$ rpki-client -vvvf rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft File: B486D413919D8F20144DB8254040D1237E34B8AA.mft (raw, json) Hash identifier: iIWhRr72qvwzCdeqRJ9pNQrY05VeUWCtAFYtdHqAq0c= Subject key identifier: F8:07:E7:3F:13:AE:0D:84:73:64:F9:0B:F1:6D:01:F9:8D:DE:CD:62 Authority key identifier: B4:86:D4:13:91:9D:8F:20:14:4D:B8:25:40:40:D1:23:7E:34:B8:AA Certificate issuer: /CN=B486D413919D8F20144DB8254040D1237E34B8AA Certificate serial: 761EE54FE39CCAF25488C28F1309CA23670B0709 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B486D413919D8F20144DB8254040D1237E34B8AA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 18:30:27 +0000 Manifest this update: Wed 02 Sep 2026 18:25:27 +0000 Manifest next update: Thu 03 Sep 2026 19:24:27 +0000 Files and hashes: 1: 3130332e3135392e36322e302f32332d3233203d3e20313431353931.roa (hash: 7QTUY2NQvJrxF3QQX7LUC6hqv5ttn70Xh40WXHVfruk=) 2: B486D413919D8F20144DB8254040D1237E34B8AA.crl (hash: ZXFlYRfzPd7YnBIjIB+5QNLLAmDBEZqO4BwGccwEuys=) 3: 3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa (hash: I7JOfc7cIihje61qrOhB8mNIVUiXPbuVCLb1xIG81r0=) 4: 3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa (hash: eldG4bxXfHfHBZuQpQd9deqvI4oVqZUOKXxgD57litE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.crl rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B486D413919D8F20144DB8254040D1237E34B8AA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 19:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:1e:e5:4f:e3:9c:ca:f2:54:88:c2:8f:13:09:ca:23:67:0b:07:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B486D413919D8F20144DB8254040D1237E34B8AA Validity Not Before: Sep 2 18:25:27 2026 GMT Not After : Sep 3 19:24:27 2026 GMT Subject: CN=F807E73F13AE0D847364F90BF16D01F98DDECD62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8e:87:34:39:b9:6b:09:8e:91:47:cd:70:31: e3:45:13:71:cb:01:3d:9b:cc:73:19:dd:05:c8:07: f2:d0:a8:23:f1:c0:c9:3d:c2:f4:11:b3:a7:5d:f1: 53:46:95:58:95:b1:77:fc:94:93:c7:bc:3e:ff:c2: 3e:ea:12:20:ff:b4:f3:77:dd:f2:69:88:a2:69:5a: 2e:63:1e:ff:ee:b5:4f:9a:3c:5e:70:17:a8:9e:65: 25:8c:63:f7:f1:4c:2e:e5:e8:73:c9:26:c6:e4:83: bb:cd:64:84:d2:dd:6a:2a:5e:e9:a1:63:7d:88:a9: 44:1e:bb:54:23:e1:ae:85:2b:7f:a8:e5:a6:e1:fa: 9d:d8:70:30:2d:a3:d9:64:de:d6:b2:fa:36:81:5f: b0:87:20:d5:84:38:27:cd:f7:51:ac:25:28:ed:28: 54:ce:02:a6:ab:4b:73:18:77:5a:0d:2f:56:1b:91: af:20:b1:e3:f3:6d:db:cf:05:c9:76:b0:db:c3:98: a2:74:54:e2:35:b1:9c:04:1e:fe:88:77:44:9c:2e: 40:4e:dd:cc:1d:1b:58:43:88:13:9c:04:07:fa:bc: 41:cc:ee:46:eb:f8:4c:8b:dc:6a:dd:fd:a1:03:3a: cd:7b:45:a6:89:c0:d9:83:6f:d4:fe:51:94:61:34: cb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:07:E7:3F:13:AE:0D:84:73:64:F9:0B:F1:6D:01:F9:8D:DE:CD:62 X509v3 Authority Key Identifier: keyid:B4:86:D4:13:91:9D:8F:20:14:4D:B8:25:40:40:D1:23:7E:34:B8:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B486D413919D8F20144DB8254040D1237E34B8AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:80:02:52:20:71:0d:e1:78:72:16:d8:97:f1:d2:99:85:5a: 9d:a5:b9:af:e3:3d:cd:9a:01:31:69:98:ac:0e:a6:0a:6a:70: 12:9e:2b:ea:23:7e:52:95:1a:7e:28:26:8b:17:80:87:2a:67: 41:16:25:4e:68:49:24:54:fa:7a:50:8e:3a:59:6a:87:a4:a7: 6d:c2:f1:c4:8a:58:cc:0c:d8:d3:73:66:bb:08:1d:45:a3:44: 2a:63:9a:db:c8:ca:60:80:c7:01:16:2a:4a:e0:67:59:43:b2: 03:06:eb:ed:ec:66:d7:a7:86:7c:08:fd:15:71:bb:41:34:4b: b0:84:3d:d9:00:cd:55:f7:0a:51:d7:13:0c:47:80:7e:12:17: 6a:6f:32:94:3f:42:55:d0:0d:a7:8a:96:4a:b8:55:66:07:84: 0f:31:90:58:83:3e:c0:c0:2d:20:97:57:02:3f:8d:ba:b9:54: 6d:e7:4d:0b:d3:d4:ca:97:03:db:f4:18:f3:7c:35:cb:db:e9: ef:59:61:68:22:33:00:dd:14:85:71:c3:36:8d:df:4e:17:52: 87:d1:97:c7:13:2a:19:41:8a:4c:65:7b:9e:82:d8:ac:62:0b: 55:be:fc:b1:07:d4:c3:bf:d2:51:ff:d3:da:8c:ff:b0:47:63: 9e:8f:33:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdh7lT+OcyvJUiMKPEwnKI2cLBwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ4NkQ0MTM5MTlEOEYyMDE0NERCODI1NDA0MEQxMjM3 RTM0QjhBQTAeFw0yNjA5MDIxODI1MjdaFw0yNjA5MDMxOTI0MjdaMDMxMTAvBgNV BAMTKEY4MDdFNzNGMTNBRTBEODQ3MzY0RjkwQkYxNkQwMUY5OERERUNENjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgjoc0OblrCY6RR81wMeNFE3HL AT2bzHMZ3QXIB/LQqCPxwMk9wvQRs6dd8VNGlViVsXf8lJPHvD7/wj7qEiD/tPN3 3fJpiKJpWi5jHv/utU+aPF5wF6ieZSWMY/fxTC7l6HPJJsbkg7vNZITS3WoqXumh Y32IqUQeu1Qj4a6FK3+o5abh+p3YcDAto9lk3tay+jaBX7CHINWEOCfN91GsJSjt KFTOAqarS3MYd1oNL1Ybka8gsePzbdvPBcl2sNvDmKJ0VOI1sZwEHv6Id0ScLkBO 3cwdG1hDiBOcBAf6vEHM7kbr+EyL3Grd/aEDOs17RaaJwNmDb9T+UZRhNMv7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+AfnPxOuDYRzZPkL8W0B+Y3ezWIwHwYDVR0j BBgwFoAUtIbUE5GdjyAUTbglQEDRI340uKowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjBjMTcxZjQtYmQxMS00OGVkLTg3ZjAtMjdlYTEyMDkwNjRmLzAvQjQ4NkQ0MTM5 MTlEOEYyMDE0NERCODI1NDA0MEQxMjM3RTM0QjhBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNDg2RDQxMzkxOUQ4RjIwMTQ0REI4MjU0MDQwRDEyMzdFMzRC OEFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjBjMTcxZjQtYmQxMS00OGVkLTg3 ZjAtMjdlYTEyMDkwNjRmLzAvQjQ4NkQ0MTM5MTlEOEYyMDE0NERCODI1NDA0MEQx MjM3RTM0QjhBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+AAlIgcQ3heHIW2Jfx0pmFWp2lua/jPc2a ATFpmKwOpgpqcBKeK+ojflKVGn4oJosXgIcqZ0EWJU5oSSRU+npQjjpZaoekp23C 8cSKWMwM2NNzZrsIHUWjRCpjmtvIymCAxwEWKkrgZ1lDsgMG6+3sZtenhnwI/RVx u0E0S7CEPdkAzVX3ClHXEwxHgH4SF2pvMpQ/QlXQDaeKlkq4VWYHhA8xkFiDPsDA LSCXVwI/jbq5VG3nTQvT1MqXA9v0GPN8Ncvb6e9ZYWgiMwDdFIVxwzaN304XUofR l8cTKhlBikxle56C2KxiC1W+/LEH1MO/0lH/09qM/7BHY56PM8E= -----END CERTIFICATE-----Generated at Thu Sep 3 09:47:13 2026 by rpki-client