$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft File: 5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft (raw, json) Hash identifier: pbQsBgC34mTkxsN8uhCoJEzSRgRyJo7tj61jlVj7VGo= Subject key identifier: 5B:45:1F:6E:22:5B:3C:5B:54:21:B4:08:AB:75:E0:ED:16:ED:CB:3A Authority key identifier: 5F:7C:0C:BF:5B:B8:C4:66:1C:32:A0:E0:43:E5:00:56:0D:BF:47:29 Certificate issuer: /CN=5F7C0CBF5BB8C4661C32A0E043E500560DBF4729 Certificate serial: 418CD1B625EE085CBFADE6EBFFB8D343D6CFFFB8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 11:36:21 +0000 Manifest this update: Thu 03 Sep 2026 11:31:21 +0000 Manifest next update: Fri 04 Sep 2026 14:44:21 +0000 Files and hashes: 1: 3130332e3138352e3139362e302f32342d3234203d3e20313333383136.roa (hash: oPlCdoIfmCJKqeBLs55VVkT8uc2vPldYwiU3y8pfCsM=) 2: 5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.crl (hash: mviEQ28IiDHRKALGDhx8Fk8qiZDklb12wkXgKcBfwDI=) 3: 3130332e35322e3231332e302f32342d3234203d3e20313333383136.roa (hash: SfQvGENDC41waooB6j4WUvvJFAlrc4V5XQaGfGIyIVQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.crl rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:8c:d1:b6:25:ee:08:5c:bf:ad:e6:eb:ff:b8:d3:43:d6:cf:ff:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F7C0CBF5BB8C4661C32A0E043E500560DBF4729 Validity Not Before: Sep 3 11:31:21 2026 GMT Not After : Sep 4 14:44:21 2026 GMT Subject: CN=5B451F6E225B3C5B5421B408AB75E0ED16EDCB3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e7:83:b1:28:95:c0:a4:06:c7:42:2a:5c:28: ed:a5:10:fd:35:c9:c0:a2:ef:a2:4d:f7:bb:08:07: 2a:2c:e4:43:79:2f:de:c1:1a:7f:7b:09:8c:81:22: a6:5c:61:32:f6:a5:62:8c:d0:aa:f5:13:c0:9c:dd: 9a:25:d5:c6:9c:83:3a:5a:ce:5c:ec:e3:a8:9b:54: e0:a9:f7:ba:86:ae:47:85:2c:f0:70:7d:b3:c6:7c: 4f:17:bc:63:73:b0:cb:55:ea:3b:40:c2:f4:45:bc: b1:62:20:3b:05:c4:24:e6:a7:ba:6b:38:2a:ea:5f: a2:79:c0:55:e7:eb:36:c3:ce:dc:f6:e5:fb:40:09: af:97:15:32:19:a6:48:63:b3:7f:e1:65:c4:4c:9a: d8:f5:e4:4b:a5:f4:68:67:aa:2d:05:e5:ec:38:d7: 14:2d:98:fa:18:e8:72:b7:57:c5:9d:a0:55:71:d4: ae:d0:8a:62:4e:90:59:ff:0e:a0:d1:0b:53:10:37: 16:40:de:54:c1:99:2e:ad:aa:e7:2e:f4:63:bf:ff: 23:fe:31:10:20:6a:cc:68:1a:3a:9a:13:91:ea:77: dd:48:88:5e:0a:25:dc:0b:b6:f5:99:bb:82:d9:71: 25:3c:07:a5:1f:12:42:16:7b:0a:0d:2f:c5:b8:0c: 95:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:45:1F:6E:22:5B:3C:5B:54:21:B4:08:AB:75:E0:ED:16:ED:CB:3A X509v3 Authority Key Identifier: keyid:5F:7C:0C:BF:5B:B8:C4:66:1C:32:A0:E0:43:E5:00:56:0D:BF:47:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:5b:ed:77:02:ac:dd:8e:a1:af:c1:0d:f7:b1:fe:5b:86:e7: f6:b0:bd:2d:eb:9a:4a:5c:57:6d:ad:2d:2c:c5:e3:ae:2b:1e: 76:a6:3f:40:a3:55:39:d7:13:c8:f7:ad:b9:b9:b0:7c:11:6d: 55:c6:94:c1:52:a3:b5:53:eb:c5:0c:cb:4f:a9:c9:e0:f3:61: c0:6f:a3:e9:e6:07:cc:e5:e9:5c:34:cf:13:ac:ef:90:05:c4: 7b:5a:9f:c1:da:2c:e2:9c:89:1d:19:a0:6c:58:fd:b0:51:38: aa:12:c0:9f:ad:a5:97:93:f2:37:52:5e:55:eb:3e:97:2c:1c: a5:9b:7f:69:e4:fe:81:1e:ba:e8:57:f0:60:9b:53:d8:54:35: b7:0d:bd:cc:56:9a:0c:34:6f:42:fe:0c:19:41:1b:d9:e8:01: bc:af:a1:8f:56:55:db:3f:1a:5f:b9:d5:56:4a:64:cb:e2:e1: ea:8e:fd:50:c1:36:28:aa:4e:cc:1e:26:49:fa:d1:9a:3c:47: d3:53:af:08:a8:9d:8a:c8:3d:83:84:e8:98:13:a9:3d:58:5c: 8b:24:40:4b:af:6b:25:ff:59:ae:b0:d2:c0:bd:86:87:9b:3c: 88:01:65:d4:4b:ad:be:fe:91:d3:ef:cc:bb:e9:76:ce:87:70: b5:9b:47:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQYzRtiXuCFy/rebr/7jTQ9bP/7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY3QzBDQkY1QkI4QzQ2NjFDMzJBMEUwNDNFNTAwNTYw REJGNDcyOTAeFw0yNjA5MDMxMTMxMjFaFw0yNjA5MDQxNDQ0MjFaMDMxMTAvBgNV BAMTKDVCNDUxRjZFMjI1QjNDNUI1NDIxQjQwOEFCNzVFMEVEMTZFRENCM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo54OxKJXApAbHQipcKO2lEP01 ycCi76JN97sIByos5EN5L97BGn97CYyBIqZcYTL2pWKM0Kr1E8Cc3Zol1cacgzpa zlzs46ibVOCp97qGrkeFLPBwfbPGfE8XvGNzsMtV6jtAwvRFvLFiIDsFxCTmp7pr OCrqX6J5wFXn6zbDztz25ftACa+XFTIZpkhjs3/hZcRMmtj15Eul9Ghnqi0F5ew4 1xQtmPoY6HK3V8WdoFVx1K7QimJOkFn/DqDRC1MQNxZA3lTBmS6tqucu9GO//yP+ MRAgasxoGjqaE5Hqd91IiF4KJdwLtvWZu4LZcSU8B6UfEkIWewoNL8W4DJWzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW0UfbiJbPFtUIbQIq3Xg7RbtyzowHwYDVR0j BBgwFoAUX3wMv1u4xGYcMqDgQ+UAVg2/RykwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGU5YWJiMWEtZDZjMC00NTRmLTg3MGEtOGJlZWRkODFmY2QyLzAvNUY3QzBDQkY1 QkI4QzQ2NjFDMzJBMEUwNDNFNTAwNTYwREJGNDcyOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RjdDMENCRjVCQjhDNDY2MUMzMkEwRTA0M0U1MDA1NjBEQkY0 NzI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGU5YWJiMWEtZDZjMC00NTRmLTg3 MGEtOGJlZWRkODFmY2QyLzAvNUY3QzBDQkY1QkI4QzQ2NjFDMzJBMEUwNDNFNTAw NTYwREJGNDcyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKNb7XcCrN2Ooa/BDfex/luG5/awvS3rmkpc V22tLSzF464rHnamP0CjVTnXE8j3rbm5sHwRbVXGlMFSo7VT68UMy0+pyeDzYcBv o+nmB8zl6Vw0zxOs75AFxHtan8HaLOKciR0ZoGxY/bBROKoSwJ+tpZeT8jdSXlXr PpcsHKWbf2nk/oEeuuhX8GCbU9hUNbcNvcxWmgw0b0L+DBlBG9noAbyvoY9WVds/ Gl+51VZKZMvi4eqO/VDBNiiqTsweJkn60Zo8R9NTrwionYrIPYOE6JgTqT1YXIsk QEuvayX/Wa6w0sC9hoebPIgBZdRLrb7+kdPvzLvpds6HcLWbR6o= -----END CERTIFICATE-----Generated at Thu Sep 3 16:20:07 2026 by rpki-client