$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft File: D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft (raw, json) Hash identifier: 9wdPMgabCVPWgk/l+Orak5O8Yv9d0wh05WqNa7XE5C0= Subject key identifier: CE:F1:3A:0B:56:E8:D3:D9:FF:1C:EA:51:64:DA:0D:66:08:AB:F5:9F Authority key identifier: D7:4C:D7:B8:7D:74:4D:2D:30:1C:3F:69:77:4A:99:FB:E8:35:ED:DD Certificate issuer: /CN=D74CD7B87D744D2D301C3F69774A99FBE835EDDD Certificate serial: 4B29EE195025FCD95059D38727711DA28BBEEC2B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 21:08:53 +0000 Manifest this update: Wed 02 Sep 2026 21:03:53 +0000 Manifest next update: Thu 03 Sep 2026 23:39:53 +0000 Files and hashes: 1: D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl (hash: NObHdbOuYNygXV/1Sbrkv7H5lnkNg61MwAUISxsdRhE=) 2: 3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa (hash: tvgNMRKF9YhTkUojezBviQo+Tr5X2S/8TAOF/Ehj41w=) 3: 3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa (hash: zZwF560CCW8FIsmpm9G6YMYG8iguu4mvO1b/REjgURE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 23:39:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:29:ee:19:50:25:fc:d9:50:59:d3:87:27:71:1d:a2:8b:be:ec:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D74CD7B87D744D2D301C3F69774A99FBE835EDDD Validity Not Before: Sep 2 21:03:53 2026 GMT Not After : Sep 3 23:39:53 2026 GMT Subject: CN=CEF13A0B56E8D3D9FF1CEA5164DA0D6608ABF59F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0f:36:5c:7e:44:b2:80:35:37:37:b7:b3:2b: d2:04:40:ad:b6:6f:a0:f5:17:a9:82:f7:58:ac:8b: 96:27:b4:60:ab:0c:34:ce:1d:f7:bd:39:ce:03:2d: b0:93:61:9d:4e:c0:92:7f:80:7b:b5:33:15:cc:f7: f6:30:48:38:16:8c:cd:82:52:8f:e3:fc:5f:44:ef: 2f:23:f2:af:14:f3:6b:ce:2c:32:6e:7a:d6:4f:b3: 7a:99:1e:56:5d:aa:8d:21:36:af:b4:7d:a5:3e:f5: dc:44:9e:31:58:59:6f:e6:85:08:7f:8b:57:3b:6e: 20:26:01:43:ec:33:38:c8:64:a1:73:43:f0:72:44: f1:92:fc:5b:ea:34:50:2a:42:90:f5:e9:30:cd:cc: 7c:31:47:3d:8b:d6:82:d9:18:d1:58:88:0d:86:ab: 31:7e:15:ae:60:03:4e:1b:5b:89:eb:46:64:4c:5b: f0:9d:b9:b2:35:6c:65:64:64:e7:73:c9:74:c5:ee: c0:21:e1:28:72:2c:f1:12:ab:9e:76:4d:17:5c:b7: 2c:38:bc:55:f6:27:56:61:3d:c6:6c:2f:1e:08:01: 2a:11:8c:0b:e0:b4:14:9e:8c:33:10:8d:6c:1d:f5: c4:a8:25:2a:af:b8:e8:4d:f0:51:06:58:d0:98:ed: 1a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F1:3A:0B:56:E8:D3:D9:FF:1C:EA:51:64:DA:0D:66:08:AB:F5:9F X509v3 Authority Key Identifier: keyid:D7:4C:D7:B8:7D:74:4D:2D:30:1C:3F:69:77:4A:99:FB:E8:35:ED:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:71:0d:27:37:bd:40:83:bb:09:cb:a1:69:92:cf:7b:9c:dc: 7e:63:7e:5a:85:fd:c0:32:47:36:51:dc:64:56:79:0e:49:b5: 21:9d:17:22:1a:50:c9:21:ea:cb:da:3b:c5:45:8d:3e:54:a0: 2d:4b:34:fb:b6:42:48:6c:88:42:ee:f0:ff:c2:57:a4:40:f3: c3:5a:2c:4f:eb:6f:f1:4b:73:80:f5:27:35:22:6a:12:18:2e: 7b:3c:16:2c:b7:89:2e:1e:61:ae:59:ee:9f:b4:3e:7b:42:33: 97:a7:92:a1:e6:2a:ab:4e:14:d5:c9:36:46:50:72:d6:8c:66: a6:d2:32:ab:e6:22:8c:8f:ba:f7:71:73:0d:37:3b:fd:68:79: b8:24:be:9b:a8:35:37:a8:f7:55:da:b4:cf:e4:1c:be:52:20: 3a:79:a4:d1:81:b3:da:49:cb:0c:1e:8a:fe:f1:5e:e7:73:f6: 3b:f9:5a:5a:d6:fd:35:5f:dd:f9:ab:1a:a2:39:8e:9a:ce:04: 43:c6:27:09:e6:49:ff:db:4c:3c:c1:03:1a:d8:53:a5:53:b5: 97:ce:88:75:cc:dc:3a:65:2a:28:94:cd:2c:cb:6a:a2:9e:bc: be:26:3f:3a:87:df:74:54:d3:05:a5:fc:5e:fd:4f:4e:6d:48: 07:05:7c:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSynuGVAl/NlQWdOHJ3Edoou+7CswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc0Q0Q3Qjg3RDc0NEQyRDMwMUMzRjY5Nzc0QTk5RkJF ODM1RURERDAeFw0yNjA5MDIyMTAzNTNaFw0yNjA5MDMyMzM5NTNaMDMxMTAvBgNV BAMTKENFRjEzQTBCNTZFOEQzRDlGRjFDRUE1MTY0REEwRDY2MDhBQkY1OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmDzZcfkSygDU3N7ezK9IEQK22 b6D1F6mC91isi5YntGCrDDTOHfe9Oc4DLbCTYZ1OwJJ/gHu1MxXM9/YwSDgWjM2C Uo/j/F9E7y8j8q8U82vOLDJuetZPs3qZHlZdqo0hNq+0faU+9dxEnjFYWW/mhQh/ i1c7biAmAUPsMzjIZKFzQ/ByRPGS/FvqNFAqQpD16TDNzHwxRz2L1oLZGNFYiA2G qzF+Fa5gA04bW4nrRmRMW/CdubI1bGVkZOdzyXTF7sAh4ShyLPESq552TRdctyw4 vFX2J1ZhPcZsLx4IASoRjAvgtBSejDMQjWwd9cSoJSqvuOhN8FEGWNCY7RqzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzvE6C1bo09n/HOpRZNoNZgir9Z8wHwYDVR0j BBgwFoAU10zXuH10TS0wHD9pd0qZ++g17d0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRlZTEyNmYtODE5Mi00ZDI4LWIyNWUtZGVhYmRiNzllYjIxLzAvRDc0Q0Q3Qjg3 RDc0NEQyRDMwMUMzRjY5Nzc0QTk5RkJFODM1RURERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzRDRDdCODdENzQ0RDJEMzAxQzNGNjk3NzRBOTlGQkU4MzVF RERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWRlZTEyNmYtODE5Mi00ZDI4LWIy NWUtZGVhYmRiNzllYjIxLzAvRDc0Q0Q3Qjg3RDc0NEQyRDMwMUMzRjY5Nzc0QTk5 RkJFODM1RURERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdxDSc3vUCDuwnLoWmSz3uc3H5jflqF/cAy RzZR3GRWeQ5JtSGdFyIaUMkh6svaO8VFjT5UoC1LNPu2QkhsiELu8P/CV6RA88Na LE/rb/FLc4D1JzUiahIYLns8Fiy3iS4eYa5Z7p+0PntCM5enkqHmKqtOFNXJNkZQ ctaMZqbSMqvmIoyPuvdxcw03O/1oebgkvpuoNTeo91XatM/kHL5SIDp5pNGBs9pJ ywweiv7xXudz9jv5WlrW/TVf3fmrGqI5jprOBEPGJwnmSf/bTDzBAxrYU6VTtZfO iHXM3DplKiiUzSzLaqKevL4mPzqH33RU0wWl/F79T05tSAcFfLY= -----END CERTIFICATE-----Generated at Thu Sep 3 12:35:09 2026 by rpki-client