$ rpki-client -vvvf rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.mft File: 5B4C702133C87BA4BC2E55E712270969ABE45A51.mft (raw, json) Hash identifier: De2xOZ7DIlVxMEvc2jb3gvyexMK7ii3EOaSbvSSrpRI= Subject key identifier: CB:09:4D:73:86:5E:B1:59:F7:63:67:AE:36:13:0E:62:5F:89:23:C3 Authority key identifier: 5B:4C:70:21:33:C8:7B:A4:BC:2E:55:E7:12:27:09:69:AB:E4:5A:51 Certificate issuer: /CN=5B4C702133C87BA4BC2E55E712270969ABE45A51 Certificate serial: 4F3C308B319F448C0E0931A3EA59521700D0C6AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B4C702133C87BA4BC2E55E712270969ABE45A51.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 00:49:04 +0000 Manifest this update: Thu 03 Sep 2026 00:44:04 +0000 Manifest next update: Fri 04 Sep 2026 02:08:04 +0000 Files and hashes: 1: 3130332e35352e3235322e302f32342d3234203d3e20313531353838.roa (hash: sLHnpPIHUxO29WSb75hs0N2E96R8Wj78zUMN4pLDvZ4=) 2: 5B4C702133C87BA4BC2E55E712270969ABE45A51.crl (hash: 7z/SskU4TKu4YTFmqVqs0mYmWROlYQbt19XeTzTOYBw=) 3: 3130332e35352e3235322e302f32332d3233203d3e20313531353838.roa (hash: BHukqw3OCwpT8gyX9jofbrVK6NJ8azV8C28UZNn4k40=) 4: 3130332e35352e3235332e302f32342d3234203d3e20313531353838.roa (hash: Vkq3URZ932rcZk4u78E4tOq6/4bheSUZYPRHTmwP30Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.crl rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B4C702133C87BA4BC2E55E712270969ABE45A51.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:3c:30:8b:31:9f:44:8c:0e:09:31:a3:ea:59:52:17:00:d0:c6:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B4C702133C87BA4BC2E55E712270969ABE45A51 Validity Not Before: Sep 3 00:44:04 2026 GMT Not After : Sep 4 02:08:04 2026 GMT Subject: CN=CB094D73865EB159F76367AE36130E625F8923C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:64:d0:77:42:ee:2f:90:36:19:38:6c:84:e3: ed:b2:eb:88:a3:ff:b3:7c:34:2f:00:03:80:c8:0b: ec:70:53:ff:d7:d8:73:24:ca:26:25:0d:6e:8d:c7: 85:84:34:37:8f:80:8e:6d:c0:dc:97:ad:9e:0b:ea: e9:3e:6a:02:05:ac:b4:5f:98:8b:32:dd:d0:10:c2: 7e:7f:37:db:06:1a:58:81:75:4c:18:88:59:32:70: 24:bc:92:4b:0b:31:bc:e7:c7:aa:28:1d:5a:99:dd: 33:24:47:3c:fc:2d:0a:fe:36:3b:6c:ed:67:42:a1: 25:9c:6a:a1:01:0e:87:0c:53:dd:9d:35:ea:f6:c6: 40:ce:15:13:84:06:6c:eb:08:f0:a7:7f:e2:49:eb: 5e:20:49:44:64:39:ee:3a:43:b1:de:de:1c:60:3c: 99:e4:31:cb:43:6a:36:d4:fc:96:3a:83:89:3f:e3: d8:9c:32:79:a7:a0:b7:52:99:8e:b8:fa:42:0e:95: 62:84:e6:b6:64:f8:7f:b7:e1:f6:34:59:cf:ed:86: 3c:8b:57:35:26:f0:73:f2:12:14:d9:49:6e:b5:3d: 89:db:cf:a1:d9:b2:08:05:43:6e:f6:82:99:36:9f: b2:f1:bb:49:38:9b:a3:99:7e:b5:07:81:74:a8:af: 98:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:09:4D:73:86:5E:B1:59:F7:63:67:AE:36:13:0E:62:5F:89:23:C3 X509v3 Authority Key Identifier: keyid:5B:4C:70:21:33:C8:7B:A4:BC:2E:55:E7:12:27:09:69:AB:E4:5A:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B4C702133C87BA4BC2E55E712270969ABE45A51.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:78:84:30:b4:8a:f7:16:5f:c5:eb:ac:25:e1:a1:fa:c0:c0: b5:da:de:40:6b:c6:22:f5:30:94:57:14:02:3d:6c:d1:ef:36: 99:42:38:c7:73:a4:c1:d8:9f:b2:64:6b:9a:cc:a7:e3:92:5f: 0b:55:ce:f4:67:ec:d5:ef:a6:53:5b:68:c5:41:41:b6:67:3f: 02:70:0f:d7:5d:58:28:d3:73:9e:86:2f:f3:bd:0d:4f:ab:a4: 09:57:d7:77:2e:d6:84:e1:96:27:ff:36:ae:30:77:06:0b:fa: 73:f5:19:f7:f8:38:14:fa:cf:cb:03:f4:bf:7d:c8:fb:69:e0: 15:9b:a5:82:8a:59:9e:ba:06:5d:bc:04:ba:d5:f5:f6:d5:38: b8:16:db:78:ed:0b:14:bb:93:ce:7f:e9:1c:15:35:38:dd:15: 46:0b:ff:f1:96:4b:6d:28:5e:cc:f9:27:6f:11:7b:b0:a3:43: a4:67:70:3d:62:89:c3:68:3b:61:45:d7:f3:bc:c9:4b:5b:cf: 9b:af:f0:af:41:7d:7e:ef:0f:d6:0f:40:57:35:6a:4b:49:93: 2e:df:f0:50:de:0c:11:05:c1:aa:71:74:25:5c:2a:22:4f:1d: e9:d6:e8:a3:46:d2:38:06:20:94:28:8a:9e:17:1d:a4:81:f1: cd:6a:fc:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTzwwizGfRIwOCTGj6llSFwDQxqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI0QzcwMjEzM0M4N0JBNEJDMkU1NUU3MTIyNzA5NjlB QkU0NUE1MTAeFw0yNjA5MDMwMDQ0MDRaFw0yNjA5MDQwMjA4MDRaMDMxMTAvBgNV BAMTKENCMDk0RDczODY1RUIxNTlGNzYzNjdBRTM2MTMwRTYyNUY4OTIzQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRZNB3Qu4vkDYZOGyE4+2y64ij /7N8NC8AA4DIC+xwU//X2HMkyiYlDW6Nx4WENDePgI5twNyXrZ4L6uk+agIFrLRf mIsy3dAQwn5/N9sGGliBdUwYiFkycCS8kksLMbznx6ooHVqZ3TMkRzz8LQr+Njts 7WdCoSWcaqEBDocMU92dNer2xkDOFROEBmzrCPCnf+JJ614gSURkOe46Q7He3hxg PJnkMctDajbU/JY6g4k/49icMnmnoLdSmY64+kIOlWKE5rZk+H+34fY0Wc/thjyL VzUm8HPyEhTZSW61PYnbz6HZsggFQ272gpk2n7Lxu0k4m6OZfrUHgXSor5gLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUywlNc4ZesVn3Y2euNhMOYl+JI8MwHwYDVR0j BBgwFoAUW0xwITPIe6S8LlXnEicJaavkWlEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDE0ZTA0ZmEtNzE4OC00ZjRmLTgxYmItMzMwMzg5Zjg3MDE1LzAvNUI0QzcwMjEz M0M4N0JBNEJDMkU1NUU3MTIyNzA5NjlBQkU0NUE1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QjRDNzAyMTMzQzg3QkE0QkMyRTU1RTcxMjI3MDk2OUFCRTQ1 QTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDE0ZTA0ZmEtNzE4OC00ZjRmLTgx YmItMzMwMzg5Zjg3MDE1LzAvNUI0QzcwMjEzM0M4N0JBNEJDMkU1NUU3MTIyNzA5 NjlBQkU0NUE1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHF4hDC0ivcWX8XrrCXhofrAwLXa3kBrxiL1 MJRXFAI9bNHvNplCOMdzpMHYn7Jka5rMp+OSXwtVzvRn7NXvplNbaMVBQbZnPwJw D9ddWCjTc56GL/O9DU+rpAlX13cu1oThlif/Nq4wdwYL+nP1Gff4OBT6z8sD9L99 yPtp4BWbpYKKWZ66Bl28BLrV9fbVOLgW23jtCxS7k85/6RwVNTjdFUYL//GWS20o Xsz5J28Re7CjQ6RncD1iicNoO2FF1/O8yUtbz5uv8K9BfX7vD9YPQFc1aktJky7f 8FDeDBEFwapxdCVcKiJPHenW6KNG0jgGIJQoip4XHaSB8c1q/KQ= -----END CERTIFICATE-----Generated at Thu Sep 3 05:21:20 2026 by rpki-client