$ rpki-client -vvvf rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft File: F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft (raw, json) Hash identifier: 7GQ0eBvuEP17uMdZePpZxO1MtgQEGPBBoSQ0V5L/9k4= Subject key identifier: 4E:47:38:68:07:A7:E9:21:EF:06:74:CA:07:45:D0:F6:E4:6A:48:44 Authority key identifier: F8:93:39:26:AE:83:9D:ED:72:9A:FA:2E:0E:4D:CB:FB:07:49:DF:1B Certificate issuer: /CN=F8933926AE839DED729AFA2E0E4DCBFB0749DF1B Certificate serial: 12908C87A9FC47379978DE7D6D508D09F4424913 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 10:41:42 +0000 Manifest this update: Wed 02 Sep 2026 10:36:42 +0000 Manifest next update: Thu 03 Sep 2026 11:45:42 +0000 Files and hashes: 1: 3130332e3139302e3130382e302f32342d3234203d3e20313439393033.roa (hash: 6UaquuTBkgXh3T9OTxZgNAGf5O5rLTrtkc8NLnoboV0=) 2: 3130332e3139302e3130392e302f32342d3234203d3e20313439393033.roa (hash: DA2FUhM7Kcld/ZOZCHHz4OC3AwFVi9D3hLd64lN6BR0=) 3: 3130332e3139302e3130382e302f32332d3234203d3e20313439393033.roa (hash: Ko5U+LVnoFJ8wmSh7j4Nh6VXRGbHhjpdwU4CqrLXyts=) 4: F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.crl (hash: OUc64JRew8J/z8NhRJ8pSdPff3LN4NUrGVHICt156No=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.crl rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 11:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:90:8c:87:a9:fc:47:37:99:78:de:7d:6d:50:8d:09:f4:42:49:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8933926AE839DED729AFA2E0E4DCBFB0749DF1B Validity Not Before: Sep 2 10:36:42 2026 GMT Not After : Sep 3 11:45:42 2026 GMT Subject: CN=4E47386807A7E921EF0674CA0745D0F6E46A4844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7c:fb:45:22:b7:cb:78:13:08:80:fa:da:d9: a5:10:f9:06:c4:4c:57:6f:8e:ff:1c:f6:b1:85:66: b5:56:1a:a8:cc:04:c4:54:36:9e:a8:c1:99:7c:b5: 1a:1e:99:81:11:dd:04:b1:8f:9a:46:2b:f7:66:dd: bb:0d:e9:af:bc:89:f9:f7:15:30:2e:81:72:91:68: ad:4e:28:82:91:69:01:77:95:d1:4b:68:62:cb:21: 9e:b9:ca:ac:0d:78:96:9e:81:61:46:19:83:08:81: d1:9b:be:c6:19:20:90:0b:96:e0:3a:24:3b:aa:82: 37:51:f0:91:3f:91:b1:f3:fe:5b:b6:fc:46:ca:4c: d0:98:1a:31:35:5d:35:83:3c:cc:c5:d8:8d:0c:de: ba:e4:bd:75:9d:ff:04:00:3e:89:09:20:0c:9c:c7: e5:6e:30:1d:92:d6:ca:29:29:6e:a0:f6:08:75:4b: 3d:85:29:9e:c6:9b:eb:e2:b1:c3:f5:5f:c8:a1:07: f6:9c:0f:22:4d:e3:62:ff:13:2b:75:77:5a:19:4d: ae:81:d8:1b:c0:43:ed:85:44:69:55:28:da:00:2a: 12:e1:88:83:3f:77:2d:e7:39:90:68:03:c1:35:dd: 52:37:f8:24:93:2f:72:43:74:df:74:7c:e3:4f:cb: 6b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:47:38:68:07:A7:E9:21:EF:06:74:CA:07:45:D0:F6:E4:6A:48:44 X509v3 Authority Key Identifier: keyid:F8:93:39:26:AE:83:9D:ED:72:9A:FA:2E:0E:4D:CB:FB:07:49:DF:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ce:45:4b:a3:b8:ae:29:4d:86:2b:64:82:5d:a2:89:53:91: b5:8c:57:a1:d1:1f:bb:68:0c:62:79:b2:45:11:42:17:c1:68: f4:0f:10:35:a6:a2:cc:13:6b:61:5f:46:f9:34:34:f2:48:80: e0:8e:34:a4:29:ee:9b:78:23:ab:8a:42:4d:6b:4f:01:bb:fa: 2b:d1:46:3a:a5:45:a1:72:45:85:d0:86:11:c4:85:a3:41:3b: ab:9d:c7:79:b3:c8:7b:21:e4:63:80:66:a8:89:f2:46:fa:3f: 3e:84:b1:a4:ec:70:e8:f4:89:1d:46:fd:13:09:62:c9:5e:5e: 48:c5:11:01:52:fc:50:03:ea:51:5a:36:fb:86:db:81:99:ae: 66:e1:71:9d:84:dc:f2:2d:65:10:3e:af:66:97:0e:a2:46:7e: 82:37:a3:2d:a6:e3:e2:dd:71:c5:26:0b:6e:1e:fe:ee:9c:78: fb:8a:5e:b3:06:cf:6c:65:c4:0f:f9:2e:6e:bc:3d:ca:27:3a: bc:36:8f:12:71:32:39:8c:aa:71:31:fa:f3:56:5f:fd:20:9d: d4:c4:8b:6d:12:bd:26:0c:40:e8:a5:5a:12:56:20:f3:c6:cd: 67:7a:de:57:5d:e2:b2:44:4a:33:ae:f7:ed:78:56:6e:3e:db: b6:0f:10:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEpCMh6n8RzeZeN59bVCNCfRCSRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg5MzM5MjZBRTgzOURFRDcyOUFGQTJFMEU0RENCRkIw NzQ5REYxQjAeFw0yNjA5MDIxMDM2NDJaFw0yNjA5MDMxMTQ1NDJaMDMxMTAvBgNV BAMTKDRFNDczODY4MDdBN0U5MjFFRjA2NzRDQTA3NDVEMEY2RTQ2QTQ4NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIfPtFIrfLeBMIgPra2aUQ+QbE TFdvjv8c9rGFZrVWGqjMBMRUNp6owZl8tRoemYER3QSxj5pGK/dm3bsN6a+8ifn3 FTAugXKRaK1OKIKRaQF3ldFLaGLLIZ65yqwNeJaegWFGGYMIgdGbvsYZIJALluA6 JDuqgjdR8JE/kbHz/lu2/EbKTNCYGjE1XTWDPMzF2I0M3rrkvXWd/wQAPokJIAyc x+VuMB2S1sopKW6g9gh1Sz2FKZ7Gm+viscP1X8ihB/acDyJN42L/Eyt1d1oZTa6B 2BvAQ+2FRGlVKNoAKhLhiIM/dy3nOZBoA8E13VI3+CSTL3JDdN90fONPy2tnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTkc4aAen6SHvBnTKB0XQ9uRqSEQwHwYDVR0j BBgwFoAU+JM5Jq6Dne1ymvouDk3L+wdJ3xswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTU1MjEwOTktM2JhMS00ZjkxLWI1YmItNzEyYzNiYmE2MzM3LzAvRjg5MzM5MjZB RTgzOURFRDcyOUFGQTJFMEU0RENCRkIwNzQ5REYxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GODkzMzkyNkFFODM5REVENzI5QUZBMkUwRTREQ0JGQjA3NDlE RjFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTU1MjEwOTktM2JhMS00ZjkxLWI1 YmItNzEyYzNiYmE2MzM3LzAvRjg5MzM5MjZBRTgzOURFRDcyOUFGQTJFMEU0RENC RkIwNzQ5REYxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHORUujuK4pTYYrZIJdoolTkbWMV6HRH7to DGJ5skURQhfBaPQPEDWmoswTa2FfRvk0NPJIgOCONKQp7pt4I6uKQk1rTwG7+ivR RjqlRaFyRYXQhhHEhaNBO6udx3mzyHsh5GOAZqiJ8kb6Pz6EsaTscOj0iR1G/RMJ YsleXkjFEQFS/FAD6lFaNvuG24GZrmbhcZ2E3PItZRA+r2aXDqJGfoI3oy2m4+Ld ccUmC24e/u6cePuKXrMGz2xlxA/5Lm68PconOrw2jxJxMjmMqnEx+vNWX/0gndTE i20SvSYMQOilWhJWIPPGzWd63ldd4rJESjOu9+14Vm4+27YPEGw= -----END CERTIFICATE-----Generated at Thu Sep 3 05:20:15 2026 by rpki-client