$ rpki-client -vvvf rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft File: 5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft (raw, json) Hash identifier: Zh4YnS+73ahLIqJ/iuRr9COXNEj4zeiHOU2L/a+zU7I= Subject key identifier: 49:EB:99:45:2E:DE:42:B4:C9:E4:23:11:94:9C:77:21:E6:29:86:2F Authority key identifier: 5A:C7:FD:C1:38:0E:98:33:9F:28:DB:DC:57:B2:1E:7D:2F:95:A0:C0 Certificate issuer: /CN=5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0 Certificate serial: 7F350C7862DFAEBA501BAFC2EC83E36730455AB1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 17:13:47 +0000 Manifest this update: Wed 02 Sep 2026 17:08:47 +0000 Manifest next update: Thu 03 Sep 2026 20:51:47 +0000 Files and hashes: 1: 323430313a633432303a3a2f33322d3438203d3e20313431303538.roa (hash: fc+4JU1Tpp/1O31vstVFMWqbX3rMZmX9kGoVnJ5dzDQ=) 2: 5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.crl (hash: +pVqyOySSmhaVFpINPEotQNVEARrRj7cK8Dd3SUDq2Q=) 3: 3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa (hash: 4g4u+OEshRSiXLYJx+dZnyPxCHcmqZ8djxIy4N3tcCM=) 4: 3130332e3135352e3131332e302f32342d3234203d3e20313431303538.roa (hash: KmWWkFu4uWgTsq2Hfq2FHIMCUvYeIO46DVlLY6UTkvU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.crl rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 20:51:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:35:0c:78:62:df:ae:ba:50:1b:af:c2:ec:83:e3:67:30:45:5a:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0 Validity Not Before: Sep 2 17:08:47 2026 GMT Not After : Sep 3 20:51:47 2026 GMT Subject: CN=49EB99452EDE42B4C9E42311949C7721E629862F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:77:9e:ad:e8:ca:a4:eb:db:85:77:57:43:83: 43:11:bb:f2:ef:99:a4:94:b1:f8:31:6c:e8:50:8d: 13:e8:69:53:38:08:87:95:c8:f5:0c:59:d6:3d:2c: 4a:ac:46:3a:c4:2f:60:c2:e4:0c:d2:ab:b1:3a:66: 66:95:d7:51:c1:ca:38:ba:bc:f6:99:10:c9:56:43: 2a:fe:05:e0:85:c2:7d:2e:0c:2d:3e:cb:40:a6:5a: 75:b2:ad:5d:28:e3:2c:35:38:97:e8:a3:f5:ff:be: fb:31:42:7f:b1:cc:f5:eb:c0:20:e3:a0:84:54:16: 2d:e3:29:17:b7:f5:eb:96:8a:f1:74:ed:e0:fe:1b: 43:b2:1c:21:cf:a7:24:9c:35:8c:93:bd:f6:00:5b: 70:8e:0a:df:c9:31:12:be:0b:85:41:d8:b7:d2:8c: 38:ab:89:d9:77:8b:50:d3:13:e3:57:f0:b2:93:b0: 9b:64:f5:ec:15:f7:da:3a:82:2c:f8:e0:9b:08:70: e2:f5:cd:bb:5a:1e:a2:1f:d2:cc:65:ce:a6:a7:ba: c7:ea:dc:49:a9:6a:a4:db:c2:3c:00:32:f7:f3:f0: 6e:bf:03:f2:89:49:36:db:13:9a:0c:3a:cc:83:3a: 25:df:5b:b5:04:dc:de:53:bc:37:f2:58:12:85:a3: 6c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:EB:99:45:2E:DE:42:B4:C9:E4:23:11:94:9C:77:21:E6:29:86:2F X509v3 Authority Key Identifier: keyid:5A:C7:FD:C1:38:0E:98:33:9F:28:DB:DC:57:B2:1E:7D:2F:95:A0:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:c2:84:1b:ea:9e:d3:1e:bc:94:c4:cb:9b:e8:ed:f9:bb:3f: 8b:18:2c:9a:e8:e6:ae:7a:32:03:c4:27:17:ec:c6:ff:72:b0: db:21:96:f9:d8:9d:c8:a7:9d:58:60:89:44:0e:40:7c:17:12: a9:f5:7c:62:44:41:2d:54:13:f5:73:a0:33:cc:1f:46:eb:aa: 7d:a8:1f:e4:6d:91:5a:9b:cb:05:a2:bd:f3:6d:5e:a8:00:01: 06:34:50:46:ab:bc:10:ca:55:0e:49:8e:ba:7e:0b:f4:5f:da: d9:cc:d6:e3:20:db:25:70:b8:46:ff:05:61:be:0f:93:86:6d: 93:e2:80:8a:36:13:5d:e5:b6:07:18:39:70:39:9f:33:30:c6: 54:4d:70:75:ac:f3:6d:a0:7e:71:fc:c5:00:ee:51:1f:3f:a7: 7d:c4:3e:da:8a:3e:74:97:39:6e:ed:21:af:46:b6:b9:39:ad: 21:57:0c:d3:f9:5a:a6:e7:7e:77:e0:e0:57:c5:2f:49:e3:c2: df:05:8f:ba:f2:c3:06:18:7a:dd:c6:72:55:24:50:81:06:4b: 4d:b2:5a:21:e1:8f:49:98:09:09:90:ef:91:16:fc:59:69:2b: 44:47:73:33:47:2e:ee:b5:37:f0:97:11:af:92:22:ca:70:c7: d2:7b:73:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfzUMeGLfrrpQG6/C7IPjZzBFWrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFDN0ZEQzEzODBFOTgzMzlGMjhEQkRDNTdCMjFFN0Qy Rjk1QTBDMDAeFw0yNjA5MDIxNzA4NDdaFw0yNjA5MDMyMDUxNDdaMDMxMTAvBgNV BAMTKDQ5RUI5OTQ1MkVERTQyQjRDOUU0MjMxMTk0OUM3NzIxRTYyOTg2MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKd56t6Mqk69uFd1dDg0MRu/Lv maSUsfgxbOhQjRPoaVM4CIeVyPUMWdY9LEqsRjrEL2DC5AzSq7E6ZmaV11HByji6 vPaZEMlWQyr+BeCFwn0uDC0+y0CmWnWyrV0o4yw1OJfoo/X/vvsxQn+xzPXrwCDj oIRUFi3jKRe39euWivF07eD+G0OyHCHPpyScNYyTvfYAW3COCt/JMRK+C4VB2LfS jDiridl3i1DTE+NX8LKTsJtk9ewV99o6giz44JsIcOL1zbtaHqIf0sxlzqanusfq 3EmpaqTbwjwAMvfz8G6/A/KJSTbbE5oMOsyDOiXfW7UE3N5TvDfyWBKFo2yFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSeuZRS7eQrTJ5CMRlJx3IeYphi8wHwYDVR0j BBgwFoAUWsf9wTgOmDOfKNvcV7IefS+VoMAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTNiODU4ZjYtZGUyMC00MTIxLWJjZWEtOTA3NmVkY2NjMDk3LzAvNUFDN0ZEQzEz ODBFOTgzMzlGMjhEQkRDNTdCMjFFN0QyRjk1QTBDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QUM3RkRDMTM4MEU5ODMzOUYyOERCREM1N0IyMUU3RDJGOTVB MEMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTNiODU4ZjYtZGUyMC00MTIxLWJj ZWEtOTA3NmVkY2NjMDk3LzAvNUFDN0ZEQzEzODBFOTgzMzlGMjhEQkRDNTdCMjFF N0QyRjk1QTBDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXChBvqntMevJTEy5vo7fm7P4sYLJro5q56 MgPEJxfsxv9ysNshlvnYncinnVhgiUQOQHwXEqn1fGJEQS1UE/VzoDPMH0brqn2o H+RtkVqbywWivfNtXqgAAQY0UEarvBDKVQ5Jjrp+C/Rf2tnM1uMg2yVwuEb/BWG+ D5OGbZPigIo2E13ltgcYOXA5nzMwxlRNcHWs822gfnH8xQDuUR8/p33EPtqKPnSX OW7tIa9Gtrk5rSFXDNP5Wqbnfnfg4FfFL0njwt8Fj7rywwYYet3GclUkUIEGS02y WiHhj0mYCQmQ75EW/FlpK0RHczNHLu61N/CXEa+SIspwx9J7c0U= -----END CERTIFICATE-----Generated at Thu Sep 3 08:29:32 2026 by rpki-client