$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft File: D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft (raw, json) Hash identifier: 5AM668v6Yg8FpxnCqnBib/iWlzAScxi4+blQjqaE2go= Subject key identifier: 85:DA:C5:10:50:A3:39:43:24:C5:FB:92:17:89:0F:EC:35:55:2D:84 Authority key identifier: D2:70:7D:53:E0:7D:53:B0:0A:F1:91:7C:7B:06:CA:FE:0B:48:C1:05 Certificate issuer: /CN=D2707D53E07D53B00AF1917C7B06CAFE0B48C105 Certificate serial: 20A3CB3E437A9697850FE3FB4B2D1D03EF621077 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 06:10:23 +0000 Manifest this update: Thu 03 Sep 2026 06:05:23 +0000 Manifest next update: Fri 04 Sep 2026 06:39:23 +0000 Files and hashes: 1: D2707D53E07D53B00AF1917C7B06CAFE0B48C105.crl (hash: HNkkKOLqJE0eMkw8kz8xGjXAZgfRMiUbU0wBSIcAix0=) 2: 3130332e37392e3133302e302f32332d3233203d3e20313430343433.roa (hash: z0PNiSkl97AAkKJELLOVf430z2bBk4x4W6fIOoHOGmo=) 3: 3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa (hash: N+OTkKCrsA8j5gwyH0Mpha31q8YHuNMGpdCuA0VgWcY=) 4: 3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa (hash: TWEuLcbFsQpYWxLsu1a0ItVks1vfqJFaCCURAAEUNEI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.crl rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 06:39:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a3:cb:3e:43:7a:96:97:85:0f:e3:fb:4b:2d:1d:03:ef:62:10:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2707D53E07D53B00AF1917C7B06CAFE0B48C105 Validity Not Before: Sep 3 06:05:23 2026 GMT Not After : Sep 4 06:39:23 2026 GMT Subject: CN=85DAC51050A3394324C5FB9217890FEC35552D84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:93:44:3e:f0:81:22:1d:9c:63:81:d6:ff:fd: db:4d:5d:62:5a:7f:6b:b2:98:1d:27:75:77:24:70: 1c:fe:3e:ec:f4:38:80:1d:23:3a:b9:1e:01:eb:29: 6b:7a:c2:38:c2:ea:01:b9:38:38:70:02:2f:b4:08: a0:47:d1:be:c1:19:01:07:ac:29:43:4b:ba:ed:ab: c9:97:66:35:cb:6e:3e:f6:29:97:96:e7:b7:92:a4: fd:89:ea:81:71:40:71:af:51:d7:91:44:b2:09:7c: f5:8c:ef:2b:31:0e:00:84:0e:76:55:c7:33:e7:73: 67:eb:22:d4:10:b5:3c:4b:73:2c:15:c5:59:67:cd: 84:7e:59:a7:b0:e8:a7:a6:2d:71:06:87:fe:a5:86: 48:5d:bd:9d:01:29:f9:55:a5:5a:f8:8c:30:a3:10: 53:6b:99:0f:04:06:4c:a7:0d:4f:79:d8:6c:da:84: f9:f6:90:7c:88:70:fc:4d:04:10:86:a2:a1:eb:82: 03:ec:5b:23:76:fc:26:c0:fc:12:1d:92:59:98:14: 32:70:6c:74:f8:ff:17:02:03:07:11:b2:cb:a6:98: 0a:3e:6b:2b:78:d9:6e:78:3d:b0:c4:ec:98:cf:5b: 89:56:33:9d:2a:a5:d0:e4:55:1d:a4:f1:2f:79:03: af:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DA:C5:10:50:A3:39:43:24:C5:FB:92:17:89:0F:EC:35:55:2D:84 X509v3 Authority Key Identifier: keyid:D2:70:7D:53:E0:7D:53:B0:0A:F1:91:7C:7B:06:CA:FE:0B:48:C1:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:c0:53:08:1c:30:3d:51:f4:ce:3b:73:77:fc:76:0e:7f:81: d3:32:9f:06:60:5c:f1:fb:1c:7b:70:98:99:59:ce:2d:94:5f: f8:a7:50:4a:02:fd:bb:94:4b:44:72:00:8b:f2:2d:16:8b:91: 0d:b7:82:b1:3a:49:75:a3:42:f6:ce:77:3a:d5:31:40:1d:3f: b2:0f:ed:f2:05:36:d2:c7:6a:9e:1d:5b:20:05:00:33:6b:f2: bf:a6:04:ae:e9:3e:c7:d8:fc:b6:90:bb:19:66:34:a1:59:62: b5:da:3d:28:34:e8:e6:58:8b:ab:13:65:89:47:bc:56:42:d1: 13:ae:df:13:dd:58:99:ad:8f:be:6c:3e:7a:a5:71:7d:7e:5a: 55:36:9b:37:67:e4:27:71:43:e6:e8:5f:e3:44:27:48:b9:67: ff:45:3b:0f:43:0e:c3:ae:ca:21:ad:b4:b9:1e:e6:ae:ff:ee: 04:2e:09:63:2b:2f:10:88:8e:a3:11:09:28:d8:fe:73:72:40: 2b:04:5b:f2:5d:a2:02:9d:6e:bb:5e:b5:d4:50:0a:87:6e:d1: 41:a6:df:fd:ad:d3:e9:8c:4b:8e:60:50:4c:12:7e:74:41:a4: 89:ec:09:af:b8:a4:8b:31:15:8c:de:32:62:05:66:14:e3:a3: 6e:72:a0:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIKPLPkN6lpeFD+P7Sy0dA+9iEHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI3MDdENTNFMDdENTNCMDBBRjE5MTdDN0IwNkNBRkUw QjQ4QzEwNTAeFw0yNjA5MDMwNjA1MjNaFw0yNjA5MDQwNjM5MjNaMDMxMTAvBgNV BAMTKDg1REFDNTEwNTBBMzM5NDMyNEM1RkI5MjE3ODkwRkVDMzU1NTJEODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNk0Q+8IEiHZxjgdb//dtNXWJa f2uymB0ndXckcBz+Puz0OIAdIzq5HgHrKWt6wjjC6gG5ODhwAi+0CKBH0b7BGQEH rClDS7rtq8mXZjXLbj72KZeW57eSpP2J6oFxQHGvUdeRRLIJfPWM7ysxDgCEDnZV xzPnc2frItQQtTxLcywVxVlnzYR+Waew6KemLXEGh/6lhkhdvZ0BKflVpVr4jDCj EFNrmQ8EBkynDU952GzahPn2kHyIcPxNBBCGoqHrggPsWyN2/CbA/BIdklmYFDJw bHT4/xcCAwcRssummAo+ayt42W54PbDE7JjPW4lWM50qpdDkVR2k8S95A6/VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhdrFEFCjOUMkxfuSF4kP7DVVLYQwHwYDVR0j BBgwFoAU0nB9U+B9U7AK8ZF8ewbK/gtIwQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFlMjQ5MDctYTZmMi00YTU1LWFhNmYtMThjN2RiMTQzZmU4LzAvRDI3MDdENTNF MDdENTNCMDBBRjE5MTdDN0IwNkNBRkUwQjQ4QzEwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjcwN0Q1M0UwN0Q1M0IwMEFGMTkxN0M3QjA2Q0FGRTBCNDhD MTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFlMjQ5MDctYTZmMi00YTU1LWFh NmYtMThjN2RiMTQzZmU4LzAvRDI3MDdENTNFMDdENTNCMDBBRjE5MTdDN0IwNkNB RkUwQjQ4QzEwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfAUwgcMD1R9M47c3f8dg5/gdMynwZgXPH7 HHtwmJlZzi2UX/inUEoC/buUS0RyAIvyLRaLkQ23grE6SXWjQvbOdzrVMUAdP7IP 7fIFNtLHap4dWyAFADNr8r+mBK7pPsfY/LaQuxlmNKFZYrXaPSg06OZYi6sTZYlH vFZC0ROu3xPdWJmtj75sPnqlcX1+WlU2mzdn5CdxQ+boX+NEJ0i5Z/9FOw9DDsOu yiGttLke5q7/7gQuCWMrLxCIjqMRCSjY/nNyQCsEW/JdogKdbrtetdRQCodu0UGm 3/2t0+mMS45gUEwSfnRBpInsCa+4pIsxFYzeMmIFZhTjo25yoJM= -----END CERTIFICATE-----Generated at Thu Sep 3 14:17:18 2026 by rpki-client