$ rpki-client -vvvf rpki-rsync.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/7844F23C52D754615D0DCCF2190967C1B89CF85F.mft File: 7844F23C52D754615D0DCCF2190967C1B89CF85F.mft (raw, json) Hash identifier: xcZ44I/9l4KXAlHuZ7rkPDG5pCKIPHFmqpI8Ds0chfQ= Subject key identifier: 35:4D:D4:53:17:CC:2F:60:A1:E0:7A:48:58:75:5F:DB:48:BB:C0:91 Authority key identifier: 78:44:F2:3C:52:D7:54:61:5D:0D:CC:F2:19:09:67:C1:B8:9C:F8:5F Certificate issuer: /CN=7844F23C52D754615D0DCCF2190967C1B89CF85F Certificate serial: 10B8F60E1CA2F180A62CC24C3C10CCCA6E70EA4F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7844F23C52D754615D0DCCF2190967C1B89CF85F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/7844F23C52D754615D0DCCF2190967C1B89CF85F.mft Manifest number: A2 Signing time: Mon 31 Aug 2026 18:32:55 +0000 Manifest this update: Mon 31 Aug 2026 18:27:55 +0000 Manifest next update: Tue 01 Sep 2026 20:16:55 +0000 Files and hashes: 1: 7844F23C52D754615D0DCCF2190967C1B89CF85F.crl (hash: 4iFMhNJOxffPWNIoPGMwXeA01Zb7xiYwBE7hYGuKy6I=) 2: 3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa (hash: MkT+sF+nybNeeysnued54G0xsj6WfMLE7g6ep+2x6vw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/7844F23C52D754615D0DCCF2190967C1B89CF85F.crl rsync://rpki-rsync.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/7844F23C52D754615D0DCCF2190967C1B89CF85F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7844F23C52D754615D0DCCF2190967C1B89CF85F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 20:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b8:f6:0e:1c:a2:f1:80:a6:2c:c2:4c:3c:10:cc:ca:6e:70:ea:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7844F23C52D754615D0DCCF2190967C1B89CF85F Validity Not Before: Aug 31 18:27:55 2026 GMT Not After : Sep 1 20:16:55 2026 GMT Subject: CN=354DD45317CC2F60A1E07A4858755FDB48BBC091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:96:6e:41:5a:14:d5:4b:a9:6b:5a:6f:63:a0: c9:76:dc:d3:91:6d:96:e3:15:53:be:6e:7d:36:1f: b9:21:57:44:dd:6f:7b:49:fa:7d:d9:68:2c:46:63: 11:34:c8:8b:86:86:d5:26:06:b0:e2:ef:8a:d9:20: 49:a1:d4:56:14:10:92:dd:8e:ca:09:e8:40:f5:5e: 14:96:4f:62:2c:e5:0e:b6:70:24:4e:62:39:53:06: 02:70:24:cc:15:f7:e2:ae:ef:91:ac:c1:f0:3d:72: 20:36:36:52:dc:ad:4c:60:f5:87:52:cc:56:21:77: ed:ba:8e:51:57:1a:31:dc:14:ce:77:da:4f:38:2b: 0b:fc:db:ac:39:73:91:2e:33:45:30:72:e4:4d:74: 07:d2:80:8e:62:d5:bc:41:2c:2e:47:65:6c:23:d3: 03:db:a6:32:c6:af:c0:3b:bb:5d:4c:6b:23:2d:88: cd:b0:c9:c4:7a:20:85:4f:46:a9:ec:31:4a:fc:a3: d4:30:a3:3f:47:0f:55:db:0d:3b:58:34:bb:44:08: 71:f7:5d:22:ca:16:ac:50:3e:06:35:20:72:cd:d9: f4:f3:09:df:85:aa:94:9f:3f:19:b0:1f:c2:bb:37: 65:35:2a:c0:76:c2:b0:f4:01:42:7c:7e:9a:80:8d: 33:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4D:D4:53:17:CC:2F:60:A1:E0:7A:48:58:75:5F:DB:48:BB:C0:91 X509v3 Authority Key Identifier: keyid:78:44:F2:3C:52:D7:54:61:5D:0D:CC:F2:19:09:67:C1:B8:9C:F8:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/7844F23C52D754615D0DCCF2190967C1B89CF85F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7844F23C52D754615D0DCCF2190967C1B89CF85F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/7844F23C52D754615D0DCCF2190967C1B89CF85F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:86:20:99:ec:97:5d:c6:a1:37:8d:23:66:b3:39:ad:16:4e: de:ae:b5:fb:5d:97:05:cb:b9:6c:8f:e8:ea:51:87:4e:97:9a: 3a:fb:59:b0:3a:49:90:d3:95:a2:79:15:3d:0c:8e:8d:92:9d: 6e:5e:20:a5:d1:d8:03:d4:3a:bd:26:ae:10:07:58:c3:9b:0c: 1c:17:53:82:23:f5:b0:3f:6c:e9:bc:a2:d3:d9:8c:19:44:b5: 42:c7:b9:c9:39:8a:ea:fd:da:f6:99:5f:1c:82:a0:d4:c4:ed: 0d:39:fa:5b:27:24:ff:39:71:78:3b:df:dd:49:68:83:95:ee: 18:e9:f1:20:17:f8:41:31:b5:e4:1e:12:cb:e0:73:24:c8:e8: 0d:38:7b:bc:6c:d3:52:1b:2d:20:a9:47:5a:d3:c8:b2:73:4f: 78:ae:f6:82:bc:bb:84:cd:82:8f:7e:54:0d:b9:de:cf:79:90: 32:9e:73:e0:20:4c:d4:ae:05:d3:4b:c9:3f:b0:d5:78:98:70: bd:d5:3f:ca:43:58:e9:95:8e:7c:e4:ee:09:43:f6:79:ba:22: 07:f4:00:3e:4e:b4:f4:04:a9:b0:ac:a4:3d:59:5e:21:b8:a3: 29:ad:b5:c7:76:e6:e3:56:c4:41:93:f0:be:c0:8e:11:e8:3a: 84:3a:70:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUELj2Dhyi8YCmLMJMPBDMym5w6k8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg0NEYyM0M1MkQ3NTQ2MTVEMERDQ0YyMTkwOTY3QzFC ODlDRjg1RjAeFw0yNjA4MzExODI3NTVaFw0yNjA5MDEyMDE2NTVaMDMxMTAvBgNV BAMTKDM1NERENDUzMTdDQzJGNjBBMUUwN0E0ODU4NzU1RkRCNDhCQkMwOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCslm5BWhTVS6lrWm9joMl23NOR bZbjFVO+bn02H7khV0Tdb3tJ+n3ZaCxGYxE0yIuGhtUmBrDi74rZIEmh1FYUEJLd jsoJ6ED1XhSWT2Is5Q62cCROYjlTBgJwJMwV9+Ku75GswfA9ciA2NlLcrUxg9YdS zFYhd+26jlFXGjHcFM532k84Kwv826w5c5EuM0UwcuRNdAfSgI5i1bxBLC5HZWwj 0wPbpjLGr8A7u11MayMtiM2wycR6IIVPRqnsMUr8o9Qwoz9HD1XbDTtYNLtECHH3 XSLKFqxQPgY1IHLN2fTzCd+FqpSfPxmwH8K7N2U1KsB2wrD0AUJ8fpqAjTMzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNU3UUxfML2Ch4HpIWHVf20i7wJEwHwYDVR0j BBgwFoAUeETyPFLXVGFdDczyGQlnwbic+F8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTZkNjExMzUtNzVlNC00NmM2LWJkZGQtZmJhNjgzNGRjZTQxLzAvNzg0NEYyM0M1 MkQ3NTQ2MTVEMERDQ0YyMTkwOTY3QzFCODlDRjg1Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83ODQ0RjIzQzUyRDc1NDYxNUQwRENDRjIxOTA5NjdDMUI4OUNG ODVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTZkNjExMzUtNzVlNC00NmM2LWJk ZGQtZmJhNjgzNGRjZTQxLzAvNzg0NEYyM0M1MkQ3NTQ2MTVEMERDQ0YyMTkwOTY3 QzFCODlDRjg1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKGIJnsl13GoTeNI2azOa0WTt6utftdlwXL uWyP6OpRh06Xmjr7WbA6SZDTlaJ5FT0Mjo2SnW5eIKXR2APUOr0mrhAHWMObDBwX U4Ij9bA/bOm8otPZjBlEtULHuck5iur92vaZXxyCoNTE7Q05+lsnJP85cXg7391J aIOV7hjp8SAX+EExteQeEsvgcyTI6A04e7xs01IbLSCpR1rTyLJzT3iu9oK8u4TN go9+VA253s95kDKec+AgTNSuBdNLyT+w1XiYcL3VP8pDWOmVjnzk7glD9nm6Igf0 AD5OtPQEqbCspD1ZXiG4oymttcd25uNWxEGT8L7AjhHoOoQ6cDM= -----END CERTIFICATE-----Generated at Tue Sep 1 06:21:03 2026 by rpki-client