$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft File: 5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft (raw, json) Hash identifier: HmW+5h9oa9ahucYxERiEloRKAjzdkC21SF+WR1g9sTg= Subject key identifier: E6:F2:91:95:DC:86:99:BB:65:96:1E:E7:B6:A0:30:D9:2E:08:FB:E8 Authority key identifier: 5F:BE:DE:98:3A:63:22:B9:99:A4:6A:B6:AA:CC:F6:A7:C6:06:3F:B5 Certificate issuer: /CN=5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5 Certificate serial: 7DFC3004824B32B349888A2241CE23541EFF2217 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 00:59:15 +0000 Manifest this update: Thu 03 Sep 2026 00:54:15 +0000 Manifest next update: Fri 04 Sep 2026 01:40:15 +0000 Files and hashes: 1: 5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.crl (hash: pbIfzs23E2yiDmGwf46m56iOKCPA60d1DQ3dDtXENKg=) 2: 3130332e3135342e35332e302f32342d3234203d3e20313430343739.roa (hash: /1UO8tVQ+wLCWDJC+/9ddMEbFB3CgcFjCBFNxuu9120=) 3: 323430363a353463303a383030303a3a2f33332d3333203d3e20313430343739.roa (hash: bIsAPyP9rDpPX3/Ob3Qv6l0T0cqP2nXkNSsYJzMdy0g=) 4: 323430363a353463303a3a2f33332d3333203d3e20313430343739.roa (hash: 2cV6nPzmY4kD2CJExVdWuMSGfjJCPD1xihnYeBD8ieA=) 5: 3130332e3135342e35322e302f32342d3234203d3e20313430343739.roa (hash: hB2D7K4UTkw5fpBq+t9X3VNB/1j6WvNNmkdz6+J5cvo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.crl rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:fc:30:04:82:4b:32:b3:49:88:8a:22:41:ce:23:54:1e:ff:22:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5 Validity Not Before: Sep 3 00:54:15 2026 GMT Not After : Sep 4 01:40:15 2026 GMT Subject: CN=E6F29195DC8699BB65961EE7B6A030D92E08FBE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fc:07:59:79:83:d0:cc:9e:39:32:77:84:12: f5:f6:90:18:27:6d:d0:40:10:30:f8:4d:03:f1:21: e5:07:af:a8:07:a3:26:61:2f:8d:63:87:f1:8c:70: ef:e0:93:07:b6:ad:a1:b3:e4:be:76:f6:3f:c5:57: dd:f7:29:47:0d:5b:7c:08:0a:e4:f3:99:7a:2f:be: fa:fb:e8:24:9e:3c:13:89:fc:a9:71:7c:3a:25:99: 7c:04:5b:77:35:34:78:d2:5c:8b:9b:44:11:b4:8e: e1:fc:00:2c:32:44:0f:d8:6d:6a:e0:8a:3c:d5:c9: 5c:23:d9:11:d0:8a:aa:46:eb:ad:ad:ae:a2:6c:4b: 71:1a:aa:c9:25:68:21:49:47:20:25:a7:d3:86:9f: 83:88:8a:48:64:93:b7:a4:bc:74:6b:40:74:4c:f0: 9b:8b:eb:8c:18:3f:9b:f6:e8:1d:02:df:54:90:e8: ba:43:8f:9e:ab:ad:fc:d3:0f:09:38:41:43:6f:cf: cf:f9:b1:64:42:4f:bb:fa:39:e9:a8:0b:9c:a6:dc: d3:86:98:c6:f0:e4:ce:d2:82:9a:f3:4d:33:6b:56: d0:04:42:31:fe:77:bc:02:75:1f:3a:7c:26:7a:83: 91:a0:47:79:e5:53:cd:fb:fc:54:fb:76:58:ac:d1: b5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F2:91:95:DC:86:99:BB:65:96:1E:E7:B6:A0:30:D9:2E:08:FB:E8 X509v3 Authority Key Identifier: keyid:5F:BE:DE:98:3A:63:22:B9:99:A4:6A:B6:AA:CC:F6:A7:C6:06:3F:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:2b:92:98:c5:2d:80:95:c3:24:5e:44:02:b7:35:e3:92:b5: dd:2b:70:9c:ad:cf:08:81:ce:f9:99:84:ab:c0:d5:a4:43:79: 62:72:7d:4c:f4:0a:08:c9:49:b3:83:3d:92:ae:2d:9b:b8:14: 23:02:63:b5:50:9e:b8:2f:07:10:9f:05:51:18:b8:61:1f:38: b4:29:f8:98:24:b5:25:6a:d0:2f:50:71:c7:27:5d:89:6c:5b: 73:a0:a0:7d:a9:39:cf:e5:6d:36:a7:96:12:34:c1:79:4b:fb: da:a9:61:87:64:f4:81:a7:73:14:40:e2:07:02:fa:ac:67:fe: 13:b0:01:da:1f:91:06:b1:ea:5d:17:b8:6d:e6:2e:14:0f:52: b4:f1:89:20:d1:bd:94:78:6a:28:8b:1d:a3:b1:91:ec:f0:bb: 23:64:02:28:16:1e:a3:31:51:5b:50:e9:8e:88:79:ca:2a:e6: 4b:f1:ce:40:f4:12:90:41:7b:0e:0b:00:91:fd:a0:51:6e:4b: 95:d3:a0:67:0a:09:34:4b:f3:d8:a8:2c:22:0a:9c:38:78:41: 39:5e:f1:d5:a5:54:02:99:19:8a:42:25:03:22:d2:33:f6:89: 6a:1c:99:90:d2:7c:1d:7f:95:c2:ea:8d:a1:0e:25:73:71:a0: 33:60:79:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUffwwBIJLMrNJiIoiQc4jVB7/IhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCRURFOTgzQTYzMjJCOTk5QTQ2QUI2QUFDQ0Y2QTdD NjA2M0ZCNTAeFw0yNjA5MDMwMDU0MTVaFw0yNjA5MDQwMTQwMTVaMDMxMTAvBgNV BAMTKEU2RjI5MTk1REM4Njk5QkI2NTk2MUVFN0I2QTAzMEQ5MkUwOEZCRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7/AdZeYPQzJ45MneEEvX2kBgn bdBAEDD4TQPxIeUHr6gHoyZhL41jh/GMcO/gkwe2raGz5L529j/FV933KUcNW3wI CuTzmXovvvr76CSePBOJ/KlxfDolmXwEW3c1NHjSXIubRBG0juH8ACwyRA/YbWrg ijzVyVwj2RHQiqpG662trqJsS3EaqsklaCFJRyAlp9OGn4OIikhkk7ekvHRrQHRM 8JuL64wYP5v26B0C31SQ6LpDj56rrfzTDwk4QUNvz8/5sWRCT7v6OemoC5ym3NOG mMbw5M7SgprzTTNrVtAEQjH+d7wCdR86fCZ6g5GgR3nlU837/FT7dlis0bW5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5vKRldyGmbtllh7ntqAw2S4I++gwHwYDVR0j BBgwFoAUX77emDpjIrmZpGq2qsz2p8YGP7UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGM3NjVkNTEtYjBiMS00MzVkLWE2NmItNjA0YzZlNWQyOWVmLzAvNUZCRURFOTgz QTYzMjJCOTk5QTQ2QUI2QUFDQ0Y2QTdDNjA2M0ZCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkJFREU5ODNBNjMyMkI5OTlBNDZBQjZBQUNDRjZBN0M2MDYz RkI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGM3NjVkNTEtYjBiMS00MzVkLWE2 NmItNjA0YzZlNWQyOWVmLzAvNUZCRURFOTgzQTYzMjJCOTk5QTQ2QUI2QUFDQ0Y2 QTdDNjA2M0ZCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJgrkpjFLYCVwyReRAK3NeOStd0rcJytzwiB zvmZhKvA1aRDeWJyfUz0CgjJSbODPZKuLZu4FCMCY7VQnrgvBxCfBVEYuGEfOLQp +JgktSVq0C9QcccnXYlsW3OgoH2pOc/lbTanlhI0wXlL+9qpYYdk9IGncxRA4gcC +qxn/hOwAdofkQax6l0XuG3mLhQPUrTxiSDRvZR4aiiLHaOxkezwuyNkAigWHqMx UVtQ6Y6Iecoq5kvxzkD0EpBBew4LAJH9oFFuS5XToGcKCTRL89ioLCIKnDh4QTle 8dWlVAKZGYpCJQMi0jP2iWocmZDSfB1/lcLqjaEOJXNxoDNgeX8= -----END CERTIFICATE-----Generated at Thu Sep 3 05:59:00 2026 by rpki-client