$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft File: A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft (raw, json) Hash identifier: lxM4z/WHYpcfk38SV7A/0gCB44K+qMfZ2HDPCqBx0EA= Subject key identifier: C6:2B:77:39:BD:CC:8F:F1:34:29:CA:21:B6:31:D0:1C:01:AA:79:A6 Authority key identifier: A5:88:74:84:00:B3:5D:B8:27:1F:7C:5C:42:E4:B0:26:C9:6E:7B:0D Certificate issuer: /CN=A588748400B35DB8271F7C5C42E4B026C96E7B0D Certificate serial: 204EE536AEBDAD317B8310AD619BC4B1E2164DDE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A588748400B35DB8271F7C5C42E4B026C96E7B0D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft Manifest number: A4 Signing time: Thu 03 Sep 2026 01:24:45 +0000 Manifest this update: Thu 03 Sep 2026 01:19:45 +0000 Manifest next update: Fri 04 Sep 2026 03:45:45 +0000 Files and hashes: 1: 3130332e3134332e3137302e302f32332d3233203d3e20313339343030.roa (hash: 8eEz6hzQ+vunwmpuzCRDL78SRiuZLqQtnLKEvllRxT8=) 2: A588748400B35DB8271F7C5C42E4B026C96E7B0D.crl (hash: CRIJKRLJIIaeVa5lw4HZAtmdIJ5KwY5bKC69zzq22O4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.crl rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A588748400B35DB8271F7C5C42E4B026C96E7B0D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:4e:e5:36:ae:bd:ad:31:7b:83:10:ad:61:9b:c4:b1:e2:16:4d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A588748400B35DB8271F7C5C42E4B026C96E7B0D Validity Not Before: Sep 3 01:19:45 2026 GMT Not After : Sep 4 03:45:45 2026 GMT Subject: CN=C62B7739BDCC8FF13429CA21B631D01C01AA79A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:75:d4:87:0e:da:9e:0f:a3:69:1a:d4:44:9e: 7d:4b:22:2b:09:5f:a9:51:c1:79:d9:4a:fd:39:d8: 18:a0:15:c3:5d:d6:61:91:07:f0:e2:21:50:86:ce: ee:63:1d:4f:0c:f4:3d:0f:ed:67:f3:a2:2c:d9:61: 33:cf:42:d3:6f:a4:22:d4:70:a8:45:1c:14:51:74: cc:b8:07:1f:17:28:03:1c:7d:51:d4:d1:c3:c3:37: 59:5c:fb:ec:bf:84:eb:19:cc:50:f5:1a:05:c9:41: 01:e4:0a:74:29:93:38:9c:63:6e:2c:1b:7f:ad:24: 55:1a:a8:ad:0b:c4:b1:21:32:5a:e7:e8:fb:0f:9b: 9e:b4:29:66:4a:2b:00:ae:16:f9:8d:06:9e:62:1d: 92:34:b1:24:4e:31:20:88:b1:44:29:89:3a:da:2b: 50:f0:8d:4c:08:1a:49:5e:08:3d:d5:e2:66:de:e8: 2b:e5:f8:a8:9f:e9:9b:93:fd:68:1b:31:19:c2:0a: 66:75:7f:e9:b0:bd:54:1b:3f:98:e5:52:65:5f:f6: ff:99:8a:7e:1a:6c:af:67:1e:56:af:fa:28:c4:4f: 58:7c:eb:e0:7c:4e:53:e4:4a:65:f5:37:3c:11:06: 97:17:e7:df:17:e3:e4:71:9a:c8:37:eb:37:23:5a: 81:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:2B:77:39:BD:CC:8F:F1:34:29:CA:21:B6:31:D0:1C:01:AA:79:A6 X509v3 Authority Key Identifier: keyid:A5:88:74:84:00:B3:5D:B8:27:1F:7C:5C:42:E4:B0:26:C9:6E:7B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A588748400B35DB8271F7C5C42E4B026C96E7B0D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:08:17:0d:2e:c7:47:eb:40:db:70:b2:a8:0b:d8:50:d4:ee: 91:6f:3e:a5:37:a1:44:24:68:a7:d7:38:5d:2e:45:87:19:67: d3:12:c6:27:fd:56:4b:41:9a:08:1e:75:98:29:8f:fa:04:63: c5:3b:ad:a1:db:c1:62:a8:7d:aa:5b:07:bb:d5:bf:89:d2:6b: 94:5a:4c:dd:7a:de:f9:a9:bc:78:d7:df:40:c7:f9:ca:16:3c: 40:12:8a:51:0c:88:6a:d2:24:c3:ff:ac:49:1b:9a:7f:c0:6a: 79:39:7c:a3:70:98:4a:bf:28:e3:50:92:c3:32:b6:dd:aa:69: d1:e4:2f:f3:54:5c:30:2d:25:80:09:73:1d:9f:b9:36:88:3c: d9:a3:c2:04:4e:e0:c0:b1:ab:fc:4f:de:5b:7e:fb:30:7b:6c: 92:e9:4b:f4:6a:0b:d4:83:b7:bc:76:db:2c:90:ab:ab:1c:97: ab:cc:cd:13:6d:fa:3f:b8:0e:b8:fc:63:8d:2b:76:3a:99:6f: 33:15:fe:93:ff:6b:be:e3:aa:78:9a:fc:9c:58:6c:8e:5e:92: 7a:8f:6a:cc:44:f8:6a:2d:7e:93:79:00:11:51:d1:4b:52:3b: a7:2c:6e:c5:2c:18:8b:30:bb:11:67:c3:c4:d2:c8:51:ed:ac: e2:56:7e:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIE7lNq69rTF7gxCtYZvEseIWTd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU4ODc0ODQwMEIzNURCODI3MUY3QzVDNDJFNEIwMjZD OTZFN0IwRDAeFw0yNjA5MDMwMTE5NDVaFw0yNjA5MDQwMzQ1NDVaMDMxMTAvBgNV BAMTKEM2MkI3NzM5QkRDQzhGRjEzNDI5Q0EyMUI2MzFEMDFDMDFBQTc5QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxddSHDtqeD6NpGtREnn1LIisJ X6lRwXnZSv052BigFcNd1mGRB/DiIVCGzu5jHU8M9D0P7WfzoizZYTPPQtNvpCLU cKhFHBRRdMy4Bx8XKAMcfVHU0cPDN1lc++y/hOsZzFD1GgXJQQHkCnQpkzicY24s G3+tJFUaqK0LxLEhMlrn6PsPm560KWZKKwCuFvmNBp5iHZI0sSROMSCIsUQpiTra K1DwjUwIGkleCD3V4mbe6Cvl+Kif6ZuT/WgbMRnCCmZ1f+mwvVQbP5jlUmVf9v+Z in4abK9nHlav+ijET1h86+B8TlPkSmX1NzwRBpcX598X4+Rxmsg36zcjWoErAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxit3Ob3Mj/E0KcohtjHQHAGqeaYwHwYDVR0j BBgwFoAUpYh0hACzXbgnH3xcQuSwJsluew0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWMwYjM5ZTItNjg3Yi00NjE0LTgwOWYtNzM2NzJlYTIxMmNmLzAvQTU4ODc0ODQw MEIzNURCODI3MUY3QzVDNDJFNEIwMjZDOTZFN0IwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNTg4NzQ4NDAwQjM1REI4MjcxRjdDNUM0MkU0QjAyNkM5NkU3 QjBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWMwYjM5ZTItNjg3Yi00NjE0LTgw OWYtNzM2NzJlYTIxMmNmLzAvQTU4ODc0ODQwMEIzNURCODI3MUY3QzVDNDJFNEIw MjZDOTZFN0IwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM0IFw0ux0frQNtwsqgL2FDU7pFvPqU3oUQk aKfXOF0uRYcZZ9MSxif9VktBmggedZgpj/oEY8U7raHbwWKofapbB7vVv4nSa5Ra TN163vmpvHjX30DH+coWPEASilEMiGrSJMP/rEkbmn/Aank5fKNwmEq/KONQksMy tt2qadHkL/NUXDAtJYAJcx2fuTaIPNmjwgRO4MCxq/xP3lt++zB7bJLpS/RqC9SD t7x22yyQq6scl6vMzRNt+j+4Drj8Y40rdjqZbzMV/pP/a77jqnia/JxYbI5eknqP asxE+GotfpN5ABFR0UtSO6csbsUsGIswuxFnw8TSyFHtrOJWfh4= -----END CERTIFICATE-----Generated at Thu Sep 3 06:00:24 2026 by rpki-client