$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft File: 7D748C9993BD612EB4DED86D78A542650C0739D2.mft (raw, json) Hash identifier: mmomMOm2wU8MCw8Th/tadaFmp/5b7VUJQcpPO95HMVE= Subject key identifier: 7F:EF:0B:A2:D8:FA:10:69:73:75:C6:36:F7:8C:C0:27:05:2E:A5:4C Authority key identifier: 7D:74:8C:99:93:BD:61:2E:B4:DE:D8:6D:78:A5:42:65:0C:07:39:D2 Certificate issuer: /CN=7D748C9993BD612EB4DED86D78A542650C0739D2 Certificate serial: 12FB43D7F2D1B8FB7121716B760A66645B1F2A8E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D748C9993BD612EB4DED86D78A542650C0739D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 19:21:35 +0000 Manifest this update: Wed 02 Sep 2026 19:16:35 +0000 Manifest next update: Thu 03 Sep 2026 20:49:35 +0000 Files and hashes: 1: 3130332e35322e31362e302f32322d3234203d3e20313333383131.roa (hash: F4nsqoozGK4NB7nZpkqT2Hnvk+Lf+l5FrVBWD/7xIok=) 2: 7D748C9993BD612EB4DED86D78A542650C0739D2.crl (hash: Rw/RVbCLvKCh97kpSfNgdwvhtNmaTqgcspvvB/ZAT8E=) 3: 3130332e35322e31382e302f32342d3234203d3e20313333383131.roa (hash: snzhp1flNHDzfwgs9QpaPIIaMwshl5sSyA4vnDdYKDg=) 4: 3130332e35322e31392e302f32342d3234203d3e20313333383131.roa (hash: 8hxKIphl2RuDK+xff1DI7cxGB0tqauW81xIpHuvLInE=) 5: 3130332e35322e31372e302f32342d3234203d3e20313333383131.roa (hash: Qng22t+/fZctwuGfY/oz7Ui18hIgTE9U9nLKddDnqOw=) 6: 3130332e35322e31362e302f32342d3234203d3e20313333383131.roa (hash: nZpFFdv+h1rTWhfuw6ZS6/7x9CDvhNusGoKBRBaU3O4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.crl rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D748C9993BD612EB4DED86D78A542650C0739D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 20:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:fb:43:d7:f2:d1:b8:fb:71:21:71:6b:76:0a:66:64:5b:1f:2a:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D748C9993BD612EB4DED86D78A542650C0739D2 Validity Not Before: Sep 2 19:16:35 2026 GMT Not After : Sep 3 20:49:35 2026 GMT Subject: CN=7FEF0BA2D8FA10697375C636F78CC027052EA54C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:77:17:cb:3a:8d:d6:37:6c:18:ac:0e:7d:37: 34:e2:32:e2:1d:9c:b8:19:b5:30:f3:3c:6f:4d:95: 47:50:de:74:a0:ec:af:d4:91:a0:65:d9:ea:a3:28: 23:f1:56:f2:58:e7:cf:8a:e6:f0:97:77:2f:a6:4c: f6:dd:58:25:7f:e7:70:1e:17:48:fe:69:b5:d6:91: 32:1c:94:4d:ec:28:52:c6:37:86:0d:82:24:e2:96: 65:e7:db:15:1f:bd:06:17:e3:14:e7:71:e2:0f:d5: d8:80:33:4c:29:4a:1a:57:b0:16:f6:b8:66:08:e7: 22:4e:30:d0:43:a4:51:8c:94:43:c3:3a:c9:21:11: cf:55:04:fe:33:af:5d:26:20:a4:d2:79:61:48:56: 4d:c2:a5:ef:66:24:3f:71:52:ab:8a:a1:32:b3:6e: ae:b0:0c:8c:eb:7c:65:b4:5b:e6:17:de:79:ab:7f: 4d:ac:d8:f3:e1:3c:50:b0:a9:2e:06:10:3a:52:40: 16:20:04:21:9f:69:e9:d9:fb:c6:bb:66:3a:f2:e0: ca:ab:c3:1e:1f:a7:6f:ce:ec:da:a9:b8:c9:eb:c9: 08:3c:54:be:80:cc:d6:13:95:c3:5b:18:6f:f3:4a: e7:2d:3e:17:89:ba:76:38:e7:e8:d0:df:68:ba:54: da:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EF:0B:A2:D8:FA:10:69:73:75:C6:36:F7:8C:C0:27:05:2E:A5:4C X509v3 Authority Key Identifier: keyid:7D:74:8C:99:93:BD:61:2E:B4:DE:D8:6D:78:A5:42:65:0C:07:39:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D748C9993BD612EB4DED86D78A542650C0739D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:1f:be:34:bb:a7:f4:c2:27:c8:7a:10:cc:09:f0:86:99:cc: 6c:8f:14:ce:ed:6f:42:ff:7f:00:cf:63:e6:8c:cf:99:c4:91: a8:2b:f8:5c:f5:11:28:21:94:53:1d:e4:35:67:49:52:ff:18: 49:79:57:83:41:3b:3c:0f:ae:6d:84:2d:e8:96:3a:1f:ad:bf: df:90:a1:df:88:26:09:c4:a8:a9:58:ae:38:40:20:8c:5a:28: b0:5f:d6:96:cb:ef:98:c7:a5:9a:0c:15:ff:16:c6:6d:60:55: 7b:2e:fc:8c:5d:fa:e2:3d:1e:e9:6c:ca:1e:9f:15:4c:16:bc: 78:4f:42:12:b5:71:de:56:1a:41:06:09:ac:49:0a:50:0e:3f: 0d:12:84:a0:eb:7d:7b:24:f6:a1:78:99:eb:21:cf:41:6c:ee: aa:f9:9c:4f:85:32:7c:64:02:34:14:f8:a3:de:bf:84:cf:51: 34:b4:b9:a8:f5:9c:28:89:8f:5a:b4:bf:d2:f8:d3:7a:a9:36: af:cb:99:22:2d:ac:d6:98:f9:5c:6f:4b:ee:56:84:4b:47:08: 58:51:38:65:ad:a0:d7:47:8e:83:fc:da:2c:f6:13:c7:a5:eb: 51:5c:80:b9:56:8b:cd:79:40:6a:f3:4c:dc:d3:b4:96:da:d8: 54:9a:66:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEvtD1/LRuPtxIXFrdgpmZFsfKo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q3NDhDOTk5M0JENjEyRUI0REVEODZENzhBNTQyNjUw QzA3MzlEMjAeFw0yNjA5MDIxOTE2MzVaFw0yNjA5MDMyMDQ5MzVaMDMxMTAvBgNV BAMTKDdGRUYwQkEyRDhGQTEwNjk3Mzc1QzYzNkY3OENDMDI3MDUyRUE1NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxdxfLOo3WN2wYrA59NzTiMuId nLgZtTDzPG9NlUdQ3nSg7K/UkaBl2eqjKCPxVvJY58+K5vCXdy+mTPbdWCV/53Ae F0j+abXWkTIclE3sKFLGN4YNgiTilmXn2xUfvQYX4xTnceIP1diAM0wpShpXsBb2 uGYI5yJOMNBDpFGMlEPDOskhEc9VBP4zr10mIKTSeWFIVk3Cpe9mJD9xUquKoTKz bq6wDIzrfGW0W+YX3nmrf02s2PPhPFCwqS4GEDpSQBYgBCGfaenZ+8a7Zjry4Mqr wx4fp2/O7NqpuMnryQg8VL6AzNYTlcNbGG/zSuctPheJunY45+jQ32i6VNrZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf+8Lotj6EGlzdcY294zAJwUupUwwHwYDVR0j BBgwFoAUfXSMmZO9YS603thteKVCZQwHOdIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFkZDdjMGYtMDJkMy00MjE3LTlmYzMtMDA0N2FlMTgzNmRjLzAvN0Q3NDhDOTk5 M0JENjEyRUI0REVEODZENzhBNTQyNjUwQzA3MzlEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDc0OEM5OTkzQkQ2MTJFQjRERUQ4NkQ3OEE1NDI2NTBDMDcz OUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFkZDdjMGYtMDJkMy00MjE3LTlm YzMtMDA0N2FlMTgzNmRjLzAvN0Q3NDhDOTk5M0JENjEyRUI0REVEODZENzhBNTQy NjUwQzA3MzlEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMIfvjS7p/TCJ8h6EMwJ8IaZzGyPFM7tb0L/ fwDPY+aMz5nEkagr+Fz1ESghlFMd5DVnSVL/GEl5V4NBOzwPrm2ELeiWOh+tv9+Q od+IJgnEqKlYrjhAIIxaKLBf1pbL75jHpZoMFf8Wxm1gVXsu/Ixd+uI9Hulsyh6f FUwWvHhPQhK1cd5WGkEGCaxJClAOPw0ShKDrfXsk9qF4meshz0Fs7qr5nE+FMnxk AjQU+KPev4TPUTS0uaj1nCiJj1q0v9L403qpNq/LmSItrNaY+VxvS+5WhEtHCFhR OGWtoNdHjoP82iz2E8el61FcgLlWi815QGrzTNzTtJba2FSaZho= -----END CERTIFICATE-----Generated at Thu Sep 3 05:20:34 2026 by rpki-client