$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.mft File: 530B657BC2C884CC14953B48E6700F4395D4AE66.mft (raw, json) Hash identifier: MbjPaHEgzNi4isJuRT6mPlgbIPOG4OqkqAL/+JWWutw= Subject key identifier: A7:F0:64:38:47:0B:02:64:BD:35:34:01:A6:9C:E5:A7:DE:5A:33:A7 Authority key identifier: 53:0B:65:7B:C2:C8:84:CC:14:95:3B:48:E6:70:0F:43:95:D4:AE:66 Certificate issuer: /CN=530B657BC2C884CC14953B48E6700F4395D4AE66 Certificate serial: 3001D976F308A599260C710AE2840568D4B41801 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/530B657BC2C884CC14953B48E6700F4395D4AE66.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.mft Manifest number: A7 Signing time: Wed 02 Sep 2026 22:51:07 +0000 Manifest this update: Wed 02 Sep 2026 22:46:07 +0000 Manifest next update: Fri 04 Sep 2026 00:36:07 +0000 Files and hashes: 1: 3130332e39312e3134382e302f32342d3234203d3e20313530393139.roa (hash: twC7JvDoInB/4rtJFFg+lB4BVq30Kkq/oNt5ibEPmaY=) 2: 3130332e39312e3134392e302f32342d3234203d3e20313339393637.roa (hash: hHEDiD3x1jCZU7rbFxON3QBOnaHax4YzsCxjk1ivhKM=) 3: 530B657BC2C884CC14953B48E6700F4395D4AE66.crl (hash: rIv3J+NoZP8R8bv7lApzNTd2Si8GTpUuFlY2rmEb5f8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.crl rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/530B657BC2C884CC14953B48E6700F4395D4AE66.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 00:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:01:d9:76:f3:08:a5:99:26:0c:71:0a:e2:84:05:68:d4:b4:18:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=530B657BC2C884CC14953B48E6700F4395D4AE66 Validity Not Before: Sep 2 22:46:07 2026 GMT Not After : Sep 4 00:36:07 2026 GMT Subject: CN=A7F06438470B0264BD353401A69CE5A7DE5A33A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:22:0c:26:f6:0a:04:f1:7a:33:b0:0d:88:dd: 09:8f:3f:07:60:f9:16:79:47:61:e4:3f:40:43:ea: f9:07:84:6e:e0:93:c5:8e:5f:44:5b:b2:b7:71:7f: 89:70:16:2d:7a:de:97:7b:36:c8:0e:a5:be:a6:f9: 07:4c:55:68:2f:4d:70:99:c8:84:76:bd:af:37:aa: 03:0e:f3:6f:a9:77:c3:55:02:e7:ca:fa:e7:e1:8d: ef:f9:3f:32:95:65:70:10:1c:07:4f:ee:28:83:f6: 34:ae:80:35:d2:0b:81:9d:48:10:82:dd:90:3f:7b: aa:71:9d:57:8b:d6:e1:25:d1:11:44:83:bf:33:93: 96:e9:6a:4a:5f:3c:b3:c1:0c:23:86:6f:e0:dc:16: 0e:bc:b8:a1:30:bb:65:74:7a:fb:25:77:22:16:23: 3c:c9:b1:b2:94:e8:9e:0e:ee:d4:7e:cc:53:4c:f8: 4a:78:cf:44:4a:d2:2f:a7:f0:d4:28:74:2f:87:95: be:02:b9:35:09:9f:ce:29:b9:c7:98:d0:c1:e6:60: f0:75:8d:c3:5f:6d:0a:08:53:1a:b2:81:8b:d8:e6: de:cc:60:27:9f:d5:51:3e:46:e7:af:05:64:02:41: a9:7f:c0:c0:b4:10:16:9d:a3:b2:7f:50:e3:cf:1c: a8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F0:64:38:47:0B:02:64:BD:35:34:01:A6:9C:E5:A7:DE:5A:33:A7 X509v3 Authority Key Identifier: keyid:53:0B:65:7B:C2:C8:84:CC:14:95:3B:48:E6:70:0F:43:95:D4:AE:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/530B657BC2C884CC14953B48E6700F4395D4AE66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a9:c1:01:db:b8:f4:94:d4:da:2f:3c:84:26:46:03:36:c0: 23:01:f3:09:39:c4:94:eb:d5:39:cb:6d:62:4e:3e:fe:0d:69: 2f:c8:18:b2:c1:a5:83:13:d1:1b:42:1e:0b:e3:d7:71:28:c2: d8:01:80:73:07:48:ce:0b:62:a9:25:a6:43:b6:1a:bd:41:7f: 1a:c5:8d:d6:35:60:90:4d:1b:8a:51:5e:d0:c6:c0:24:32:53: b3:b9:dc:10:cc:07:6c:45:43:58:18:f0:d7:89:d2:8e:9d:cd: fc:84:79:39:38:08:b6:ff:9c:56:af:06:8b:a8:2a:91:48:4b: 41:54:c1:5c:72:76:f7:17:70:85:7b:52:cb:a1:97:73:24:49: 0f:6b:00:42:8f:24:9e:0c:55:25:5b:2c:e1:b5:af:7f:e1:33: fd:a5:19:97:bb:e6:55:ab:93:b4:45:9b:96:40:88:af:9d:05: 92:af:db:46:ad:4e:7b:59:94:9d:9f:aa:e6:34:68:31:59:11: 80:d5:b8:7c:0c:70:1e:88:31:6c:74:5a:c6:8c:ef:d1:3e:f3: b3:63:af:70:96:0e:61:6e:c7:51:e8:dc:d4:34:11:db:8f:64: 6a:69:95:ed:1e:58:4f:07:d2:c6:2b:a7:bd:2d:75:ff:83:15: 53:54:0f:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMAHZdvMIpZkmDHEK4oQFaNS0GAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMwQjY1N0JDMkM4ODRDQzE0OTUzQjQ4RTY3MDBGNDM5 NUQ0QUU2NjAeFw0yNjA5MDIyMjQ2MDdaFw0yNjA5MDQwMDM2MDdaMDMxMTAvBgNV BAMTKEE3RjA2NDM4NDcwQjAyNjRCRDM1MzQwMUE2OUNFNUE3REU1QTMzQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSIgwm9goE8XozsA2I3QmPPwdg +RZ5R2HkP0BD6vkHhG7gk8WOX0Rbsrdxf4lwFi163pd7NsgOpb6m+QdMVWgvTXCZ yIR2va83qgMO82+pd8NVAufK+ufhje/5PzKVZXAQHAdP7iiD9jSugDXSC4GdSBCC 3ZA/e6pxnVeL1uEl0RFEg78zk5bpakpfPLPBDCOGb+DcFg68uKEwu2V0evsldyIW IzzJsbKU6J4O7tR+zFNM+Ep4z0RK0i+n8NQodC+Hlb4CuTUJn84puceY0MHmYPB1 jcNfbQoIUxqygYvY5t7MYCef1VE+RuevBWQCQal/wMC0EBado7J/UOPPHKiDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp/BkOEcLAmS9NTQBppzlp95aM6cwHwYDVR0j BBgwFoAUUwtle8LIhMwUlTtI5nAPQ5XUrmYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDI3NWZkNzYtZThlZS00NmM4LTlkODItYjczNWI5ZjcwNDMxLzAvNTMwQjY1N0JD MkM4ODRDQzE0OTUzQjQ4RTY3MDBGNDM5NUQ0QUU2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzBCNjU3QkMyQzg4NENDMTQ5NTNCNDhFNjcwMEY0Mzk1RDRB RTY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDI3NWZkNzYtZThlZS00NmM4LTlk ODItYjczNWI5ZjcwNDMxLzAvNTMwQjY1N0JDMkM4ODRDQzE0OTUzQjQ4RTY3MDBG NDM5NUQ0QUU2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2pwQHbuPSU1NovPIQmRgM2wCMB8wk5xJTr 1TnLbWJOPv4NaS/IGLLBpYMT0RtCHgvj13EowtgBgHMHSM4LYqklpkO2Gr1BfxrF jdY1YJBNG4pRXtDGwCQyU7O53BDMB2xFQ1gY8NeJ0o6dzfyEeTk4CLb/nFavBouo KpFIS0FUwVxydvcXcIV7Usuhl3MkSQ9rAEKPJJ4MVSVbLOG1r3/hM/2lGZe75lWr k7RFm5ZAiK+dBZKv20atTntZlJ2fquY0aDFZEYDVuHwMcB6IMWx0WsaM79E+87Nj r3CWDmFux1Ho3NQ0EduPZGpple0eWE8H0sYrp70tdf+DFVNUD7A= -----END CERTIFICATE-----Generated at Thu Sep 3 12:40:49 2026 by rpki-client