$ rpki-client -vvf rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft File: A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft (raw, json) Hash identifier: P4Ht9pN8yr+j56pFatR6xlpAUJ3UelAmDsihTiAbRN0= Subject key identifier: A5:DC:8B:91:AD:C8:1E:57:55:00:7F:B0:DE:71:4E:C7:ED:EC:C9:97 Authority key identifier: A9:2D:7A:2C:E9:CB:AA:FD:76:3A:38:0C:28:FA:DD:D1:A3:C7:EA:81 Certificate issuer: /CN=A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81 Certificate serial: 73D8F24F59F86740564A1104EFE8F238BB121D18 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft Manifest number: 7B Signing time: Sat 01 Aug 2026 23:11:49 +0000 Manifest this update: Sat 01 Aug 2026 23:06:49 +0000 Manifest next update: Sun 02 Aug 2026 23:20:49 +0000 Files and hashes: 1: 3130332e3134342e3133342e302f32332d3233203d3e20313339343237.roa (hash: gM1AjlPJEA8ARwiEjxXZ/XYQjY805lBo3kfjSVH4yf0=) 2: 3130332e3134342e3133352e302f32342d3234203d3e20313339343237.roa (hash: VuUTV6DF0NO0ScLbFc6eylw+nle2kUmBZXnxVkFv7U0=) 3: 323430353a366463303a3a2f33322d3332203d3e20313339343237.roa (hash: 3KrJ0+AfMCOxSs3J3yun9Ot0fuEZmxiN3y8DZjfYS7Q=) 4: A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.crl (hash: r86HtvO+ZrASddcFHqFhYv/BIziIzZuHDz3mdahRddk=) 5: 3130332e3134342e3133342e302f32342d3234203d3e20313339343237.roa (hash: WV8Z97xrGgFHwypp6SwSp1IloS8eHHkMOVgWyPQX300=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.crl rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 23:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:d8:f2:4f:59:f8:67:40:56:4a:11:04:ef:e8:f2:38:bb:12:1d:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81 Validity Not Before: Aug 1 23:06:49 2026 GMT Not After : Aug 2 23:20:49 2026 GMT Subject: CN=A5DC8B91ADC81E5755007FB0DE714EC7EDECC997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c2:2c:7b:0b:7d:c6:a6:0f:a8:b4:7f:54:ab: 68:6b:cd:53:ab:aa:f4:16:96:e1:fd:a8:00:e7:82: 9a:73:82:e4:70:ca:31:0c:39:9f:6f:fa:2a:95:ff: 06:33:ff:26:c9:91:48:08:e1:cd:09:5c:9f:ff:ad: ff:03:33:c0:5f:78:9c:a1:ba:00:45:2d:64:1b:99: bc:20:50:78:44:25:2b:e1:68:96:07:72:91:de:28: 3b:93:1e:02:05:7e:f1:9e:cd:cc:5d:e0:71:f7:33: 78:67:a7:48:6a:88:75:2f:f1:78:91:c2:a7:a2:10: 2f:bb:07:6e:92:2c:a1:f0:a0:d0:d4:49:bb:92:1d: a2:96:13:68:30:0e:db:7d:36:54:14:44:e4:1e:90: 48:8d:93:4d:07:70:be:15:e2:39:e1:30:3d:cd:7f: 20:cf:20:76:b7:42:18:a2:c6:57:c7:94:27:3c:d5: 2d:32:03:3d:ed:7d:92:19:9c:61:85:93:bf:91:d2: 3e:6a:26:fd:15:8d:62:6e:e4:fa:fa:0c:d0:0a:c5: f9:d6:a8:0e:99:40:3a:4d:c9:9c:18:40:43:e1:99: ed:e6:8a:5e:c6:2e:a9:72:40:36:57:45:c5:1a:18: 69:34:65:37:bb:e2:b9:7c:f9:d4:0d:da:86:91:9b: ea:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DC:8B:91:AD:C8:1E:57:55:00:7F:B0:DE:71:4E:C7:ED:EC:C9:97 X509v3 Authority Key Identifier: keyid:A9:2D:7A:2C:E9:CB:AA:FD:76:3A:38:0C:28:FA:DD:D1:A3:C7:EA:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:08:49:89:2b:ea:34:af:27:c9:36:bc:93:05:a7:c0:7c:a8: 9a:a8:10:ba:cf:d2:e6:6b:4e:a0:ec:6e:e7:e3:af:7d:ef:c8: e9:8e:8d:80:7c:48:38:87:3d:01:df:ed:c1:19:17:76:25:ee: bb:c6:7c:07:97:55:6c:c9:83:d8:06:b6:e1:93:0f:34:9c:32: f8:7e:fd:03:1f:1e:00:ac:55:2a:56:89:57:f7:03:08:00:4b: 86:8f:d7:2b:53:98:6d:97:ec:97:64:e9:4d:aa:a0:6b:2c:12: 9d:71:a0:1a:80:03:28:1d:f3:11:68:d5:77:f7:e8:1b:98:00: a1:38:84:4d:4f:62:9b:0b:2a:aa:83:67:a5:f5:fd:e6:8e:c9: f5:78:f6:fa:c4:ab:4f:85:a0:ca:3c:d0:2f:b8:6e:7d:40:2c: 5d:76:82:8f:18:23:29:c7:b4:94:98:4e:7a:b4:cc:a8:56:cf: 56:9e:0b:42:55:84:37:13:8e:e6:93:54:08:32:7e:c0:84:19: 1a:b1:27:38:df:98:43:0d:ad:7a:d0:96:c6:d9:58:c1:4f:39: c6:8b:3b:7b:08:7d:06:a3:57:8f:e2:22:02:6f:b1:08:0c:5a: 78:2b:9e:6b:11:b8:87:e5:08:15:b8:e8:8a:9b:8a:3b:c0:6a: ee:c1:e7:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc9jyT1n4Z0BWShEE7+jyOLsSHRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkyRDdBMkNFOUNCQUFGRDc2M0EzODBDMjhGQURERDFB M0M3RUE4MTAeFw0yNjA4MDEyMzA2NDlaFw0yNjA4MDIyMzIwNDlaMDMxMTAvBgNV BAMTKEE1REM4QjkxQURDODFFNTc1NTAwN0ZCMERFNzE0RUM3RURFQ0M5OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRwix7C33Gpg+otH9Uq2hrzVOr qvQWluH9qADngppzguRwyjEMOZ9v+iqV/wYz/ybJkUgI4c0JXJ//rf8DM8BfeJyh ugBFLWQbmbwgUHhEJSvhaJYHcpHeKDuTHgIFfvGezcxd4HH3M3hnp0hqiHUv8XiR wqeiEC+7B26SLKHwoNDUSbuSHaKWE2gwDtt9NlQUROQekEiNk00HcL4V4jnhMD3N fyDPIHa3QhiixlfHlCc81S0yAz3tfZIZnGGFk7+R0j5qJv0VjWJu5Pr6DNAKxfnW qA6ZQDpNyZwYQEPhme3mil7GLqlyQDZXRcUaGGk0ZTe74rl8+dQN2oaRm+pXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpdyLka3IHldVAH+w3nFOx+3syZcwHwYDVR0j BBgwFoAUqS16LOnLqv12OjgMKPrd0aPH6oEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWE5MTRhZGEtYTlhYS00ZDdmLTllNDctNTk0YmNiN2E3MGFiLzAvQTkyRDdBMkNF OUNCQUFGRDc2M0EzODBDMjhGQURERDFBM0M3RUE4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOTJEN0EyQ0U5Q0JBQUZENzYzQTM4MEMyOEZBREREMUEzQzdF QTgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWE5MTRhZGEtYTlhYS00ZDdmLTll NDctNTk0YmNiN2E3MGFiLzAvQTkyRDdBMkNFOUNCQUFGRDc2M0EzODBDMjhGQURE RDFBM0M3RUE4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABAISYkr6jSvJ8k2vJMFp8B8qJqoELrP0uZr TqDsbufjr33vyOmOjYB8SDiHPQHf7cEZF3Yl7rvGfAeXVWzJg9gGtuGTDzScMvh+ /QMfHgCsVSpWiVf3AwgAS4aP1ytTmG2X7Jdk6U2qoGssEp1xoBqAAygd8xFo1Xf3 6BuYAKE4hE1PYpsLKqqDZ6X1/eaOyfV49vrEq0+FoMo80C+4bn1ALF12go8YIynH tJSYTnq0zKhWz1aeC0JVhDcTjuaTVAgyfsCEGRqxJzjfmEMNrXrQlsbZWMFPOcaL O3sIfQajV4/iIgJvsQgMWngrnmsRuIflCBW46IqbijvAau7B51o= -----END CERTIFICATE-----Generated at Sun Aug 2 15:50:04 2026 by rpki-client