$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.mft File: DB4AC9A8087056C56E38C2C0CC75A3903F37E230.mft (raw, json) Hash identifier: tbvoDNvAKPfY9Flz764p/thjGf5WGK+seuEwhWg5iFU= Subject key identifier: 5B:87:E3:26:31:C7:44:20:D7:32:19:47:D0:8E:C4:E7:35:EE:0C:97 Authority key identifier: DB:4A:C9:A8:08:70:56:C5:6E:38:C2:C0:CC:75:A3:90:3F:37:E2:30 Certificate issuer: /CN=DB4AC9A8087056C56E38C2C0CC75A3903F37E230 Certificate serial: 55678746C4367311EB1C2D78A4B9179F98A557D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 04:33:23 +0000 Manifest this update: Thu 03 Sep 2026 04:28:23 +0000 Manifest next update: Fri 04 Sep 2026 04:38:23 +0000 Files and hashes: 1: 3130332e39382e3130342e302f32332d3234203d3e20313336383231.roa (hash: 4YZ/ZRV4ksOjfTDRZ8oe6dmwipIG0EjZ5ajPjIVeb/w=) 2: 323030313a6466323a323130303a3a2f34382d3438203d3e20313336383231.roa (hash: 0Zbp66Mkncj5oCXs1yHj0YUhYzKAXAlHlpMsofKBpH8=) 3: DB4AC9A8087056C56E38C2C0CC75A3903F37E230.crl (hash: Gid4HUBQskgj8ZaBDbHqyo5zF7Rabk78lQ1RA3MNqak=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.crl rsync://rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 04:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:67:87:46:c4:36:73:11:eb:1c:2d:78:a4:b9:17:9f:98:a5:57:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB4AC9A8087056C56E38C2C0CC75A3903F37E230 Validity Not Before: Sep 3 04:28:23 2026 GMT Not After : Sep 4 04:38:23 2026 GMT Subject: CN=5B87E32631C74420D7321947D08EC4E735EE0C97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a5:8a:ed:94:fc:16:6f:d4:85:07:e0:3a:6d: 7b:b0:40:10:c3:24:c2:40:0a:a9:99:50:e4:6f:c4: 8e:b5:e5:31:87:51:d4:4e:12:82:97:a6:9c:15:d9: d4:be:f7:a7:38:87:47:00:d4:86:1b:a5:9f:cf:16: ae:c1:94:23:e9:b8:36:d6:ce:79:e6:f1:9b:6b:9c: 08:f5:69:9c:ff:eb:c1:f8:5d:55:12:89:d3:23:c7: 1d:96:1d:f0:dc:53:07:e2:6b:e5:af:de:13:69:8a: 2b:be:ef:2d:de:1d:0a:54:04:13:50:e9:02:c3:ad: 38:41:68:e1:b8:7f:b9:fe:56:76:7a:26:92:4f:2e: f1:01:30:6c:2d:28:ee:80:39:35:fd:87:8a:2c:3c: 16:84:e8:0a:d2:ba:b3:41:11:a5:60:c2:ac:0d:25: 2b:a1:c8:89:28:d2:a9:cf:86:65:af:f0:79:a8:69: 4f:6f:5b:0b:51:9d:a2:55:4a:c4:86:f6:98:5a:89: 34:c0:92:d9:50:f5:c6:61:80:8f:f4:d6:3e:cc:de: 4f:35:a2:a2:d2:f3:97:ea:6c:fc:4c:8e:94:c6:ea: ea:8c:5f:67:e9:07:05:90:fb:11:8a:f6:73:45:ea: 06:39:6d:c0:86:95:a9:bd:8a:86:d0:96:df:e0:d6: 9f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:87:E3:26:31:C7:44:20:D7:32:19:47:D0:8E:C4:E7:35:EE:0C:97 X509v3 Authority Key Identifier: keyid:DB:4A:C9:A8:08:70:56:C5:6E:38:C2:C0:CC:75:A3:90:3F:37:E2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:6b:ff:59:d5:6f:78:a3:7b:58:c9:fa:cb:b4:46:95:96:ef: ad:8a:f6:08:76:56:bc:de:de:01:94:0b:3e:bc:66:26:e1:79: 76:d9:9a:ec:fa:38:ae:e1:31:57:4f:ec:5a:a5:c7:bb:06:44: a1:73:1c:30:c7:7c:bf:19:12:c3:28:78:7b:b5:dc:8b:ba:95: f2:6a:bd:64:3e:04:9c:65:db:70:a7:dc:1c:a4:db:73:b0:b7: f8:87:2f:51:0c:f5:b8:fd:31:88:43:fa:21:9e:84:14:07:ba: 3b:64:76:b5:f2:fc:40:7c:49:fb:5a:9e:52:f5:05:81:6c:9f: af:6f:af:fa:18:5b:34:da:27:9b:96:a0:ba:91:6a:04:6c:63: 69:b0:b1:72:e4:7d:80:b2:9a:ce:d2:bc:dd:55:5b:2d:b8:bc: ed:0b:f6:de:20:68:74:8a:a6:dd:32:50:0b:f6:16:18:68:4c: c9:cf:c8:9a:c9:91:30:4a:e3:a9:dd:51:93:05:73:70:4d:eb: 5e:c4:35:c1:fa:69:61:0b:cb:29:20:54:77:6f:1f:8f:4c:c7: e6:fa:e2:68:21:83:81:3a:d3:2c:6b:ec:40:d9:a0:3c:61:5b: 0f:c4:bd:c8:f3:49:41:c5:80:33:25:c9:70:9b:6b:6e:5d:e2: 06:20:4a:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVWeHRsQ2cxHrHC14pLkXn5ilV9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI0QUM5QTgwODcwNTZDNTZFMzhDMkMwQ0M3NUEzOTAz RjM3RTIzMDAeFw0yNjA5MDMwNDI4MjNaFw0yNjA5MDQwNDM4MjNaMDMxMTAvBgNV BAMTKDVCODdFMzI2MzFDNzQ0MjBENzMyMTk0N0QwOEVDNEU3MzVFRTBDOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbpYrtlPwWb9SFB+A6bXuwQBDD JMJACqmZUORvxI615TGHUdROEoKXppwV2dS+96c4h0cA1IYbpZ/PFq7BlCPpuDbW znnm8ZtrnAj1aZz/68H4XVUSidMjxx2WHfDcUwfia+Wv3hNpiiu+7y3eHQpUBBNQ 6QLDrThBaOG4f7n+VnZ6JpJPLvEBMGwtKO6AOTX9h4osPBaE6ArSurNBEaVgwqwN JSuhyIko0qnPhmWv8HmoaU9vWwtRnaJVSsSG9phaiTTAktlQ9cZhgI/01j7M3k81 oqLS85fqbPxMjpTG6uqMX2fpBwWQ+xGK9nNF6gY5bcCGlam9iobQlt/g1p/RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW4fjJjHHRCDXMhlH0I7E5zXuDJcwHwYDVR0j BBgwFoAU20rJqAhwVsVuOMLAzHWjkD834jAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmZkM2ZjMjQtNzVhMi00N2Y2LTkyOGUtNGU5ODAyYjk3MDg1LzAvREI0QUM5QTgw ODcwNTZDNTZFMzhDMkMwQ0M3NUEzOTAzRjM3RTIzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQjRBQzlBODA4NzA1NkM1NkUzOEMyQzBDQzc1QTM5MDNGMzdF MjMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmZkM2ZjMjQtNzVhMi00N2Y2LTky OGUtNGU5ODAyYjk3MDg1LzAvREI0QUM5QTgwODcwNTZDNTZFMzhDMkMwQ0M3NUEz OTAzRjM3RTIzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAElr/1nVb3ije1jJ+su0RpWW762K9gh2Vrze 3gGUCz68ZibheXbZmuz6OK7hMVdP7Fqlx7sGRKFzHDDHfL8ZEsMoeHu13Iu6lfJq vWQ+BJxl23Cn3Byk23Owt/iHL1EM9bj9MYhD+iGehBQHujtkdrXy/EB8SftanlL1 BYFsn69vr/oYWzTaJ5uWoLqRagRsY2mwsXLkfYCyms7SvN1VWy24vO0L9t4gaHSK pt0yUAv2FhhoTMnPyJrJkTBK46ndUZMFc3BN617ENcH6aWELyykgVHdvH49Mx+b6 4mghg4E60yxr7EDZoDxhWw/EvcjzSUHFgDMlyXCba25d4gYgSvQ= -----END CERTIFICATE-----Generated at Thu Sep 3 14:52:39 2026 by rpki-client