$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft File: 000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft (raw, json) Hash identifier: 5BcRwq+yZ7Sjqe6iK9M6stM41FN6dvZ6P+dhriRphLc= Subject key identifier: D3:29:EF:95:2E:F8:F0:5B:20:E1:01:64:00:7C:5F:E5:A1:18:A8:68 Authority key identifier: 00:0E:7B:7E:BF:54:3F:37:AC:F1:13:75:D2:84:62:A8:D3:88:4A:2C Certificate issuer: /CN=000E7B7EBF543F37ACF11375D28462A8D3884A2C Certificate serial: 6BD0BA0A68DAC09EA1A859638FA6F2D86ACDE024 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000E7B7EBF543F37ACF11375D28462A8D3884A2C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft Manifest number: A7 Signing time: Fri 04 Sep 2026 00:52:50 +0000 Manifest this update: Fri 04 Sep 2026 00:47:50 +0000 Manifest next update: Sat 05 Sep 2026 04:37:50 +0000 Files and hashes: 1: 3130332e3138322e37392e302f32342d3234203d3e20313439363635.roa (hash: wNmcHEP7INI2aFk4SmiaXDxMKbebGinF42Oo0vPEfiI=) 2: 000E7B7EBF543F37ACF11375D28462A8D3884A2C.crl (hash: qIC4uo1fZ/+JiBV772JRcaAeHuj0z3mBdaejPMjmb/w=) 3: 3130332e3138322e37382e302f32332d3234203d3e20313439363635.roa (hash: sBUWSQhH/+kN71t/+kxa/DRZ1SSem+XB/ohn5pBy7QU=) 4: 3130332e3138322e37382e302f32342d3234203d3e20313439363635.roa (hash: KYaeVRiuR7REacNL+jOc17uQNgw/wuM1lcqqpw6kOjQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.crl rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000E7B7EBF543F37ACF11375D28462A8D3884A2C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 04:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:d0:ba:0a:68:da:c0:9e:a1:a8:59:63:8f:a6:f2:d8:6a:cd:e0:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=000E7B7EBF543F37ACF11375D28462A8D3884A2C Validity Not Before: Sep 4 00:47:50 2026 GMT Not After : Sep 5 04:37:50 2026 GMT Subject: CN=D329EF952EF8F05B20E10164007C5FE5A118A868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:eb:07:1f:93:d7:a4:29:b4:7d:e9:46:60:79: 93:87:00:77:1d:8b:e2:cf:70:b1:a9:03:2a:e6:0c: c7:81:62:58:8a:fd:2d:1d:79:17:27:da:72:35:dc: 6d:d2:e2:54:89:66:2a:f5:54:47:30:5c:63:b1:7b: 3d:0f:72:5e:a9:cf:5a:27:92:8f:85:49:89:00:07: 02:00:67:ac:27:78:b7:a1:45:e8:b0:c4:08:50:98: 0b:2f:ae:29:50:86:d2:1d:a8:39:7f:c4:33:2f:dd: f2:74:ce:fc:e9:6c:89:c7:99:83:d7:83:aa:6d:06: 71:8a:22:64:95:9b:d6:5d:9a:8b:9a:da:33:af:d9: 8f:94:b0:d3:07:20:35:02:ef:af:97:ff:7d:be:c6: 7b:be:cb:c5:fe:81:f7:b0:fe:e8:fc:8a:b0:6b:88: a1:2f:95:34:6e:18:08:71:d7:71:7a:b5:e0:d8:57: ac:4a:be:40:84:77:70:87:ff:a1:5f:42:35:a2:58: 6b:49:3d:78:5c:38:2c:2c:e9:be:2c:93:1c:27:c5: 41:77:19:d3:9c:c4:99:1d:d2:d5:28:95:e5:10:6f: f9:0d:ed:36:c0:a4:5a:4b:69:5c:94:aa:5c:71:07: 23:29:8d:63:65:b5:87:b0:b5:d2:27:1d:80:cd:04: 5b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:29:EF:95:2E:F8:F0:5B:20:E1:01:64:00:7C:5F:E5:A1:18:A8:68 X509v3 Authority Key Identifier: keyid:00:0E:7B:7E:BF:54:3F:37:AC:F1:13:75:D2:84:62:A8:D3:88:4A:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000E7B7EBF543F37ACF11375D28462A8D3884A2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:cb:ff:29:41:52:f9:a0:a5:d9:25:37:5a:f5:b3:a5:ab:36: a7:19:98:4a:f7:d0:17:87:cc:13:bf:95:69:6c:60:48:59:69: b1:07:45:64:26:49:af:37:b0:67:1b:42:3e:9f:03:11:32:cf: 28:d2:6d:fa:4f:ce:cf:79:ac:b3:a6:44:7a:5a:d5:14:3b:a4: 02:ff:e6:b4:d4:2a:71:46:01:01:dc:8a:de:d6:6e:c0:e5:47: 6b:85:91:05:b3:92:fa:81:a4:4e:33:b6:95:b9:bc:05:97:f6: 1a:9d:a7:f4:b8:17:d3:ef:f3:15:d8:40:25:01:e5:c6:46:e5: 68:a1:89:39:91:5e:d4:60:1e:1c:40:e7:55:a6:72:01:94:02: eb:f6:03:47:74:0a:d8:31:90:08:14:fd:cf:ac:33:9f:6c:9e: 90:cc:3b:92:9f:f5:7f:6a:82:20:aa:5a:f9:74:b7:01:d0:49: b4:e4:e5:43:18:a5:aa:83:e4:47:58:49:f5:69:47:f3:de:e4: 7f:29:4f:9f:3d:3f:5f:d8:b0:e7:e8:d5:93:0d:b7:ff:9a:2b: 54:8b:c8:c2:b8:f7:f4:d2:9a:9e:3f:62:e2:2b:e3:72:8d:1d: 88:63:69:75:77:1d:a9:24:20:2b:9a:9e:24:a7:22:99:78:ad: 5f:bc:a2:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa9C6CmjawJ6hqFljj6by2GrN4CQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDAwRTdCN0VCRjU0M0YzN0FDRjExMzc1RDI4NDYyQThE Mzg4NEEyQzAeFw0yNjA5MDQwMDQ3NTBaFw0yNjA5MDUwNDM3NTBaMDMxMTAvBgNV BAMTKEQzMjlFRjk1MkVGOEYwNUIyMEUxMDE2NDAwN0M1RkU1QTExOEE4NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm6wcfk9ekKbR96UZgeZOHAHcd i+LPcLGpAyrmDMeBYliK/S0deRcn2nI13G3S4lSJZir1VEcwXGOxez0Pcl6pz1on ko+FSYkABwIAZ6wneLehReiwxAhQmAsvrilQhtIdqDl/xDMv3fJ0zvzpbInHmYPX g6ptBnGKImSVm9Zdmoua2jOv2Y+UsNMHIDUC76+X/32+xnu+y8X+gfew/uj8irBr iKEvlTRuGAhx13F6teDYV6xKvkCEd3CH/6FfQjWiWGtJPXhcOCws6b4skxwnxUF3 GdOcxJkd0tUoleUQb/kN7TbApFpLaVyUqlxxByMpjWNltYewtdInHYDNBFuzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0ynvlS748Fsg4QFkAHxf5aEYqGgwHwYDVR0j BBgwFoAUAA57fr9UPzes8RN10oRiqNOISiwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjM0YzMzYjgtOWQ0Mi00MjA4LThhYzQtZjE3MmExNDRkODY4LzAvMDAwRTdCN0VC RjU0M0YzN0FDRjExMzc1RDI4NDYyQThEMzg4NEEyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDBFN0I3RUJGNTQzRjM3QUNGMTEzNzVEMjg0NjJBOEQzODg0 QTJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjM0YzMzYjgtOWQ0Mi00MjA4LThh YzQtZjE3MmExNDRkODY4LzAvMDAwRTdCN0VCRjU0M0YzN0FDRjExMzc1RDI4NDYy QThEMzg4NEEyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLL/ylBUvmgpdklN1r1s6WrNqcZmEr30BeH zBO/lWlsYEhZabEHRWQmSa83sGcbQj6fAxEyzyjSbfpPzs95rLOmRHpa1RQ7pAL/ 5rTUKnFGAQHcit7WbsDlR2uFkQWzkvqBpE4ztpW5vAWX9hqdp/S4F9Pv8xXYQCUB 5cZG5WihiTmRXtRgHhxA51WmcgGUAuv2A0d0CtgxkAgU/c+sM59snpDMO5Kf9X9q giCqWvl0twHQSbTk5UMYpaqD5EdYSfVpR/Pe5H8pT589P1/YsOfo1ZMNt/+aK1SL yMK49/TSmp4/YuIr43KNHYhjaXV3HakkICuaniSnIpl4rV+8oq8= -----END CERTIFICATE-----Generated at Fri Sep 4 17:39:45 2026 by rpki-client