$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft File: 5843958BB240779320D7F0C2B674ACF5EF6122BC.mft (raw, json) Hash identifier: ane0AZ7M4RsHI6ylb2eb01/5gsEbL8HcUrRbPLJI2sQ= Subject key identifier: F1:A7:A1:8D:56:90:24:7D:48:01:F2:7B:37:4B:C9:EA:EE:F4:B9:31 Authority key identifier: 58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC Certificate issuer: /CN=5843958BB240779320D7F0C2B674ACF5EF6122BC Certificate serial: 500ADC65FF4DB109C5DEEC4F844C254A3FE8BD9D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft Manifest number: A6 Signing time: Wed 02 Sep 2026 18:55:58 +0000 Manifest this update: Wed 02 Sep 2026 18:50:58 +0000 Manifest next update: Thu 03 Sep 2026 19:49:58 +0000 Files and hashes: 1: 3132342e34302e3234382e302f32312d3234203d3e203435333035.roa (hash: bNdzrUkHylX3nBoyTDryEKwja6jOzq2DQP/kaLdB4H4=) 2: 34332e3235322e3130342e302f32342d3234203d3e20313432333237.roa (hash: 3HeHx0erxEkjN9PtOgU3W6tKucWeXKE5FEYLyXwycJc=) 3: 5843958BB240779320D7F0C2B674ACF5EF6122BC.crl (hash: iSCSK1Eu/BGOV6bpclesid7VRHKLMaKmyOUcUzdLyMo=) 4: 323030313a6466303a61333a3a2f34382d3438203d3e203435333035.roa (hash: jOCXET8yniqJ02iHiMoBI6iwGo2/5oUN4/jc3LtL0jQ=) 5: 3132342e34302e3234382e302f32342d3234203d3e20313432333237.roa (hash: zO201tAVoPKGV/ct4ikI5lfPCjZ1ksaQX5GMEkLajwg=) 6: 3132342e34302e3235332e302f32342d3234203d3e20313432333237.roa (hash: t3N8/NmkXItiVJAARc4CSYWSo+yW57apDjW3aqHeSkc=) 7: 3130332e32382e3131322e302f32322d3234203d3e203435333035.roa (hash: yPK7GQUu85mTor59GtzCw8idVr6kmAEeffKza8nzEd8=) 8: 3230322e35362e3136342e302f32322d3234203d3e203435333035.roa (hash: WeFmDyNsHJ6btvYfzDFQoJzW4vr0tmZoF+30o64Nsw4=) 9: 34332e3235322e3130342e302f32322d3234203d3e203435333035.roa (hash: lVR5iCrB58ZGOeyqsgP1KQLwdS0WjCcfUKPYsWN8lxI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 19:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:0a:dc:65:ff:4d:b1:09:c5:de:ec:4f:84:4c:25:4a:3f:e8:bd:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5843958BB240779320D7F0C2B674ACF5EF6122BC Validity Not Before: Sep 2 18:50:58 2026 GMT Not After : Sep 3 19:49:58 2026 GMT Subject: CN=F1A7A18D5690247D4801F27B374BC9EAEEF4B931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:95:f7:28:ec:ae:42:4e:88:c5:0d:02:6e:ca: e2:e7:7f:48:e3:61:84:41:a2:27:c4:af:5c:99:99: e5:18:3a:48:1e:89:50:bd:4c:74:d4:e9:04:ec:37: 1b:bf:cb:4b:f9:81:16:90:cf:1a:4d:33:a7:08:7e: 0a:7a:88:69:77:7a:31:e4:4a:6e:33:d4:31:eb:73: 84:e8:42:86:18:bc:92:d5:b0:d4:d4:14:23:fa:ef: f3:7f:24:21:8c:3e:13:fb:10:5f:7f:0c:06:b8:d1: f8:38:34:e3:02:71:ef:5d:68:c5:f2:d4:ad:a6:c0: a7:4c:c6:40:f1:84:52:52:a7:38:4d:ff:f8:fe:b2: 02:0f:da:ec:ad:aa:70:d7:73:ef:fe:96:47:f3:53: 57:ba:d6:57:75:fd:83:c7:94:ea:ea:8f:26:83:22: 2b:2b:8b:87:04:1d:e8:dd:10:8e:1e:90:96:6c:ae: 7c:46:d5:66:3f:c1:60:da:6a:1c:90:20:57:c3:e2: 2c:e2:d5:b8:43:64:91:96:45:e7:1d:82:08:d3:4f: 4c:18:9a:3f:ef:6e:27:df:0d:2f:98:c4:57:c1:70: a4:34:31:a8:f5:89:8f:f6:c6:00:48:e9:4a:b8:c7: 5c:54:6e:4d:6c:4d:ce:f7:0f:34:c3:9b:1e:4c:17: 08:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A7:A1:8D:56:90:24:7D:48:01:F2:7B:37:4B:C9:EA:EE:F4:B9:31 X509v3 Authority Key Identifier: keyid:58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:8e:59:9e:d0:44:cf:f4:fd:e5:bd:dc:be:1a:df:72:69:14: cf:28:de:f0:24:16:fa:d0:8f:f1:f6:7b:1a:fb:44:99:9a:9a: 24:9a:f1:ce:f9:34:76:39:8b:51:b9:67:e7:14:6d:1d:c9:6a: c3:3c:b6:b1:2d:93:bb:87:08:0d:64:22:fd:3a:0e:a8:c4:0c: 2e:52:da:4a:7d:e4:4a:cc:5e:7d:04:04:95:fa:a7:6b:13:b1: 11:fb:61:e1:ee:4d:f7:5a:cf:12:35:b5:3b:44:11:a7:f0:8d: 45:28:10:56:17:f1:d2:fb:6c:a3:08:14:31:9b:28:36:cc:69: 86:75:01:79:36:98:c0:84:1d:c3:61:e2:dc:81:75:31:f0:fc: 6c:2a:79:ba:a0:68:59:0b:60:6d:3a:37:fe:8c:6b:15:f4:96: e0:2d:7f:95:e2:35:2c:b5:1f:c2:fa:0b:1c:65:b5:94:c4:90: aa:f7:bd:65:8a:db:88:62:8b:7a:db:57:9b:39:39:16:47:53: d3:17:57:ec:f1:4a:25:d4:0a:10:21:21:97:04:e7:64:91:73: d2:24:2f:60:d1:12:4a:70:2e:8c:a6:35:c9:b2:9e:dd:47:5f: de:e2:de:44:4a:f0:02:0b:cb:93:a4:a4:bf:63:20:29:91:b9: 10:04:64:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUArcZf9NsQnF3uxPhEwlSj/ovZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg0Mzk1OEJCMjQwNzc5MzIwRDdGMEMyQjY3NEFDRjVF RjYxMjJCQzAeFw0yNjA5MDIxODUwNThaFw0yNjA5MDMxOTQ5NThaMDMxMTAvBgNV BAMTKEYxQTdBMThENTY5MDI0N0Q0ODAxRjI3QjM3NEJDOUVBRUVGNEI5MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCglfco7K5CTojFDQJuyuLnf0jj YYRBoifEr1yZmeUYOkgeiVC9THTU6QTsNxu/y0v5gRaQzxpNM6cIfgp6iGl3ejHk Sm4z1DHrc4ToQoYYvJLVsNTUFCP67/N/JCGMPhP7EF9/DAa40fg4NOMCce9daMXy 1K2mwKdMxkDxhFJSpzhN//j+sgIP2uytqnDXc+/+lkfzU1e61ld1/YPHlOrqjyaD Iisri4cEHejdEI4ekJZsrnxG1WY/wWDaahyQIFfD4izi1bhDZJGWRecdggjTT0wY mj/vbiffDS+YxFfBcKQ0Maj1iY/2xgBI6Uq4x1xUbk1sTc73DzTDmx5MFwgjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8aehjVaQJH1IAfJ7N0vJ6u70uTEwHwYDVR0j BBgwFoAUWEOVi7JAd5Mg1/DCtnSs9e9hIrwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ5NWMxOWMtMzI2Mi00OGM3LWFmMDItMzdhODM1ZDBhNzc5LzAvNTg0Mzk1OEJC MjQwNzc5MzIwRDdGMEMyQjY3NEFDRjVFRjYxMjJCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODQzOTU4QkIyNDA3NzkzMjBEN0YwQzJCNjc0QUNGNUVGNjEy MkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ5NWMxOWMtMzI2Mi00OGM3LWFm MDItMzdhODM1ZDBhNzc5LzAvNTg0Mzk1OEJCMjQwNzc5MzIwRDdGMEMyQjY3NEFD RjVFRjYxMjJCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFiOWZ7QRM/0/eW93L4a33JpFM8o3vAkFvrQ j/H2exr7RJmamiSa8c75NHY5i1G5Z+cUbR3JasM8trEtk7uHCA1kIv06DqjEDC5S 2kp95ErMXn0EBJX6p2sTsRH7YeHuTfdazxI1tTtEEafwjUUoEFYX8dL7bKMIFDGb KDbMaYZ1AXk2mMCEHcNh4tyBdTHw/GwqebqgaFkLYG06N/6MaxX0luAtf5XiNSy1 H8L6CxxltZTEkKr3vWWK24hii3rbV5s5ORZHU9MXV+zxSiXUChAhIZcE52SRc9Ik L2DREkpwLoymNcmynt1HX97i3kRK8AILy5OkpL9jICmRuRAEZMI= -----END CERTIFICATE-----Generated at Thu Sep 3 06:52:19 2026 by rpki-client