$ rpki-client -vvf rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft File: A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft (raw, json) Hash identifier: R83FfIaVWA1Vu/qifvu5fWPiOJgtGlNbA+dV4Jxfamc= Subject key identifier: 2C:FD:88:FC:B9:2A:CA:8F:43:C6:1E:92:61:E7:12:EB:6F:FE:0E:05 Authority key identifier: A9:E8:D2:C4:5D:82:0C:1F:C4:0B:CF:03:B9:B1:06:99:99:2D:8B:2F Certificate issuer: /CN=A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F Certificate serial: 076C65D571FED7B612C44F55168AAA4D351C97DD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 11:06:06 +0000 Manifest this update: Sun 02 Aug 2026 11:01:06 +0000 Manifest next update: Mon 03 Aug 2026 12:47:06 +0000 Files and hashes: 1: 3136302e3138372e3231392e302f32342d3234203d3e20313533313332.roa (hash: lknjz+xGrn74yDQTZoQhv/KjNKL2zVYWd4Swco59gWA=) 2: 3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa (hash: Il2995+O34HRt5QUYak7wmOSE/xt1UwsadzXH7aEOYo=) 3: 3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa (hash: mTSHlFZAxZWWAKZzsiMuSqeFq/VKg23JR+BpuxRfCT8=) 4: A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl (hash: 1PVJOlJeHSp/O4TrfH5vzUv36BHeOIrFD2SJLi/0Y/4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 12:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:6c:65:d5:71:fe:d7:b6:12:c4:4f:55:16:8a:aa:4d:35:1c:97:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F Validity Not Before: Aug 2 11:01:06 2026 GMT Not After : Aug 3 12:47:06 2026 GMT Subject: CN=2CFD88FCB92ACA8F43C61E9261E712EB6FFE0E05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:75:bd:2a:08:6c:31:ed:72:1f:ad:33:56:74: ad:29:9f:93:b0:d6:7f:0d:49:60:d1:50:79:90:93: 76:e9:df:ef:b6:46:7b:68:b4:12:37:06:ea:c0:da: a4:a5:df:7f:20:21:5c:7f:6f:fd:da:52:65:f4:37: c7:20:be:db:36:7f:ae:44:38:38:c6:ce:ee:b9:fb: 46:d5:29:e9:a6:21:d8:9d:88:b7:0a:b8:fa:43:14: e9:f9:d8:91:45:39:8e:30:5e:59:6c:0c:f3:c9:a5: 2d:aa:50:1c:8b:13:d0:9b:14:f1:13:1a:d1:97:a2: 93:25:6d:b5:23:2d:e9:f8:b5:30:71:f7:69:30:c4: a5:b9:ac:a2:9c:42:de:39:fd:ce:52:5a:a1:0a:26: b2:30:f3:6b:4a:0b:62:e2:0c:25:8f:a9:57:62:01: b4:c7:10:f2:b2:29:9b:dc:4e:ae:8a:cc:a2:06:8b: 3d:1a:33:7f:44:5c:b6:1e:ca:45:a3:d0:ab:0c:fc: e0:11:da:4f:65:3c:1c:c2:08:e3:c9:1a:f7:7f:a0: aa:41:b2:6d:03:4a:bc:09:11:4a:d0:bd:e4:f2:35: e3:46:7c:88:f5:0c:12:50:23:a7:46:df:c0:7b:7e: 7f:bb:24:ee:0c:5b:6f:c0:c2:24:b4:56:e5:05:65: e4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:FD:88:FC:B9:2A:CA:8F:43:C6:1E:92:61:E7:12:EB:6F:FE:0E:05 X509v3 Authority Key Identifier: keyid:A9:E8:D2:C4:5D:82:0C:1F:C4:0B:CF:03:B9:B1:06:99:99:2D:8B:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:60:7e:76:6a:80:23:05:29:8a:d9:95:57:88:b1:81:9f:f8: f0:49:a5:82:54:a8:d3:55:4c:58:5c:10:b4:5d:aa:65:45:71: 48:64:99:9e:5d:0b:92:38:0b:16:22:31:d6:96:b7:c8:a7:c4: 8e:13:02:f1:87:e0:44:e3:d0:0e:cc:87:16:8c:b9:11:80:ca: 50:a7:6b:68:f6:a2:07:79:4d:81:99:f0:7a:84:06:09:dd:c4: ac:96:ce:6a:96:35:0b:c5:03:f0:89:6e:3a:a8:81:2c:1b:f7: 4e:34:02:68:b9:61:be:7a:61:2a:c1:ab:33:ae:a2:f6:39:45: fe:1c:3a:75:b8:7a:eb:b6:29:dc:c1:b4:e0:e0:15:ba:47:00: dd:d3:3d:4a:7b:20:fb:61:97:e7:23:c4:02:8b:d8:b7:4c:fc: 81:c9:a2:fa:d0:54:f0:75:69:f1:bf:31:d1:cd:8d:69:df:7b: 9c:c0:6a:0a:23:6a:79:4e:f1:58:fb:c6:95:9a:eb:98:7c:91: 0d:e4:fe:ca:66:de:36:c1:88:17:be:88:cd:2c:c6:fe:15:aa: 47:5d:60:8d:f7:c6:37:33:b8:5f:38:fc:20:a5:c6:a4:b6:ef: aa:21:c2:2e:80:9d:7b:30:9b:2e:a5:43:ab:4d:c2:29:40:b6: 0f:29:4a:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB2xl1XH+17YSxE9VFoqqTTUcl90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFOEQyQzQ1RDgyMEMxRkM0MEJDRjAzQjlCMTA2OTk5 OTJEOEIyRjAeFw0yNjA4MDIxMTAxMDZaFw0yNjA4MDMxMjQ3MDZaMDMxMTAvBgNV BAMTKDJDRkQ4OEZDQjkyQUNBOEY0M0M2MUU5MjYxRTcxMkVCNkZGRTBFMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCadb0qCGwx7XIfrTNWdK0pn5Ow 1n8NSWDRUHmQk3bp3++2RntotBI3BurA2qSl338gIVx/b/3aUmX0N8cgvts2f65E ODjGzu65+0bVKemmIdidiLcKuPpDFOn52JFFOY4wXllsDPPJpS2qUByLE9CbFPET GtGXopMlbbUjLen4tTBx92kwxKW5rKKcQt45/c5SWqEKJrIw82tKC2LiDCWPqVdi AbTHEPKyKZvcTq6KzKIGiz0aM39EXLYeykWj0KsM/OAR2k9lPBzCCOPJGvd/oKpB sm0DSrwJEUrQveTyNeNGfIj1DBJQI6dG38B7fn+7JO4MW2/AwiS0VuUFZeSLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULP2I/Lkqyo9Dxh6SYecS62/+DgUwHwYDVR0j BBgwFoAUqejSxF2CDB/EC88DubEGmZktiy8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDgxZDU0Y2ItNTdhOS00YTE2LWE3MGUtYzVmNjAyNGUxMzlkLzAvQTlFOEQyQzQ1 RDgyMEMxRkM0MEJDRjAzQjlCMTA2OTk5OTJEOEIyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BOUU4RDJDNDVEODIwQzFGQzQwQkNGMDNCOUIxMDY5OTk5MkQ4 QjJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDgxZDU0Y2ItNTdhOS00YTE2LWE3 MGUtYzVmNjAyNGUxMzlkLzAvQTlFOEQyQzQ1RDgyMEMxRkM0MEJDRjAzQjlCMTA2 OTk5OTJEOEIyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9gfnZqgCMFKYrZlVeIsYGf+PBJpYJUqNNV TFhcELRdqmVFcUhkmZ5dC5I4CxYiMdaWt8inxI4TAvGH4ETj0A7MhxaMuRGAylCn a2j2ogd5TYGZ8HqEBgndxKyWzmqWNQvFA/CJbjqogSwb9040Ami5Yb56YSrBqzOu ovY5Rf4cOnW4euu2KdzBtODgFbpHAN3TPUp7IPthl+cjxAKL2LdM/IHJovrQVPB1 afG/MdHNjWnfe5zAagojanlO8Vj7xpWa65h8kQ3k/spm3jbBiBe+iM0sxv4Vqkdd YI33xjczuF84/CClxqS276ohwi6AnXswmy6lQ6tNwilAtg8pSh8= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:35 2026 by rpki-client