$ rpki-client -vvvf rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft File: 540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft (raw, json) Hash identifier: CYsjGoc9y1GDA4cl6TC6sqCa4WNWT92dMEMPqh+T+IE= Subject key identifier: 4A:08:33:1E:A8:51:41:DF:29:09:05:71:22:C0:19:BC:02:91:81:66 Authority key identifier: 54:09:72:00:6E:C4:D1:CE:0E:DD:C7:DA:11:D1:41:9F:67:28:16:A7 Certificate issuer: /CN=540972006EC4D1CE0EDDC7DA11D1419F672816A7 Certificate serial: 6CFF044ECA4719405AA20DD9450646C3DE809963 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 16:33:07 +0000 Manifest this update: Wed 02 Sep 2026 16:28:07 +0000 Manifest next update: Thu 03 Sep 2026 19:24:07 +0000 Files and hashes: 1: 3130332e38362e3131362e302f32342d3234203d3e20313530353532.roa (hash: KN9wGn1zXozmZ3RfAUGCtuXPuU4nroC30cpkr7J9mHQ=) 2: 3130332e38362e3131372e302f32342d3234203d3e20313530353532.roa (hash: AhYVMQlTuT7zbTcLfZGNm75C7shQlDWThwFiJD95reg=) 3: 3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa (hash: Tk0zLG1Hphe7t1mTq1IIDbrzYp4b0d3efGQx1H0ipCc=) 4: 540972006EC4D1CE0EDDC7DA11D1419F672816A7.crl (hash: jQGW44nl55QoNpIINKJBe8CReAqoZVmeNStigcNOxmI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.crl rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 19:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:ff:04:4e:ca:47:19:40:5a:a2:0d:d9:45:06:46:c3:de:80:99:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=540972006EC4D1CE0EDDC7DA11D1419F672816A7 Validity Not Before: Sep 2 16:28:07 2026 GMT Not After : Sep 3 19:24:07 2026 GMT Subject: CN=4A08331EA85141DF2909057122C019BC02918166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:bc:38:15:a4:25:13:8a:03:32:62:34:0d:a5: 6a:bc:3e:8c:44:de:2f:b2:71:4f:b3:40:49:44:5f: 42:63:68:06:e4:f3:79:72:27:82:3f:64:72:fd:66: 24:d2:b8:5e:3d:bf:33:54:37:fc:9f:03:1f:47:2e: 83:1a:9e:f4:d6:fc:de:41:4c:86:52:67:02:d0:51: 87:b7:d9:b9:11:2f:52:1a:36:66:a3:f7:57:fa:5c: a2:c6:54:e7:b1:4e:1f:61:65:f4:c7:d3:15:fa:ba: 0a:65:68:40:4e:c7:d2:4c:59:e1:b5:a7:24:42:85: 0b:5c:8e:0e:5e:44:0e:25:b2:8a:7f:5e:d4:69:7c: 66:d1:00:f2:23:4f:23:6c:6a:19:17:05:61:46:61: 75:12:0f:01:24:9c:e1:16:b7:8f:4b:15:25:f3:29: 56:c8:6f:56:fa:66:ab:0d:57:be:7e:c0:cf:a6:1f: 35:61:0f:0d:05:fe:09:b7:00:59:fe:01:62:f8:7d: 6e:c4:a3:c5:cf:26:bc:54:5b:87:23:9d:23:28:b8: 26:33:32:bb:e5:69:cc:04:7f:06:bb:0a:25:06:46: 0b:98:c9:ef:8e:8c:2d:c4:b3:d1:81:37:9c:ec:35: ed:72:13:27:8a:50:98:ff:31:1b:db:8e:da:19:a8: 62:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:08:33:1E:A8:51:41:DF:29:09:05:71:22:C0:19:BC:02:91:81:66 X509v3 Authority Key Identifier: keyid:54:09:72:00:6E:C4:D1:CE:0E:DD:C7:DA:11:D1:41:9F:67:28:16:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:f3:55:e2:4a:04:00:d3:84:b2:ca:82:64:7c:7a:9e:5a:d4: 28:c8:24:fe:44:3d:3f:5b:bd:e1:99:45:02:ca:ae:1a:57:a8: 0a:3c:c3:c6:cd:74:c0:09:6c:55:1b:ae:be:38:c3:b3:99:7e: af:2f:84:9f:f2:d9:91:f6:48:a8:82:cc:94:2c:e0:74:e9:41: 13:28:98:cd:d1:b3:c7:7f:b2:a6:70:60:ad:f0:77:cd:62:91: 36:82:c3:00:db:2e:af:c0:5d:21:7e:18:dc:45:07:bc:f7:d1: 85:48:51:56:1c:cb:e1:be:a8:e0:f0:46:4a:3b:b9:78:96:5a: c8:9b:86:d1:4a:a4:4d:66:76:e2:05:3b:14:c7:ad:28:0e:f2: 39:72:1c:d0:de:56:ee:39:93:fd:7f:a0:4f:69:0d:68:cd:43: e0:23:0e:83:5e:83:06:f9:ba:c3:66:6c:c1:1a:83:5c:91:9b: d3:4e:97:98:14:12:b5:06:63:96:7a:e2:56:e2:65:9b:2a:86: 2b:c7:4b:81:08:a1:6b:1d:53:8a:57:58:af:f8:5b:2c:c0:a3: 1d:7a:d8:e2:4b:c9:41:aa:bc:b4:71:13:56:aa:42:80:57:d1: 08:13:2f:bc:da:be:41:d1:2a:6a:04:d7:8d:e0:5c:fc:21:28: 8a:58:7d:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbP8ETspHGUBaog3ZRQZGw96AmWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQwOTcyMDA2RUM0RDFDRTBFRERDN0RBMTFEMTQxOUY2 NzI4MTZBNzAeFw0yNjA5MDIxNjI4MDdaFw0yNjA5MDMxOTI0MDdaMDMxMTAvBgNV BAMTKDRBMDgzMzFFQTg1MTQxREYyOTA5MDU3MTIyQzAxOUJDMDI5MTgxNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfvDgVpCUTigMyYjQNpWq8PoxE 3i+ycU+zQElEX0JjaAbk83lyJ4I/ZHL9ZiTSuF49vzNUN/yfAx9HLoManvTW/N5B TIZSZwLQUYe32bkRL1IaNmaj91f6XKLGVOexTh9hZfTH0xX6ugplaEBOx9JMWeG1 pyRChQtcjg5eRA4lsop/XtRpfGbRAPIjTyNsahkXBWFGYXUSDwEknOEWt49LFSXz KVbIb1b6ZqsNV75+wM+mHzVhDw0F/gm3AFn+AWL4fW7Eo8XPJrxUW4cjnSMouCYz MrvlacwEfwa7CiUGRguYye+OjC3Es9GBN5zsNe1yEyeKUJj/MRvbjtoZqGLVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSggzHqhRQd8pCQVxIsAZvAKRgWYwHwYDVR0j BBgwFoAUVAlyAG7E0c4O3cfaEdFBn2coFqcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODk3MThmNmItYjUxNi00M2FlLWI1ODktODNhMjVmYWEzMGJlLzAvNTQwOTcyMDA2 RUM0RDFDRTBFRERDN0RBMTFEMTQxOUY2NzI4MTZBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDA5NzIwMDZFQzREMUNFMEVEREM3REExMUQxNDE5RjY3Mjgx NkE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODk3MThmNmItYjUxNi00M2FlLWI1 ODktODNhMjVmYWEzMGJlLzAvNTQwOTcyMDA2RUM0RDFDRTBFRERDN0RBMTFEMTQx OUY2NzI4MTZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXzVeJKBADThLLKgmR8ep5a1CjIJP5EPT9b veGZRQLKrhpXqAo8w8bNdMAJbFUbrr44w7OZfq8vhJ/y2ZH2SKiCzJQs4HTpQRMo mM3Rs8d/sqZwYK3wd81ikTaCwwDbLq/AXSF+GNxFB7z30YVIUVYcy+G+qODwRko7 uXiWWsibhtFKpE1mduIFOxTHrSgO8jlyHNDeVu45k/1/oE9pDWjNQ+AjDoNegwb5 usNmbMEag1yRm9NOl5gUErUGY5Z64lbiZZsqhivHS4EIoWsdU4pXWK/4WyzAox16 2OJLyUGqvLRxE1aqQoBX0QgTL7zavkHRKmoE143gXPwhKIpYfQo= -----END CERTIFICATE-----Generated at Thu Sep 3 07:14:17 2026 by rpki-client