$ rpki-client -vvvf rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft File: 7521EB714EF9A5F0A697E8574714A86DCF234610.mft (raw, json) Hash identifier: z/OovqpcXJVORQoNjZ5T2qHkJBcG7qN5Z5lIlPU6l6E= Subject key identifier: 70:4F:5E:6E:AA:99:55:1F:60:00:82:A6:5B:84:95:B3:61:E2:26:1F Authority key identifier: 75:21:EB:71:4E:F9:A5:F0:A6:97:E8:57:47:14:A8:6D:CF:23:46:10 Certificate issuer: /CN=7521EB714EF9A5F0A697E8574714A86DCF234610 Certificate serial: 60DE16AD942069D97FE195D845B2B3AD4BB0F9AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft Manifest number: 9C Signing time: Thu 27 Aug 2026 07:19:31 +0000 Manifest this update: Thu 27 Aug 2026 07:14:31 +0000 Manifest next update: Fri 28 Aug 2026 07:21:31 +0000 Files and hashes: 1: 32372e3132342e38332e302f32342d3234203d3e20313332363334.roa (hash: rQWHJknCSBXBPdquyEnbgQpik3OvzTZOMwyh2tsNM1M=) 2: 3132342e3130392e32332e302f32342d3234203d3e203538333738.roa (hash: zskLNuuXyQpxVs+4KksAWAlYXKzx7CDbhiYyNpVsFrs=) 3: 3130332e32352e3130382e302f32342d3234203d3e20313332363334.roa (hash: BP419rLo8u7KV+IdA+QhKzQqCTiad+JDOjmx+KPJYZ8=) 4: 3131392e34372e38382e302f32342d3234203d3e203338353237.roa (hash: yffHTG+EllVLleEh6Oirz1/R0DaU0LdSs2f4Coe9+OM=) 5: 3131392e34372e39352e302f32342d3234203d3e20313439343039.roa (hash: TS2p463fv/9DyZu6QnNhlvJI+JFIyXgQjG+Ob9/1Y6g=) 6: 3131392e34372e38392e302f32342d3234203d3e203338353237.roa (hash: c/ZF1aWYYnFDz5Gwg0w0tFfbUx8yzQQW9RzM+O5SB0A=) 7: 7521EB714EF9A5F0A697E8574714A86DCF234610.crl (hash: n9XmRtdR/cbllnX9qk3e3a19PuHDeHpeYEC9VbBhu0Q=) 8: 3131392e34372e39302e302f32342d3234203d3e203338353237.roa (hash: dcVVKG4izCM1gb0p4eQeLHaBApqz8vGp0jvG9TGCAJ0=) 9: 3132342e3130392e32322e302f32342d3234203d3e20313431313037.roa (hash: iOYmug4IgOWAtbexlc92hDoV/tNe429g9AsNdYSsaJc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.crl rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Aug 2026 07:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:de:16:ad:94:20:69:d9:7f:e1:95:d8:45:b2:b3:ad:4b:b0:f9:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7521EB714EF9A5F0A697E8574714A86DCF234610 Validity Not Before: Aug 27 07:14:31 2026 GMT Not After : Aug 28 07:21:31 2026 GMT Subject: CN=704F5E6EAA99551F600082A65B8495B361E2261F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2d:7d:83:a2:bf:79:19:fa:9b:8c:93:51:30: c3:39:e5:09:5c:ea:51:4b:35:4a:26:80:5f:d2:02: 5b:74:d0:37:47:23:4f:8c:29:fb:a2:36:a1:83:30: 96:72:f0:19:bc:03:66:85:3f:80:43:7b:b1:7c:cc: a9:48:3b:b9:a9:2f:36:86:80:d6:2f:92:35:07:18: 02:f4:f2:d7:c4:03:cc:78:f4:44:9d:ff:c9:9a:9f: 34:d6:4f:c6:d7:4c:b5:0b:9a:ad:e2:5a:a6:fc:62: ba:55:be:03:03:16:82:76:4b:d1:c7:2a:91:b2:60: a9:3c:95:58:c1:e7:25:39:79:d6:61:c5:b1:7b:f4: 26:56:b7:58:6a:75:72:e5:ae:f2:f9:ed:fa:96:6b: 95:e3:fe:93:e7:27:9a:5f:73:45:57:96:c5:e7:a5: ce:3f:54:6c:4c:85:53:38:52:e4:dd:eb:25:e8:20: 4f:0f:67:92:b8:96:8c:fc:5e:9b:50:2d:73:9e:bc: 55:c2:c9:93:da:5f:e7:59:e3:2e:7f:19:05:02:3b: 53:a7:4d:c1:40:6e:16:8f:18:a4:4f:a8:54:7e:21: 87:4f:3d:3f:21:b6:5e:58:4c:ea:d7:43:fa:6a:77: 2b:0c:82:45:2b:50:e2:76:42:0a:05:c9:e6:48:5e: 6e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4F:5E:6E:AA:99:55:1F:60:00:82:A6:5B:84:95:B3:61:E2:26:1F X509v3 Authority Key Identifier: keyid:75:21:EB:71:4E:F9:A5:F0:A6:97:E8:57:47:14:A8:6D:CF:23:46:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:4b:ad:3c:8e:6b:4a:bd:2f:08:9d:df:54:c7:80:9d:65:a9: df:3a:3f:a8:ca:b2:b3:a5:c1:2c:b0:c0:1a:17:ff:90:64:28: 04:30:52:d3:5e:00:22:61:5e:85:cf:4f:b2:c0:d4:d6:35:aa: 22:78:a5:68:24:f0:6d:a9:14:67:12:e8:d2:2f:98:3f:a0:7c: 40:be:b7:87:a6:ff:39:d4:01:35:0f:a0:91:27:82:55:1d:a1: 20:11:47:8e:c1:cb:2e:2f:62:d3:19:d1:2c:ba:2a:79:82:6a: 41:6a:8a:e8:45:b0:10:e7:6c:07:5a:44:41:58:29:58:8f:7d: fe:09:59:aa:3e:8d:96:05:75:53:f6:46:aa:7c:33:f2:b2:ba: eb:ba:4c:fb:b7:33:50:c1:7c:87:05:0b:82:5e:97:a2:f0:6a: 29:c8:7e:fa:ce:19:6a:df:18:89:86:89:6e:c3:a5:90:ae:65: 13:2f:bd:ac:40:f1:85:74:d8:a3:f9:c9:f3:3a:f7:33:e2:7a: 74:f8:bd:58:fe:dc:c5:5e:01:1a:04:ee:cd:e6:38:25:e1:c6: cc:88:15:55:77:72:83:74:61:12:28:30:2f:c8:e7:bf:d6:5a: f3:fb:22:1b:ad:ad:4c:73:bb:9c:3d:2a:8f:2a:29:2d:95:4f: ed:23:04:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYN4WrZQgadl/4ZXYRbKzrUuw+awwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzUyMUVCNzE0RUY5QTVGMEE2OTdFODU3NDcxNEE4NkRD RjIzNDYxMDAeFw0yNjA4MjcwNzE0MzFaFw0yNjA4MjgwNzIxMzFaMDMxMTAvBgNV BAMTKDcwNEY1RTZFQUE5OTU1MUY2MDAwODJBNjVCODQ5NUIzNjFFMjI2MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcLX2Dor95GfqbjJNRMMM55Qlc 6lFLNUomgF/SAlt00DdHI0+MKfuiNqGDMJZy8Bm8A2aFP4BDe7F8zKlIO7mpLzaG gNYvkjUHGAL08tfEA8x49ESd/8manzTWT8bXTLULmq3iWqb8YrpVvgMDFoJ2S9HH KpGyYKk8lVjB5yU5edZhxbF79CZWt1hqdXLlrvL57fqWa5Xj/pPnJ5pfc0VXlsXn pc4/VGxMhVM4UuTd6yXoIE8PZ5K4loz8XptQLXOevFXCyZPaX+dZ4y5/GQUCO1On TcFAbhaPGKRPqFR+IYdPPT8htl5YTOrXQ/pqdysMgkUrUOJ2QgoFyeZIXm6FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcE9ebqqZVR9gAIKmW4SVs2HiJh8wHwYDVR0j BBgwFoAUdSHrcU75pfCml+hXRxSobc8jRhAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzE3ZWZkMmEtMDJhYi00MjAyLTk3MGYtZjY5OWRmZjk3ZGU1LzAvNzUyMUVCNzE0 RUY5QTVGMEE2OTdFODU3NDcxNEE4NkRDRjIzNDYxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NTIxRUI3MTRFRjlBNUYwQTY5N0U4NTc0NzE0QTg2RENGMjM0 NjEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzE3ZWZkMmEtMDJhYi00MjAyLTk3 MGYtZjY5OWRmZjk3ZGU1LzAvNzUyMUVCNzE0RUY5QTVGMEE2OTdFODU3NDcxNEE4 NkRDRjIzNDYxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJLrTyOa0q9Lwid31THgJ1lqd86P6jKsrOl wSywwBoX/5BkKAQwUtNeACJhXoXPT7LA1NY1qiJ4pWgk8G2pFGcS6NIvmD+gfEC+ t4em/znUATUPoJEnglUdoSARR47Byy4vYtMZ0Sy6KnmCakFqiuhFsBDnbAdaREFY KViPff4JWao+jZYFdVP2Rqp8M/Kyuuu6TPu3M1DBfIcFC4Jel6LwainIfvrOGWrf GImGiW7DpZCuZRMvvaxA8YV02KP5yfM69zPienT4vVj+3MVeARoE7s3mOCXhxsyI FVV3coN0YRIoMC/I57/WWvP7IhutrUxzu5w9Ko8qKS2VT+0jBO4= -----END CERTIFICATE-----Generated at Fri Aug 28 00:40:22 2026 by rpki-client