$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.mft File: C7281E70CDFFA77145134C1424E6A649EA797D8A.mft (raw, json) Hash identifier: QPS52ZLPqoMx0yq1yaAEva4MT00ymVf+sjMCzTxRSdU= Subject key identifier: E0:C5:C3:35:F9:F0:5C:60:7E:4E:C6:64:3D:C9:5B:00:17:48:8F:AA Authority key identifier: C7:28:1E:70:CD:FF:A7:71:45:13:4C:14:24:E6:A6:49:EA:79:7D:8A Certificate issuer: /CN=C7281E70CDFFA77145134C1424E6A649EA797D8A Certificate serial: 53ADAFF936F1E3F459428AB20F096A61BCF28453 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7281E70CDFFA77145134C1424E6A649EA797D8A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.mft Manifest number: 9C Signing time: Thu 27 Aug 2026 15:24:32 +0000 Manifest this update: Thu 27 Aug 2026 15:19:32 +0000 Manifest next update: Fri 28 Aug 2026 18:24:32 +0000 Files and hashes: 1: C7281E70CDFFA77145134C1424E6A649EA797D8A.crl (hash: PXX2YVvywcHS+5jpNDNku9MjSZJBFq26j2FfceLnvdM=) 2: 323030313a6466373a316130303a3a2f34382d3438203d3e203634333135.roa (hash: cXKkyqfbSB+TtcjHk1mHx/AJ1vKr+O8y/yaLaZ1+wx8=) 3: 3130332e38302e3233362e302f32322d3234203d3e203634333135.roa (hash: FH9DT+b1XWN3pV6XhdDYXcgO7tOiFoyEXNlC5hXHyTE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.crl rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7281E70CDFFA77145134C1424E6A649EA797D8A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Aug 2026 02:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ad:af:f9:36:f1:e3:f4:59:42:8a:b2:0f:09:6a:61:bc:f2:84:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7281E70CDFFA77145134C1424E6A649EA797D8A Validity Not Before: Aug 27 15:19:32 2026 GMT Not After : Aug 28 18:24:32 2026 GMT Subject: CN=E0C5C335F9F05C607E4EC6643DC95B0017488FAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f4:21:ae:d6:a9:f1:09:c7:3f:86:b7:48:23: 27:cf:85:68:3d:33:30:c1:83:9f:63:e2:67:37:ea: c4:4d:e7:b2:87:83:61:96:c8:f2:68:87:43:4f:2e: cb:66:5f:b3:9d:a6:c3:36:9d:51:39:a9:9e:24:20: 8a:e0:4a:6c:56:fe:90:1e:c6:57:0e:58:5a:b1:7f: 60:d5:35:7d:a0:47:54:22:78:4c:73:9f:30:bd:f5: d6:39:35:04:e3:d9:df:06:da:55:6f:bb:b7:e5:15: 59:04:1d:67:14:86:89:e0:ce:67:ef:c4:c6:5a:d2: 4e:df:38:cb:87:4c:59:5c:88:73:61:22:35:1e:a8: ed:02:0a:af:f4:5e:99:1a:d6:6f:30:09:91:b9:72: e1:e5:f1:6d:d9:98:fd:aa:6b:28:db:19:7f:7d:73: 85:65:cf:10:72:61:e5:49:24:19:19:a7:d5:ea:a7: 85:3d:bd:f6:c8:fb:c5:68:22:d1:af:f0:18:a7:14: 68:41:d5:86:1e:3c:15:4d:bc:d1:74:e8:6a:48:c7: 9e:42:df:73:99:04:85:ec:2f:83:58:06:b6:fb:65: 63:d0:0c:2f:91:d7:ac:a8:7f:51:46:f5:3c:f8:77: d5:16:d9:b1:2a:dc:9b:30:6c:94:db:bd:29:3e:4e: 9d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C5:C3:35:F9:F0:5C:60:7E:4E:C6:64:3D:C9:5B:00:17:48:8F:AA X509v3 Authority Key Identifier: keyid:C7:28:1E:70:CD:FF:A7:71:45:13:4C:14:24:E6:A6:49:EA:79:7D:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7281E70CDFFA77145134C1424E6A649EA797D8A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:4d:36:93:c3:34:3a:19:21:93:29:cb:4e:35:37:79:48:46: ca:d3:4f:84:55:57:f9:0b:3e:bc:4e:04:15:fb:48:51:53:34: 0b:0d:f0:b7:2a:de:21:f3:c3:ad:3a:7f:93:74:3d:22:dc:91: 4a:e3:bf:82:b4:0d:03:8c:bc:31:c2:3d:1b:2f:ed:08:ac:5f: 59:a0:a2:0e:52:30:bd:e7:cc:0f:08:22:5c:86:bd:fa:40:bf: 7e:e6:e7:76:ef:60:56:12:a9:c6:64:98:a6:0e:a8:bb:e2:7f: ca:0d:14:0e:d3:38:5c:d4:c7:36:f7:8c:04:9c:c8:03:7c:5a: 26:2e:24:39:bd:0c:3f:f7:25:48:ad:b6:e2:3a:82:bc:c3:38: 29:c3:67:b5:b7:51:3b:2c:bb:42:8d:52:8c:f4:7e:91:4c:c1: 6d:d6:16:b1:d2:8a:6f:cd:b4:e8:d6:cd:41:a5:b1:0c:67:f6: cb:86:a9:8d:95:b8:e3:55:a1:9c:f0:22:39:1a:c2:47:fb:c8: b4:ee:9c:29:f1:83:4b:a2:f4:0b:b4:e5:3c:21:cd:54:53:a7: a3:da:76:e9:04:3d:7d:2d:6b:b2:23:af:87:13:a3:1c:fd:b2: 3a:92:6c:c2:1d:47:04:62:e3:57:f6:54:21:10:fa:23:20:71: 85:57:fe:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU62v+Tbx4/RZQoqyDwlqYbzyhFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcyODFFNzBDREZGQTc3MTQ1MTM0QzE0MjRFNkE2NDlF QTc5N0Q4QTAeFw0yNjA4MjcxNTE5MzJaFw0yNjA4MjgxODI0MzJaMDMxMTAvBgNV BAMTKEUwQzVDMzM1RjlGMDVDNjA3RTRFQzY2NDNEQzk1QjAwMTc0ODhGQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC99CGu1qnxCcc/hrdIIyfPhWg9 MzDBg59j4mc36sRN57KHg2GWyPJoh0NPLstmX7OdpsM2nVE5qZ4kIIrgSmxW/pAe xlcOWFqxf2DVNX2gR1QieExznzC99dY5NQTj2d8G2lVvu7flFVkEHWcUhongzmfv xMZa0k7fOMuHTFlciHNhIjUeqO0CCq/0Xpka1m8wCZG5cuHl8W3ZmP2qayjbGX99 c4VlzxByYeVJJBkZp9Xqp4U9vfbI+8VoItGv8BinFGhB1YYePBVNvNF06GpIx55C 33OZBIXsL4NYBrb7ZWPQDC+R16yof1FG9Tz4d9UW2bEq3JswbJTbvSk+Tp05AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4MXDNfnwXGB+TsZkPclbABdIj6owHwYDVR0j BBgwFoAUxygecM3/p3FFE0wUJOamSep5fYowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTk1ZjVmMTEtNTdhZS00YWMzLWEwMzktZTA0NTZiY2NmNDRjLzAvQzcyODFFNzBD REZGQTc3MTQ1MTM0QzE0MjRFNkE2NDlFQTc5N0Q4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzI4MUU3MENERkZBNzcxNDUxMzRDMTQyNEU2QTY0OUVBNzk3 RDhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTk1ZjVmMTEtNTdhZS00YWMzLWEw MzktZTA0NTZiY2NmNDRjLzAvQzcyODFFNzBDREZGQTc3MTQ1MTM0QzE0MjRFNkE2 NDlFQTc5N0Q4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtNNpPDNDoZIZMpy041N3lIRsrTT4RVV/kL PrxOBBX7SFFTNAsN8Lcq3iHzw606f5N0PSLckUrjv4K0DQOMvDHCPRsv7QisX1mg og5SML3nzA8IIlyGvfpAv37m53bvYFYSqcZkmKYOqLvif8oNFA7TOFzUxzb3jASc yAN8WiYuJDm9DD/3JUittuI6grzDOCnDZ7W3UTssu0KNUoz0fpFMwW3WFrHSim/N tOjWzUGlsQxn9suGqY2VuONVoZzwIjkawkf7yLTunCnxg0ui9Au05TwhzVRTp6Pa dukEPX0ta7Ijr4cToxz9sjqSbMIdRwRi41f2VCEQ+iMgcYVX/m4= -----END CERTIFICATE-----Generated at Thu Aug 27 18:33:43 2026 by rpki-client