$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft File: D522456371D4AC1AABD94B54197F5014F8E929A5.mft (raw, json) Hash identifier: jC404CEoR93W54WdsjDToRLclCNqJH+DDNmHEuH91ME= Subject key identifier: 7D:D6:FE:86:09:6B:DE:E2:9D:5C:9D:74:35:95:88:24:A5:31:C2:63 Authority key identifier: D5:22:45:63:71:D4:AC:1A:AB:D9:4B:54:19:7F:50:14:F8:E9:29:A5 Certificate issuer: /CN=D522456371D4AC1AABD94B54197F5014F8E929A5 Certificate serial: 60DDE2353F71E5BA3D5990AF43D71350F44EC5FA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D522456371D4AC1AABD94B54197F5014F8E929A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft Manifest number: A6 Signing time: Wed 02 Sep 2026 23:32:14 +0000 Manifest this update: Wed 02 Sep 2026 23:27:14 +0000 Manifest next update: Fri 04 Sep 2026 03:28:14 +0000 Files and hashes: 1: 3130332e3137392e3133362e302f32332d3234203d3e20313339393737.roa (hash: OUIoLLo/dAdijxG7HgPy+7u0dGo5YCKdHwzzHlzGJYU=) 2: D522456371D4AC1AABD94B54197F5014F8E929A5.crl (hash: a6Erknyvtw0ZYBHZhS/LbXkoU3N7tFdlQdDHmDq/fzQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.crl rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D522456371D4AC1AABD94B54197F5014F8E929A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 03:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:dd:e2:35:3f:71:e5:ba:3d:59:90:af:43:d7:13:50:f4:4e:c5:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D522456371D4AC1AABD94B54197F5014F8E929A5 Validity Not Before: Sep 2 23:27:14 2026 GMT Not After : Sep 4 03:28:14 2026 GMT Subject: CN=7DD6FE86096BDEE29D5C9D7435958824A531C263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:84:98:3a:cd:f8:7c:e6:ec:47:42:01:0b:6e: 97:a0:dc:13:0f:29:3d:e6:0a:62:15:b0:aa:ed:8b: a6:dd:75:76:e2:67:e4:13:e0:24:a1:75:84:7d:94: 04:9f:be:cf:03:87:c1:ae:69:b1:35:d6:4c:87:41: da:c5:6b:bf:bf:2d:8a:45:da:e2:15:20:4a:c5:01: 4b:39:04:1e:d1:8c:69:a6:c2:d0:88:5a:90:80:06: b6:66:cd:17:78:06:b7:10:de:d5:a6:5f:ba:e0:8d: 10:28:67:67:7e:b0:fb:91:d5:a3:d1:da:a0:58:59: 13:29:17:6d:44:aa:2c:36:01:b5:68:82:8a:1e:d4: 19:8f:29:04:af:27:a9:26:17:9f:54:dd:93:b0:ca: 09:5e:09:0e:d7:5b:7e:39:47:ee:5f:51:e7:1b:93: 27:12:a7:b3:61:f3:9d:2b:00:eb:6e:18:3e:76:98: 02:4a:ee:8b:b8:b3:78:3f:f5:5f:25:aa:36:38:99: 9b:07:e3:a6:ed:c4:87:dc:1d:1c:1c:9e:07:e2:be: a7:20:3d:22:0d:07:de:20:7c:35:9e:e1:af:89:e8: 6d:b4:dd:a4:16:3c:1c:3e:9e:43:b1:aa:5f:b8:16: 83:ef:fe:27:50:89:98:52:09:61:73:51:2c:ae:1c: bb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D6:FE:86:09:6B:DE:E2:9D:5C:9D:74:35:95:88:24:A5:31:C2:63 X509v3 Authority Key Identifier: keyid:D5:22:45:63:71:D4:AC:1A:AB:D9:4B:54:19:7F:50:14:F8:E9:29:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D522456371D4AC1AABD94B54197F5014F8E929A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:d0:19:a6:98:01:b3:70:ab:64:2f:00:8a:04:8d:00:df:88: a4:78:78:ea:6f:57:45:07:6c:5b:01:f5:16:37:3e:7e:10:59: 7d:c3:d8:97:fb:35:c2:2c:d7:3c:bf:f9:db:5e:60:b8:36:fc: eb:78:16:37:76:dd:0f:77:88:44:a6:e6:17:a2:09:c2:2a:8e: f5:3e:32:62:13:aa:94:67:57:30:f3:65:a9:b1:dc:67:92:a5: f8:fd:ee:e7:94:03:fe:f6:bf:70:de:e8:b3:9d:3d:0a:c6:b5: 6c:39:85:1a:e9:db:c2:19:bc:56:07:52:d4:54:a6:43:8d:96: fd:32:45:e4:dc:15:fe:52:d1:67:a9:3a:ac:3f:bd:03:04:1f: 73:fd:bc:4a:39:02:c4:f7:41:9c:a9:a0:de:06:b8:51:1a:ee: f2:66:a0:af:fc:e9:f5:79:e6:e5:26:d6:93:73:9a:c3:26:72: 1c:d3:4f:bc:f7:dc:75:d6:c7:00:9b:f9:e1:02:19:ce:8e:7a: a2:d6:3a:d5:b8:bd:61:22:0d:5d:90:0d:c2:de:03:fa:13:69: 05:8e:57:7c:30:24:f8:b4:50:41:56:fa:e2:45:74:1d:d2:db: 37:c4:d9:ef:7e:86:03:22:2a:68:c8:c7:81:c2:54:cb:26:f4: ad:be:69:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYN3iNT9x5bo9WZCvQ9cTUPROxfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUyMjQ1NjM3MUQ0QUMxQUFCRDk0QjU0MTk3RjUwMTRG OEU5MjlBNTAeFw0yNjA5MDIyMzI3MTRaFw0yNjA5MDQwMzI4MTRaMDMxMTAvBgNV BAMTKDdERDZGRTg2MDk2QkRFRTI5RDVDOUQ3NDM1OTU4ODI0QTUzMUMyNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKhJg6zfh85uxHQgELbpeg3BMP KT3mCmIVsKrti6bddXbiZ+QT4CShdYR9lASfvs8Dh8GuabE11kyHQdrFa7+/LYpF 2uIVIErFAUs5BB7RjGmmwtCIWpCABrZmzRd4BrcQ3tWmX7rgjRAoZ2d+sPuR1aPR 2qBYWRMpF21Eqiw2AbVogooe1BmPKQSvJ6kmF59U3ZOwygleCQ7XW345R+5fUecb kycSp7Nh850rAOtuGD52mAJK7ou4s3g/9V8lqjY4mZsH46btxIfcHRwcngfivqcg PSINB94gfDWe4a+J6G203aQWPBw+nkOxql+4FoPv/idQiZhSCWFzUSyuHLutAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfdb+hglr3uKdXJ10NZWIJKUxwmMwHwYDVR0j BBgwFoAU1SJFY3HUrBqr2UtUGX9QFPjpKaUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ4MGIzMjEtYWEzMS00MzE3LTlkMzEtYzJiZDE5MGMxMzg0LzAvRDUyMjQ1NjM3 MUQ0QUMxQUFCRDk0QjU0MTk3RjUwMTRGOEU5MjlBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTIyNDU2MzcxRDRBQzFBQUJEOTRCNTQxOTdGNTAxNEY4RTky OUE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ4MGIzMjEtYWEzMS00MzE3LTlk MzEtYzJiZDE5MGMxMzg0LzAvRDUyMjQ1NjM3MUQ0QUMxQUFCRDk0QjU0MTk3RjUw MTRGOEU5MjlBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDQGaaYAbNwq2QvAIoEjQDfiKR4eOpvV0UH bFsB9RY3Pn4QWX3D2Jf7NcIs1zy/+dteYLg2/Ot4Fjd23Q93iESm5heiCcIqjvU+ MmITqpRnVzDzZamx3GeSpfj97ueUA/72v3De6LOdPQrGtWw5hRrp28IZvFYHUtRU pkONlv0yReTcFf5S0WepOqw/vQMEH3P9vEo5AsT3QZypoN4GuFEa7vJmoK/86fV5 5uUm1pNzmsMmchzTT7z33HXWxwCb+eECGc6OeqLWOtW4vWEiDV2QDcLeA/oTaQWO V3wwJPi0UEFW+uJFdB3S2zfE2e9+hgMiKmjIx4HCVMsm9K2+aak= -----END CERTIFICATE-----Generated at Thu Sep 3 13:00:55 2026 by rpki-client