$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft File: F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft (raw, json) Hash identifier: tpQeNrmkkinHvPsfxYPUN9m3MjYPfPui8vImIMkwQcM= Subject key identifier: 58:B1:BF:42:47:9E:47:8D:F3:13:70:C3:E1:1E:34:C2:E1:06:68:69 Authority key identifier: F2:31:77:AE:A0:5E:C0:02:ED:9D:1A:9E:C6:0D:6A:12:42:AF:D4:58 Certificate issuer: /CN=F23177AEA05EC002ED9D1A9EC60D6A1242AFD458 Certificate serial: 5A948611E2DD6BDCCB322A0FDC4C73B8F8B61093 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft Manifest number: A6 Signing time: Wed 02 Sep 2026 21:29:16 +0000 Manifest this update: Wed 02 Sep 2026 21:24:16 +0000 Manifest next update: Fri 04 Sep 2026 01:07:16 +0000 Files and hashes: 1: F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.crl (hash: ivCGMzywCUrD771frFwvnVDDPYEEJELmAvwANJeq69A=) 2: 3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa (hash: R/xEQgEo02t46B8xsXrO/lgKY9Y/AGOBiAw+WzSuWJA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.crl rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:94:86:11:e2:dd:6b:dc:cb:32:2a:0f:dc:4c:73:b8:f8:b6:10:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F23177AEA05EC002ED9D1A9EC60D6A1242AFD458 Validity Not Before: Sep 2 21:24:16 2026 GMT Not After : Sep 4 01:07:16 2026 GMT Subject: CN=58B1BF42479E478DF31370C3E11E34C2E1066869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:49:26:0a:53:4f:2c:3e:ea:bf:3b:7a:e5:23: 1c:a6:fd:1b:30:19:5c:68:c6:23:68:71:d3:bf:3d: ea:c3:60:a6:4f:24:7c:55:cd:0e:b4:46:aa:ac:e6: a2:38:62:b4:4d:63:cd:27:3f:ad:0e:8d:1b:a8:8c: 1b:8f:cc:d0:f7:12:85:b5:82:a9:17:d6:ab:56:16: b8:1a:2d:32:53:d1:af:0c:63:30:93:63:81:ee:98: 1f:6d:17:6e:a3:7e:48:f5:97:ed:25:15:98:34:9a: 5a:38:73:5b:b1:31:da:79:21:00:74:7f:4b:72:03: 5b:14:89:13:9b:dc:f1:3d:37:aa:e7:5a:ff:6f:d8: 8e:97:f6:39:31:3c:17:80:89:67:2f:ad:dc:98:ea: e5:9e:a0:bc:e0:3f:fb:b4:8e:5e:af:8f:ed:82:0b: 30:a4:8b:58:9d:b2:ec:8e:8a:65:12:82:49:44:d8: 86:b5:d6:dc:40:74:94:0a:8c:e4:60:8b:55:5e:ae: 32:9b:cc:c8:44:76:ee:f1:8a:e0:20:24:51:17:02: 47:38:2a:e8:0a:84:96:2f:ff:f9:c1:99:12:69:e8: 00:c9:4c:b9:3c:da:8c:95:a6:82:2f:71:07:4f:a6: 12:15:fb:e7:2d:de:f8:26:39:4e:aa:99:52:f1:9b: 03:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B1:BF:42:47:9E:47:8D:F3:13:70:C3:E1:1E:34:C2:E1:06:68:69 X509v3 Authority Key Identifier: keyid:F2:31:77:AE:A0:5E:C0:02:ED:9D:1A:9E:C6:0D:6A:12:42:AF:D4:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:83:3d:61:2b:82:dd:46:38:a7:09:bb:50:62:98:f2:d5:83: 4e:77:b4:50:46:b1:b2:9c:7d:92:4b:92:66:2d:d0:e1:8e:6e: 32:55:85:74:92:9e:59:c6:b4:76:ea:5d:40:fc:97:90:ae:30: d8:7b:60:1e:e0:cb:ea:f7:51:2b:70:5f:40:0f:cd:96:71:52: fb:23:95:0d:b3:bc:44:1f:c1:57:8f:f2:21:84:08:b1:b1:c1: 1d:cf:15:a7:aa:57:05:82:64:f4:e6:ee:83:3a:d1:e0:e7:44: 06:f6:4a:63:04:5d:df:57:47:c4:75:6e:54:a4:28:4e:48:ba: a1:af:0b:62:73:e7:8b:ed:45:d6:08:9f:ad:a0:e8:80:9d:49: b6:75:db:2b:c2:fe:6c:84:1a:8c:fe:a1:fe:63:9d:e7:81:9f: 7a:06:c6:27:00:65:4d:9c:5b:09:86:85:00:e9:bd:77:3b:4f: a8:74:88:fd:d0:08:82:bb:90:2c:bb:ba:5e:9d:41:37:82:6e: 54:3b:f6:1a:10:7d:46:ad:cf:a0:37:b6:25:b5:30:61:e6:d8: 8a:a6:a0:51:c8:15:6d:6e:4f:92:b2:a4:22:7d:93:e8:da:62: 44:04:5a:10:a8:fc:f9:62:cc:2c:0e:5e:0d:01:83:79:8c:00: a2:f1:18:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWpSGEeLda9zLMioP3ExzuPi2EJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIzMTc3QUVBMDVFQzAwMkVEOUQxQTlFQzYwRDZBMTI0 MkFGRDQ1ODAeFw0yNjA5MDIyMTI0MTZaFw0yNjA5MDQwMTA3MTZaMDMxMTAvBgNV BAMTKDU4QjFCRjQyNDc5RTQ3OERGMzEzNzBDM0UxMUUzNEMyRTEwNjY4NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcSSYKU08sPuq/O3rlIxym/Rsw GVxoxiNocdO/PerDYKZPJHxVzQ60Rqqs5qI4YrRNY80nP60OjRuojBuPzND3EoW1 gqkX1qtWFrgaLTJT0a8MYzCTY4HumB9tF26jfkj1l+0lFZg0mlo4c1uxMdp5IQB0 f0tyA1sUiROb3PE9N6rnWv9v2I6X9jkxPBeAiWcvrdyY6uWeoLzgP/u0jl6vj+2C CzCki1idsuyOimUSgklE2Ia11txAdJQKjORgi1VerjKbzMhEdu7xiuAgJFEXAkc4 KugKhJYv//nBmRJp6ADJTLk82oyVpoIvcQdPphIV++ct3vgmOU6qmVLxmwN/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWLG/QkeeR43zE3DD4R40wuEGaGkwHwYDVR0j BBgwFoAU8jF3rqBewALtnRqexg1qEkKv1FgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY3OTgyNGYtNGUwOC00OTcwLWJiYTYtMjdiNDcyNmNhNTgwLzAvRjIzMTc3QUVB MDVFQzAwMkVEOUQxQTlFQzYwRDZBMTI0MkFGRDQ1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjMxNzdBRUEwNUVDMDAyRUQ5RDFBOUVDNjBENkExMjQyQUZE NDU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY3OTgyNGYtNGUwOC00OTcwLWJi YTYtMjdiNDcyNmNhNTgwLzAvRjIzMTc3QUVBMDVFQzAwMkVEOUQxQTlFQzYwRDZB MTI0MkFGRDQ1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHuDPWErgt1GOKcJu1BimPLVg053tFBGsbKc fZJLkmYt0OGObjJVhXSSnlnGtHbqXUD8l5CuMNh7YB7gy+r3UStwX0APzZZxUvsj lQ2zvEQfwVeP8iGECLGxwR3PFaeqVwWCZPTm7oM60eDnRAb2SmMEXd9XR8R1blSk KE5IuqGvC2Jz54vtRdYIn62g6ICdSbZ12yvC/myEGoz+of5jneeBn3oGxicAZU2c WwmGhQDpvXc7T6h0iP3QCIK7kCy7ul6dQTeCblQ79hoQfUatz6A3tiW1MGHm2Iqm oFHIFW1uT5KypCJ9k+jaYkQEWhCo/PlizCwOXg0Bg3mMAKLxGI0= -----END CERTIFICATE-----Generated at Thu Sep 3 05:56:33 2026 by rpki-client