4:2d:f4:a2:14:7c:7a:6a:f5:1b:b5:72: 89:eb:4e:9c:ca:a7:b6:d3:87:fd:7a:32:15:51:0f: 05:50:44:fc:31:30:22:c1:c1:0e:66:59:78:9d:97: d0:48:c6:79:39:80:e4:85:c0:1d:a3:ff:18:3a:fd: 0e:65:0d:3e:17:3d:7a:4c:bc:fb:e5:fe:d8:50:5a: 46:49:82:be:3a:5e:55:df:84:5e:66:9d:8c:28:40: 58:ef:45:48:6e:d7:5a:a5:45:9c:b5:ac:55:13:6d: 5d:d8:e4:4e:40:2b:b0:d3:ef:b5:c9:12:83:ac:40: 12:7a:65:00:b4:9f:ef:df:7b:14:fb:5a:b1:93:d7: 4a:7d:7d:0e:46:97:d6:a5:4e:b2:62:d3:72:4b:11: c3:eb:ae:42:8f:97:02:cd:42:fa:a3:4d:5b:76:3f: 0b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:65:71:97:AA:79:77:AE:5C:B1:E3:26:C6:FE:F2:27:AC:B8:AA:1E X509v3 Authority Key Identifier: keyid:84:D8:D7:3F:40:AA:C5:4F:A5:47:1C:49:D1:B0:B2:60:82:10:85:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84D8D73F40AAC54FA5471C49D1B0B26082108594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:8e:a5:57:2e:ee:d0:ef:70:f2:cc:92:a5:14:08:4c:e4:f3: ce:63:84:46:60:67:1a:58:c7:62:31:48:33:a4:a5:fe:74:57: 6e:de:cf:a8:e4:b3:e9:80:6d:5b:eb:91:5b:31:cc:6c:24:78: 88:81:6e:29:1d:fc:dc:8e:cb:27:e7:c6:c6:48:64:32:48:9d: 44:1e:e5:de:a0:bc:42:93:af:50:f2:f5:01:c1:0e:51:9b:1d: 00:3d:54:ea:91:50:a5:f6:07:b5:60:ae:1a:8c:4d:6c:a1:f0: 1a:2c:1b:e8:be:58:a7:4a:c5:cd:71:36:a5:96:61:93:9f:b3: 45:90:af:c8:60:da:e6:45:22:3e:a5:90:0a:fb:4a:2b:61:7f: aa:62:97:c8:f6:9b:96:41:03:75:c0:e4:72:60:f6:5f:1c:8e: b0:47:e8:6d:7b:7a:d8:ec:79:ba:7f:2d:80:eb:42:2d:e9:d7: 1c:65:18:7b:b6:a3:e5:87:31:c5:a7:14:68:98:a8:19:cf:1f: 0b:6b:ed:e1:bd:e7:be:5c:48:bd:39:5a:b5:b9:71:8a:7f:17: 85:9e:26:91:b5:14:b5:27:af:9e:7a:23:7e:7c:d0:d1:89:8f: 51:f3:72:0e:e2:4a:a2:8c:4f:1d:2d:52:99:f7:ca:49:ac:7c: a0:a2:05:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGjSlBoHYA4S+ACeC6q9j73PSxj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODREOEQ3M0Y0MEFBQzU0RkE1NDcxQzQ5RDFCMEIyNjA4 MjEwODU5NDAeFw0yNjA5MDMxNzU5MzhaFw0yNjA5MDQyMDQ5MzhaMDMxMTAvBgNV BAMTKDdFNjU3MTk3QUE3OTc3QUU1Q0IxRTMyNkM2RkVGMjI3QUNCOEFBMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZGQ24sizBbqqgUezXpz//U1+5 pPhiWMrzJEKbF1tw6ZNfbZykNTvNrXDIFBHN1qk7XCkYfUXd65gTb44aFjH2kQZV nBcNroCTVK28hIBcXJoP6uXQxuI1/MFtFPQt9KIUfHpq9Ru1conrTpzKp7bTh/16 MhVRDwVQRPwxMCLBwQ5mWXidl9BIxnk5gOSFwB2j/xg6/Q5lDT4XPXpMvPvl/thQ WkZJgr46XlXfhF5mnYwoQFjvRUhu11qlRZy1rFUTbV3Y5E5AK7DT77XJEoOsQBJ6 ZQC0n+/fexT7WrGT10p9fQ5Gl9alTrJi03JLEcPrrkKPlwLNQvqjTVt2PwvfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfmVxl6p5d65cseMmxv7yJ6y4qh4wHwYDVR0j BBgwFoAUhNjXP0CqxU+lRxxJ0bCyYIIQhZQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWM4MDQ2N2MtYWViMi00MDk1LThmNTQtODViOTA5MGQzOTA4LzAvODREOEQ3M0Y0 MEFBQzU0RkE1NDcxQzQ5RDFCMEIyNjA4MjEwODU5NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NEQ4RDczRjQwQUFDNTRGQTU0NzFDNDlEMUIwQjI2MDgyMTA4 NTk0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWM4MDQ2N2MtYWViMi00MDk1LThm NTQtODViOTA5MGQzOTA4LzAvODREOEQ3M0Y0MEFBQzU0RkE1NDcxQzQ5RDFCMEIy NjA4MjEwODU5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+OpVcu7tDvcPLMkqUUCEzk885jhEZgZxpY x2IxSDOkpf50V27ez6jks+mAbVvrkVsxzGwkeIiBbikd/NyOyyfnxsZIZDJInUQe 5d6gvEKTr1Dy9QHBDlGbHQA9VOqRUKX2B7VgrhqMTWyh8BosG+i+WKdKxc1xNqWW YZOfs0WQr8hg2uZFIj6lkAr7Sithf6pil8j2m5ZBA3XA5HJg9l8cjrBH6G17etjs ebp/LYDrQi3p1xxlGHu2o+WHMcWnFGiYqBnPHwtr7eG9575cSL05WrW5cYp/F4We JpG1FLUnr556I3580NGJj1Hzcg7iSqKMTx0tUpn3ykmsfKCiBf0= -----END CERTIFICATE-----Generated at Fri Sep 4 04:00:28 2026 by rpki-client