$ rpki-client -vvvf rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft File: 5D885821D2406437CDFEC04380E967515A67AECC.mft (raw, json) Hash identifier: 7EltTSa2AKzh/Zk8y+T1Rhii2PfTd1QnnvA7ML0KUp4= Subject key identifier: 64:40:BB:CC:C7:89:D9:AF:6F:6D:62:3C:EE:42:46:A8:4C:6F:2A:E5 Authority key identifier: 5D:88:58:21:D2:40:64:37:CD:FE:C0:43:80:E9:67:51:5A:67:AE:CC Certificate issuer: /CN=5D885821D2406437CDFEC04380E967515A67AECC Certificate serial: 7C03B8BDC8C76427FA39A1EAD6F48D3C904771B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 05:09:07 +0000 Manifest this update: Thu 03 Sep 2026 05:04:07 +0000 Manifest next update: Fri 04 Sep 2026 06:02:07 +0000 Files and hashes: 1: 5D885821D2406437CDFEC04380E967515A67AECC.crl (hash: TcO4SCc5144JmykXceD+72IWMtpOjPQf3wbEnvp7ESA=) 2: 3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa (hash: K0RHUYKMgdp0wpj2LpgjeiPXy+duWorfZjM80sQwxyc=) 3: 3130332e35342e3137312e302f32342d3234203d3e20313431303731.roa (hash: L6gQCpLzy7aXDtfuVgbwQW0xcldnnRmpgqFEsdoAP3Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.crl rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 06:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:03:b8:bd:c8:c7:64:27:fa:39:a1:ea:d6:f4:8d:3c:90:47:71:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D885821D2406437CDFEC04380E967515A67AECC Validity Not Before: Sep 3 05:04:07 2026 GMT Not After : Sep 4 06:02:07 2026 GMT Subject: CN=6440BBCCC789D9AF6F6D623CEE4246A84C6F2AE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:09:41:b6:54:b0:96:f6:07:f1:02:6d:7d:0f: eb:e8:58:48:75:ac:5c:b1:78:63:23:89:d9:97:c6: 10:5c:bf:23:c7:8a:af:a9:0a:c7:f9:76:81:6b:aa: e2:91:a5:09:4a:79:82:d6:cc:6f:b9:1e:9c:37:85: 9e:4a:77:e4:2b:89:3e:46:bf:cb:ba:69:98:33:76: 18:ee:f7:08:bf:4e:c1:bc:db:b1:fa:72:a0:f6:41: 49:17:e4:5b:88:d4:78:c0:3b:86:b9:7f:7c:fa:d8: b0:81:3b:9c:12:4f:d6:2f:ec:0a:87:87:bf:06:93: ae:71:95:90:0b:b7:90:c1:60:0f:49:c9:87:67:ab: 51:57:9f:66:81:83:60:0e:d1:ba:6a:ed:cb:e7:90: 75:a6:f5:44:82:56:2b:1c:a3:d0:51:e1:15:27:22: ab:fc:08:ad:dc:78:83:d7:16:c4:f4:99:de:0b:00: a9:a1:92:1f:48:4a:2b:57:a3:9c:d9:79:3a:e7:ed: df:95:3d:2c:fc:35:69:1e:fa:d3:a7:8b:ae:42:a6: c1:d7:2b:91:79:02:05:bd:fa:87:2d:15:35:46:13: d0:4d:f3:ec:f8:f1:8e:9e:bc:38:3a:9a:ac:58:74: 8d:5e:5c:a6:4d:58:69:b5:7e:d2:1d:7a:fe:44:f2: 83:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:40:BB:CC:C7:89:D9:AF:6F:6D:62:3C:EE:42:46:A8:4C:6F:2A:E5 X509v3 Authority Key Identifier: keyid:5D:88:58:21:D2:40:64:37:CD:FE:C0:43:80:E9:67:51:5A:67:AE:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:43:ce:16:82:3a:2f:34:6b:29:55:81:3a:3e:d9:8b:b4:dc: a3:03:7c:ea:09:cc:56:90:72:e6:f4:68:75:cb:c5:f3:3c:02: 4e:7d:b3:a0:01:ab:56:51:72:75:9c:b7:25:65:75:ca:e9:3c: 92:69:37:e6:ed:52:5a:45:71:f8:fb:be:4b:b2:34:b9:d6:92: 3f:aa:0e:71:5e:82:27:37:3c:82:aa:75:20:85:e2:59:b6:0e: 5e:13:55:9c:d7:05:2b:a2:42:8f:f7:f1:c5:4e:9b:ef:8f:b3: ae:a5:87:ed:6d:7f:1b:6e:3f:03:37:8e:a6:00:52:8e:65:82: 58:be:a7:3a:dc:05:db:9d:a2:25:cb:6b:c2:34:cc:0e:c2:c9: 0c:11:0b:3a:62:30:34:bb:43:78:4c:a6:7a:7c:7f:29:02:b9: c2:f7:3d:d3:c4:64:01:1c:15:4d:2c:ac:79:06:58:98:be:13: 70:69:2c:6c:95:79:6f:3c:89:a9:46:2b:fa:2f:89:60:4e:c2: 31:f3:ec:a8:e9:f5:28:e8:29:53:76:9f:67:b4:f0:2e:ee:42: 12:db:70:43:37:6c:de:32:b5:56:da:ca:d4:10:a7:f4:34:cc: f5:05:30:a0:0f:13:ab:53:f7:b6:88:84:44:e1:ca:3b:3a:45: 7d:2f:23:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfAO4vcjHZCf6OaHq1vSNPJBHcbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ4ODU4MjFEMjQwNjQzN0NERkVDMDQzODBFOTY3NTE1 QTY3QUVDQzAeFw0yNjA5MDMwNTA0MDdaFw0yNjA5MDQwNjAyMDdaMDMxMTAvBgNV BAMTKDY0NDBCQkNDQzc4OUQ5QUY2RjZENjIzQ0VFNDI0NkE4NEM2RjJBRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjCUG2VLCW9gfxAm19D+voWEh1 rFyxeGMjidmXxhBcvyPHiq+pCsf5doFrquKRpQlKeYLWzG+5Hpw3hZ5Kd+QriT5G v8u6aZgzdhju9wi/TsG827H6cqD2QUkX5FuI1HjAO4a5f3z62LCBO5wST9Yv7AqH h78Gk65xlZALt5DBYA9JyYdnq1FXn2aBg2AO0bpq7cvnkHWm9USCVisco9BR4RUn Iqv8CK3ceIPXFsT0md4LAKmhkh9ISitXo5zZeTrn7d+VPSz8NWke+tOni65CpsHX K5F5AgW9+octFTVGE9BN8+z48Y6evDg6mqxYdI1eXKZNWGm1ftIdev5E8oOnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZEC7zMeJ2a9vbWI87kJGqExvKuUwHwYDVR0j BBgwFoAUXYhYIdJAZDfN/sBDgOlnUVpnrswwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODM3Njk0YjctMzI1Ni00NjY2LWEzZmUtNmU4MmU3ODNiMWUxLzAvNUQ4ODU4MjFE MjQwNjQzN0NERkVDMDQzODBFOTY3NTE1QTY3QUVDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDg4NTgyMUQyNDA2NDM3Q0RGRUMwNDM4MEU5Njc1MTVBNjdB RUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODM3Njk0YjctMzI1Ni00NjY2LWEz ZmUtNmU4MmU3ODNiMWUxLzAvNUQ4ODU4MjFEMjQwNjQzN0NERkVDMDQzODBFOTY3 NTE1QTY3QUVDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNDzhaCOi80aylVgTo+2Yu03KMDfOoJzFaQ cub0aHXLxfM8Ak59s6ABq1ZRcnWctyVldcrpPJJpN+btUlpFcfj7vkuyNLnWkj+q DnFegic3PIKqdSCF4lm2Dl4TVZzXBSuiQo/38cVOm++Ps66lh+1tfxtuPwM3jqYA Uo5lgli+pzrcBdudoiXLa8I0zA7CyQwRCzpiMDS7Q3hMpnp8fykCucL3PdPEZAEc FU0srHkGWJi+E3BpLGyVeW88ialGK/oviWBOwjHz7Kjp9SjoKVN2n2e08C7uQhLb cEM3bN4ytVbaytQQp/Q0zPUFMKAPE6tT97aIhEThyjs6RX0vI7c= -----END CERTIFICATE-----Generated at Thu Sep 3 12:38:20 2026 by rpki-client