$ rpki-client -vvf rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft File: D3CDCB356F94C51B241188653C7ADC2C79D79424.mft (raw, json) Hash identifier: DP+oxj4fzrflb7A+yCA0+8Y3K83+EI3iGGvxTl3V258= Subject key identifier: 86:9C:40:25:62:43:DC:26:A3:17:56:F3:88:CC:4D:47:23:F5:08:07 Authority key identifier: D3:CD:CB:35:6F:94:C5:1B:24:11:88:65:3C:7A:DC:2C:79:D7:94:24 Certificate issuer: /CN=D3CDCB356F94C51B241188653C7ADC2C79D79424 Certificate serial: 7A61AB827695EAE545EAE5175274895B1FF72EF3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft Manifest number: 7D Signing time: Sun 02 Aug 2026 17:43:48 +0000 Manifest this update: Sun 02 Aug 2026 17:38:48 +0000 Manifest next update: Mon 03 Aug 2026 21:23:48 +0000 Files and hashes: 1: 3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa (hash: 83bYI1z3e7ETkpXnXGTkrnk19/a7Qfy/7K16nNObwH0=) 2: D3CDCB356F94C51B241188653C7ADC2C79D79424.crl (hash: BKo3fvtzyIUnVjJZgHFEwYyiz389bUU8MOudeUuQPOA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.crl rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:61:ab:82:76:95:ea:e5:45:ea:e5:17:52:74:89:5b:1f:f7:2e:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3CDCB356F94C51B241188653C7ADC2C79D79424 Validity Not Before: Aug 2 17:38:48 2026 GMT Not After : Aug 3 21:23:48 2026 GMT Subject: CN=869C40256243DC26A31756F388CC4D4723F50807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a0:0e:a5:49:a6:b0:54:38:01:5f:31:5f:a7: 65:09:ef:ab:65:85:da:58:2e:44:f8:f4:62:d9:d5: 0b:33:de:46:46:99:de:e5:bc:3c:2b:73:9b:37:df: 7d:f8:9f:80:6b:d0:a6:26:d3:c0:95:fe:ad:a3:d6: 17:43:52:aa:cc:d2:e9:2a:3f:92:e4:a1:a2:01:36: 8d:37:f1:8e:b9:6e:e4:51:97:1b:a8:2f:4c:e9:93: a4:3d:ce:e7:8d:41:d6:d8:9e:d9:4c:4e:44:f5:43: 6c:2a:a2:52:8e:ea:63:26:d7:62:b1:14:4c:fd:56: 25:1b:d9:cb:e0:bf:39:8f:28:ef:a8:a3:8c:0e:4c: 45:8b:18:95:4a:03:7d:67:93:78:b2:dd:10:0b:cc: a5:ba:87:02:cc:35:50:45:e7:eb:b2:e3:50:62:cc: 20:9e:da:61:b2:81:5d:c8:a4:42:52:fd:71:a0:a1: 93:a0:bd:fc:e4:2a:a2:6e:a0:26:39:d5:c9:98:7f: a6:f1:4c:53:23:e4:30:0c:97:fa:e3:2d:ff:26:89: e9:23:33:f2:ae:33:5f:26:68:c2:b1:99:39:65:13: e5:ba:4d:da:54:04:bf:6d:03:25:b1:08:42:f9:a3: dc:79:d2:ea:5f:66:1e:aa:a0:eb:aa:cf:02:5f:5e: ee:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9C:40:25:62:43:DC:26:A3:17:56:F3:88:CC:4D:47:23:F5:08:07 X509v3 Authority Key Identifier: keyid:D3:CD:CB:35:6F:94:C5:1B:24:11:88:65:3C:7A:DC:2C:79:D7:94:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f6:2a:58:0f:fc:60:65:7e:f3:28:89:f3:33:48:f3:87:35:14: 49:08:f6:24:5c:99:f0:de:3c:9e:0a:64:22:bc:e3:e5:68:71: 74:74:89:58:85:3e:a5:7e:08:c6:73:be:fe:03:ce:0d:2c:2c: 53:49:10:29:75:4d:bc:54:a4:1c:1d:ea:cf:1e:da:85:de:c1: 57:e6:01:37:8a:b7:bb:dd:9a:c1:a9:8c:0c:b9:a7:92:c3:68: da:eb:be:b8:0b:62:c5:ef:57:b0:1f:b4:bb:32:45:b9:e7:ff: 16:c6:a5:de:ef:79:93:c2:32:bc:13:9d:f2:88:22:76:bf:12: a1:4f:7a:c3:c6:fa:d6:63:ae:a0:1f:2e:c8:6f:f5:76:0e:98: 03:5d:11:87:54:88:f9:27:64:9f:25:42:bc:18:53:7a:fb:bd: 25:ba:fd:2e:f0:13:a4:24:c5:57:4c:69:7a:09:45:20:4c:9b: 79:20:f6:82:83:c7:42:7e:a6:a1:67:81:5e:64:1b:d9:5b:f9: 14:1c:c0:01:3e:56:45:f0:03:cb:24:0c:36:39:f2:2d:5e:db: d9:3f:c1:8b:9c:c1:3b:bd:4d:6a:5f:0f:bc:a7:a1:61:99:14: 70:6a:34:1a:5b:2f:d5:ab:1c:f9:6a:0b:10:19:5c:6f:b2:52: 1c:69:c3:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUemGrgnaV6uVF6uUXUnSJWx/3LvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNDRENCMzU2Rjk0QzUxQjI0MTE4ODY1M0M3QURDMkM3 OUQ3OTQyNDAeFw0yNjA4MDIxNzM4NDhaFw0yNjA4MDMyMTIzNDhaMDMxMTAvBgNV BAMTKDg2OUM0MDI1NjI0M0RDMjZBMzE3NTZGMzg4Q0M0RDQ3MjNGNTA4MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCToA6lSaawVDgBXzFfp2UJ76tl hdpYLkT49GLZ1Qsz3kZGmd7lvDwrc5s33334n4Br0KYm08CV/q2j1hdDUqrM0ukq P5LkoaIBNo038Y65buRRlxuoL0zpk6Q9zueNQdbYntlMTkT1Q2wqolKO6mMm12Kx FEz9ViUb2cvgvzmPKO+oo4wOTEWLGJVKA31nk3iy3RALzKW6hwLMNVBF5+uy41Bi zCCe2mGygV3IpEJS/XGgoZOgvfzkKqJuoCY51cmYf6bxTFMj5DAMl/rjLf8miekj M/KuM18maMKxmTllE+W6TdpUBL9tAyWxCEL5o9x50upfZh6qoOuqzwJfXu5FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhpxAJWJD3CajF1bziMxNRyP1CAcwHwYDVR0j BBgwFoAU083LNW+UxRskEYhlPHrcLHnXlCQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2FmY2JmYmItYmEzZi00ZDUzLWEwNGYtMTRkNmY0YmUwY2IxLzAvRDNDRENCMzU2 Rjk0QzUxQjI0MTE4ODY1M0M3QURDMkM3OUQ3OTQyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EM0NEQ0IzNTZGOTRDNTFCMjQxMTg4NjUzQzdBREMyQzc5RDc5 NDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzAvRDNDRENCMzU2Rjk0QzUxQjI0MTE4ODY1M0M3QURD MkM3OUQ3OTQyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAPYqWA/8YGV+8yiJ8zNI84c1FEkI9iRcmfDe PJ4KZCK84+VocXR0iViFPqV+CMZzvv4Dzg0sLFNJECl1TbxUpBwd6s8e2oXewVfm ATeKt7vdmsGpjAy5p5LDaNrrvrgLYsXvV7AftLsyRbnn/xbGpd7veZPCMrwTnfKI Ina/EqFPesPG+tZjrqAfLshv9XYOmANdEYdUiPknZJ8lQrwYU3r7vSW6/S7wE6Qk xVdMaXoJRSBMm3kg9oKDx0J+pqFngV5kG9lb+RQcwAE+VkXwA8skDDY58i1e29k/ wYucwTu9TWpfD7ynoWGZFHBqNBpbL9WrHPlqCxAZXG+yUhxpw5Y= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:26 2026 by rpki-client