$ rpki-client -vvf rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/521B83183A9325633BB6ADA03FF17A79CADB35DF.mft File: 521B83183A9325633BB6ADA03FF17A79CADB35DF.mft (raw, json) Hash identifier: OwNR8ZoRmacBKplraKF4q/IGD2NpfJ6C3AgnwEfsQPM= Subject key identifier: 5A:70:38:08:44:C9:C1:B7:5B:3B:F7:F1:03:5F:DA:75:AC:89:11:3E Authority key identifier: 52:1B:83:18:3A:93:25:63:3B:B6:AD:A0:3F:F1:7A:79:CA:DB:35:DF Certificate issuer: /CN=521B83183A9325633BB6ADA03FF17A79CADB35DF Certificate serial: 28657A9C4EA948A34CE55734929158C2F5E1FCCB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/521B83183A9325633BB6ADA03FF17A79CADB35DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/521B83183A9325633BB6ADA03FF17A79CADB35DF.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 16:52:44 +0000 Manifest this update: Sun 02 Aug 2026 16:47:44 +0000 Manifest next update: Mon 03 Aug 2026 18:19:44 +0000 Files and hashes: 1: 3130332e3137372e3138382e302f32332d3233203d3e20313439333533.roa (hash: 6wZBUy40gkIb1BF7mQfsPCPQYb0RKrN3BToc6rY80DQ=) 2: 3130332e3137372e3138382e302f32342d3234203d3e20313439333533.roa (hash: JaucgXEEHyqtYGuJV6Iibo3lc6NtVibWI1nY7MEIhPI=) 3: 521B83183A9325633BB6ADA03FF17A79CADB35DF.crl (hash: JTgeInQqnOnJRAfpS0WXnzxA2ZpGkLq6b6xhOybVnkE=) 4: 3130332e3137372e3138392e302f32342d3234203d3e20313439333533.roa (hash: TTP/IyS3Nws7WQbB4mb0u1b9tLXn20HyAh2jtbcNLlc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/521B83183A9325633BB6ADA03FF17A79CADB35DF.crl rsync://rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/521B83183A9325633BB6ADA03FF17A79CADB35DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/521B83183A9325633BB6ADA03FF17A79CADB35DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:65:7a:9c:4e:a9:48:a3:4c:e5:57:34:92:91:58:c2:f5:e1:fc:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521B83183A9325633BB6ADA03FF17A79CADB35DF Validity Not Before: Aug 2 16:47:44 2026 GMT Not After : Aug 3 18:19:44 2026 GMT Subject: CN=5A70380844C9C1B75B3BF7F1035FDA75AC89113E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:58:d5:db:66:5d:f2:a5:8e:21:cb:a0:a2:33: b2:e3:53:0d:d9:71:af:56:f8:27:56:1a:ed:0f:2e: b0:86:30:0e:52:c5:f2:19:85:b1:5d:fa:7d:59:49: ec:ff:ba:e0:f6:91:dc:6e:f3:30:a3:1a:a4:89:a1: 58:9c:eb:0a:d1:97:5a:71:d0:26:e7:d3:58:11:8b: d8:47:0c:f5:05:32:7d:10:f3:6d:b7:ae:66:20:2d: d5:2b:73:41:a1:1a:b7:52:14:c6:7a:d8:05:a4:35: 6c:2f:a9:e1:8a:22:93:ca:34:c1:71:82:45:98:be: 36:e7:e5:74:96:45:f1:2d:c8:27:48:e9:66:dd:eb: 63:c8:da:4a:87:7a:4f:0f:43:50:2a:8f:b2:e8:bd: 9e:86:b0:50:bc:1e:17:84:12:2e:4f:5e:8c:2e:ba: 8e:33:60:73:cc:7c:6b:f0:26:13:b2:4f:bb:7a:95: 69:1c:df:2d:fb:05:a9:13:3e:5e:af:ac:86:95:a6: 04:40:be:b5:b2:92:33:9a:7b:69:61:78:50:fa:20: 61:1c:5d:63:53:3f:b9:2e:25:c1:b1:07:33:9d:78: c8:82:b8:fb:4c:1f:87:a9:f9:16:44:0e:a8:36:66: 44:aa:46:64:d1:d8:de:de:ec:38:56:10:6a:e2:06: 29:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:70:38:08:44:C9:C1:B7:5B:3B:F7:F1:03:5F:DA:75:AC:89:11:3E X509v3 Authority Key Identifier: keyid:52:1B:83:18:3A:93:25:63:3B:B6:AD:A0:3F:F1:7A:79:CA:DB:35:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/521B83183A9325633BB6ADA03FF17A79CADB35DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/521B83183A9325633BB6ADA03FF17A79CADB35DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/521B83183A9325633BB6ADA03FF17A79CADB35DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:c7:88:98:f3:a0:34:29:ff:ef:26:52:1e:3f:33:39:63:c2: ea:e8:21:2f:b0:1f:51:08:ac:04:c7:25:9a:0d:91:fa:52:5e: 84:ab:0b:5e:50:0d:c6:e3:54:bb:69:5f:3d:5d:19:78:e9:b2: 41:34:9c:f4:f6:3a:51:b1:a9:0a:38:bb:b1:20:ce:23:8c:7f: dd:1e:db:4e:ef:83:f2:df:a2:ab:2b:09:ef:a9:81:45:7a:f7: 6e:d0:7f:6b:7d:e9:22:6c:55:75:57:2d:af:5d:76:e6:8a:92: fa:89:d2:d1:e5:a1:e9:c9:a1:b5:da:1a:ae:b1:b0:eb:06:43: bc:58:e6:ee:6b:29:93:da:ee:72:91:be:e4:bd:2c:ee:b4:47: 22:bb:94:a4:f8:97:eb:d2:84:a7:df:ce:d8:49:ff:58:39:f0: 5a:96:29:d0:55:ef:c3:c6:8b:b4:b3:4d:da:a8:19:db:cf:46: 7c:d3:a6:77:1f:3c:70:7a:ca:c1:76:17:05:05:99:6d:5e:f7: f0:b9:0a:37:07:bb:21:34:09:29:11:13:1e:5c:cc:9b:eb:9d: 44:7e:83:b1:92:b2:b6:3c:51:bd:31:61:b0:9a:0e:68:58:51: 42:d8:06:34:fc:f5:78:ac:cf:ac:81:ff:e8:ba:03:de:d5:39: 0e:57:ca:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKGV6nE6pSKNM5Vc0kpFYwvXh/MswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxQjgzMTgzQTkzMjU2MzNCQjZBREEwM0ZGMTdBNzlD QURCMzVERjAeFw0yNjA4MDIxNjQ3NDRaFw0yNjA4MDMxODE5NDRaMDMxMTAvBgNV BAMTKDVBNzAzODA4NDRDOUMxQjc1QjNCRjdGMTAzNUZEQTc1QUM4OTExM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTWNXbZl3ypY4hy6CiM7LjUw3Z ca9W+CdWGu0PLrCGMA5SxfIZhbFd+n1ZSez/uuD2kdxu8zCjGqSJoVic6wrRl1px 0Cbn01gRi9hHDPUFMn0Q8223rmYgLdUrc0GhGrdSFMZ62AWkNWwvqeGKIpPKNMFx gkWYvjbn5XSWRfEtyCdI6Wbd62PI2kqHek8PQ1Aqj7LovZ6GsFC8HheEEi5PXowu uo4zYHPMfGvwJhOyT7t6lWkc3y37BakTPl6vrIaVpgRAvrWykjOae2lheFD6IGEc XWNTP7kuJcGxBzOdeMiCuPtMH4ep+RZEDqg2ZkSqRmTR2N7e7DhWEGriBimdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWnA4CETJwbdbO/fxA1/adayJET4wHwYDVR0j BBgwFoAUUhuDGDqTJWM7tq2gP/F6ecrbNd8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODM5MmY4OTktZTgzYy00NzA2LWE5YTEtODIyNTZiZDQ4MjM2LzAvNTIxQjgzMTgz QTkzMjU2MzNCQjZBREEwM0ZGMTdBNzlDQURCMzVERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MjFCODMxODNBOTMyNTYzM0JCNkFEQTAzRkYxN0E3OUNBREIz NURGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODM5MmY4OTktZTgzYy00NzA2LWE5 YTEtODIyNTZiZDQ4MjM2LzAvNTIxQjgzMTgzQTkzMjU2MzNCQjZBREEwM0ZGMTdB NzlDQURCMzVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALrHiJjzoDQp/+8mUh4/MzljwuroIS+wH1EI rATHJZoNkfpSXoSrC15QDcbjVLtpXz1dGXjpskE0nPT2OlGxqQo4u7EgziOMf90e 207vg/LfoqsrCe+pgUV6927Qf2t96SJsVXVXLa9dduaKkvqJ0tHloenJobXaGq6x sOsGQ7xY5u5rKZPa7nKRvuS9LO60RyK7lKT4l+vShKffzthJ/1g58FqWKdBV78PG i7SzTdqoGdvPRnzTpncfPHB6ysF2FwUFmW1e9/C5CjcHuyE0CSkREx5czJvrnUR+ g7GSsrY8Ub0xYbCaDmhYUULYBjT89Xisz6yB/+i6A97VOQ5Xyq8= -----END CERTIFICATE-----Generated at Sun Aug 2 23:07:42 2026 by rpki-client