$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft File: D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft (raw, json) Hash identifier: zEvlgmf3oE4A5oJIwFHmJOY6uvD6hEFUBM9uO9fZhWE= Subject key identifier: 53:6B:F2:4E:B0:89:CC:EE:59:4C:A3:AA:B9:1C:3C:DB:16:86:EA:D2 Authority key identifier: D8:8E:00:6D:21:97:30:C5:2D:DD:CB:D6:EB:05:C0:9A:2F:81:5C:03 Certificate issuer: /CN=D88E006D219730C52DDDCBD6EB05C09A2F815C03 Certificate serial: 16E149FCA6F42FF8074407DAC8400CC8B6790808 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 14:55:30 +0000 Manifest this update: Sun 02 Aug 2026 14:50:30 +0000 Manifest next update: Mon 03 Aug 2026 18:20:30 +0000 Files and hashes: 1: D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl (hash: 80BpZIUWpDgEQLTT3k3dHfaPpTgVOv01qqQvtbEpung=) 2: 3136302e32322e3139332e302f32342d3234203d3e20313532383330.roa (hash: IaAf1+vjln5sceJpZ1s3ScYLsPQRM51r/bqMTajLuUs=) 3: 3136302e32322e3139322e302f32342d3234203d3e20313532383330.roa (hash: xFfth544qMvDawFqjY1oWbMZQMZwR8ATU9ANAJM8pNM=) 4: 3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa (hash: mldeFV7Jf6QOev5E++VL/jRK/PuO8nW0ShYwDv/SkQ8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:e1:49:fc:a6:f4:2f:f8:07:44:07:da:c8:40:0c:c8:b6:79:08:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D88E006D219730C52DDDCBD6EB05C09A2F815C03 Validity Not Before: Aug 2 14:50:30 2026 GMT Not After : Aug 3 18:20:30 2026 GMT Subject: CN=536BF24EB089CCEE594CA3AAB91C3CDB1686EAD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6c:22:eb:d4:36:19:65:30:9d:bf:8d:1c:c0: f5:a0:6a:72:1e:4c:b9:13:f5:d7:b0:30:ff:73:33: 76:ff:3f:33:af:92:0f:5b:8f:a6:ba:13:39:6a:10: 26:2b:e9:de:e0:ff:97:1d:7d:0f:ea:b8:b8:7e:69: bb:4d:1e:72:dc:9f:2e:83:0f:ac:65:e4:d3:41:4c: 9e:ec:54:4b:ce:dc:b1:49:b9:0c:ef:23:1f:e4:4f: b5:4a:24:63:5f:ce:aa:c8:1e:d8:75:a9:1f:21:e4: e6:4c:3b:50:4e:2b:58:6c:73:90:9d:d6:f9:0e:fb: d1:e8:69:2d:ae:24:ff:08:a8:c9:2e:6a:c1:68:ad: 82:ad:91:3b:7b:00:58:5e:97:d2:8d:d2:90:2a:4d: 92:44:50:a8:8c:8f:13:ec:03:f0:41:63:2a:47:12: 8a:e9:f4:09:8d:01:a4:4a:f0:d1:b8:d2:8c:d2:78: b7:a6:9e:b1:db:c1:9a:1d:32:8b:86:34:99:cf:8f: 23:4e:bd:69:f4:80:aa:2a:53:8a:cc:6f:f7:2e:b9: c7:24:52:ba:f1:b5:b1:da:43:a6:a2:8e:40:83:52: b1:b0:f8:ec:ae:10:7d:84:d2:2e:23:4a:2d:51:b5: 87:b6:49:89:04:cc:a9:ba:24:74:c1:b0:b4:26:f9: a1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6B:F2:4E:B0:89:CC:EE:59:4C:A3:AA:B9:1C:3C:DB:16:86:EA:D2 X509v3 Authority Key Identifier: keyid:D8:8E:00:6D:21:97:30:C5:2D:DD:CB:D6:EB:05:C0:9A:2F:81:5C:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d1:5e:7d:a8:1d:51:19:1c:87:c2:91:bd:80:44:61:7b:6d: 5d:1a:1b:c8:a5:a0:bd:7a:b9:06:8a:0d:61:ea:5f:c5:06:b8: 0b:df:d7:bd:01:6c:e3:ce:dd:67:90:58:50:a3:ad:a8:44:e4: ba:02:f1:46:43:07:5d:9c:e2:aa:fb:dc:a5:03:bc:09:c8:d1: cc:b6:13:ca:84:14:31:a2:7f:90:79:41:03:48:52:ff:df:86: e6:86:8e:f0:87:cf:2e:f8:0c:b9:e3:7d:28:09:d4:09:87:9b: ef:e6:35:b0:12:36:1a:c8:27:59:1d:ea:fd:a8:3e:a5:12:85: 8f:ea:2d:50:d6:f6:5b:42:c0:91:52:5d:51:b8:04:27:45:b0: c5:9f:b0:4d:d8:94:d3:c0:eb:6f:76:e5:97:e6:78:92:0f:0a: 8a:f8:02:4c:c0:79:95:16:be:71:c7:08:5d:c9:8c:d6:e7:3e: a9:43:5c:8d:bf:01:ff:98:fb:05:82:ea:67:85:8c:cd:4f:eb: 70:d2:8f:21:7e:cb:f3:86:c9:92:4b:b3:d0:12:3a:ca:22:91: 7d:23:4d:49:86:6e:e5:f8:85:e6:2e:2c:05:69:0d:05:8e:88: 97:4b:e2:d0:d9:02:34:7a:91:5d:df:71:de:6c:fa:f7:aa:4e: 47:e4:93:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFuFJ/Kb0L/gHRAfayEAMyLZ5CAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg4RTAwNkQyMTk3MzBDNTJERERDQkQ2RUIwNUMwOUEy RjgxNUMwMzAeFw0yNjA4MDIxNDUwMzBaFw0yNjA4MDMxODIwMzBaMDMxMTAvBgNV BAMTKDUzNkJGMjRFQjA4OUNDRUU1OTRDQTNBQUI5MUMzQ0RCMTY4NkVBRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+bCLr1DYZZTCdv40cwPWganIe TLkT9dewMP9zM3b/PzOvkg9bj6a6EzlqECYr6d7g/5cdfQ/quLh+abtNHnLcny6D D6xl5NNBTJ7sVEvO3LFJuQzvIx/kT7VKJGNfzqrIHth1qR8h5OZMO1BOK1hsc5Cd 1vkO+9HoaS2uJP8IqMkuasForYKtkTt7AFhel9KN0pAqTZJEUKiMjxPsA/BBYypH Eorp9AmNAaRK8NG40ozSeLemnrHbwZodMouGNJnPjyNOvWn0gKoqU4rMb/cuucck UrrxtbHaQ6aijkCDUrGw+OyuEH2E0i4jSi1RtYe2SYkEzKm6JHTBsLQm+aFHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU2vyTrCJzO5ZTKOquRw82xaG6tIwHwYDVR0j BBgwFoAU2I4AbSGXMMUt3cvW6wXAmi+BXAMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2EwMjEwYjMtY2NhMi00M2M1LTg5ZjktNWE5MDg2YTYwNzAzLzAvRDg4RTAwNkQy MTk3MzBDNTJERERDQkQ2RUIwNUMwOUEyRjgxNUMwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EODhFMDA2RDIxOTczMEM1MkRERENCRDZFQjA1QzA5QTJGODE1 QzAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzAvRDg4RTAwNkQyMTk3MzBDNTJERERDQkQ2RUIwNUMw OUEyRjgxNUMwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7RXn2oHVEZHIfCkb2ARGF7bV0aG8iloL16 uQaKDWHqX8UGuAvf170BbOPO3WeQWFCjrahE5LoC8UZDB12c4qr73KUDvAnI0cy2 E8qEFDGif5B5QQNIUv/fhuaGjvCHzy74DLnjfSgJ1AmHm+/mNbASNhrIJ1kd6v2o PqUShY/qLVDW9ltCwJFSXVG4BCdFsMWfsE3YlNPA62925ZfmeJIPCor4AkzAeZUW vnHHCF3JjNbnPqlDXI2/Af+Y+wWC6meFjM1P63DSjyF+y/OGyZJLs9ASOsoikX0j TUmGbuX4heYuLAVpDQWOiJdL4tDZAjR6kV3fcd5s+veqTkfkkzY= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:38 2026 by rpki-client