$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft File: 125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft (raw, json) Hash identifier: DCjNgHXIVw6jBWSeZpKUfa8rCeqzg7pQqEVeX2w49dg= Subject key identifier: 37:9C:BB:E4:6E:C0:47:44:3F:1F:99:47:C0:A0:85:51:02:6E:98:48 Authority key identifier: 12:53:31:E8:E0:CD:71:97:C7:EE:84:F5:08:78:75:1D:E5:EE:E1:C4 Certificate issuer: /CN=125331E8E0CD7197C7EE84F50878751DE5EEE1C4 Certificate serial: 623694FF32C3F2A34070F60ABE4953380FC482A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 09:03:27 +0000 Manifest this update: Thu 03 Sep 2026 08:58:27 +0000 Manifest next update: Fri 04 Sep 2026 11:40:27 +0000 Files and hashes: 1: 3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa (hash: pD8AAJGfek8X+gmcTJvavhY6u1lO1X5RIEZ8T14MLvE=) 2: 125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl (hash: jr7W5KHrHtXtJicFXoIutMQgFjjqineMi+K/iUGgtmQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 11:40:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:36:94:ff:32:c3:f2:a3:40:70:f6:0a:be:49:53:38:0f:c4:82:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=125331E8E0CD7197C7EE84F50878751DE5EEE1C4 Validity Not Before: Sep 3 08:58:27 2026 GMT Not After : Sep 4 11:40:27 2026 GMT Subject: CN=379CBBE46EC047443F1F9947C0A08551026E9848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bd:a8:1f:5f:57:04:72:d5:b7:88:6d:79:00: 26:56:72:6c:18:6e:1e:fa:62:8f:9f:c2:2b:ad:b0: 97:5f:50:da:f5:0d:e9:57:05:ec:9f:81:89:f4:c4: ad:55:60:83:ba:94:96:cc:2c:48:5b:3c:45:14:7b: 68:d4:c2:3c:f7:c1:e7:20:51:69:84:e5:3e:23:16: d7:f2:a6:58:41:71:ce:ec:be:1f:7f:6e:fd:54:62: 01:4e:c8:03:22:83:c3:67:60:17:ef:69:0e:3e:06: 9e:41:84:25:79:9c:5a:12:0c:43:6b:57:03:d1:69: d2:2c:5a:4c:6b:92:af:08:dc:13:d1:24:05:21:9f: a9:db:17:8d:f0:cd:21:54:36:17:5c:0f:32:c0:ff: 44:89:3b:cc:fd:ed:8c:dc:4b:12:22:22:84:a1:b4: 2c:fc:42:35:aa:c8:d0:30:cd:01:47:58:ca:92:99: e7:9b:70:98:a5:98:4d:99:bb:a5:ab:b3:99:58:a1: 10:ae:85:0c:7e:e0:f2:ec:c9:1d:4d:d7:a2:45:e7: 69:a7:a7:c0:cb:9f:73:e1:4a:e7:a9:e1:cd:df:91: 00:84:f9:13:6a:95:f3:4c:b1:6e:3d:14:dc:7c:7d: bf:7c:a6:1a:08:00:cd:45:9b:18:a8:80:58:7a:76: 22:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9C:BB:E4:6E:C0:47:44:3F:1F:99:47:C0:A0:85:51:02:6E:98:48 X509v3 Authority Key Identifier: keyid:12:53:31:E8:E0:CD:71:97:C7:EE:84:F5:08:78:75:1D:E5:EE:E1:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:b0:44:34:00:49:7e:c3:f8:8b:1a:47:59:1c:33:29:5e:5f: 7e:17:54:7d:ab:a1:33:fe:20:87:b5:03:61:7d:16:23:6b:48: 4b:4d:41:95:ae:b1:39:c9:ad:a3:a1:75:f1:52:ba:ab:2c:ec: b2:fe:d2:f1:57:ed:9b:6d:bc:6a:a6:4f:b2:54:a1:50:e7:10: 16:6f:9d:64:07:b7:5d:ed:ba:2b:e1:1e:4f:c7:a2:91:1f:86: 2b:0d:8b:0d:91:7b:47:6c:2f:1b:83:56:c2:66:82:47:b5:c6: 88:4e:44:0b:32:f1:c3:42:74:0a:7f:7b:56:93:67:5d:70:28: f6:89:03:92:01:33:28:ba:f3:25:50:5c:bf:ab:37:cc:5e:40: 26:4b:b7:a3:08:c2:17:89:2a:af:ea:ca:ba:86:14:f6:f0:cd: 93:fa:5b:62:32:0b:63:2d:ba:c3:9b:f2:8a:f8:f3:f2:74:96: bc:6d:0e:06:cc:70:89:5d:03:60:56:54:30:e6:d0:a4:f5:01: 3c:27:4e:4f:ed:6c:92:88:93:8f:74:75:76:f0:0e:c8:a8:fa: a5:a3:11:86:2a:62:f0:15:f8:ef:e4:7e:25:d2:75:a3:00:23: 7f:71:9e:fc:95:6b:2b:ca:74:73:fe:d0:00:4e:b3:72:6d:51: 32:0f:fb:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYjaU/zLD8qNAcPYKvklTOA/EgqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI1MzMxRThFMENENzE5N0M3RUU4NEY1MDg3ODc1MURF NUVFRTFDNDAeFw0yNjA5MDMwODU4MjdaFw0yNjA5MDQxMTQwMjdaMDMxMTAvBgNV BAMTKDM3OUNCQkU0NkVDMDQ3NDQzRjFGOTk0N0MwQTA4NTUxMDI2RTk4NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXvagfX1cEctW3iG15ACZWcmwY bh76Yo+fwiutsJdfUNr1DelXBeyfgYn0xK1VYIO6lJbMLEhbPEUUe2jUwjz3wecg UWmE5T4jFtfyplhBcc7svh9/bv1UYgFOyAMig8NnYBfvaQ4+Bp5BhCV5nFoSDENr VwPRadIsWkxrkq8I3BPRJAUhn6nbF43wzSFUNhdcDzLA/0SJO8z97YzcSxIiIoSh tCz8QjWqyNAwzQFHWMqSmeebcJilmE2Zu6Wrs5lYoRCuhQx+4PLsyR1N16JF52mn p8DLn3PhSuep4c3fkQCE+RNqlfNMsW49FNx8fb98phoIAM1FmxiogFh6diKHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN5y75G7AR0Q/H5lHwKCFUQJumEgwHwYDVR0j BBgwFoAUElMx6ODNcZfH7oT1CHh1HeXu4cQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI1OGRjZWEtYjM4My00NDMyLWFkMDgtZTZjZmZhYTUyYjdkLzAvMTI1MzMxRThF MENENzE5N0M3RUU4NEY1MDg3ODc1MURFNUVFRTFDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjUzMzFFOEUwQ0Q3MTk3QzdFRTg0RjUwODc4NzUxREU1RUVF MUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI1OGRjZWEtYjM4My00NDMyLWFk MDgtZTZjZmZhYTUyYjdkLzAvMTI1MzMxRThFMENENzE5N0M3RUU4NEY1MDg3ODc1 MURFNUVFRTFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmwRDQASX7D+IsaR1kcMyleX34XVH2roTP+ IIe1A2F9FiNrSEtNQZWusTnJraOhdfFSuqss7LL+0vFX7ZttvGqmT7JUoVDnEBZv nWQHt13tuivhHk/HopEfhisNiw2Re0dsLxuDVsJmgke1xohORAsy8cNCdAp/e1aT Z11wKPaJA5IBMyi68yVQXL+rN8xeQCZLt6MIwheJKq/qyrqGFPbwzZP6W2IyC2Mt usOb8or48/J0lrxtDgbMcIldA2BWVDDm0KT1ATwnTk/tbJKIk490dXbwDsio+qWj EYYqYvAV+O/kfiXSdaMAI39xnvyVayvKdHP+0ABOs3JtUTIP+yE= -----END CERTIFICATE-----Generated at Thu Sep 3 16:18:56 2026 by rpki-client