$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft File: 725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft (raw, json) Hash identifier: mafzLGsw1zaFAu3mgDlzNz9ZVOH97dYttkAt0ZlJVOQ= Subject key identifier: 56:E1:E1:01:E7:40:66:FD:DC:88:A9:BE:9A:6E:72:44:03:F3:84:9A Authority key identifier: 72:50:66:A4:4C:CD:FA:EE:44:A7:C9:58:D4:0F:BA:3C:13:33:B1:28 Certificate issuer: /CN=725066A44CCDFAEE44A7C958D40FBA3C1333B128 Certificate serial: 3FE7C5FDD1CF787005064C4A545216530A1AD361 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft Manifest number: A4 Signing time: Wed 02 Sep 2026 17:13:46 +0000 Manifest this update: Wed 02 Sep 2026 17:08:46 +0000 Manifest next update: Thu 03 Sep 2026 18:21:46 +0000 Files and hashes: 1: 3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa (hash: jvWEOsR7PfzKTUwNJSaNZgDIPP0tbvEXbSdlcBqgCio=) 2: 725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl (hash: NPgarMebqII5ErbMo96t+cDpnkadENrDxni2aII1pqw=) 3: 3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa (hash: oUpYjCZBUJLtFkQG6ecMP2UxGQxIQOGY4XCQZ/Ln3C8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 18:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:e7:c5:fd:d1:cf:78:70:05:06:4c:4a:54:52:16:53:0a:1a:d3:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725066A44CCDFAEE44A7C958D40FBA3C1333B128 Validity Not Before: Sep 2 17:08:46 2026 GMT Not After : Sep 3 18:21:46 2026 GMT Subject: CN=56E1E101E74066FDDC88A9BE9A6E724403F3849A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:57:16:82:36:57:32:6b:59:c7:44:f3:5d:0c: 4b:ef:44:cc:05:9d:5e:0c:37:48:17:ef:d0:ee:ed: 05:da:43:ab:25:38:e0:41:0f:6f:5f:f1:bf:12:84: fc:b0:57:e8:05:c9:5f:8f:ce:97:5e:ac:38:3a:05: f3:3f:a0:2e:a0:cd:a1:be:8c:93:76:74:02:94:35: 97:66:4f:6f:ea:23:5d:cb:78:69:5b:7a:ee:7c:1f: df:a7:18:ce:13:f3:7c:06:35:50:39:5e:03:ef:04: 45:4c:3c:50:f2:37:72:17:ab:c7:55:36:d3:14:27: c2:19:ea:d0:1c:b6:88:34:ef:ef:cd:57:ca:bc:fb: 42:6c:7d:14:04:cb:d8:9c:a6:87:e1:8b:3b:a3:16: b8:e0:fe:51:0c:72:90:10:0d:5c:18:22:c6:c0:06: e0:3a:25:31:b1:2b:e2:2d:5f:9b:fe:78:94:49:cd: 96:16:86:26:ad:f7:54:95:a7:5d:4d:df:5b:48:5e: aa:4f:58:f1:44:4f:4b:89:0a:b3:b6:91:d3:56:86: d0:8c:84:b7:21:65:43:2e:05:77:23:c0:ce:0e:22: c7:e1:c3:68:3a:ba:02:ba:d9:91:a7:83:68:7f:ab: 20:0c:68:ef:04:99:11:57:2f:e8:ca:f1:e2:79:16: 0d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E1:E1:01:E7:40:66:FD:DC:88:A9:BE:9A:6E:72:44:03:F3:84:9A X509v3 Authority Key Identifier: keyid:72:50:66:A4:4C:CD:FA:EE:44:A7:C9:58:D4:0F:BA:3C:13:33:B1:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:be:50:42:f7:61:b5:ae:00:00:d3:bd:0e:e8:57:ba:f8:6e: 0f:29:26:2f:04:eb:8f:88:4e:3d:04:e8:c9:3f:31:8c:80:a2: 84:f3:80:8c:fe:43:04:13:eb:02:df:af:f7:57:34:5b:1d:0e: 63:18:db:10:6a:b4:c1:72:67:c9:02:0c:58:d0:df:6d:d9:87: 4f:1a:8e:ba:57:de:f0:10:1a:6e:d0:ff:ea:f9:62:51:c3:df: 38:13:08:b3:68:24:26:73:a1:9d:0f:63:e1:34:d2:64:aa:9d: 3c:5c:b9:92:63:3b:d4:d1:67:d9:7f:4a:a7:72:bb:cd:df:ff: 75:b1:56:55:10:c4:b7:85:32:71:02:42:50:3f:1b:32:9f:dd: b9:4f:42:c5:a5:ea:23:6e:57:f6:09:d1:1d:3a:90:b4:98:00: 63:2e:93:46:7f:61:d4:4b:50:fd:9c:f8:64:1d:15:85:ec:b2: 33:87:54:46:be:27:51:4e:c1:ce:e6:97:f9:d0:ec:7b:77:15: 57:f7:a3:04:b8:f5:39:a2:08:15:9c:af:4d:5e:a4:28:71:9b: 49:b5:3e:e6:8c:3b:8b:49:3d:f4:cb:c7:1c:e5:9c:ec:6f:7a: b1:63:24:99:37:49:85:87:51:e4:f0:d8:21:60:d9:f3:f6:f9: e6:7d:d6:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP+fF/dHPeHAFBkxKVFIWUwoa02EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI1MDY2QTQ0Q0NERkFFRTQ0QTdDOTU4RDQwRkJBM0Mx MzMzQjEyODAeFw0yNjA5MDIxNzA4NDZaFw0yNjA5MDMxODIxNDZaMDMxMTAvBgNV BAMTKDU2RTFFMTAxRTc0MDY2RkREQzg4QTlCRTlBNkU3MjQ0MDNGMzg0OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgVxaCNlcya1nHRPNdDEvvRMwF nV4MN0gX79Du7QXaQ6slOOBBD29f8b8ShPywV+gFyV+PzpderDg6BfM/oC6gzaG+ jJN2dAKUNZdmT2/qI13LeGlbeu58H9+nGM4T83wGNVA5XgPvBEVMPFDyN3IXq8dV NtMUJ8IZ6tActog07+/NV8q8+0JsfRQEy9icpofhizujFrjg/lEMcpAQDVwYIsbA BuA6JTGxK+ItX5v+eJRJzZYWhiat91SVp11N31tIXqpPWPFET0uJCrO2kdNWhtCM hLchZUMuBXcjwM4OIsfhw2g6ugK62ZGng2h/qyAMaO8EmRFXL+jK8eJ5Fg2DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVuHhAedAZv3ciKm+mm5yRAPzhJowHwYDVR0j BBgwFoAUclBmpEzN+u5Ep8lY1A+6PBMzsSgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWVmODM3YjMtZGZkMi00MmNjLTliNzktNzRiNmJhZmQ0ZTJkLzAvNzI1MDY2QTQ0 Q0NERkFFRTQ0QTdDOTU4RDQwRkJBM0MxMzMzQjEyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MjUwNjZBNDRDQ0RGQUVFNDRBN0M5NThENDBGQkEzQzEzMzNC MTI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWVmODM3YjMtZGZkMi00MmNjLTli NzktNzRiNmJhZmQ0ZTJkLzAvNzI1MDY2QTQ0Q0NERkFFRTQ0QTdDOTU4RDQwRkJB M0MxMzMzQjEyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKa+UEL3YbWuAADTvQ7oV7r4bg8pJi8E64+I Tj0E6Mk/MYyAooTzgIz+QwQT6wLfr/dXNFsdDmMY2xBqtMFyZ8kCDFjQ323Zh08a jrpX3vAQGm7Q/+r5YlHD3zgTCLNoJCZzoZ0PY+E00mSqnTxcuZJjO9TRZ9l/Sqdy u83f/3WxVlUQxLeFMnECQlA/GzKf3blPQsWl6iNuV/YJ0R06kLSYAGMuk0Z/YdRL UP2c+GQdFYXssjOHVEa+J1FOwc7ml/nQ7Ht3FVf3owS49TmiCBWcr01epChxm0m1 PuaMO4tJPfTLxxzlnOxverFjJJk3SYWHUeTw2CFg2fP2+eZ91vQ= -----END CERTIFICATE-----Generated at Thu Sep 3 06:44:39 2026 by rpki-client