$ rpki-client -vvvf rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.mft File: 6392804C8E02387641837CC130058F05667A805F.mft (raw, json) Hash identifier: lNfaNrGyVLx0avjN8fpa4EIH5n0enzwrYTbuxlpRWCY= Subject key identifier: 67:BE:82:F6:76:5C:8E:CA:E4:E7:4F:3C:35:89:AD:2D:2A:E1:2F:C3 Authority key identifier: 63:92:80:4C:8E:02:38:76:41:83:7C:C1:30:05:8F:05:66:7A:80:5F Certificate issuer: /CN=6392804C8E02387641837CC130058F05667A805F Certificate serial: 5270221F9CF57561EEFF6B2A00C7764D2BA74B1B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6392804C8E02387641837CC130058F05667A805F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 02:20:55 +0000 Manifest this update: Thu 03 Sep 2026 02:15:55 +0000 Manifest next update: Fri 04 Sep 2026 05:33:55 +0000 Files and hashes: 1: 3130332e3132392e3232302e302f32342d3234203d3e20313338303632.roa (hash: pPJq2G46Sz99bsDL9wBJRoipwgn9lZRSYh+JhFJc+0o=) 2: 3130332e3132392e3232332e302f32342d3234203d3e20313338303632.roa (hash: SLlp2TgUJDxKzIChZFNu8nUMQolYFP9BFrEaRb9z5dQ=) 3: 3130332e3132392e3232322e302f32342d3234203d3e20313338303632.roa (hash: l3e6649ftGy/RyoIrij/BvUADN52ueYZyLhMioJKOn8=) 4: 3130332e3132392e3232312e302f32342d3234203d3e20313338303632.roa (hash: TRMnk8iAgB4rpOEvi1c2ELL28OXN6Zn5l8OWp2rvcOg=) 5: 6392804C8E02387641837CC130058F05667A805F.crl (hash: ZU34/axhSFENHCijgX3HviUv6F1BqBsvUsa48GwPVKI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.crl rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6392804C8E02387641837CC130058F05667A805F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 05:33:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:70:22:1f:9c:f5:75:61:ee:ff:6b:2a:00:c7:76:4d:2b:a7:4b:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6392804C8E02387641837CC130058F05667A805F Validity Not Before: Sep 3 02:15:55 2026 GMT Not After : Sep 4 05:33:55 2026 GMT Subject: CN=67BE82F6765C8ECAE4E74F3C3589AD2D2AE12FC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:05:a7:7a:5e:c3:f1:90:bf:b9:81:03:44:f8: e7:64:08:75:c9:f0:b4:f6:69:fc:14:b6:86:aa:86: 9d:13:20:ac:25:29:58:d2:27:9d:9d:ae:6a:15:c5: 43:fd:e2:30:2e:86:bb:33:89:0a:22:96:90:6c:16: cf:91:ad:b9:2e:b5:4b:f9:17:19:f7:05:34:91:b5: 39:a2:fb:04:3f:b8:e3:91:af:a9:f1:cf:c8:2a:f4: 90:50:6e:7e:c1:de:77:c3:b2:5b:05:ab:95:0e:29: f0:01:ff:86:2d:dc:ca:05:3c:12:7a:a1:3f:1e:31: 07:d6:09:5a:0b:99:38:85:2e:06:29:48:3d:30:45: 09:90:70:39:99:44:1b:9a:a4:17:f7:31:7d:d9:67: a8:34:b6:07:c3:8b:50:35:ed:16:6a:c4:f7:0d:26: 70:c8:5f:4a:c1:7a:8d:f9:0f:7f:a9:51:d8:1c:36: 1b:49:70:54:2b:8c:35:13:3e:26:06:95:e7:51:31: f8:03:89:d2:f6:55:75:c2:68:e6:63:a7:fb:e5:db: cd:ba:f2:fb:b3:22:78:8b:20:69:be:eb:25:bb:9c: 91:22:89:62:2f:f3:84:d7:74:95:43:39:d0:5a:36: 90:aa:03:4b:af:d4:3a:f9:1d:f7:5f:39:bb:9a:ed: 6c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BE:82:F6:76:5C:8E:CA:E4:E7:4F:3C:35:89:AD:2D:2A:E1:2F:C3 X509v3 Authority Key Identifier: keyid:63:92:80:4C:8E:02:38:76:41:83:7C:C1:30:05:8F:05:66:7A:80:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6392804C8E02387641837CC130058F05667A805F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:84:9b:ae:5a:19:39:ac:ec:f4:64:4d:eb:2a:b2:d3:ea:8c: e4:08:06:62:44:58:24:2b:82:51:aa:b8:c4:9c:92:cb:ab:74: 3e:8a:ca:94:1d:2f:36:83:4f:ac:e0:25:2e:da:2a:f8:54:c5: d6:9a:3f:0e:94:a8:28:3a:6b:83:8e:51:a4:ea:f4:f8:07:bc: 8e:a4:00:c1:20:eb:67:eb:0c:6d:ae:58:ee:8c:fd:1d:85:3a: 4b:04:06:2e:21:84:1e:bb:3c:0d:38:49:5e:e9:a0:e1:ed:cc: 16:99:80:c2:15:2c:c9:ba:14:f2:b8:84:b8:f5:2c:d4:27:82: 63:e7:6b:e4:c6:22:d7:7e:49:c3:30:f4:c6:92:ed:65:1f:dc: e5:85:d5:54:61:fc:e4:01:1c:13:aa:84:96:4d:fb:20:a5:61: 76:a6:8c:13:e5:bc:97:68:54:b2:09:98:e6:ca:da:c2:95:7f: 69:7e:a7:15:e8:31:cb:cd:71:52:fe:78:7f:05:99:da:71:fe: 24:85:e8:b0:d4:4f:e4:d9:6b:80:29:9f:60:bb:72:53:1e:7a: a9:3b:9e:9b:4d:9c:21:96:65:5c:e6:14:33:a3:85:a1:ef:33: a9:88:94:87:b8:b6:ae:e7:7d:56:e7:d9:61:01:50:6d:ac:ea: d4:8b:04:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUnAiH5z1dWHu/2sqAMd2TSunSxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM5MjgwNEM4RTAyMzg3NjQxODM3Q0MxMzAwNThGMDU2 NjdBODA1RjAeFw0yNjA5MDMwMjE1NTVaFw0yNjA5MDQwNTMzNTVaMDMxMTAvBgNV BAMTKDY3QkU4MkY2NzY1QzhFQ0FFNEU3NEYzQzM1ODlBRDJEMkFFMTJGQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjBad6XsPxkL+5gQNE+OdkCHXJ 8LT2afwUtoaqhp0TIKwlKVjSJ52drmoVxUP94jAuhrsziQoilpBsFs+RrbkutUv5 Fxn3BTSRtTmi+wQ/uOORr6nxz8gq9JBQbn7B3nfDslsFq5UOKfAB/4Yt3MoFPBJ6 oT8eMQfWCVoLmTiFLgYpSD0wRQmQcDmZRBuapBf3MX3ZZ6g0tgfDi1A17RZqxPcN JnDIX0rBeo35D3+pUdgcNhtJcFQrjDUTPiYGledRMfgDidL2VXXCaOZjp/vl2826 8vuzIniLIGm+6yW7nJEiiWIv84TXdJVDOdBaNpCqA0uv1Dr5HfdfObua7WxHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ76C9nZcjsrk5088NYmtLSrhL8MwHwYDVR0j BBgwFoAUY5KATI4COHZBg3zBMAWPBWZ6gF8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzZhMDAyZGUtMGNkZS00NjJlLTk0MDQtNDZiYzYyNzBlMDRmLzAvNjM5MjgwNEM4 RTAyMzg3NjQxODM3Q0MxMzAwNThGMDU2NjdBODA1Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzkyODA0QzhFMDIzODc2NDE4MzdDQzEzMDA1OEYwNTY2N0E4 MDVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzZhMDAyZGUtMGNkZS00NjJlLTk0 MDQtNDZiYzYyNzBlMDRmLzAvNjM5MjgwNEM4RTAyMzg3NjQxODM3Q0MxMzAwNThG MDU2NjdBODA1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaEm65aGTms7PRkTesqstPqjOQIBmJEWCQr glGquMScksurdD6KypQdLzaDT6zgJS7aKvhUxdaaPw6UqCg6a4OOUaTq9PgHvI6k AMEg62frDG2uWO6M/R2FOksEBi4hhB67PA04SV7poOHtzBaZgMIVLMm6FPK4hLj1 LNQngmPna+TGItd+ScMw9MaS7WUf3OWF1VRh/OQBHBOqhJZN+yClYXamjBPlvJdo VLIJmObK2sKVf2l+pxXoMcvNcVL+eH8Fmdpx/iSF6LDUT+TZa4Apn2C7clMeeqk7 nptNnCGWZVzmFDOjhaHvM6mIlIe4tq7nfVbn2WEBUG2s6tSLBOY= -----END CERTIFICATE-----Generated at Thu Sep 3 20:56:53 2026 by rpki-client