$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft File: B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft (raw, json) Hash identifier: XT5kqy8/Er5Cajo08rnri6s8RpnDNakCRYOb/obB6QU= Subject key identifier: 5E:D1:7A:EB:09:D2:24:56:E0:9C:5D:E4:4E:FB:0D:02:C5:99:BC:B7 Authority key identifier: B7:AC:AC:8C:1A:6D:56:7C:70:21:67:C3:BF:5D:55:DC:A8:06:1D:09 Certificate issuer: /CN=B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09 Certificate serial: 3F29845387FC8590B0AAA52358F9F2FBB33E3CD6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft Manifest number: A7 Signing time: Fri 04 Sep 2026 09:53:29 +0000 Manifest this update: Fri 04 Sep 2026 09:48:29 +0000 Manifest next update: Sat 05 Sep 2026 11:21:29 +0000 Files and hashes: 1: B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.crl (hash: WDO/34dDMQ34fyXiPpGrs8tbp6H0MNMWBbi2YXeDxS8=) 2: 3130332e34322e3131362e302f32322d3232203d3e203234353139.roa (hash: iaB2BU40NYYT5gzoU2/HVHmJ1OLrV8vuDA/NUX6fKHM=) 3: 3130332e34322e3131382e302f32342d3234203d3e203234353139.roa (hash: UiQg2uhClOmxDzilityVFDsUTcFwNoOe65yL07fwsrE=) 4: 3130332e34322e3131382e302f32332d3233203d3e203234353139.roa (hash: LUmG2PnUdmtlekMQPkmF2jVlBr5BwiDl1Q3zaubpydY=) 5: 3130332e34322e3131392e302f32342d3234203d3e203234353139.roa (hash: 3thO/9yyE41CicpFLtHQ75Nw909jV+2QY8QpbmSrjas=) 6: 3130332e34322e3131372e302f32342d3234203d3e20313431393638.roa (hash: D+vBT8RjuXQRENNs+sRNnv0u+qOPPua7Ci6xauViEhY=) 7: 3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa (hash: LFwbkJ+ntBwxqtVdCPUurrC+Hhb3oO3C1dGEk8iDIYc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.crl rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 11:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:29:84:53:87:fc:85:90:b0:aa:a5:23:58:f9:f2:fb:b3:3e:3c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09 Validity Not Before: Sep 4 09:48:29 2026 GMT Not After : Sep 5 11:21:29 2026 GMT Subject: CN=5ED17AEB09D22456E09C5DE44EFB0D02C599BCB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:94:44:73:98:47:aa:d7:a4:91:8a:fc:50:84: 63:11:3d:b8:ab:66:70:f5:fb:01:58:79:49:5c:4c: 94:4a:cf:45:75:84:10:ac:91:ae:28:76:0f:3d:a4: 56:5f:81:94:18:d0:1a:88:fc:60:64:fc:24:d8:9b: c9:d1:ce:38:33:c3:2c:3a:5c:a2:29:f0:82:d1:1d: db:89:ee:c7:83:24:62:fa:a4:8d:4e:25:1d:62:eb: d3:c3:09:7e:09:fa:2f:70:0d:59:25:fd:42:07:a4: 38:48:07:d2:21:52:ad:dc:47:af:34:1a:f6:7e:7d: 25:14:d8:2f:81:55:79:7b:77:52:44:07:d2:11:69: ce:33:0c:2f:45:1b:c4:c6:26:b7:66:4f:ad:d9:2f: 3e:03:66:4e:21:ee:e3:23:96:4b:70:1b:88:76:ed: 42:6f:10:f4:07:cf:2d:ba:1d:e3:d0:5c:64:11:72: 07:88:3a:fb:16:26:e0:48:37:fa:6b:74:21:17:cb: 69:17:22:d1:6d:0b:46:89:87:d7:1f:00:99:1d:f3: 0d:8b:16:b5:6d:d0:ad:c8:4b:35:7e:18:ba:d8:fc: c1:60:49:bf:5c:0a:a8:af:e2:9f:6e:5e:56:b8:8f: 04:55:3d:b7:96:38:24:a9:b6:8e:af:94:d8:f8:66: 4a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D1:7A:EB:09:D2:24:56:E0:9C:5D:E4:4E:FB:0D:02:C5:99:BC:B7 X509v3 Authority Key Identifier: keyid:B7:AC:AC:8C:1A:6D:56:7C:70:21:67:C3:BF:5D:55:DC:A8:06:1D:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:0b:60:a2:62:5e:91:3f:86:8c:aa:11:59:6d:0b:27:e7:27: 51:c8:bf:92:ad:cb:ed:f6:14:9e:f4:47:71:90:ab:34:e4:22: 5d:72:92:f8:e6:a8:9a:f9:ae:04:0b:46:28:ff:81:20:e9:62: 71:97:1f:4d:f7:2d:3c:de:10:9f:a6:17:71:0f:da:3d:7a:bf: 79:fe:6f:33:5a:bf:d9:28:47:54:dd:e6:64:24:bb:6f:73:d4: 37:74:1c:30:6c:ce:3f:81:2f:13:9c:ac:b8:27:8e:a0:11:1f: 5a:81:52:fd:e8:52:24:f5:5f:b7:20:c0:b7:75:25:03:0e:11: 3c:2a:9d:58:c6:11:64:6d:5a:32:f7:01:b6:57:67:43:3b:13: 7b:35:e9:92:8b:ff:cf:5c:2c:11:1b:ed:aa:ab:e5:75:d7:a9: f0:44:27:0e:c6:61:9f:5b:d5:1b:34:f2:02:7c:bd:39:61:7d: 57:03:2b:9b:db:5d:82:ce:cf:ee:59:a9:72:09:71:f4:64:ae: 42:e3:e9:c9:48:7b:ed:f4:2d:97:d8:83:83:f4:8f:07:66:7e: 50:4e:fc:4e:c0:6d:29:36:1c:d4:6c:9c:5d:b7:7d:49:7a:65: be:fa:a5:c7:c4:fb:88:0a:16:00:b4:e5:d2:8d:7e:fb:7b:e8: 0a:ee:a1:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPymEU4f8hZCwqqUjWPny+7M+PNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdBQ0FDOEMxQTZENTY3QzcwMjE2N0MzQkY1RDU1RENB ODA2MUQwOTAeFw0yNjA5MDQwOTQ4MjlaFw0yNjA5MDUxMTIxMjlaMDMxMTAvBgNV BAMTKDVFRDE3QUVCMDlEMjI0NTZFMDlDNURFNDRFRkIwRDAyQzU5OUJDQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDelERzmEeq16SRivxQhGMRPbir ZnD1+wFYeUlcTJRKz0V1hBCska4odg89pFZfgZQY0BqI/GBk/CTYm8nRzjgzwyw6 XKIp8ILRHduJ7seDJGL6pI1OJR1i69PDCX4J+i9wDVkl/UIHpDhIB9IhUq3cR680 GvZ+fSUU2C+BVXl7d1JEB9IRac4zDC9FG8TGJrdmT63ZLz4DZk4h7uMjlktwG4h2 7UJvEPQHzy26HePQXGQRcgeIOvsWJuBIN/prdCEXy2kXItFtC0aJh9cfAJkd8w2L FrVt0K3ISzV+GLrY/MFgSb9cCqiv4p9uXla4jwRVPbeWOCSpto6vlNj4ZkqrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXtF66wnSJFbgnF3kTvsNAsWZvLcwHwYDVR0j BBgwFoAUt6ysjBptVnxwIWfDv11V3KgGHQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY1ODkzNGQtMWIwMC00NDg5LTkyZWQtMWNhNmRjNGIyOTBmLzAvQjdBQ0FDOEMx QTZENTY3QzcwMjE2N0MzQkY1RDU1RENBODA2MUQwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0FDQUM4QzFBNkQ1NjdDNzAyMTY3QzNCRjVENTVEQ0E4MDYx RDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY1ODkzNGQtMWIwMC00NDg5LTky ZWQtMWNhNmRjNGIyOTBmLzAvQjdBQ0FDOEMxQTZENTY3QzcwMjE2N0MzQkY1RDU1 RENBODA2MUQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEsLYKJiXpE/hoyqEVltCyfnJ1HIv5Kty+32 FJ70R3GQqzTkIl1ykvjmqJr5rgQLRij/gSDpYnGXH033LTzeEJ+mF3EP2j16v3n+ bzNav9koR1Td5mQku29z1Dd0HDBszj+BLxOcrLgnjqARH1qBUv3oUiT1X7cgwLd1 JQMOETwqnVjGEWRtWjL3AbZXZ0M7E3s16ZKL/89cLBEb7aqr5XXXqfBEJw7GYZ9b 1Rs08gJ8vTlhfVcDK5vbXYLOz+5ZqXIJcfRkrkLj6clIe+30LZfYg4P0jwdmflBO /E7AbSk2HNRsnF23fUl6Zb76pcfE+4gKFgC05dKNfvt76AruoVk= -----END CERTIFICATE-----Generated at Sat Sep 5 01:01:16 2026 by rpki-client