$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft File: 5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft (raw, json) Hash identifier: S3prR9m4/Kd+0S9RY2TjV9D9IkqkrieqeH5cuhCO/Pw= Subject key identifier: 68:7E:27:4A:3F:C1:85:74:9D:2A:99:7A:3B:51:FB:63:6F:4F:B2:C6 Authority key identifier: 5D:13:BF:84:B8:D9:1A:8A:1A:C8:08:62:27:D5:9F:1D:C1:EA:3F:10 Certificate issuer: /CN=5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10 Certificate serial: 18ED89C27BAFCE420771DCC5FEB6D930422CF87F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft Manifest number: A8 Signing time: Wed 02 Sep 2026 20:22:55 +0000 Manifest this update: Wed 02 Sep 2026 20:17:55 +0000 Manifest next update: Thu 03 Sep 2026 21:22:55 +0000 Files and hashes: 1: 5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl (hash: m4sVyGkB2GM+mU+wdQxGrL/Ye6y+T+GO7KLnPny8gEc=) 2: 3130332e3233352e37332e302f32342d3234203d3e20313335333630.roa (hash: QFfNhq0siSwOs18xtBIQVVrABzIP0gTxhbpkKx5UaAs=) 3: 3130332e3233352e37322e302f32342d3234203d3e20313335343434.roa (hash: nEP4w2fSSO/JQDFjA5Ly4wgPOtkX8Po6PEn4YaYfsXM=) 4: 323030313a6466323a356130303a3a2f34382d3438203d3e20313335343434.roa (hash: LT7RL4AshZZWaOQ5M4cXziGumEcUQNnqOVToVNyckMU=) 5: 3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa (hash: W77EgJV2LrTum+AXobDiJMY0VCB5QZlN1pW9AzTxaMA=) 6: 3130332e3231392e3234382e302f32322d3234203d3e20313335343434.roa (hash: sW+l8TDeWzgFji1PeDbQ2pWWxA4Q2fxlWjumQ/6eJhY=) 7: 3130332e3233352e37342e302f32342d3234203d3e20313335343434.roa (hash: ml3XOM3oooTz4pOGiWF5IYQEjwqeju+NuHaVYP3/oGM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ed:89:c2:7b:af:ce:42:07:71:dc:c5:fe:b6:d9:30:42:2c:f8:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10 Validity Not Before: Sep 2 20:17:55 2026 GMT Not After : Sep 3 21:22:55 2026 GMT Subject: CN=687E274A3FC185749D2A997A3B51FB636F4FB2C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:42:2b:6c:15:88:62:90:6b:79:ef:1b:44:44: 34:14:b5:00:53:c2:c6:4d:7d:68:61:c9:26:9d:66: ce:6c:d4:9a:d2:bb:09:6c:7f:cd:9d:d5:5e:00:19: da:15:32:ca:eb:00:03:1f:ca:55:eb:8b:ce:11:71: 4b:66:26:db:61:e4:53:d0:c3:ed:29:12:e5:c3:4d: 0b:cb:bf:29:c3:ef:a1:e7:26:1a:04:65:ee:9e:98: 4d:a8:31:94:2c:a5:cd:4e:2f:50:5d:2f:12:40:06: cb:1f:2a:1c:e8:29:37:55:ed:8e:4d:6e:74:bb:31: 76:5b:de:d6:06:fc:34:42:0e:47:fa:6c:c0:23:2e: 25:a0:13:58:a6:fa:6b:05:3d:e9:66:33:c3:d7:24: 4a:06:6d:eb:2c:ac:22:31:2d:e4:85:68:59:68:c9: 46:32:68:4d:ba:8c:26:8a:96:81:71:9e:16:42:d3: 34:0f:df:21:00:ea:28:d7:a7:bd:52:07:08:02:45: d8:6c:f7:39:ef:a3:f8:0b:f1:c7:cc:fd:db:94:ad: 54:9f:03:85:60:d2:58:e1:f8:87:5d:db:f7:bb:53: d1:2b:78:81:49:5f:f7:ae:48:73:11:ee:ff:f0:11: 63:9d:3d:44:89:52:b3:73:e0:16:10:0c:19:f1:70: 5f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7E:27:4A:3F:C1:85:74:9D:2A:99:7A:3B:51:FB:63:6F:4F:B2:C6 X509v3 Authority Key Identifier: keyid:5D:13:BF:84:B8:D9:1A:8A:1A:C8:08:62:27:D5:9F:1D:C1:EA:3F:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:92:24:36:01:bd:9f:31:25:74:8f:73:ae:a5:25:e0:41:b2: db:49:0d:ed:f5:5f:9f:0b:11:29:bb:94:b5:e2:cc:69:c9:f9: 77:29:dc:65:b1:44:c5:a2:d5:3e:dd:03:d7:13:e8:5f:fb:98: be:6a:63:97:4b:14:10:8d:64:f9:e2:78:82:9e:95:df:53:91: 70:d0:d2:83:22:a2:1d:63:f7:10:6e:b2:43:bf:fb:7b:95:e1: d9:0b:05:6e:16:e4:23:70:c2:24:a6:9b:95:b8:af:7e:7d:a9: 8b:85:96:50:10:ba:d0:e1:26:89:e1:e9:e4:1d:5c:e9:07:73: a4:82:88:a3:0a:13:16:b8:c1:f2:17:40:2f:9d:0c:0d:7e:40: 29:9e:8d:e3:d0:b2:2a:0c:37:b2:13:35:2a:fb:7c:f1:86:f1: ec:f6:5f:c1:fd:d1:15:a9:d4:6d:e2:fb:9b:17:f8:21:5f:76: e5:4f:05:33:ee:e6:08:c8:53:44:51:51:19:0e:fa:f9:2a:7e: 77:8b:be:9a:f4:ba:5e:97:a2:c5:00:ff:d2:e9:6e:f1:3c:ef: 2d:c1:b2:47:e7:b3:95:32:b3:f0:42:2a:05:25:ad:d9:4f:d3: a3:e5:fc:ed:ac:74:b1:1d:40:26:a2:1c:be:f0:49:2d:5a:7e: d3:3f:58:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGO2JwnuvzkIHcdzF/rbZMEIs+H8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQxM0JGODRCOEQ5MUE4QTFBQzgwODYyMjdENTlGMURD MUVBM0YxMDAeFw0yNjA5MDIyMDE3NTVaFw0yNjA5MDMyMTIyNTVaMDMxMTAvBgNV BAMTKDY4N0UyNzRBM0ZDMTg1NzQ5RDJBOTk3QTNCNTFGQjYzNkY0RkIyQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSQitsFYhikGt57xtERDQUtQBT wsZNfWhhySadZs5s1JrSuwlsf82d1V4AGdoVMsrrAAMfylXri84RcUtmJtth5FPQ w+0pEuXDTQvLvynD76HnJhoEZe6emE2oMZQspc1OL1BdLxJABssfKhzoKTdV7Y5N bnS7MXZb3tYG/DRCDkf6bMAjLiWgE1im+msFPelmM8PXJEoGbessrCIxLeSFaFlo yUYyaE26jCaKloFxnhZC0zQP3yEA6ijXp71SBwgCRdhs9znvo/gL8cfM/duUrVSf A4Vg0ljh+Idd2/e7U9EreIFJX/euSHMR7v/wEWOdPUSJUrNz4BYQDBnxcF8NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaH4nSj/BhXSdKpl6O1H7Y29PssYwHwYDVR0j BBgwFoAUXRO/hLjZGooayAhiJ9WfHcHqPxAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjFhNzdhZGQtYTQ5YS00YzhmLWE3MzUtZWY5NmMzM2FiMjlmLzAvNUQxM0JGODRC OEQ5MUE4QTFBQzgwODYyMjdENTlGMURDMUVBM0YxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDEzQkY4NEI4RDkxQThBMUFDODA4NjIyN0Q1OUYxREMxRUEz RjEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjFhNzdhZGQtYTQ5YS00YzhmLWE3 MzUtZWY5NmMzM2FiMjlmLzAvNUQxM0JGODRCOEQ5MUE4QTFBQzgwODYyMjdENTlG MURDMUVBM0YxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKOSJDYBvZ8xJXSPc66lJeBBsttJDe31X58L ESm7lLXizGnJ+Xcp3GWxRMWi1T7dA9cT6F/7mL5qY5dLFBCNZPnieIKeld9TkXDQ 0oMioh1j9xBuskO/+3uV4dkLBW4W5CNwwiSmm5W4r359qYuFllAQutDhJonh6eQd XOkHc6SCiKMKExa4wfIXQC+dDA1+QCmejePQsioMN7ITNSr7fPGG8ez2X8H90RWp 1G3i+5sX+CFfduVPBTPu5gjIU0RRURkO+vkqfneLvpr0ul6XosUA/9LpbvE87y3B skfns5Uys/BCKgUlrdlP06Pl/O2sdLEdQCaiHL7wSS1aftM/WO0= -----END CERTIFICATE-----Generated at Thu Sep 3 09:46:42 2026 by rpki-client