$ rpki-client -vvf rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft File: 00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft (raw, json) Hash identifier: bWflWE4O+Dvl8yMd14esHolBfU7ZEPICL3nBSPG2eX4= Subject key identifier: E6:35:C5:A3:1F:74:DA:67:C1:D3:8E:C8:36:1B:F3:57:D4:20:4B:84 Authority key identifier: 00:84:1D:BD:E5:F6:CE:BF:8C:94:FD:EE:22:77:71:94:6E:21:52:CF Certificate issuer: /CN=00841DBDE5F6CEBF8C94FDEE227771946E2152CF Certificate serial: 770644DB2A6ED783F823EE6070F4C0B0B382C2E4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft Manifest number: 7D Signing time: Sun 02 Aug 2026 09:39:22 +0000 Manifest this update: Sun 02 Aug 2026 09:34:22 +0000 Manifest next update: Mon 03 Aug 2026 12:48:22 +0000 Files and hashes: 1: 323430343a643563303a3a2f33322d3438203d3e20313338383534.roa (hash: Rh9qnUB02qhjNfXj2g1O5tEu9u7bYMmnyx0Vs0JNy30=) 2: 00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl (hash: WXBQJrWtyI608QFS2mZ2M8zQqE46zpm8cD+cl0ogUzI=) 3: 3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa (hash: RevoOpF5++1wWoPWwmQB4PPK000UixnKZHWg4wTOKek=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:06:44:db:2a:6e:d7:83:f8:23:ee:60:70:f4:c0:b0:b3:82:c2:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00841DBDE5F6CEBF8C94FDEE227771946E2152CF Validity Not Before: Aug 2 09:34:22 2026 GMT Not After : Aug 3 12:48:22 2026 GMT Subject: CN=E635C5A31F74DA67C1D38EC8361BF357D4204B84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:84:73:44:ba:0e:ef:f1:e3:2e:d4:58:34:78: 84:73:fe:01:2f:2d:dc:02:d4:6b:ff:4f:c8:03:35: a1:af:38:74:48:94:ca:d9:2e:aa:55:79:e1:06:d5: 13:68:6c:d1:e0:17:5b:98:40:0d:66:cb:44:56:3c: 1a:67:35:e1:f6:f6:a1:6f:55:ba:77:aa:89:fb:42: 3d:96:e0:68:b1:c7:7a:be:4d:e9:26:b7:88:16:a1: 8e:74:b2:d3:8d:af:d7:e4:9d:87:d3:90:82:8b:e0: 28:d7:ed:60:63:ca:23:60:3b:f0:77:cd:82:b4:d8: 48:85:98:e5:f8:ee:29:34:bf:1d:c3:e9:6e:38:a0: 39:cb:1b:fe:5b:46:d1:9a:57:a8:39:4d:45:b0:fd: 14:35:54:a6:57:21:e0:8d:80:0b:00:e4:78:1b:b6: c7:b1:d9:47:e9:e2:33:af:79:1b:f2:b9:a3:21:4f: 1e:f8:ea:a9:fd:8e:05:4b:f3:c4:88:67:8f:fd:ba: a2:d0:1a:e0:1c:a0:ba:4a:2a:5d:b2:7f:98:e6:1e: 80:9a:1d:91:3d:ac:f8:ba:b0:82:65:aa:88:cf:bd: 9e:2b:c0:07:02:ee:08:e3:79:f2:f3:67:a9:56:96: 4e:1d:8c:2c:05:c7:f7:a1:47:4f:d1:76:6f:5e:36: ea:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:35:C5:A3:1F:74:DA:67:C1:D3:8E:C8:36:1B:F3:57:D4:20:4B:84 X509v3 Authority Key Identifier: keyid:00:84:1D:BD:E5:F6:CE:BF:8C:94:FD:EE:22:77:71:94:6E:21:52:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d0:95:70:6a:22:c0:1d:72:9f:0d:12:ef:bd:96:77:19:2b: 6e:51:b1:8e:82:dd:68:25:f3:f1:33:bd:97:5a:71:11:28:c7: b9:88:ce:36:49:9e:8a:a8:09:80:13:9b:e2:18:08:f0:bc:f7: 11:21:9a:ab:e7:d0:ca:e1:ca:38:6d:65:43:09:b1:78:0c:8b: 59:df:38:21:45:63:31:cb:f8:8f:0b:43:04:dc:ba:7e:d4:f0: ff:5d:23:85:1a:73:4b:41:b0:7b:66:54:ea:0c:f5:fc:16:fd: 6f:10:46:08:15:a9:c7:b8:3c:ec:5c:7e:71:e4:ec:f4:50:0f: d4:49:68:72:b4:19:b5:b8:a0:d4:d9:76:67:9e:d5:60:3c:af: b1:b0:bf:61:65:1e:86:2c:8f:98:b8:d0:ef:71:0c:5b:9c:bc: a5:57:dc:01:73:58:98:50:94:0e:f0:9f:5f:42:b4:5e:b1:be: fe:8d:09:0e:00:95:7d:b1:15:bf:34:a9:77:a7:07:b5:d6:e0: 7e:81:21:46:a1:ea:64:ec:b1:bd:a7:31:66:42:3d:48:69:14: 49:f6:02:6b:26:63:61:21:c4:00:d5:52:51:47:14:80:c7:8b: 55:e4:91:49:d8:a0:98:18:61:d5:e5:83:a8:fc:9e:80:fd:33: 47:fd:53:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdwZE2ypu14P4I+5gcPTAsLOCwuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDA4NDFEQkRFNUY2Q0VCRjhDOTRGREVFMjI3NzcxOTQ2 RTIxNTJDRjAeFw0yNjA4MDIwOTM0MjJaFw0yNjA4MDMxMjQ4MjJaMDMxMTAvBgNV BAMTKEU2MzVDNUEzMUY3NERBNjdDMUQzOEVDODM2MUJGMzU3RDQyMDRCODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXhHNEug7v8eMu1Fg0eIRz/gEv LdwC1Gv/T8gDNaGvOHRIlMrZLqpVeeEG1RNobNHgF1uYQA1my0RWPBpnNeH29qFv Vbp3qon7Qj2W4Gixx3q+Tekmt4gWoY50stONr9fknYfTkIKL4CjX7WBjyiNgO/B3 zYK02EiFmOX47ik0vx3D6W44oDnLG/5bRtGaV6g5TUWw/RQ1VKZXIeCNgAsA5Hgb tsex2Ufp4jOveRvyuaMhTx746qn9jgVL88SIZ4/9uqLQGuAcoLpKKl2yf5jmHoCa HZE9rPi6sIJlqojPvZ4rwAcC7gjjefLzZ6lWlk4djCwFx/ehR0/Rdm9eNuqFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5jXFox902mfB047INhvzV9QgS4QwHwYDVR0j BBgwFoAUAIQdveX2zr+MlP3uIndxlG4hUs8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDI1MDIyMDUtNWM1NC00N2RiLWFlNmYtOWQ0OGUxODMyNDFjLzAvMDA4NDFEQkRF NUY2Q0VCRjhDOTRGREVFMjI3NzcxOTQ2RTIxNTJDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDg0MURCREU1RjZDRUJGOEM5NEZERUUyMjc3NzE5NDZFMjE1 MkNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDI1MDIyMDUtNWM1NC00N2RiLWFl NmYtOWQ0OGUxODMyNDFjLzAvMDA4NDFEQkRFNUY2Q0VCRjhDOTRGREVFMjI3Nzcx OTQ2RTIxNTJDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvQlXBqIsAdcp8NEu+9lncZK25RsY6C3Wgl 8/EzvZdacREox7mIzjZJnoqoCYATm+IYCPC89xEhmqvn0MrhyjhtZUMJsXgMi1nf OCFFYzHL+I8LQwTcun7U8P9dI4Uac0tBsHtmVOoM9fwW/W8QRggVqce4POxcfnHk 7PRQD9RJaHK0GbW4oNTZdmee1WA8r7Gwv2FlHoYsj5i40O9xDFucvKVX3AFzWJhQ lA7wn19CtF6xvv6NCQ4AlX2xFb80qXenB7XW4H6BIUah6mTssb2nMWZCPUhpFEn2 AmsmY2EhxADVUlFHFIDHi1XkkUnYoJgYYdXlg6j8noD9M0f9U5M= -----END CERTIFICATE-----Generated at Sun Aug 2 22:45:33 2026 by rpki-client