$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft File: C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft (raw, json) Hash identifier: bv8xOSxOXCP0qNYmFx4hC1M1cY4PBAsKxj90iDznBHM= Subject key identifier: 0F:12:C0:82:17:7A:12:D0:37:76:53:A4:B9:22:A8:29:1D:03:15:8A Authority key identifier: C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F Certificate issuer: /CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F Certificate serial: 5BC262211BEEA166DCF43A117028A923966998EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 18:40:41 +0000 Manifest this update: Wed 02 Sep 2026 18:35:41 +0000 Manifest next update: Thu 03 Sep 2026 20:27:41 +0000 Files and hashes: 1: 3230322e39332e32352e302f32342d3234203d3e203233393532.roa (hash: XDcl778T4rloVqTTjGoVuGMqfUdN427riMbFlonBX50=) 2: 3230322e39332e32392e302f32342d3234203d3e203233393532.roa (hash: Omke75z/uNaQobGnfXKQ3d9K7J2R9/Q2eOXtQtif9WU=) 3: 3230322e39332e32342e302f32342d3234203d3e203233393532.roa (hash: 13PIyETCXWDo1Gv/U6Oaqwz2KRpjJgPdWNVs0uRPBXw=) 4: 3230322e39332e32372e302f32342d3234203d3e203233393532.roa (hash: XriecMPCY4alQrxwYsfldyREke/eGKRNr/vElamRFhc=) 5: 3230322e39332e33302e302f32342d3234203d3e203233393532.roa (hash: bpztS81zV/NNGiXHgumEn+WH+G0wv++4rGgXBHGkvA4=) 6: 3230322e39332e32382e302f32342d3234203d3e203233393532.roa (hash: 9SwaYqrzPZ+NZyn3VVdmOLoMhtVvVQwxxV4EtTxtGy4=) 7: 3230322e39332e32362e302f32342d3234203d3e203233393532.roa (hash: wkOR/tKRFg1S67lRSPwTcy9/cVjDL9uk2HigWHRxfeU=) 8: 3230322e39332e33312e302f32342d3234203d3e203233393532.roa (hash: d+9UVCD8niS1faGA61UPoVHLJY0k2w63v+pVMpLKKfc=) 9: 3230322e39332e32342e302f32312d3231203d3e203233393532.roa (hash: 3DKoXwBAcS+jAgG56so/w0LfTxjXkoMotMqExXI7Hkk=) 10: C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl (hash: ckjy+Yv2qGNdqYtU0oCA55cbZcMv3KWz6nT3qMmOLfI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 20:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c2:62:21:1b:ee:a1:66:dc:f4:3a:11:70:28:a9:23:96:69:98:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F Validity Not Before: Sep 2 18:35:41 2026 GMT Not After : Sep 3 20:27:41 2026 GMT Subject: CN=0F12C082177A12D0377653A4B922A8291D03158A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3b:e4:52:a1:67:54:0d:fb:85:a5:c3:c3:bc: 2b:c4:4b:3e:65:18:7f:1f:55:11:42:cb:02:d5:fb: 95:85:29:76:62:00:9e:a1:55:96:99:94:61:32:c7: 00:a4:56:be:2b:8a:b0:3a:e5:2f:0a:6f:43:81:31: f3:da:9e:da:e2:75:0e:34:ab:4c:6f:69:89:56:60: 35:9e:c3:38:56:25:8d:b6:c3:9b:d6:5c:a9:e1:16: ee:4f:85:01:a6:9d:98:e4:e9:4c:00:35:85:83:8d: b3:a5:c7:4e:d5:88:2a:19:02:42:ef:20:01:68:f2: 9b:1c:18:63:8f:19:4e:99:e6:44:f1:cd:b6:d1:69: 2f:c3:dc:ad:b4:2b:43:1d:47:e4:dd:44:6a:e6:9f: b2:55:ff:8d:6d:30:f6:a4:27:fa:77:15:2b:c0:ff: 13:34:6b:24:3f:16:ee:9a:b5:83:fb:ce:57:89:a6: 19:a2:40:b7:d2:3c:2d:d1:dc:89:d3:4f:99:dc:f7: 08:ea:53:cb:5c:32:ef:65:61:42:0d:b7:77:59:0d: eb:13:d7:d7:10:67:b3:ff:11:6d:80:2d:1a:3a:5b: 4e:f0:6d:8a:cd:48:65:e1:0f:f8:d5:f7:2b:8b:4b: d0:bb:0c:15:92:6f:a0:14:6b:c1:96:87:a6:4d:5a: 22:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:12:C0:82:17:7A:12:D0:37:76:53:A4:B9:22:A8:29:1D:03:15:8A X509v3 Authority Key Identifier: keyid:C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ca:e3:1a:2d:d8:ef:23:c2:1f:2d:a2:dd:1c:a0:48:f4:bd: ba:d0:a0:2b:e5:10:8b:f6:0c:bf:68:14:e5:14:39:7d:23:e6: a1:84:25:2a:7c:88:72:f0:8f:de:0d:ca:97:21:e4:a8:be:b7: 6d:33:81:ab:63:00:20:9a:c0:2c:23:02:94:08:21:06:68:ff: fb:bd:2a:20:b5:0f:fa:71:48:24:db:7a:b6:36:9a:23:c7:26: b2:b5:09:46:07:6f:b2:cb:76:3c:f5:d5:19:85:2a:92:26:21: 41:01:05:28:f3:5a:ac:68:d5:24:bc:80:b7:73:51:12:32:ec: 72:64:a1:d7:bd:b0:0c:f8:e8:5a:be:fe:7b:5c:64:31:6f:54: 86:23:d7:86:f1:99:b8:6a:4b:1d:cc:9f:8a:d8:12:39:62:9c: 7c:43:96:26:62:88:27:ab:0c:55:da:82:90:1c:4c:1f:df:27: aa:cf:8a:07:2c:0e:78:ce:c9:4f:2b:06:a5:21:48:77:5c:fb: 05:a5:8b:c9:2b:da:3c:e9:4f:29:29:50:2a:c0:3a:78:78:32: 88:9f:e4:eb:a5:ec:d6:c2:82:8d:4f:90:af:d8:d3:8f:3c:fa: 12:46:f7:47:d6:1d:05:df:a7:04:9e:2c:9b:5d:cf:ac:8b:fd: c8:26:1a:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW8JiIRvuoWbc9DoRcCipI5ZpmOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJBOTBBQzM2NDgxQTE5RUU0MTRCQjVBQ0FBODAwMjQx RTU3MEExRjAeFw0yNjA5MDIxODM1NDFaFw0yNjA5MDMyMDI3NDFaMDMxMTAvBgNV BAMTKDBGMTJDMDgyMTc3QTEyRDAzNzc2NTNBNEI5MjJBODI5MUQwMzE1OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAO+RSoWdUDfuFpcPDvCvESz5l GH8fVRFCywLV+5WFKXZiAJ6hVZaZlGEyxwCkVr4rirA65S8Kb0OBMfPantridQ40 q0xvaYlWYDWewzhWJY22w5vWXKnhFu5PhQGmnZjk6UwANYWDjbOlx07ViCoZAkLv IAFo8pscGGOPGU6Z5kTxzbbRaS/D3K20K0MdR+TdRGrmn7JV/41tMPakJ/p3FSvA /xM0ayQ/Fu6atYP7zleJphmiQLfSPC3R3InTT5nc9wjqU8tcMu9lYUINt3dZDesT 19cQZ7P/EW2ALRo6W07wbYrNSGXhD/jV9yuLS9C7DBWSb6AUa8GWh6ZNWiLHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDxLAghd6EtA3dlOkuSKoKR0DFYowHwYDVR0j BBgwFoAUwqkKw2SBoZ7kFLtayqgAJB5XCh8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M4YWIzZTAtY2E2OC00MmY2LTk4ZjYtNjU0YTI1MmE4NjQ4LzAvQzJBOTBBQzM2 NDgxQTE5RUU0MTRCQjVBQ0FBODAwMjQxRTU3MEExRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkE5MEFDMzY0ODFBMTlFRTQxNEJCNUFDQUE4MDAyNDFFNTcw QTFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M4YWIzZTAtY2E2OC00MmY2LTk4 ZjYtNjU0YTI1MmE4NjQ4LzAvQzJBOTBBQzM2NDgxQTE5RUU0MTRCQjVBQ0FBODAw MjQxRTU3MEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXK4xot2O8jwh8tot0coEj0vbrQoCvlEIv2 DL9oFOUUOX0j5qGEJSp8iHLwj94Nypch5Ki+t20zgatjACCawCwjApQIIQZo//u9 KiC1D/pxSCTberY2miPHJrK1CUYHb7LLdjz11RmFKpImIUEBBSjzWqxo1SS8gLdz URIy7HJkode9sAz46Fq+/ntcZDFvVIYj14bxmbhqSx3Mn4rYEjlinHxDliZiiCer DFXagpAcTB/fJ6rPigcsDnjOyU8rBqUhSHdc+wWli8kr2jzpTykpUCrAOnh4Moif 5Oul7NbCgo1PkK/Y0488+hJG90fWHQXfpwSeLJtdz6yL/cgmGkI= -----END CERTIFICATE-----Generated at Thu Sep 3 09:29:11 2026 by rpki-client