$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft File: 1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft (raw, json) Hash identifier: w9E0NtU+PR2K0piMXr55vkpSsY/a3mG+WPg1Jzf7uMw= Subject key identifier: F7:67:E4:17:50:13:91:0D:91:9A:C1:EB:62:49:D0:69:00:9E:4F:C7 Authority key identifier: 18:90:22:4B:AC:CE:8C:55:1C:12:7A:7F:40:52:EC:E0:A6:8B:C6:AC Certificate issuer: /CN=1890224BACCE8C551C127A7F4052ECE0A68BC6AC Certificate serial: 76620FB61BDC8E79CE8A9937067CE436290B401D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft Manifest number: A7 Signing time: Wed 02 Sep 2026 23:37:18 +0000 Manifest this update: Wed 02 Sep 2026 23:32:18 +0000 Manifest next update: Fri 04 Sep 2026 02:45:18 +0000 Files and hashes: 1: 1890224BACCE8C551C127A7F4052ECE0A68BC6AC.crl (hash: Gv+fFZEI+LZfKSgvDyb+L+0AxHcMpg6IKoaxdlzKegc=) 2: 3130332e3137392e3131372e302f32342d3234203d3e20313431363435.roa (hash: XT0qu0X/ewJ1G8Ps14eM7XvkOXUBLJSpuICPqH+2rFs=) 3: 3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa (hash: vrdxMLho5nkxNsVzaZL33riDh9yKFKVbCWaknvqb6JM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.crl rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 02:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:62:0f:b6:1b:dc:8e:79:ce:8a:99:37:06:7c:e4:36:29:0b:40:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1890224BACCE8C551C127A7F4052ECE0A68BC6AC Validity Not Before: Sep 2 23:32:18 2026 GMT Not After : Sep 4 02:45:18 2026 GMT Subject: CN=F767E4175013910D919AC1EB6249D069009E4FC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fa:13:4a:bb:8d:33:13:fb:d2:cd:09:ce:40: 76:f0:77:c3:47:b4:32:8e:0d:a3:a5:5c:b1:0d:78: b3:34:bf:99:69:6e:e6:5d:85:3d:be:23:bc:b6:a0: 01:c4:cd:fa:21:14:82:98:04:ee:89:e3:cb:d3:17: ac:92:c4:14:80:b7:f0:07:3e:d3:a5:83:16:46:14: 59:55:be:0e:3e:fb:55:ad:ba:f8:c0:5c:78:23:42: fc:be:3c:9f:26:34:b0:ae:23:e8:42:87:7f:25:64: 86:4d:78:ea:b1:25:da:7d:bb:bc:70:8b:d4:70:3c: 44:de:0e:52:4b:2b:80:9a:b6:65:b6:7e:8c:09:44: 6b:cb:67:8b:40:fb:bb:fc:47:35:1c:67:53:17:a0: dd:95:5e:bd:6d:37:72:64:57:e5:50:31:4e:86:b0: 66:b6:90:93:cd:03:90:97:a8:16:36:90:75:f3:7e: 5c:01:45:33:35:ae:f8:59:c5:b2:d3:32:c4:1a:00: bc:c6:6d:c0:34:c0:1f:16:77:56:1a:ac:35:9c:5d: 80:ef:20:bb:a5:92:89:be:75:05:4b:76:c8:19:f3: c4:07:c3:0f:3e:f6:5b:10:09:00:15:a0:95:c6:36: 22:8b:23:52:49:9c:73:1c:35:bd:c5:28:09:3b:22: 1d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:67:E4:17:50:13:91:0D:91:9A:C1:EB:62:49:D0:69:00:9E:4F:C7 X509v3 Authority Key Identifier: keyid:18:90:22:4B:AC:CE:8C:55:1C:12:7A:7F:40:52:EC:E0:A6:8B:C6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:3e:a4:d2:e2:ea:ee:cd:b6:25:b3:f5:5b:63:b9:64:bb:0f: 53:01:b9:82:1b:02:bf:d2:54:c7:f1:57:f8:f3:3d:17:9a:5f: 45:ce:dc:dd:17:2b:0b:8c:b9:43:1c:1a:e3:38:62:8c:b7:6b: 2d:86:11:00:94:c2:0d:92:a7:7d:29:c4:2d:91:72:ea:cf:08: 9b:b7:a7:66:b6:0b:e3:f3:77:36:a9:b3:f4:79:e6:08:c8:ba: 59:59:22:ba:82:92:8d:8d:82:74:21:53:88:c4:0b:ea:6a:b3: 2e:39:ba:e7:7c:ed:92:55:e7:3b:ea:90:20:a1:7c:aa:16:f4: 05:af:16:31:1d:a4:2d:3b:83:35:74:3e:92:83:fc:e0:d8:cb: bb:74:39:f9:87:1c:db:d2:27:ab:1c:7e:38:9e:48:f0:47:59: f7:96:f9:7b:0f:a8:c1:3c:2c:82:8f:0b:fd:8e:51:ee:c3:57: 46:af:42:dd:a6:7f:0c:21:55:00:20:c0:f4:05:f3:64:b2:27: bf:ee:92:4d:63:af:80:6b:c1:31:93:b2:82:fa:79:ac:14:a1: f7:66:89:c5:c1:7f:d6:b6:1f:19:ec:6a:f5:f6:d7:d6:80:c2: 9b:10:00:cb:ab:0a:c7:0a:65:e3:fc:8f:e2:46:b2:5b:2f:f1: 67:1d:20:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdmIPthvcjnnOipk3BnzkNikLQB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg5MDIyNEJBQ0NFOEM1NTFDMTI3QTdGNDA1MkVDRTBB NjhCQzZBQzAeFw0yNjA5MDIyMzMyMThaFw0yNjA5MDQwMjQ1MThaMDMxMTAvBgNV BAMTKEY3NjdFNDE3NTAxMzkxMEQ5MTlBQzFFQjYyNDlEMDY5MDA5RTRGQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt+hNKu40zE/vSzQnOQHbwd8NH tDKODaOlXLENeLM0v5lpbuZdhT2+I7y2oAHEzfohFIKYBO6J48vTF6ySxBSAt/AH PtOlgxZGFFlVvg4++1WtuvjAXHgjQvy+PJ8mNLCuI+hCh38lZIZNeOqxJdp9u7xw i9RwPETeDlJLK4CatmW2fowJRGvLZ4tA+7v8RzUcZ1MXoN2VXr1tN3JkV+VQMU6G sGa2kJPNA5CXqBY2kHXzflwBRTM1rvhZxbLTMsQaALzGbcA0wB8Wd1YarDWcXYDv ILulkom+dQVLdsgZ88QHww8+9lsQCQAVoJXGNiKLI1JJnHMcNb3FKAk7Ih29AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU92fkF1ATkQ2RmsHrYknQaQCeT8cwHwYDVR0j BBgwFoAUGJAiS6zOjFUcEnp/QFLs4KaLxqwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg1M2FmZGQtMmUwOS00NzczLThiZTQtNmZkMGVlOTBiMDQwLzAvMTg5MDIyNEJB Q0NFOEM1NTFDMTI3QTdGNDA1MkVDRTBBNjhCQzZBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xODkwMjI0QkFDQ0U4QzU1MUMxMjdBN0Y0MDUyRUNFMEE2OEJD NkFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg1M2FmZGQtMmUwOS00NzczLThi ZTQtNmZkMGVlOTBiMDQwLzAvMTg5MDIyNEJBQ0NFOEM1NTFDMTI3QTdGNDA1MkVD RTBBNjhCQzZBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGM+pNLi6u7NtiWz9VtjuWS7D1MBuYIbAr/S VMfxV/jzPReaX0XO3N0XKwuMuUMcGuM4Yoy3ay2GEQCUwg2Sp30pxC2RcurPCJu3 p2a2C+Pzdzaps/R55gjIullZIrqCko2NgnQhU4jEC+pqsy45uud87ZJV5zvqkCCh fKoW9AWvFjEdpC07gzV0PpKD/ODYy7t0OfmHHNvSJ6scfjieSPBHWfeW+XsPqME8 LIKPC/2OUe7DV0avQt2mfwwhVQAgwPQF82SyJ7/ukk1jr4BrwTGTsoL6eawUofdm icXBf9a2HxnsavX219aAwpsQAMurCscKZeP8j+JGslsv8WcdILk= -----END CERTIFICATE-----Generated at Thu Sep 3 12:37:48 2026 by rpki-client