$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft File: D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft (raw, json) Hash identifier: 1IUdNkSVigWwrbzJ7jPk7DRdfjoSOkWxEwTjMeC31C4= Subject key identifier: 75:4B:CC:FF:3D:2F:D0:A8:C1:BD:C7:D2:24:62:74:AB:C7:72:03:68 Authority key identifier: D8:B1:AA:A4:D2:2A:2E:22:59:E5:5E:7A:50:CB:15:FF:4D:D1:F5:24 Certificate issuer: /CN=D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524 Certificate serial: 666D168E5A04D2C9A1DA576F670A6A5E13C1E626 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 23:47:37 +0000 Manifest this update: Wed 02 Sep 2026 23:42:37 +0000 Manifest next update: Fri 04 Sep 2026 01:22:37 +0000 Files and hashes: 1: 3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa (hash: bR+rHQrh2BbDBIEXZD76jtCgM3z29GB3K8OSA3PHxZ8=) 2: 3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa (hash: B9uGziJoJ3vGf5NvgTMOSPQWAPSbs6/SbCQ1GHvUQS0=) 3: D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.crl (hash: 5k/ctirdd/Z9g8XwsjIm8ZUvPnLncJkBn8wuXgxxWLo=) 4: 323030313a6466333a356238303a3a2f34382d3438203d3e20313430333839.roa (hash: GMEzbs3Ig2nQxKeMH+leqKXvdoQrLyt3lFNSHrwIV3w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.crl rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:6d:16:8e:5a:04:d2:c9:a1:da:57:6f:67:0a:6a:5e:13:c1:e6:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524 Validity Not Before: Sep 2 23:42:37 2026 GMT Not After : Sep 4 01:22:37 2026 GMT Subject: CN=754BCCFF3D2FD0A8C1BDC7D2246274ABC7720368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9c:97:23:30:a3:1c:18:8a:48:42:67:fa:98: c2:e7:2c:99:3f:99:89:d2:33:c3:b8:0e:ed:8f:56: a0:b0:93:97:7f:c0:62:a1:4c:b4:39:c5:82:1f:e2: b2:9c:9f:68:e5:44:7f:e9:14:ec:04:b4:25:ea:7a: 23:2f:ce:8c:b7:bc:eb:c3:04:d1:da:96:7c:78:7a: ac:bd:ed:1d:ea:30:60:fd:1d:bc:af:d7:0b:51:8e: 70:e7:5e:71:b0:fb:f7:f5:14:8d:e8:9d:40:57:89: 24:c3:dd:79:99:f4:8c:70:39:ab:b4:d9:ce:2a:8e: 51:24:1e:e3:7e:b0:f4:24:66:6d:4b:a1:8e:b8:9a: 0a:c9:03:bd:83:4a:84:ea:33:83:16:42:e5:e8:ad: eb:b4:c2:5a:72:ed:4e:66:92:24:99:6d:01:99:4a: 22:ff:eb:22:1b:c9:0f:fd:93:b4:a5:8b:17:18:a4: 3b:8e:5f:da:27:b3:4d:4b:ba:08:cf:93:01:ec:f3: 4c:9b:d0:4e:bd:b3:0f:c8:e4:c7:1e:1f:80:28:eb: 9c:07:93:ce:07:eb:50:31:af:fb:ef:93:75:ac:b6: 28:db:77:b9:05:b1:b1:5d:d1:15:39:f4:84:8a:ce: 67:c0:c8:6c:2a:99:42:bc:81:7c:89:ee:6e:9e:17: 64:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:4B:CC:FF:3D:2F:D0:A8:C1:BD:C7:D2:24:62:74:AB:C7:72:03:68 X509v3 Authority Key Identifier: keyid:D8:B1:AA:A4:D2:2A:2E:22:59:E5:5E:7A:50:CB:15:FF:4D:D1:F5:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:87:77:a8:40:2c:55:47:b0:10:43:ce:64:e0:35:0c:27:d8: c9:d6:0a:f0:9c:6c:36:f0:75:43:81:1a:13:e2:42:c6:c3:df: 5e:ad:a3:07:10:1b:bd:b7:69:44:13:9b:65:14:82:1f:1f:d3: f3:f4:88:8c:ec:8e:b8:90:b8:e5:55:74:15:ac:bd:53:3a:fc: 1f:5a:e8:51:79:0c:1c:fb:05:05:e6:7d:4b:58:fa:7c:ac:ea: 85:3f:a7:0b:b4:8f:f3:c8:02:88:c3:62:c5:5b:8e:d9:81:34: 28:2d:0b:ef:19:60:cd:06:8b:65:3c:19:db:46:00:b5:6d:5f: d6:c4:0e:c4:12:ac:b3:cd:08:ed:da:78:25:7a:ba:bb:2b:52: e9:1c:9e:f6:aa:21:79:71:0c:58:49:ef:74:2a:8d:c6:3d:6f: 7f:7d:87:e0:d4:f4:15:f7:3e:9a:a2:b2:65:77:5d:94:1b:35: a6:b5:92:ae:51:36:d9:d1:53:c1:4d:5c:c4:4a:86:c5:77:de: ce:1b:cb:75:19:17:f0:48:c1:68:80:e2:1a:d0:32:a6:1c:87: 9e:d1:01:5f:0e:b8:6c:91:80:af:af:77:d0:9a:8f:ec:3a:c9: 4c:36:c8:21:7c:4b:d5:ca:35:fd:87:22:04:6d:80:b2:b1:43: 9a:3e:4e:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZm0WjloE0smh2ldvZwpqXhPB5iYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhCMUFBQTREMjJBMkUyMjU5RTU1RTdBNTBDQjE1RkY0 REQxRjUyNDAeFw0yNjA5MDIyMzQyMzdaFw0yNjA5MDQwMTIyMzdaMDMxMTAvBgNV BAMTKDc1NEJDQ0ZGM0QyRkQwQThDMUJEQzdEMjI0NjI3NEFCQzc3MjAzNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCknJcjMKMcGIpIQmf6mMLnLJk/ mYnSM8O4Du2PVqCwk5d/wGKhTLQ5xYIf4rKcn2jlRH/pFOwEtCXqeiMvzoy3vOvD BNHalnx4eqy97R3qMGD9Hbyv1wtRjnDnXnGw+/f1FI3onUBXiSTD3XmZ9IxwOau0 2c4qjlEkHuN+sPQkZm1LoY64mgrJA72DSoTqM4MWQuXoreu0wlpy7U5mkiSZbQGZ SiL/6yIbyQ/9k7SlixcYpDuOX9ons01LugjPkwHs80yb0E69sw/I5MceH4Ao65wH k84H61Axr/vvk3Wstijbd7kFsbFd0RU59ISKzmfAyGwqmUK8gXyJ7m6eF2RRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdUvM/z0v0KjBvcfSJGJ0q8dyA2gwHwYDVR0j BBgwFoAU2LGqpNIqLiJZ5V56UMsV/03R9SQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2IzZWFiYjQtNGRiMy00MzczLWEzNDgtZmIxZWQ3MDU1NjUxLzAvRDhCMUFBQTRE MjJBMkUyMjU5RTU1RTdBNTBDQjE1RkY0REQxRjUyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOEIxQUFBNEQyMkEyRTIyNTlFNTVFN0E1MENCMTVGRjRERDFG NTI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2IzZWFiYjQtNGRiMy00MzczLWEz NDgtZmIxZWQ3MDU1NjUxLzAvRDhCMUFBQTREMjJBMkUyMjU5RTU1RTdBNTBDQjE1 RkY0REQxRjUyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqHd6hALFVHsBBDzmTgNQwn2MnWCvCcbDbw dUOBGhPiQsbD316towcQG723aUQTm2UUgh8f0/P0iIzsjriQuOVVdBWsvVM6/B9a 6FF5DBz7BQXmfUtY+nys6oU/pwu0j/PIAojDYsVbjtmBNCgtC+8ZYM0Gi2U8GdtG ALVtX9bEDsQSrLPNCO3aeCV6ursrUukcnvaqIXlxDFhJ73QqjcY9b399h+DU9BX3 PpqismV3XZQbNaa1kq5RNtnRU8FNXMRKhsV33s4by3UZF/BIwWiA4hrQMqYch57R AV8OuGyRgK+vd9Caj+w6yUw2yCF8S9XKNf2HIgRtgLKxQ5o+ThE= -----END CERTIFICATE-----Generated at Thu Sep 3 05:57:53 2026 by rpki-client