$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft File: 07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft (raw, json) Hash identifier: wHpABZEWAK6IR2cNnx0jmELgGUOuvjKrM42zknpgOLI= Subject key identifier: 8A:74:8E:D8:4A:14:F5:4F:97:27:F1:24:4B:2B:60:42:BF:E4:3F:72 Authority key identifier: 07:AF:34:F2:44:C0:13:D3:93:BA:ED:01:50:A6:52:F2:BF:9F:1A:5D Certificate issuer: /CN=07AF34F244C013D393BAED0150A652F2BF9F1A5D Certificate serial: 36D9C25644BE6B835DA915898144AE90B7948ACB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 19:26:41 +0000 Manifest this update: Wed 02 Sep 2026 19:21:41 +0000 Manifest next update: Thu 03 Sep 2026 23:15:41 +0000 Files and hashes: 1: 3130332e3137332e3134302e302f32342d3234203d3e203538343835.roa (hash: rVSTBgAcxMjiphBfXsUD1/ITkO/ZRhpcgBHWKyAe9do=) 2: 07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl (hash: uuIEPiZEo6WlE5AqdpouiWfWYwoQo60+kcoCvoqXKy4=) 3: 3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa (hash: ZInQWIdIz9yreiElsNwlmLmVmB2tNTPmR2V0a4fG3f8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 23:15:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:d9:c2:56:44:be:6b:83:5d:a9:15:89:81:44:ae:90:b7:94:8a:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07AF34F244C013D393BAED0150A652F2BF9F1A5D Validity Not Before: Sep 2 19:21:41 2026 GMT Not After : Sep 3 23:15:41 2026 GMT Subject: CN=8A748ED84A14F54F9727F1244B2B6042BFE43F72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ba:4a:f4:5e:3b:d1:95:0a:07:a5:2a:44:b8: 02:5b:f4:51:01:6e:0d:9e:77:41:1e:2e:26:5f:06: c8:c5:b4:d2:c0:f7:75:2d:4e:37:3e:0a:e6:85:f0: db:5d:09:d7:a1:47:0b:33:f2:44:19:72:98:a1:83: f5:9d:ae:f5:c1:b9:4d:af:5d:39:81:86:7a:0a:88: bd:8e:2a:30:30:f7:c3:9b:72:1e:05:f7:c3:d9:f9: 44:6c:a5:5f:7f:0a:de:39:65:e4:5c:fe:69:a8:c6: a0:31:27:12:9e:74:8c:bb:0f:a4:8a:4e:73:b3:fd: ae:95:d5:2e:d9:e2:e1:5b:61:a7:8e:c6:4d:47:b5: b2:5d:f9:69:26:46:b0:42:25:00:a8:28:a7:f1:be: 65:28:fa:2f:7e:87:1c:49:34:ab:5f:44:a6:de:d4: 49:b6:65:e9:6a:b8:16:a0:32:ec:5e:85:fb:2e:d5: e8:9f:e6:d8:79:79:85:aa:90:db:d3:10:de:01:00: 19:c5:1c:48:5a:e2:66:1a:b0:e9:08:af:fc:77:d5: d0:66:6d:08:85:e1:dd:62:ea:d4:28:33:fe:ee:98: ec:4a:69:09:fc:e2:ab:34:5b:dc:7c:f7:f2:98:07: 76:8e:61:a5:d4:7b:c5:41:17:72:43:42:29:47:f0: 67:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:74:8E:D8:4A:14:F5:4F:97:27:F1:24:4B:2B:60:42:BF:E4:3F:72 X509v3 Authority Key Identifier: keyid:07:AF:34:F2:44:C0:13:D3:93:BA:ED:01:50:A6:52:F2:BF:9F:1A:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:28:ff:11:83:e1:07:03:56:e3:39:80:d0:87:c3:cc:ae:0e: a6:a7:da:6a:70:54:61:57:37:68:ff:78:ce:4d:a1:15:e2:e1: 5d:c5:10:b9:e2:9b:ef:55:44:3b:f2:f3:83:80:ac:89:08:3e: 32:25:51:4f:84:cc:6d:e7:74:08:b3:06:2c:51:73:10:b0:d9: e2:0f:63:ff:30:2b:c0:ae:f2:24:cf:46:c6:69:90:5b:d8:28: d8:55:f3:f2:f8:47:00:d9:b1:d2:e4:09:95:0b:54:6f:f5:25: aa:76:d2:f8:e4:06:8d:a6:be:a4:4a:19:c2:a2:5f:64:ee:79: ee:6f:4c:0d:d5:3d:f3:df:89:12:01:8a:ed:9d:b4:15:62:e0: fc:77:76:0f:8c:d6:52:0f:c2:c6:b1:43:c3:96:1b:ef:17:25: 95:d9:2d:b4:b6:0e:6b:62:43:db:60:77:63:05:df:7d:52:47: fd:aa:30:99:d8:f9:99:68:76:91:7e:21:10:d0:15:0b:85:cb: 12:d9:18:5a:48:88:9b:e7:44:e5:82:fa:4d:b9:50:83:45:2d: da:f7:ff:76:91:f5:47:66:96:2b:4b:c1:98:b8:19:2d:77:9a: 6c:91:c1:23:fc:13:bf:86:d0:83:9a:0d:18:15:28:f0:05:41: b6:f2:6a:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNtnCVkS+a4NdqRWJgUSukLeUisswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDdBRjM0RjI0NEMwMTNEMzkzQkFFRDAxNTBBNjUyRjJC RjlGMUE1RDAeFw0yNjA5MDIxOTIxNDFaFw0yNjA5MDMyMzE1NDFaMDMxMTAvBgNV BAMTKDhBNzQ4RUQ4NEExNEY1NEY5NzI3RjEyNDRCMkI2MDQyQkZFNDNGNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdukr0XjvRlQoHpSpEuAJb9FEB bg2ed0EeLiZfBsjFtNLA93UtTjc+CuaF8NtdCdehRwsz8kQZcpihg/WdrvXBuU2v XTmBhnoKiL2OKjAw98Obch4F98PZ+URspV9/Ct45ZeRc/mmoxqAxJxKedIy7D6SK TnOz/a6V1S7Z4uFbYaeOxk1HtbJd+WkmRrBCJQCoKKfxvmUo+i9+hxxJNKtfRKbe 1Em2ZelquBagMuxehfsu1eif5th5eYWqkNvTEN4BABnFHEha4mYasOkIr/x31dBm bQiF4d1i6tQoM/7umOxKaQn84qs0W9x89/KYB3aOYaXUe8VBF3JDQilH8GdfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUinSO2EoU9U+XJ/EkSytgQr/kP3IwHwYDVR0j BBgwFoAUB6808kTAE9OTuu0BUKZS8r+fGl0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFhYmI1NzgtYjlkYi00YTQ3LThkN2UtMTFhNjM0Mjg5MDE4LzAvMDdBRjM0RjI0 NEMwMTNEMzkzQkFFRDAxNTBBNjUyRjJCRjlGMUE1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wN0FGMzRGMjQ0QzAxM0QzOTNCQUVEMDE1MEE2NTJGMkJGOUYx QTVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFhYmI1NzgtYjlkYi00YTQ3LThk N2UtMTFhNjM0Mjg5MDE4LzAvMDdBRjM0RjI0NEMwMTNEMzkzQkFFRDAxNTBBNjUy RjJCRjlGMUE1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGco/xGD4QcDVuM5gNCHw8yuDqan2mpwVGFX N2j/eM5NoRXi4V3FELnim+9VRDvy84OArIkIPjIlUU+EzG3ndAizBixRcxCw2eIP Y/8wK8Cu8iTPRsZpkFvYKNhV8/L4RwDZsdLkCZULVG/1Jap20vjkBo2mvqRKGcKi X2Tuee5vTA3VPfPfiRIBiu2dtBVi4Px3dg+M1lIPwsaxQ8OWG+8XJZXZLbS2Dmti Q9tgd2MF331SR/2qMJnY+ZlodpF+IRDQFQuFyxLZGFpIiJvnROWC+k25UINFLdr3 /3aR9UdmlitLwZi4GS13mmyRwSP8E7+G0IOaDRgVKPAFQbbyarI= -----END CERTIFICATE-----Generated at Thu Sep 3 16:21:34 2026 by rpki-client