$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft File: 05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft (raw, json) Hash identifier: b3nX9tErim8wor4tM+oZGi7E0pQKYq/VKAw1bZ9lzTY= Subject key identifier: 43:52:DD:5B:CC:27:F9:CE:D5:04:94:95:F3:CA:EC:85:0D:18:6D:AC Authority key identifier: 05:CF:9E:16:17:EC:F8:BE:02:F2:FD:FA:27:F1:3A:86:2A:2B:20:EB Certificate issuer: /CN=05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB Certificate serial: 5D598FD2A34A876913EB8B2A6E0820D9CD7BD99F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft Manifest number: A3 Signing time: Thu 03 Sep 2026 01:09:29 +0000 Manifest this update: Thu 03 Sep 2026 01:04:29 +0000 Manifest next update: Fri 04 Sep 2026 03:26:29 +0000 Files and hashes: 1: 3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa (hash: z6kI94sxzHsqlH3E/LSFr36Xmy4KrSkD+IFv+WC4jTo=) 2: 05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.crl (hash: E+2/rOCLxw5MzwUina4TTG02fLC4eWVBAHziAK0Sge8=) 3: 3130332e38312e3235342e302f32342d3234203d3e20313530353533.roa (hash: Fdccteawm8p+b48M0aaG/VtbesmEvdRHnNtrJ03BLvI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.crl rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:59:8f:d2:a3:4a:87:69:13:eb:8b:2a:6e:08:20:d9:cd:7b:d9:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB Validity Not Before: Sep 3 01:04:29 2026 GMT Not After : Sep 4 03:26:29 2026 GMT Subject: CN=4352DD5BCC27F9CED5049495F3CAEC850D186DAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:10:7c:a1:11:ce:89:37:7c:53:ff:97:3b:e6: 84:ca:d4:69:87:77:01:71:35:a6:9e:9b:63:7a:f7: e6:c2:20:d5:84:b2:a7:f1:65:09:b7:21:34:0a:08: 9d:5f:84:62:51:81:01:08:08:20:e7:78:c5:a3:e3: 90:0b:56:30:f7:1f:f1:25:83:da:cb:c2:b2:89:8c: 54:22:70:89:58:8e:73:5c:bc:93:07:36:98:8b:44: 53:c4:e2:06:df:b5:70:76:e3:33:35:f1:ad:a2:41: f2:dd:ff:bc:ec:8a:1d:9d:30:fc:63:00:8b:7f:b7: 76:79:6e:5e:07:29:b9:06:cb:a1:c5:7e:7e:98:7b: a8:fe:85:0a:5e:60:49:46:6d:bb:c5:58:cd:19:6c: ef:02:9d:5a:b2:65:61:50:c4:69:54:eb:1a:fb:6e: fe:70:aa:27:77:ec:a3:cd:41:c1:74:cd:b5:06:71: 8c:10:42:8d:8b:fd:91:a9:0e:34:07:d8:98:c6:b1: 2f:65:05:f7:ec:fd:8e:ba:8c:60:6d:b2:aa:29:e9: 9e:af:40:1d:35:29:bd:78:3d:7c:c1:d2:d7:08:67: aa:54:79:e5:d1:e7:0e:f0:1d:9c:59:f5:e5:4f:05: 90:00:57:13:48:9e:1f:39:ce:08:29:b1:7c:fe:6f: 5c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:52:DD:5B:CC:27:F9:CE:D5:04:94:95:F3:CA:EC:85:0D:18:6D:AC X509v3 Authority Key Identifier: keyid:05:CF:9E:16:17:EC:F8:BE:02:F2:FD:FA:27:F1:3A:86:2A:2B:20:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:9e:8f:ec:2c:e1:c9:1c:1d:d4:cb:23:a7:89:70:8b:90:b1: af:6f:ff:63:bb:f7:54:7b:47:09:98:89:47:19:a7:10:59:88: 5c:41:39:6d:7a:02:fb:8e:e6:6a:2c:09:84:c5:07:6c:4a:c8: 79:f7:25:00:48:1e:93:70:7d:3e:d9:cf:8c:ae:f8:3f:bd:a2: 56:17:33:7f:e3:1a:d8:c7:ea:29:73:cb:ab:70:f6:8c:5a:3b: 4d:40:b5:99:77:a7:e6:bd:60:43:c8:d5:53:10:6b:69:3a:47: 5b:67:c0:8e:19:07:ef:c6:14:f5:1b:97:f8:29:b3:71:e3:b2: c8:06:a4:5c:28:ae:1a:a5:ab:e5:17:66:39:08:df:10:e4:03: 77:9b:61:9b:14:a4:07:55:bc:be:8c:dc:60:68:31:25:fc:84: 68:c5:59:58:59:73:d7:79:7b:86:72:fe:2e:4a:d0:66:51:ae: 7f:e4:d8:d3:47:06:dd:63:99:63:18:40:cd:d0:2e:c0:d2:11: ff:b1:75:79:93:5c:91:5e:27:e5:74:af:95:69:66:9d:54:53: 9e:8a:e7:3d:f0:85:fc:fe:20:d3:66:f6:9b:d5:c1:79:f8:b4: 56:3e:1f:01:a8:6a:72:31:83:ae:12:b1:80:f2:83:6e:a1:3d: fb:8a:1f:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXVmP0qNKh2kT64sqbggg2c172Z8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDVDRjlFMTYxN0VDRjhCRTAyRjJGREZBMjdGMTNBODYy QTJCMjBFQjAeFw0yNjA5MDMwMTA0MjlaFw0yNjA5MDQwMzI2MjlaMDMxMTAvBgNV BAMTKDQzNTJERDVCQ0MyN0Y5Q0VENTA0OTQ5NUYzQ0FFQzg1MEQxODZEQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjEHyhEc6JN3xT/5c75oTK1GmH dwFxNaaem2N69+bCINWEsqfxZQm3ITQKCJ1fhGJRgQEICCDneMWj45ALVjD3H/El g9rLwrKJjFQicIlYjnNcvJMHNpiLRFPE4gbftXB24zM18a2iQfLd/7zsih2dMPxj AIt/t3Z5bl4HKbkGy6HFfn6Ye6j+hQpeYElGbbvFWM0ZbO8CnVqyZWFQxGlU6xr7 bv5wqid37KPNQcF0zbUGcYwQQo2L/ZGpDjQH2JjGsS9lBffs/Y66jGBtsqop6Z6v QB01Kb14PXzB0tcIZ6pUeeXR5w7wHZxZ9eVPBZAAVxNInh85zggpsXz+b1y7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ1LdW8wn+c7VBJSV88rshQ0YbawwHwYDVR0j BBgwFoAUBc+eFhfs+L4C8v36J/E6hiorIOswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRmZDQyMzQtMTMyMy00ZjBlLWI2ODYtMWQ3MmFjYjg4MDI5LzAvMDVDRjlFMTYx N0VDRjhCRTAyRjJGREZBMjdGMTNBODYyQTJCMjBFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNUNGOUUxNjE3RUNGOEJFMDJGMkZERkEyN0YxM0E4NjJBMkIy MEVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWRmZDQyMzQtMTMyMy00ZjBlLWI2 ODYtMWQ3MmFjYjg4MDI5LzAvMDVDRjlFMTYxN0VDRjhCRTAyRjJGREZBMjdGMTNB ODYyQTJCMjBFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKOej+ws4ckcHdTLI6eJcIuQsa9v/2O791R7 RwmYiUcZpxBZiFxBOW16AvuO5mosCYTFB2xKyHn3JQBIHpNwfT7Zz4yu+D+9olYX M3/jGtjH6ilzy6tw9oxaO01AtZl3p+a9YEPI1VMQa2k6R1tnwI4ZB+/GFPUbl/gp s3HjssgGpFworhqlq+UXZjkI3xDkA3ebYZsUpAdVvL6M3GBoMSX8hGjFWVhZc9d5 e4Zy/i5K0GZRrn/k2NNHBt1jmWMYQM3QLsDSEf+xdXmTXJFeJ+V0r5VpZp1UU56K 5z3whfz+INNm9pvVwXn4tFY+HwGoanIxg64SsYDyg26hPfuKH6g= -----END CERTIFICATE-----Generated at Thu Sep 3 05:06:04 2026 by rpki-client