$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft File: 7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft (raw, json) Hash identifier: d/NyuIldXWnqgRcJkV9Uemc+B/6eExft257RDGHBB2s= Subject key identifier: 32:60:8A:BE:A1:E0:D1:CC:CF:A6:71:AD:CB:22:D7:E0:29:B4:F2:61 Authority key identifier: 7D:2A:02:CF:AA:CD:51:FA:2E:B1:D7:AE:C7:0E:CD:81:04:47:5F:53 Certificate issuer: /CN=7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53 Certificate serial: 6EA5633F1BAF3C8BD170AEC856756F0765F2743B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft Manifest number: A4 Signing time: Wed 02 Sep 2026 18:25:21 +0000 Manifest this update: Wed 02 Sep 2026 18:20:21 +0000 Manifest next update: Thu 03 Sep 2026 21:44:21 +0000 Files and hashes: 1: 3130332e3136342e3139322e302f32342d3234203d3e20313431393339.roa (hash: FuJt3vcY9L09+RmWxid8u8pgisIt7rO49/5ndQMSY6Q=) 2: 3130332e3136342e3139332e302f32342d3234203d3e20313431393339.roa (hash: VOmlgkQp1tgA9VYOLX2CHv85GyyaVqqf5FgzdISInaI=) 3: 7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.crl (hash: WZKw0eZ8ha6X1GZpRY+Uj8q4XkaI3axGy8KqOkfoo58=) 4: 323030313a6466313a316263303a3a2f34382d3438203d3e20313431393339.roa (hash: nFLDPD776WE/L2X/jlMFqVRg6eI7I+qoNOVFN/HkArY=) 5: 3130332e3136342e3139322e302f32332d3234203d3e20313431393339.roa (hash: caZbilaazkpxqRWhkCpM9BxKghMhKlcvJxCPrxBN/3Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.crl rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:44:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:a5:63:3f:1b:af:3c:8b:d1:70:ae:c8:56:75:6f:07:65:f2:74:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53 Validity Not Before: Sep 2 18:20:21 2026 GMT Not After : Sep 3 21:44:21 2026 GMT Subject: CN=32608ABEA1E0D1CCCFA671ADCB22D7E029B4F261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0b:b8:2b:c8:09:cf:7c:3a:4d:e2:33:82:e2: 42:30:73:a1:88:2d:69:c1:21:35:19:62:37:5d:69: 40:d1:46:d5:b1:f6:17:d3:04:a9:1e:59:c8:76:b2: 3c:89:39:e0:48:0e:cc:4f:c2:ea:06:f6:d5:58:52: 66:f9:b8:46:f0:c7:3b:f1:2f:c6:52:c7:57:56:36: 54:f1:f7:b5:4b:07:30:96:2d:43:08:2e:7b:d2:8c: dd:45:e2:4a:ba:27:24:20:82:8c:54:2e:de:cb:7f: 91:22:79:07:b9:0a:29:01:7d:54:db:68:22:a3:46: 8e:21:88:cd:e1:f4:34:4a:10:75:74:76:82:5b:79: bd:29:43:33:3b:5e:75:57:8c:29:c0:46:8a:69:8e: 3d:d6:10:89:e9:53:2f:a6:cf:db:51:49:21:ea:c9: e3:c9:be:42:5b:a6:b8:12:f0:f9:8c:2b:35:5f:35: 16:47:11:09:82:0e:89:dc:ae:3d:02:37:f5:43:bf: 9c:a5:a7:7f:23:23:42:cd:f7:7a:13:f7:ee:27:43: c2:3a:aa:cf:ed:e6:fc:da:2d:45:e9:88:b1:27:57: 0a:39:2b:88:d3:df:02:fb:98:33:1a:c4:b7:3d:8b: bc:be:58:36:f7:24:68:e0:ca:61:1c:b1:da:4b:29: 08:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:60:8A:BE:A1:E0:D1:CC:CF:A6:71:AD:CB:22:D7:E0:29:B4:F2:61 X509v3 Authority Key Identifier: keyid:7D:2A:02:CF:AA:CD:51:FA:2E:B1:D7:AE:C7:0E:CD:81:04:47:5F:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/7D2A02CFAACD51FA2EB1D7AEC70ECD8104475F53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:08:d3:22:49:03:79:59:de:4c:52:1c:d2:ee:9c:a8:f2:c7: 46:3d:2f:fe:f3:9b:f3:c2:e8:a7:c8:d8:2c:37:ff:2f:36:74: 38:34:af:f6:69:b3:00:70:26:78:f2:05:1d:dd:e3:43:4a:a3: e2:b0:7a:8b:18:c9:a3:be:1a:7d:86:ee:6c:15:10:eb:36:d0: e4:75:88:6a:b2:06:96:37:7d:9e:99:a4:2c:38:1f:48:1d:df: af:41:d6:57:0a:c9:0c:c8:ea:2e:54:6a:e6:8b:e4:a8:2b:a2: 57:a2:45:9b:bc:52:e6:da:b9:dc:aa:b5:48:de:9f:8f:05:d0: c0:7b:3a:b4:45:72:25:4b:56:67:52:3a:f1:dd:7b:d8:28:21: 71:96:00:f5:2e:28:3f:f1:94:70:82:8c:f1:75:14:16:4b:15: b9:4e:9e:b2:16:d7:5f:37:e1:ff:7f:02:03:aa:a1:c6:21:07: 82:22:b9:82:f8:16:b6:80:23:86:15:32:91:8d:69:e3:ed:77: 7c:a2:3d:af:a5:1e:97:27:f1:ba:d2:47:66:e8:6b:e8:42:b5: a7:52:ed:6a:20:2f:f9:b3:2a:28:01:85:3d:fd:d9:47:ec:5f: 6c:db:1f:b5:9f:1f:cf:a2:c3:2b:58:1b:04:9b:42:25:be:50: 75:5c:20:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbqVjPxuvPIvRcK7IVnVvB2XydDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QyQTAyQ0ZBQUNENTFGQTJFQjFEN0FFQzcwRUNEODEw NDQ3NUY1MzAeFw0yNjA5MDIxODIwMjFaFw0yNjA5MDMyMTQ0MjFaMDMxMTAvBgNV BAMTKDMyNjA4QUJFQTFFMEQxQ0NDRkE2NzFBRENCMjJEN0UwMjlCNEYyNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGC7gryAnPfDpN4jOC4kIwc6GI LWnBITUZYjddaUDRRtWx9hfTBKkeWch2sjyJOeBIDsxPwuoG9tVYUmb5uEbwxzvx L8ZSx1dWNlTx97VLBzCWLUMILnvSjN1F4kq6JyQggoxULt7Lf5EieQe5CikBfVTb aCKjRo4hiM3h9DRKEHV0doJbeb0pQzM7XnVXjCnARoppjj3WEInpUy+mz9tRSSHq yePJvkJbprgS8PmMKzVfNRZHEQmCDoncrj0CN/VDv5ylp38jI0LN93oT9+4nQ8I6 qs/t5vzaLUXpiLEnVwo5K4jT3wL7mDMaxLc9i7y+WDb3JGjgymEcsdpLKQg9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMmCKvqHg0czPpnGtyyLX4Cm08mEwHwYDVR0j BBgwFoAUfSoCz6rNUfousdeuxw7NgQRHX1MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmJhNDhlNGUtZmM5NS00YWNmLWJlYWMtZDkzYTBmNjk0NDIxLzAvN0QyQTAyQ0ZB QUNENTFGQTJFQjFEN0FFQzcwRUNEODEwNDQ3NUY1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RDJBMDJDRkFBQ0Q1MUZBMkVCMUQ3QUVDNzBFQ0Q4MTA0NDc1 RjUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJhNDhlNGUtZmM5NS00YWNmLWJl YWMtZDkzYTBmNjk0NDIxLzAvN0QyQTAyQ0ZBQUNENTFGQTJFQjFEN0FFQzcwRUNE ODEwNDQ3NUY1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHII0yJJA3lZ3kxSHNLunKjyx0Y9L/7zm/PC 6KfI2Cw3/y82dDg0r/ZpswBwJnjyBR3d40NKo+KweosYyaO+Gn2G7mwVEOs20OR1 iGqyBpY3fZ6ZpCw4H0gd369B1lcKyQzI6i5UauaL5KgroleiRZu8UubaudyqtUje n48F0MB7OrRFciVLVmdSOvHde9goIXGWAPUuKD/xlHCCjPF1FBZLFblOnrIW1183 4f9/AgOqocYhB4IiuYL4FraAI4YVMpGNaePtd3yiPa+lHpcn8brSR2boa+hCtadS 7WogL/mzKigBhT392UfsX2zbH7WfH8+iwytYGwSbQiW+UHVcIEo= -----END CERTIFICATE-----Generated at Thu Sep 3 09:47:08 2026 by rpki-client