$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft File: D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft (raw, json) Hash identifier: mkq+3cz8DyKpkSeMDvz0jAbvjy0AuDKWDlLAqrY02FA= Subject key identifier: 6A:68:78:7E:27:25:FB:D8:77:3F:C8:6B:84:AA:33:0C:B6:54:76:CB Authority key identifier: D0:07:B7:68:F6:76:B7:86:50:AA:82:8F:A3:D4:B1:BB:E2:8E:ED:3A Certificate issuer: /CN=D007B768F676B78650AA828FA3D4B1BBE28EED3A Certificate serial: 632C323F7E4878977148C68692E25739F48E678B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D007B768F676B78650AA828FA3D4B1BBE28EED3A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 10:19:52 +0000 Manifest this update: Thu 03 Sep 2026 10:14:52 +0000 Manifest next update: Fri 04 Sep 2026 14:01:52 +0000 Files and hashes: 1: D007B768F676B78650AA828FA3D4B1BBE28EED3A.crl (hash: npv6HTrOztOyb1kH0qVYzwaqsiHkrg7GMTrkwbRGmNs=) 2: 3130332e3233342e33342e302f32332d3233203d3e20313531353231.roa (hash: v4OcOT72Y+Fw3xPxNhOv5K2oe1NqroMaIJLaKP7M7LE=) 3: 3130332e3233342e33342e302f32342d3234203d3e20313531353231.roa (hash: XXYg212KqJilVz4UQhoA9JNZDN5djYbD/oi5ScwKYIs=) 4: 3130332e3233342e33352e302f32342d3234203d3e20313531353231.roa (hash: osJeCPZtE9R9btD8iw5N1b2W8PoHsZHfReclzn2JK+k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.crl rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D007B768F676B78650AA828FA3D4B1BBE28EED3A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:2c:32:3f:7e:48:78:97:71:48:c6:86:92:e2:57:39:f4:8e:67:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D007B768F676B78650AA828FA3D4B1BBE28EED3A Validity Not Before: Sep 3 10:14:52 2026 GMT Not After : Sep 4 14:01:52 2026 GMT Subject: CN=6A68787E2725FBD8773FC86B84AA330CB65476CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f3:70:77:06:ee:00:78:a0:39:13:11:3f:13: 7f:50:74:86:01:c8:d3:c4:1a:e2:4e:73:8d:c4:64: 3d:36:f7:c1:69:d4:fa:e8:65:19:62:d3:a4:1c:44: e8:be:e5:ce:7e:cb:22:c6:47:3c:9c:a2:2b:5b:a0: 18:7f:e7:eb:32:ce:d7:12:3d:d3:9f:0e:2b:52:22: 89:d9:f6:3c:ac:36:3f:38:4a:3b:93:0a:97:1f:a6: 31:71:62:dc:16:c6:ca:c9:de:ff:15:57:dc:c5:2c: 99:89:8a:ca:8a:4d:00:a7:dc:89:af:3d:7e:e9:cb: 5e:6c:c5:7d:58:15:68:e8:be:54:e8:f3:7f:53:89: ad:80:1a:c2:c5:51:ea:93:7f:79:84:a2:77:36:84: d6:f1:05:bc:ed:97:aa:93:3b:c0:33:e5:13:ed:89: a7:f7:64:77:b5:74:15:18:da:2c:e5:b5:71:17:fa: 96:c8:33:b1:9a:68:96:f3:b1:b4:db:7a:1a:9f:27: c8:ba:84:e3:17:85:47:0d:57:c6:81:a6:be:3e:55: ca:21:0a:66:50:83:b6:bd:d4:e2:78:a6:40:91:7a: 70:72:96:60:c5:ac:a1:3e:65:32:0b:70:33:23:4e: 11:2d:80:56:71:a9:b2:25:3f:4c:37:b7:87:ae:e4: b5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:68:78:7E:27:25:FB:D8:77:3F:C8:6B:84:AA:33:0C:B6:54:76:CB X509v3 Authority Key Identifier: keyid:D0:07:B7:68:F6:76:B7:86:50:AA:82:8F:A3:D4:B1:BB:E2:8E:ED:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D007B768F676B78650AA828FA3D4B1BBE28EED3A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:b1:8b:36:8d:7a:55:30:b0:f2:5d:12:4b:9d:c4:7f:f4:2d: 5c:79:53:11:d7:49:82:07:d1:e1:9b:cd:19:2e:ad:ea:81:69: 78:4c:ba:a1:be:55:91:3a:f5:e0:c5:f0:7e:ee:c7:77:a0:b0: b2:06:12:ed:ae:a3:0f:22:6c:34:5a:13:7c:f3:9d:bb:78:1b: f7:45:e4:73:d8:a2:38:02:63:cb:38:6d:5e:d5:08:a9:b2:d8: 95:ce:15:a9:67:c8:5f:c0:55:78:7d:97:d8:1e:51:91:09:b5: 9e:1e:71:a4:0f:87:80:3a:43:30:25:01:dc:ca:b5:f9:0d:8d: 51:34:4d:d3:af:78:0b:7c:73:86:34:0c:4c:a1:f2:d5:62:35: 1c:a3:01:ce:88:99:b2:e4:b5:4e:d6:75:37:f4:68:2b:e0:ae: 75:1c:d2:32:e7:a1:8e:4f:a7:87:92:af:29:47:36:08:9b:74: 08:17:80:d3:68:56:83:6f:9f:6e:6f:cd:79:cc:95:0f:2f:ad: 7c:4e:ee:67:05:eb:95:ae:68:db:5d:21:0c:9f:53:1b:13:a9: c9:d8:b2:39:83:e9:6a:7b:ec:2b:fe:38:8b:08:a7:06:43:4f: 62:a0:1e:f0:cb:ef:69:6a:55:d2:33:46:cc:89:94:71:ba:52: 34:56:42:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYywyP35IeJdxSMaGkuJXOfSOZ4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAwN0I3NjhGNjc2Qjc4NjUwQUE4MjhGQTNENEIxQkJF MjhFRUQzQTAeFw0yNjA5MDMxMDE0NTJaFw0yNjA5MDQxNDAxNTJaMDMxMTAvBgNV BAMTKDZBNjg3ODdFMjcyNUZCRDg3NzNGQzg2Qjg0QUEzMzBDQjY1NDc2Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM83B3Bu4AeKA5ExE/E39QdIYB yNPEGuJOc43EZD0298Fp1ProZRli06QcROi+5c5+yyLGRzycoitboBh/5+syztcS PdOfDitSIonZ9jysNj84SjuTCpcfpjFxYtwWxsrJ3v8VV9zFLJmJisqKTQCn3Imv PX7py15sxX1YFWjovlTo839Tia2AGsLFUeqTf3mEonc2hNbxBbztl6qTO8Az5RPt iaf3ZHe1dBUY2izltXEX+pbIM7GaaJbzsbTbehqfJ8i6hOMXhUcNV8aBpr4+Vcoh CmZQg7a91OJ4pkCRenBylmDFrKE+ZTILcDMjThEtgFZxqbIlP0w3t4eu5LVVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUamh4ficl+9h3P8hrhKozDLZUdsswHwYDVR0j BBgwFoAU0Ae3aPZ2t4ZQqoKPo9Sxu+KO7TowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdhNmIyM2ItYzQxZS00NDQ5LWExNDktYmMwYzZjOGIwMTFiLzAvRDAwN0I3NjhG Njc2Qjc4NjUwQUE4MjhGQTNENEIxQkJFMjhFRUQzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMDA3Qjc2OEY2NzZCNzg2NTBBQTgyOEZBM0Q0QjFCQkUyOEVF RDNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdhNmIyM2ItYzQxZS00NDQ5LWEx NDktYmMwYzZjOGIwMTFiLzAvRDAwN0I3NjhGNjc2Qjc4NjUwQUE4MjhGQTNENEIx QkJFMjhFRUQzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJexizaNelUwsPJdEkudxH/0LVx5UxHXSYIH 0eGbzRkureqBaXhMuqG+VZE69eDF8H7ux3egsLIGEu2uow8ibDRaE3zznbt4G/dF 5HPYojgCY8s4bV7VCKmy2JXOFalnyF/AVXh9l9geUZEJtZ4ecaQPh4A6QzAlAdzK tfkNjVE0TdOveAt8c4Y0DEyh8tViNRyjAc6ImbLktU7WdTf0aCvgrnUc0jLnoY5P p4eSrylHNgibdAgXgNNoVoNvn25vzXnMlQ8vrXxO7mcF65WuaNtdIQyfUxsTqcnY sjmD6Wp77Cv+OIsIpwZDT2KgHvDL72lqVdIzRsyJlHG6UjRWQkc= -----END CERTIFICATE-----Generated at Thu Sep 3 17:15:13 2026 by rpki-client