$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/B679ABD48A919D142B31732EEB7434BD0864B337.mft File: B679ABD48A919D142B31732EEB7434BD0864B337.mft (raw, json) Hash identifier: 6CrlJxGQgKUePxmDX6su68ux6U98fs1vj69FkfhhWIs= Subject key identifier: 94:59:E2:8A:95:16:A3:78:17:36:C6:57:4D:B3:F4:0B:7B:1A:AB:6D Authority key identifier: B6:79:AB:D4:8A:91:9D:14:2B:31:73:2E:EB:74:34:BD:08:64:B3:37 Certificate issuer: /CN=B679ABD48A919D142B31732EEB7434BD0864B337 Certificate serial: 73019F7E61329A56FD4E949E34485C7A0601B4D9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B679ABD48A919D142B31732EEB7434BD0864B337.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/B679ABD48A919D142B31732EEB7434BD0864B337.mft Manifest number: A4 Signing time: Mon 31 Aug 2026 20:04:43 +0000 Manifest this update: Mon 31 Aug 2026 19:59:43 +0000 Manifest next update: Tue 01 Sep 2026 21:48:43 +0000 Files and hashes: 1: 3130332e39362e3134342e302f32332d3234203d3e20313530393134.roa (hash: wgpVAiwQ9P2SsmnIcWLbmYOBEu39pXrL7pmOR79nwaw=) 2: B679ABD48A919D142B31732EEB7434BD0864B337.crl (hash: gLwh4Kd+eoPRsuNVRNtWdRZUoBVN9pme4sHcYhh6EN4=) 3: 3130332e39362e3134342e302f32332d3234203d3e203137393232.roa (hash: 19cvxsjH0jmLxb1jG1lOK+sOgukmzTDGlXRjxR2U/wQ=) 4: 3130332e39362e3134352e302f32342d3234203d3e20313338313238.roa (hash: ztZRgaXUDlz+suazGGurQouD2lrLzAX+Obh7oeSoFpQ=) 5: 3130332e39362e3134342e302f32342d3234203d3e2034383030.roa (hash: kR57phtXtYkWkqOJR+vNKGsYD3GG168kvYzkg+VvXLE=) 6: 3130332e39362e3134352e302f32342d3234203d3e20313338383834.roa (hash: HMstQWwIQ4Ttwiw1acG6eiASnTbL+rVODQ6ae+mQEZ0=) 7: 3130332e39362e3134342e302f32332d3234203d3e2034373631.roa (hash: WMt8uGFjDPg74NN6xDD4yix+o7SOuzqi5JHQbnLLFL0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/B679ABD48A919D142B31732EEB7434BD0864B337.crl rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/B679ABD48A919D142B31732EEB7434BD0864B337.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B679ABD48A919D142B31732EEB7434BD0864B337.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 21:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:01:9f:7e:61:32:9a:56:fd:4e:94:9e:34:48:5c:7a:06:01:b4:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B679ABD48A919D142B31732EEB7434BD0864B337 Validity Not Before: Aug 31 19:59:43 2026 GMT Not After : Sep 1 21:48:43 2026 GMT Subject: CN=9459E28A9516A3781736C6574DB3F40B7B1AAB6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a6:22:73:e3:60:44:75:b5:6a:3b:1d:f9:63: 01:05:e6:71:16:cd:0f:16:da:6c:b1:ce:82:77:53: 37:0b:a9:de:95:62:c3:1d:9e:aa:a3:19:dc:8d:eb: 63:dd:a1:24:5f:b0:62:99:e2:94:b9:e2:79:f0:a3: 3a:45:18:df:06:bb:a1:32:ce:2f:1e:ff:13:78:d1: 44:f1:aa:83:70:ec:d2:84:4d:96:a8:ee:36:60:b2: df:82:0f:b0:92:0e:5c:de:1c:6c:0e:fc:f6:91:6f: c3:e0:33:1b:bb:b8:69:08:16:ef:7d:6f:17:40:08: 0a:cb:ff:b4:3b:15:ac:83:56:c0:8c:c3:77:26:cc: a7:9c:5b:0c:9b:d0:97:f6:27:dc:25:a7:48:71:23: fa:ee:53:fe:21:5c:bd:e9:24:0b:94:95:b0:ba:dd: 94:90:ff:f9:a6:fc:bb:79:51:a8:37:1b:a1:14:e4: 35:06:48:c9:59:ee:a4:fa:37:db:80:b5:ba:41:53: d8:56:5d:84:ac:53:6b:92:ad:85:fd:8f:be:9b:61: 7c:8c:ff:c8:a5:24:0f:07:12:c2:d3:f2:9d:18:70: ce:db:5b:cc:c4:e1:c8:42:bd:1c:b1:55:fa:33:66: 99:27:f7:0d:34:82:db:24:45:d8:c5:8c:41:fe:d7: 29:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:59:E2:8A:95:16:A3:78:17:36:C6:57:4D:B3:F4:0B:7B:1A:AB:6D X509v3 Authority Key Identifier: keyid:B6:79:AB:D4:8A:91:9D:14:2B:31:73:2E:EB:74:34:BD:08:64:B3:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/B679ABD48A919D142B31732EEB7434BD0864B337.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B679ABD48A919D142B31732EEB7434BD0864B337.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/B679ABD48A919D142B31732EEB7434BD0864B337.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:4f:0b:74:a9:6c:23:b4:ce:65:d1:5c:c1:5b:4b:7c:15:44: 54:87:db:d2:f1:6f:0a:b3:2b:c7:0e:6c:38:25:9b:a5:81:ab: 02:55:59:07:b5:55:d1:0a:6e:d0:0e:3d:ac:28:c9:79:70:f3: 5c:df:ec:c9:a0:8a:7e:a9:e1:fc:ca:84:ce:24:23:07:18:2a: 58:18:14:ad:ad:de:9c:76:e4:2f:d1:d7:4c:b6:82:06:a3:f0: b7:c8:12:53:63:30:77:88:a9:a4:ec:c0:fb:56:53:0d:96:20: fc:2f:d9:dc:f0:9e:8f:8b:b9:f8:2f:71:95:d7:27:2e:f8:47: 0a:99:15:d7:59:db:36:3d:03:e5:c9:2e:2f:83:29:ab:a6:7f: 25:85:97:23:2c:65:4f:5c:9e:4f:e1:d2:67:8f:7d:cc:7e:8b: 05:1b:2f:d3:1c:05:18:7d:1c:0d:f9:80:b1:99:2f:e2:62:48: cd:04:02:9f:f8:fd:93:14:cb:30:0f:26:49:8e:37:c2:3e:4c: c3:8c:4a:0d:61:66:5e:25:f6:e3:99:a7:0f:37:1b:9e:39:26: b5:ee:73:ee:ad:1e:e8:ed:59:62:cd:81:02:25:00:10:23:95: df:d4:4c:60:c2:02:3e:ed:8c:b5:9b:a7:bb:6e:99:19:c5:51: d6:c2:cc:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcwGffmEymlb9TpSeNEhcegYBtNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY3OUFCRDQ4QTkxOUQxNDJCMzE3MzJFRUI3NDM0QkQw ODY0QjMzNzAeFw0yNjA4MzExOTU5NDNaFw0yNjA5MDEyMTQ4NDNaMDMxMTAvBgNV BAMTKDk0NTlFMjhBOTUxNkEzNzgxNzM2QzY1NzREQjNGNDBCN0IxQUFCNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0piJz42BEdbVqOx35YwEF5nEW zQ8W2myxzoJ3UzcLqd6VYsMdnqqjGdyN62PdoSRfsGKZ4pS54nnwozpFGN8Gu6Ey zi8e/xN40UTxqoNw7NKETZao7jZgst+CD7CSDlzeHGwO/PaRb8PgMxu7uGkIFu99 bxdACArL/7Q7FayDVsCMw3cmzKecWwyb0Jf2J9wlp0hxI/ruU/4hXL3pJAuUlbC6 3ZSQ//mm/Lt5Uag3G6EU5DUGSMlZ7qT6N9uAtbpBU9hWXYSsU2uSrYX9j76bYXyM /8ilJA8HEsLT8p0YcM7bW8zE4chCvRyxVfozZpkn9w00gtskRdjFjEH+1ynnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlFniipUWo3gXNsZXTbP0C3saq20wHwYDVR0j BBgwFoAUtnmr1IqRnRQrMXMu63Q0vQhkszcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTgyNjFjMzctNTlhNS00MzY5LTkxZTUtNGIxMzY2MDEwYzZkLzAvQjY3OUFCRDQ4 QTkxOUQxNDJCMzE3MzJFRUI3NDM0QkQwODY0QjMzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjc5QUJENDhBOTE5RDE0MkIzMTczMkVFQjc0MzRCRDA4NjRC MzM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTgyNjFjMzctNTlhNS00MzY5LTkx ZTUtNGIxMzY2MDEwYzZkLzAvQjY3OUFCRDQ4QTkxOUQxNDJCMzE3MzJFRUI3NDM0 QkQwODY0QjMzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJtPC3SpbCO0zmXRXMFbS3wVRFSH29Lxbwqz K8cObDglm6WBqwJVWQe1VdEKbtAOPawoyXlw81zf7Mmgin6p4fzKhM4kIwcYKlgY FK2t3px25C/R10y2ggaj8LfIElNjMHeIqaTswPtWUw2WIPwv2dzwno+LufgvcZXX Jy74RwqZFddZ2zY9A+XJLi+DKaumfyWFlyMsZU9cnk/h0mePfcx+iwUbL9McBRh9 HA35gLGZL+JiSM0EAp/4/ZMUyzAPJkmON8I+TMOMSg1hZl4l9uOZpw83G545JrXu c+6tHujtWWLNgQIlABAjld/UTGDCAj7tjLWbp7tumRnFUdbCzM0= -----END CERTIFICATE-----Generated at Tue Sep 1 05:44:50 2026 by rpki-client