$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft File: D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft (raw, json) Hash identifier: zNK1WjEB3XGUp2JoZPHkl//EIEMxnyEnoV20Y5l/l8s= Subject key identifier: 40:B4:82:04:47:9E:5F:48:D8:5D:F0:56:F4:CC:8A:9C:C3:E4:F7:A6 Authority key identifier: D9:00:F1:99:0F:32:4E:8B:FF:8E:6A:B4:F6:AF:00:66:2E:F4:A1:81 Certificate issuer: /CN=D900F1990F324E8BFF8E6AB4F6AF00662EF4A181 Certificate serial: 7A49F64B0EB8D4BC476F6475299B7D20805ABA2C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 00:03:12 +0000 Manifest this update: Wed 02 Sep 2026 23:58:12 +0000 Manifest next update: Fri 04 Sep 2026 01:11:12 +0000 Files and hashes: 1: 3130332e37302e39322e302f32332d3234203d3e20313338303634.roa (hash: nTkoyc0s6mnt2tkKBJEFQNLgWGbaxLyUZAhyR5bx0jE=) 2: D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.crl (hash: R6vfhbxcqqFIGnoefSJ+iKheibmCdwlMIWAZo2zFNpc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.crl rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 01:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:49:f6:4b:0e:b8:d4:bc:47:6f:64:75:29:9b:7d:20:80:5a:ba:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D900F1990F324E8BFF8E6AB4F6AF00662EF4A181 Validity Not Before: Sep 2 23:58:12 2026 GMT Not After : Sep 4 01:11:12 2026 GMT Subject: CN=40B48204479E5F48D85DF056F4CC8A9CC3E4F7A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7f:3f:bd:4f:65:93:9a:68:d7:27:10:d0:23: 56:40:ca:80:15:c9:31:67:f5:95:1b:d0:f3:b9:5d: 39:ff:22:4a:b7:56:a8:66:c1:a2:f2:e0:dc:6c:90: 72:8c:a2:9a:47:ea:12:bd:f5:38:1c:52:d1:45:47: 3a:d9:bf:ab:6d:53:e8:7c:1d:17:ef:65:b3:dc:a1: ba:45:bb:91:1e:a6:5d:73:40:b5:a6:ec:f3:91:d1: d1:d3:36:5d:17:c9:83:d2:12:ed:2e:f6:6e:7c:db: db:10:ac:5f:66:cb:81:fe:f9:6e:b3:28:40:4a:15: 69:77:14:a7:31:d5:4e:47:f5:0b:e2:dd:50:14:b0: d4:08:fe:34:74:6c:8f:25:dc:0b:23:df:bd:ff:4f: c3:1b:1a:dc:24:19:a3:ce:d6:60:6e:06:00:d4:6c: ad:69:dc:64:36:9c:5b:9c:9e:58:3c:73:95:f3:18: 8a:24:31:c9:f2:3b:de:e4:81:82:d8:22:d5:3a:97: 57:71:60:00:54:a2:f5:c6:37:7b:2f:cf:06:d3:87: 83:f0:24:29:07:37:83:c9:2a:6c:8a:81:0f:b3:87: 07:8f:5b:0b:98:5d:83:37:e0:fb:19:68:c0:19:cd: 5d:13:07:68:8a:02:a8:98:f4:5e:d2:26:8e:fb:fe: 67:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B4:82:04:47:9E:5F:48:D8:5D:F0:56:F4:CC:8A:9C:C3:E4:F7:A6 X509v3 Authority Key Identifier: keyid:D9:00:F1:99:0F:32:4E:8B:FF:8E:6A:B4:F6:AF:00:66:2E:F4:A1:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:31:be:61:d0:41:a5:86:64:20:11:11:0c:75:dc:14:84:ef: d9:4a:67:ea:7b:41:be:71:13:82:24:67:88:33:a2:10:b6:80: 16:8b:bb:38:d5:2f:2f:a0:03:40:73:29:50:02:84:36:d9:62: 97:f7:69:bd:bb:c7:c3:cf:e2:e4:e9:c2:16:7d:7c:04:51:7b: 6d:86:bf:e4:11:1e:3b:b3:98:64:08:5c:15:23:5e:f1:4c:f5: b2:6e:d1:1d:9f:df:65:42:b4:61:00:e0:da:fc:86:0a:64:0e: bc:85:7e:82:1b:0a:c7:f6:13:a4:1d:e8:50:1d:24:31:ba:9b: be:83:d6:5e:50:51:bc:05:93:b7:f5:e6:17:8e:84:62:8a:c4: 5a:dc:c2:15:57:4b:87:7c:70:28:d2:4d:6b:fb:04:db:cf:6c: d4:54:ec:82:1d:aa:02:78:b7:08:b6:2a:d0:72:07:d0:fd:84: bf:50:ab:73:29:39:3c:78:bb:2b:da:c6:0f:81:d8:e4:71:38: b7:af:d9:b4:6f:c8:9b:a1:27:5b:d7:2a:b2:17:61:98:ab:a3: b4:77:21:96:ad:6d:87:31:e8:d8:6a:c7:2f:fa:65:08:d1:31: ce:f5:19:b3:81:cb:d2:ae:90:10:37:3d:72:1b:29:11:bb:ac: c6:96:91:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUekn2Sw641LxHb2R1KZt9IIBauiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkwMEYxOTkwRjMyNEU4QkZGOEU2QUI0RjZBRjAwNjYy RUY0QTE4MTAeFw0yNjA5MDIyMzU4MTJaFw0yNjA5MDQwMTExMTJaMDMxMTAvBgNV BAMTKDQwQjQ4MjA0NDc5RTVGNDhEODVERjA1NkY0Q0M4QTlDQzNFNEY3QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQfz+9T2WTmmjXJxDQI1ZAyoAV yTFn9ZUb0PO5XTn/Ikq3VqhmwaLy4NxskHKMoppH6hK99TgcUtFFRzrZv6ttU+h8 HRfvZbPcobpFu5Eepl1zQLWm7POR0dHTNl0XyYPSEu0u9m5829sQrF9my4H++W6z KEBKFWl3FKcx1U5H9Qvi3VAUsNQI/jR0bI8l3Asj373/T8MbGtwkGaPO1mBuBgDU bK1p3GQ2nFucnlg8c5XzGIokMcnyO97kgYLYItU6l1dxYABUovXGN3svzwbTh4Pw JCkHN4PJKmyKgQ+zhwePWwuYXYM34PsZaMAZzV0TB2iKAqiY9F7SJo77/melAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQLSCBEeeX0jYXfBW9MyKnMPk96YwHwYDVR0j BBgwFoAU2QDxmQ8yTov/jmq09q8AZi70oYEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU4OWY2NDMtMzdiYy00ZmZiLTk1MjktNDAxZTRiNmVmNjc1LzAvRDkwMEYxOTkw RjMyNEU4QkZGOEU2QUI0RjZBRjAwNjYyRUY0QTE4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOTAwRjE5OTBGMzI0RThCRkY4RTZBQjRGNkFGMDA2NjJFRjRB MTgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU4OWY2NDMtMzdiYy00ZmZiLTk1 MjktNDAxZTRiNmVmNjc1LzAvRDkwMEYxOTkwRjMyNEU4QkZGOEU2QUI0RjZBRjAw NjYyRUY0QTE4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYxvmHQQaWGZCAREQx13BSE79lKZ+p7Qb5x E4IkZ4gzohC2gBaLuzjVLy+gA0BzKVAChDbZYpf3ab27x8PP4uTpwhZ9fARRe22G v+QRHjuzmGQIXBUjXvFM9bJu0R2f32VCtGEA4Nr8hgpkDryFfoIbCsf2E6Qd6FAd JDG6m76D1l5QUbwFk7f15heOhGKKxFrcwhVXS4d8cCjSTWv7BNvPbNRU7IIdqgJ4 twi2KtByB9D9hL9Qq3MpOTx4uyvaxg+B2ORxOLev2bRvyJuhJ1vXKrIXYZiro7R3 IZatbYcx6Nhqxy/6ZQjRMc71GbOBy9KukBA3PXIbKRG7rMaWkVw= -----END CERTIFICATE-----Generated at Thu Sep 3 13:02:00 2026 by rpki-client