$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft File: 083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft (raw, json) Hash identifier: /Fmbe68r4k5CSDTW4MSw+YnmAtlPYUQp7X97jHe3u3U= Subject key identifier: DC:4B:14:3F:62:7B:26:C1:3E:D5:E3:EC:32:A9:64:44:59:3B:50:AD Authority key identifier: 08:37:43:FD:AF:08:07:CC:D8:D2:D3:B9:36:DE:09:16:76:CA:FC:B5 Certificate issuer: /CN=083743FDAF0807CCD8D2D3B936DE091676CAFCB5 Certificate serial: 1E0A4EAF4DA38DCBE334A0CE8E9924DDD2C9158F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 23:47:34 +0000 Manifest this update: Wed 02 Sep 2026 23:42:34 +0000 Manifest next update: Fri 04 Sep 2026 00:37:34 +0000 Files and hashes: 1: 3130332e3136392e33382e302f32332d3234203d3e20313432333331.roa (hash: Udq8GlzFIm/AvhcPc0cFCkf4+tnJ7nB5V9VbIrMM5Xs=) 2: 083743FDAF0807CCD8D2D3B936DE091676CAFCB5.crl (hash: atyqjS6Hk5wFiWnlcwDl12DhXQ2Jq61/HdgVo4H1QM0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.crl rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:0a:4e:af:4d:a3:8d:cb:e3:34:a0:ce:8e:99:24:dd:d2:c9:15:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=083743FDAF0807CCD8D2D3B936DE091676CAFCB5 Validity Not Before: Sep 2 23:42:34 2026 GMT Not After : Sep 4 00:37:34 2026 GMT Subject: CN=DC4B143F627B26C13ED5E3EC32A96444593B50AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6e:7a:cf:89:bc:93:66:11:47:bf:31:c9:21: e9:fd:cc:69:1e:69:d3:86:48:4b:48:1b:2a:ac:8f: d3:6e:97:da:e6:29:a8:a4:40:a3:04:e7:11:52:df: 26:97:e7:5b:a7:c6:65:b2:21:84:62:35:fd:e9:4c: 78:cc:29:e8:05:ae:40:07:c7:b6:bf:37:e7:d3:8c: 95:11:06:01:6d:e6:79:4d:b3:37:51:d2:d2:23:3f: 95:30:49:30:86:21:49:51:46:17:77:53:43:f2:10: c8:08:d6:13:08:18:26:a6:6c:a0:ad:e7:3c:48:27: ba:05:dd:f8:ab:e7:6b:63:07:42:84:ad:4b:8d:fe: 83:96:78:db:fc:57:e7:93:6f:c4:3e:db:50:37:9d: f9:d1:d5:e4:da:9c:21:26:cf:44:9a:8f:dd:f2:90: 5f:a3:f5:19:14:01:da:73:c3:f8:22:0a:a6:61:37: 28:15:83:28:ea:98:cd:2d:5a:cb:b9:b9:df:a6:41: 05:1f:fe:3d:ae:b4:b9:3d:76:51:a5:86:ab:04:2b: aa:e7:f1:02:a5:56:ff:ac:bc:57:48:cc:1c:74:90: ff:61:dd:68:45:55:c2:2f:2d:6f:ff:2c:9b:f0:07: b1:e9:b0:53:47:08:f4:8f:7e:f1:ea:74:9e:0f:af: 34:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4B:14:3F:62:7B:26:C1:3E:D5:E3:EC:32:A9:64:44:59:3B:50:AD X509v3 Authority Key Identifier: keyid:08:37:43:FD:AF:08:07:CC:D8:D2:D3:B9:36:DE:09:16:76:CA:FC:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:60:74:e1:33:84:f3:6c:d2:e5:6b:2f:76:fe:45:c8:c5:b9: ce:b6:75:c9:de:ae:03:c4:6d:dc:51:2a:6a:c7:ac:f0:cd:e7: 40:23:10:5c:5b:04:20:43:89:39:e4:39:bc:b2:0b:ce:54:e3: 5f:43:e9:d0:ee:f9:89:8c:da:7c:a1:18:6c:99:44:6f:86:95: a6:a2:ba:95:d0:d4:da:5f:1b:aa:40:5a:4e:85:0c:13:8f:a8: 95:35:5a:53:53:66:ab:b8:10:80:4b:d4:12:c7:80:da:0e:d6: fe:0a:26:dd:3d:4b:d1:4e:1c:45:46:22:6e:96:05:87:41:47: 7b:89:9a:b5:a1:e2:43:88:d7:16:36:7b:6f:d7:02:e3:e5:85: bb:3c:15:c3:0a:8d:14:66:dd:fc:0c:97:39:7e:80:bf:bc:4a: 78:bf:e2:0a:99:06:78:24:9c:e2:c1:52:35:6c:69:d6:7f:2c: c7:58:03:42:73:2d:d9:ac:65:c9:c5:3f:41:c5:e9:1a:af:50: f7:ad:e1:b7:6f:ea:b1:fe:76:d7:a2:4c:34:09:9a:1c:b8:94: 9a:c1:3d:ab:6f:41:62:b0:90:f5:ff:3f:43:12:23:cb:a6:57: 36:49:6e:25:23:be:b2:6b:b0:f7:c6:e6:20:bb:80:f5:7e:4f: 82:8f:49:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHgpOr02jjcvjNKDOjpkk3dLJFY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDgzNzQzRkRBRjA4MDdDQ0Q4RDJEM0I5MzZERTA5MTY3 NkNBRkNCNTAeFw0yNjA5MDIyMzQyMzRaFw0yNjA5MDQwMDM3MzRaMDMxMTAvBgNV BAMTKERDNEIxNDNGNjI3QjI2QzEzRUQ1RTNFQzMyQTk2NDQ0NTkzQjUwQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBbnrPibyTZhFHvzHJIen9zGke adOGSEtIGyqsj9Nul9rmKaikQKME5xFS3yaX51unxmWyIYRiNf3pTHjMKegFrkAH x7a/N+fTjJURBgFt5nlNszdR0tIjP5UwSTCGIUlRRhd3U0PyEMgI1hMIGCambKCt 5zxIJ7oF3fir52tjB0KErUuN/oOWeNv8V+eTb8Q+21A3nfnR1eTanCEmz0Saj93y kF+j9RkUAdpzw/giCqZhNygVgyjqmM0tWsu5ud+mQQUf/j2utLk9dlGlhqsEK6rn 8QKlVv+svFdIzBx0kP9h3WhFVcIvLW//LJvwB7HpsFNHCPSPfvHqdJ4PrzRvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3EsUP2J7JsE+1ePsMqlkRFk7UK0wHwYDVR0j BBgwFoAUCDdD/a8IB8zY0tO5Nt4JFnbK/LUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI0OGQyN2ItY2NiMC00ZmM3LWFiY2EtOWZjMGEzZTE1NzU0LzAvMDgzNzQzRkRB RjA4MDdDQ0Q4RDJEM0I5MzZERTA5MTY3NkNBRkNCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wODM3NDNGREFGMDgwN0NDRDhEMkQzQjkzNkRFMDkxNjc2Q0FG Q0I1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI0OGQyN2ItY2NiMC00ZmM3LWFi Y2EtOWZjMGEzZTE1NzU0LzAvMDgzNzQzRkRBRjA4MDdDQ0Q4RDJEM0I5MzZERTA5 MTY3NkNBRkNCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1gdOEzhPNs0uVrL3b+RcjFuc62dcnergPE bdxRKmrHrPDN50AjEFxbBCBDiTnkObyyC85U419D6dDu+YmM2nyhGGyZRG+Glaai upXQ1NpfG6pAWk6FDBOPqJU1WlNTZqu4EIBL1BLHgNoO1v4KJt09S9FOHEVGIm6W BYdBR3uJmrWh4kOI1xY2e2/XAuPlhbs8FcMKjRRm3fwMlzl+gL+8Sni/4gqZBngk nOLBUjVsadZ/LMdYA0JzLdmsZcnFP0HF6RqvUPet4bdv6rH+dteiTDQJmhy4lJrB PatvQWKwkPX/P0MSI8umVzZJbiUjvrJrsPfG5iC7gPV+T4KPScs= -----END CERTIFICATE-----Generated at Thu Sep 3 09:25:06 2026 by rpki-client