$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft File: DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft (raw, json) Hash identifier: ibcQxq7GBWg85XwK9tS97Qc1ei2mD6ZEbMklczVA0sY= Subject key identifier: 7D:0A:ED:5D:E0:3F:61:7E:E4:1F:70:77:8E:B5:FA:D6:63:1E:86:8D Authority key identifier: DE:7C:DE:1E:AB:9B:0E:FB:E8:0E:07:87:47:EE:60:FD:AE:F8:FE:2A Certificate issuer: /CN=DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A Certificate serial: 5B2573ED6FC2F8E137B6AF76DA06B43D5FEA408F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 07:52:12 +0000 Manifest this update: Thu 03 Sep 2026 07:47:12 +0000 Manifest next update: Fri 04 Sep 2026 11:17:12 +0000 Files and hashes: 1: DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl (hash: ZlX9N5tlKkMm+2d8YRyag3dioUIt3Rk8NxlStyeU5lQ=) 2: 3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa (hash: SJt1SBaXEP9+A3/U6mnd55r9+cQvaamR3U/aBvUPC3E=) 3: 3130332e3137312e3138352e302f32342d3234203d3e20313432333734.roa (hash: KJ7p2DQB9uLZReoNNtXLeW/ntHP0ly/9EgDzYMeS9tA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 11:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:25:73:ed:6f:c2:f8:e1:37:b6:af:76:da:06:b4:3d:5f:ea:40:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A Validity Not Before: Sep 3 07:47:12 2026 GMT Not After : Sep 4 11:17:12 2026 GMT Subject: CN=7D0AED5DE03F617EE41F70778EB5FAD6631E868D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9c:c5:cb:19:06:27:03:8c:39:12:87:40:a5: 4e:96:52:d5:69:24:88:e4:55:b5:9a:43:1b:69:6c: 87:19:d0:f0:3a:13:ee:91:28:6c:80:86:f5:10:85: 35:11:f6:7a:3b:b2:1c:d5:8d:f0:9d:45:f9:9c:13: 90:23:82:36:3e:8a:79:24:e5:fd:e8:38:3b:ea:ee: 4f:8e:79:ed:71:c5:51:bd:08:f2:c0:ec:ae:04:e3: be:fd:11:b7:9b:76:35:96:eb:2c:44:22:f2:6a:df: f3:0f:28:76:3a:68:b3:1a:55:dc:62:1b:f4:ba:f3: e0:9d:f3:37:94:e4:a3:ac:79:dd:5e:f4:32:ac:75: 7a:d0:95:67:c0:09:a3:e4:91:8f:c5:56:21:d4:18: c5:f5:4e:17:52:54:16:92:39:05:db:c1:51:17:17: da:0e:05:fb:b1:c9:48:c7:3e:49:3b:11:51:00:f9: 7e:70:e4:37:40:30:37:24:73:44:13:5f:66:2f:4f: 85:ac:7b:13:b3:a1:a8:98:de:55:a9:0c:1b:34:de: 6f:c9:01:85:b5:1c:28:69:f3:c4:f0:7d:69:64:64: 09:f2:45:01:3e:be:bd:3b:2e:56:3a:da:be:fb:ea: c7:56:49:b6:d7:8e:9f:b4:20:33:cb:dc:e8:f4:8c: 83:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0A:ED:5D:E0:3F:61:7E:E4:1F:70:77:8E:B5:FA:D6:63:1E:86:8D X509v3 Authority Key Identifier: keyid:DE:7C:DE:1E:AB:9B:0E:FB:E8:0E:07:87:47:EE:60:FD:AE:F8:FE:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:9d:f0:64:23:94:e2:98:fb:d1:d8:83:e8:36:68:4b:d0:15: 12:3f:b1:f2:41:18:34:cc:66:93:ce:6b:2d:4f:8b:6e:cd:6c: e6:21:3f:9e:17:91:16:6d:49:69:dc:20:c1:6c:a0:47:f8:89: 75:19:19:13:d9:3c:f3:84:e1:e0:98:c9:8d:3e:18:b0:ef:83: 90:f2:98:50:cb:61:08:39:94:c6:62:1b:75:36:0c:9e:a2:98: 00:70:66:08:e3:dc:49:84:94:22:45:be:44:7c:5d:73:aa:e3: 2b:9b:a6:61:38:4e:18:5e:18:5f:c9:dd:ac:a9:54:66:08:81: e7:18:2e:23:eb:27:ee:b7:3f:01:c4:3f:3c:ce:97:2a:38:b2: 06:e0:72:99:76:5f:8a:0d:87:d7:b8:5f:9f:fb:00:21:31:a1: 06:03:99:da:f1:a6:b6:2a:ee:27:d8:8f:05:eb:b5:f1:c1:22: 74:24:18:98:a1:e8:42:9d:97:68:6a:d8:8a:52:e0:ae:26:e4: 5a:53:c9:ea:30:72:67:54:18:ad:fa:37:52:a5:6b:a9:67:7b: df:81:6f:04:e9:6c:2b:c1:91:9a:6a:37:80:a5:0e:59:6b:c6: 99:38:6f:7c:80:96:5d:e2:d6:09:c9:66:8b:77:eb:7e:b0:bc: 9f:fa:b8:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWyVz7W/C+OE3tq922ga0PV/qQI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU3Q0RFMUVBQjlCMEVGQkU4MEUwNzg3NDdFRTYwRkRB RUY4RkUyQTAeFw0yNjA5MDMwNzQ3MTJaFw0yNjA5MDQxMTE3MTJaMDMxMTAvBgNV BAMTKDdEMEFFRDVERTAzRjYxN0VFNDFGNzA3NzhFQjVGQUQ2NjMxRTg2OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvnMXLGQYnA4w5EodApU6WUtVp JIjkVbWaQxtpbIcZ0PA6E+6RKGyAhvUQhTUR9no7shzVjfCdRfmcE5AjgjY+inkk 5f3oODvq7k+Oee1xxVG9CPLA7K4E4779EbebdjWW6yxEIvJq3/MPKHY6aLMaVdxi G/S68+Cd8zeU5KOsed1e9DKsdXrQlWfACaPkkY/FViHUGMX1ThdSVBaSOQXbwVEX F9oOBfuxyUjHPkk7EVEA+X5w5DdAMDckc0QTX2YvT4WsexOzoaiY3lWpDBs03m/J AYW1HChp88TwfWlkZAnyRQE+vr07LlY62r776sdWSbbXjp+0IDPL3Oj0jIPrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfQrtXeA/YX7kH3B3jrX61mMeho0wHwYDVR0j BBgwFoAU3nzeHqubDvvoDgeHR+5g/a74/iowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg1NWY0NTAtZWI3Zi00YTI2LWE2YzQtZjk4MjdlZTBhNWI4LzAvREU3Q0RFMUVB QjlCMEVGQkU4MEUwNzg3NDdFRTYwRkRBRUY4RkUyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERTdDREUxRUFCOUIwRUZCRTgwRTA3ODc0N0VFNjBGREFFRjhG RTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg1NWY0NTAtZWI3Zi00YTI2LWE2 YzQtZjk4MjdlZTBhNWI4LzAvREU3Q0RFMUVBQjlCMEVGQkU4MEUwNzg3NDdFRTYw RkRBRUY4RkUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6d8GQjlOKY+9HYg+g2aEvQFRI/sfJBGDTM ZpPOay1Pi27NbOYhP54XkRZtSWncIMFsoEf4iXUZGRPZPPOE4eCYyY0+GLDvg5Dy mFDLYQg5lMZiG3U2DJ6imABwZgjj3EmElCJFvkR8XXOq4yubpmE4ThheGF/J3ayp VGYIgecYLiPrJ+63PwHEPzzOlyo4sgbgcpl2X4oNh9e4X5/7ACExoQYDmdrxprYq 7ifYjwXrtfHBInQkGJih6EKdl2hq2IpS4K4m5FpTyeowcmdUGK36N1Kla6lne9+B bwTpbCvBkZpqN4ClDllrxpk4b3yAll3i1gnJZot3636wvJ/6uG0= -----END CERTIFICATE-----Generated at Thu Sep 3 13:00:54 2026 by rpki-client