$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.mft File: 330A616F2A63EBF0BB32E25EC313E1C92CE7476B.mft (raw, json) Hash identifier: mJsfLPgSNYC4OktuddwJgXK+IXClu7aK3pfcw2YJw7w= Subject key identifier: DD:B7:A9:A8:EE:61:7D:27:20:73:1E:27:4B:3C:C7:38:3E:79:4C:37 Authority key identifier: 33:0A:61:6F:2A:63:EB:F0:BB:32:E2:5E:C3:13:E1:C9:2C:E7:47:6B Certificate issuer: /CN=330A616F2A63EBF0BB32E25EC313E1C92CE7476B Certificate serial: 65AF8B257D70C206770E063B4E8FEC0FAF25F856 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.mft Manifest number: A4 Signing time: Wed 02 Sep 2026 14:41:11 +0000 Manifest this update: Wed 02 Sep 2026 14:36:11 +0000 Manifest next update: Thu 03 Sep 2026 17:30:11 +0000 Files and hashes: 1: 3130332e3135352e3235302e302f32332d3234203d3e203137383834.roa (hash: X6m+xeJ0gpaLFRDzspoO6SIub/jpD7DBy+UlBcZmfKs=) 2: 330A616F2A63EBF0BB32E25EC313E1C92CE7476B.crl (hash: 5Qfwn4NJ10/UnRPOi9rxbfDh9JWXMkR+odp65JvqGRk=) 3: 323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa (hash: ILoy/+ibUDKAFOxVMLinSZB9MoToaiC2+Ky+vT/tKdU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.crl rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 17:30:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:af:8b:25:7d:70:c2:06:77:0e:06:3b:4e:8f:ec:0f:af:25:f8:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=330A616F2A63EBF0BB32E25EC313E1C92CE7476B Validity Not Before: Sep 2 14:36:11 2026 GMT Not After : Sep 3 17:30:11 2026 GMT Subject: CN=DDB7A9A8EE617D2720731E274B3CC7383E794C37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:35:37:b6:00:cc:21:b9:e9:de:7f:84:e1:03: 7d:99:d0:ea:86:f8:dc:cd:a8:8c:1d:f8:d6:4f:07: df:f4:bd:4a:f7:dc:12:5e:69:78:48:52:c6:41:f0: 40:e8:9e:7b:7e:c9:21:a6:1c:a7:9b:dc:a0:43:ca: d3:a3:5e:dc:39:f2:13:25:61:22:f5:88:bf:2a:36: da:27:0c:2f:dd:24:a2:69:07:ba:43:e3:35:fa:06: 04:03:04:b8:c9:96:8a:ba:89:1e:66:c4:ed:52:cb: a1:0e:a7:55:de:c6:02:4f:ba:d5:41:10:4f:13:77: 14:6a:61:31:cc:08:33:30:a2:4c:62:5b:bb:24:4d: 7f:0b:ae:7d:e8:9c:40:15:ae:51:41:9e:b9:69:8f: 62:7b:24:18:a8:2b:44:10:3d:fc:d0:8c:1f:5f:a7: dd:b1:74:89:d1:a4:09:89:f2:e9:0e:19:d9:86:32: da:3e:55:9e:32:aa:45:d6:9e:42:87:d8:5a:f8:ec: 55:12:9a:18:a0:4c:80:d1:a9:b9:27:f1:2c:79:65: c6:aa:42:eb:10:41:34:15:cd:a0:b6:d1:3c:80:f1: 91:e7:43:0e:46:2b:9d:e4:6d:22:79:89:14:ff:bb: fb:e1:9e:ef:9b:04:89:a0:8d:fe:6e:1d:7a:a8:06: 79:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B7:A9:A8:EE:61:7D:27:20:73:1E:27:4B:3C:C7:38:3E:79:4C:37 X509v3 Authority Key Identifier: keyid:33:0A:61:6F:2A:63:EB:F0:BB:32:E2:5E:C3:13:E1:C9:2C:E7:47:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:44:cc:9e:8f:68:11:33:af:c4:de:06:e9:89:9d:9f:f0:6f: 5c:92:78:5d:73:d7:1e:87:93:fb:c6:e0:db:b1:df:c4:75:14: 03:1a:af:8c:51:7a:b0:ff:ee:ca:bd:96:4f:18:3c:4a:7b:0d: e1:fc:85:fa:11:32:9d:04:04:41:da:9a:8e:8c:16:16:3d:7f: 9f:9a:d2:6a:dd:3e:5a:07:1a:a0:87:f1:84:20:67:dc:0e:c0: f1:d7:c4:10:7c:c2:13:99:8d:8e:bf:2e:68:81:9c:f4:16:0c: 7c:f8:78:ef:3c:70:ca:5d:e9:34:bc:0c:23:81:39:da:a8:ce: f6:4f:07:bf:61:ff:f7:00:53:cb:ee:61:6d:15:c3:09:ea:74: 83:8e:85:26:2b:ac:db:56:0d:8d:76:04:c8:a0:d2:d1:f9:98: c5:4a:22:7e:2a:e9:f4:b9:64:f3:f6:95:cb:27:59:91:19:2a: 36:aa:3b:c0:10:d8:05:f7:9e:9d:88:aa:d6:92:dc:d3:23:b3: 88:7c:72:d1:00:e1:22:32:f5:68:92:7f:2f:d2:f7:eb:04:90: 87:e2:4c:f0:17:73:f6:0e:16:ad:db:42:25:80:90:04:d0:15: 9b:73:04:2f:ab:95:f3:98:e5:f5:34:02:71:d3:7a:c0:62:b5: e8:47:e1:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZa+LJX1wwgZ3DgY7To/sD68l+FYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMwQTYxNkYyQTYzRUJGMEJCMzJFMjVFQzMxM0UxQzky Q0U3NDc2QjAeFw0yNjA5MDIxNDM2MTFaFw0yNjA5MDMxNzMwMTFaMDMxMTAvBgNV BAMTKEREQjdBOUE4RUU2MTdEMjcyMDczMUUyNzRCM0NDNzM4M0U3OTRDMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnNTe2AMwhuenef4ThA32Z0OqG +NzNqIwd+NZPB9/0vUr33BJeaXhIUsZB8EDonnt+ySGmHKeb3KBDytOjXtw58hMl YSL1iL8qNtonDC/dJKJpB7pD4zX6BgQDBLjJloq6iR5mxO1Sy6EOp1XexgJPutVB EE8TdxRqYTHMCDMwokxiW7skTX8Lrn3onEAVrlFBnrlpj2J7JBioK0QQPfzQjB9f p92xdInRpAmJ8ukOGdmGMto+VZ4yqkXWnkKH2Fr47FUSmhigTIDRqbkn8Sx5Zcaq QusQQTQVzaC20TyA8ZHnQw5GK53kbSJ5iRT/u/vhnu+bBImgjf5uHXqoBnlZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3bepqO5hfScgcx4nSzzHOD55TDcwHwYDVR0j BBgwFoAUMwphbypj6/C7MuJewxPhySznR2swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjZlZDA1ODQtYWMyZC00NjY0LWJjMTEtZDAyNmRkYmZhZjdjLzAvMzMwQTYxNkYy QTYzRUJGMEJCMzJFMjVFQzMxM0UxQzkyQ0U3NDc2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMzBBNjE2RjJBNjNFQkYwQkIzMkUyNUVDMzEzRTFDOTJDRTc0 NzZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjZlZDA1ODQtYWMyZC00NjY0LWJj MTEtZDAyNmRkYmZhZjdjLzAvMzMwQTYxNkYyQTYzRUJGMEJCMzJFMjVFQzMxM0Ux QzkyQ0U3NDc2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9EzJ6PaBEzr8TeBumJnZ/wb1ySeF1z1x6H k/vG4Nux38R1FAMar4xRerD/7sq9lk8YPEp7DeH8hfoRMp0EBEHamo6MFhY9f5+a 0mrdPloHGqCH8YQgZ9wOwPHXxBB8whOZjY6/LmiBnPQWDHz4eO88cMpd6TS8DCOB OdqozvZPB79h//cAU8vuYW0VwwnqdIOOhSYrrNtWDY12BMig0tH5mMVKIn4q6fS5 ZPP2lcsnWZEZKjaqO8AQ2AX3np2IqtaS3NMjs4h8ctEA4SIy9WiSfy/S9+sEkIfi TPAXc/YOFq3bQiWAkATQFZtzBC+rlfOY5fU0AnHTesBitehH4S8= -----END CERTIFICATE-----Generated at Thu Sep 3 09:29:34 2026 by rpki-client