$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft File: 5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft (raw, json) Hash identifier: dNLv62I3KLiAwC/Ue0AY4xk3i6WOqULT2iYDrzA3zYg= Subject key identifier: 5E:AA:FC:0B:43:A5:CC:12:11:89:F3:B5:B1:FE:14:C9:17:22:2C:A5 Authority key identifier: 5A:1C:0A:49:62:48:63:92:EE:3F:99:8A:F6:D4:FF:70:39:A8:3F:F3 Certificate issuer: /CN=5A1C0A4962486392EE3F998AF6D4FF7039A83FF3 Certificate serial: 785E32E5B7C9AD796AD30CB0F0D04B5EE1FEE090 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 20:07:26 +0000 Manifest this update: Wed 02 Sep 2026 20:02:26 +0000 Manifest next update: Thu 03 Sep 2026 21:10:26 +0000 Files and hashes: 1: 3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa (hash: WS8lomwMTaspR/6nCKhD2CzQyU48KkvD9JTWAS0vGqs=) 2: 323030313a6466313a383530303a3a2f34382d3438203d3e20313336313131.roa (hash: EBT29i1PsqgcTeXQev4zG3xPyCKZ73fS930Tr0addJQ=) 3: 3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa (hash: UIelaNmfU5flXZDJq0nsLusBExENtoFESIIlQRjCnSM=) 4: 5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl (hash: 4wmJpRhs83c01oqkLbPwCJTONuXfSGzKW/mayXMaJY8=) 5: 3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa (hash: 7DiSKTCfGBXxBlqPDk9dxpdFDrZ/cVVBzOWF8p4BC1M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:5e:32:e5:b7:c9:ad:79:6a:d3:0c:b0:f0:d0:4b:5e:e1:fe:e0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A1C0A4962486392EE3F998AF6D4FF7039A83FF3 Validity Not Before: Sep 2 20:02:26 2026 GMT Not After : Sep 3 21:10:26 2026 GMT Subject: CN=5EAAFC0B43A5CC121189F3B5B1FE14C917222CA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:23:9a:f9:d9:1e:e9:93:72:06:bd:a3:a4:04: 9e:34:ee:59:33:ee:b0:05:bf:01:56:8f:cb:9c:f1: 73:3a:24:44:85:ac:30:8b:d8:37:56:fb:41:41:d6: 47:41:47:58:de:ce:f2:56:1c:58:22:f2:07:a1:e0: 3d:43:68:6f:8e:74:e1:16:35:df:f5:37:7b:6f:97: a0:28:ec:98:0f:69:de:14:3d:64:80:14:49:d1:48: 33:27:b4:b7:75:75:a4:c9:a5:22:cf:0e:45:da:72: 06:9e:28:55:80:60:ef:5b:42:81:14:d0:a0:e5:b1: e6:f5:98:85:c8:d8:92:b6:89:d7:4c:e6:d8:22:59: 34:e6:3d:4a:07:ca:4d:45:52:23:1f:dd:d9:92:4f: f9:5b:14:bf:01:e5:41:8a:e1:51:57:ee:35:fb:e4: a7:e6:b2:8a:b9:18:e7:55:43:db:b0:b6:34:4e:15: dd:79:57:3d:4e:f6:a7:07:90:9f:33:e2:79:23:c3: 71:87:55:64:9d:b4:20:f3:ff:f7:90:cb:0f:b7:9f: 99:4f:9d:c9:b0:ef:39:95:5a:e7:f1:68:10:10:f0: 8d:f6:60:3c:06:fb:15:f7:58:b6:04:ee:62:90:a2: de:af:ca:bf:04:b0:3c:6d:52:d6:72:9e:99:cd:30: 31:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:AA:FC:0B:43:A5:CC:12:11:89:F3:B5:B1:FE:14:C9:17:22:2C:A5 X509v3 Authority Key Identifier: keyid:5A:1C:0A:49:62:48:63:92:EE:3F:99:8A:F6:D4:FF:70:39:A8:3F:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:bc:b9:56:e0:a9:7c:88:3e:b2:91:90:53:ef:42:d4:0f:0b: 68:3b:24:18:54:58:be:ff:fa:b2:25:c9:41:c6:03:b3:01:d3: bd:54:c4:9f:7c:b1:94:35:f6:41:75:fa:86:a7:e9:a0:3a:f0: 4c:8e:c2:12:0d:02:6f:9e:c7:ef:b3:ca:3c:24:c8:60:d5:29: 19:a7:05:74:9d:e8:e9:a3:d2:aa:4b:98:a1:6d:72:54:66:28: 85:97:b3:2d:8d:c5:c4:01:aa:bb:bf:d0:7b:e7:1d:80:7a:68: e5:57:d9:43:d1:29:e6:d2:39:51:19:95:fa:78:a4:2a:eb:16: d4:85:3a:21:0b:23:22:17:b2:7d:f9:3b:e5:a3:21:ba:5c:a6: 92:5a:5c:01:1d:84:e2:4c:8d:e9:f3:cf:9a:58:37:51:49:66: d5:bb:ea:3a:d6:7f:fe:90:fb:aa:ad:71:57:f9:14:b0:5b:2b: 08:88:70:39:d0:e5:59:03:e5:22:85:4f:77:1b:0d:2a:05:ec: fe:a0:f9:be:7c:1e:fb:f9:a4:ef:74:22:79:1a:09:0d:73:0d: f2:b4:dd:e3:7b:13:b3:e0:4e:bd:57:9f:8f:7b:f6:e7:6e:e9: 58:b3:95:d6:87:a2:63:52:b8:61:73:e0:3d:e5:16:38:c4:4a: 27:29:e0:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeF4y5bfJrXlq0wyw8NBLXuH+4JAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUExQzBBNDk2MjQ4NjM5MkVFM0Y5OThBRjZENEZGNzAz OUE4M0ZGMzAeFw0yNjA5MDIyMDAyMjZaFw0yNjA5MDMyMTEwMjZaMDMxMTAvBgNV BAMTKDVFQUFGQzBCNDNBNUNDMTIxMTg5RjNCNUIxRkUxNEM5MTcyMjJDQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfI5r52R7pk3IGvaOkBJ407lkz 7rAFvwFWj8uc8XM6JESFrDCL2DdW+0FB1kdBR1jezvJWHFgi8geh4D1DaG+OdOEW Nd/1N3tvl6Ao7JgPad4UPWSAFEnRSDMntLd1daTJpSLPDkXacgaeKFWAYO9bQoEU 0KDlseb1mIXI2JK2iddM5tgiWTTmPUoHyk1FUiMf3dmST/lbFL8B5UGK4VFX7jX7 5Kfmsoq5GOdVQ9uwtjROFd15Vz1O9qcHkJ8z4nkjw3GHVWSdtCDz//eQyw+3n5lP ncmw7zmVWufxaBAQ8I32YDwG+xX3WLYE7mKQot6vyr8EsDxtUtZynpnNMDH/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXqr8C0OlzBIRifO1sf4UyRciLKUwHwYDVR0j BBgwFoAUWhwKSWJIY5LuP5mK9tT/cDmoP/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzJmMjg4NzktNDg0NC00MmRlLWIyZDktYTk2NjZkZTI4MmVhLzAvNUExQzBBNDk2 MjQ4NjM5MkVFM0Y5OThBRjZENEZGNzAzOUE4M0ZGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QTFDMEE0OTYyNDg2MzkyRUUzRjk5OEFGNkQ0RkY3MDM5QTgz RkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzJmMjg4NzktNDg0NC00MmRlLWIy ZDktYTk2NjZkZTI4MmVhLzAvNUExQzBBNDk2MjQ4NjM5MkVFM0Y5OThBRjZENEZG NzAzOUE4M0ZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFa8uVbgqXyIPrKRkFPvQtQPC2g7JBhUWL7/ +rIlyUHGA7MB071UxJ98sZQ19kF1+oan6aA68EyOwhINAm+ex++zyjwkyGDVKRmn BXSd6Omj0qpLmKFtclRmKIWXsy2NxcQBqru/0HvnHYB6aOVX2UPRKebSOVEZlfp4 pCrrFtSFOiELIyIXsn35O+WjIbpcppJaXAEdhOJMjenzz5pYN1FJZtW76jrWf/6Q +6qtcVf5FLBbKwiIcDnQ5VkD5SKFT3cbDSoF7P6g+b58Hvv5pO90InkaCQ1zDfK0 3eN7E7PgTr1Xn4979udu6VizldaHomNSuGFz4D3lFjjESicp4MQ= -----END CERTIFICATE-----Generated at Thu Sep 3 09:26:55 2026 by rpki-client