$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.mft File: 5137BC6C642818ED44761CE24BD59136B86E9502.mft (raw, json) Hash identifier: ON0ALFQ5DC11bnyUmA47TX3LsTx9WPUYI9pZ0YcoMdg= Subject key identifier: 19:83:4A:5F:DD:1B:47:3E:CE:A2:8D:10:10:8A:14:CB:90:C6:1F:34 Authority key identifier: 51:37:BC:6C:64:28:18:ED:44:76:1C:E2:4B:D5:91:36:B8:6E:95:02 Certificate issuer: /CN=5137BC6C642818ED44761CE24BD59136B86E9502 Certificate serial: 5845AB1AED3364B00C2A516495876C97CF88D520 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5137BC6C642818ED44761CE24BD59136B86E9502.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 06:51:07 +0000 Manifest this update: Thu 03 Sep 2026 06:46:07 +0000 Manifest next update: Fri 04 Sep 2026 08:07:07 +0000 Files and hashes: 1: 5137BC6C642818ED44761CE24BD59136B86E9502.crl (hash: ykeW3k3qN/1tO038EubG/+DrrJUEyDYVuFrQN1T0pxk=) 2: 323430333a393530303a3a2f33322d3336203d3e2039363537.roa (hash: Bjupm6rpCAaMTeTPZ2eGuF40Rt3f9ZMn/qqAW7B+FsQ=) 3: 3230322e3133382e3232342e302f31392d3234203d3e2039363537.roa (hash: rnnGREcPzTzqU+DHtFpFgNVjo93sVnYIgoX5i3YQ96Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.crl rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5137BC6C642818ED44761CE24BD59136B86E9502.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 08:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:45:ab:1a:ed:33:64:b0:0c:2a:51:64:95:87:6c:97:cf:88:d5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5137BC6C642818ED44761CE24BD59136B86E9502 Validity Not Before: Sep 3 06:46:07 2026 GMT Not After : Sep 4 08:07:07 2026 GMT Subject: CN=19834A5FDD1B473ECEA28D10108A14CB90C61F34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:90:25:72:ef:51:11:c7:b1:4f:d5:df:1e:32: 3c:d4:23:6e:93:e6:92:46:8d:8a:ea:63:e6:99:d3: 26:1e:41:b0:43:be:da:d5:aa:2c:8d:e9:10:a4:88: 93:54:f6:fa:1e:dc:b7:bc:c6:20:38:b8:39:1a:8f: b3:3f:d9:91:ab:b7:4c:1c:25:52:c3:f9:2c:f6:9b: ce:dd:05:29:27:5c:ff:7d:f7:da:be:b4:16:6c:ed: 37:b9:3c:4e:d6:1e:f4:8a:a9:f8:42:7c:b4:a9:ce: 23:87:43:73:92:89:a3:d3:d6:c9:4d:ce:78:5e:1e: 18:e8:eb:26:13:f8:4f:8d:9b:1b:a5:da:d4:9d:d3: 5b:d5:11:fe:c5:09:ac:c6:f5:40:8c:c8:bd:cb:07: 2f:ec:93:c5:4b:8e:68:e8:de:2f:fa:44:43:ee:fd: f4:86:97:ab:88:ec:ea:d5:db:27:23:f4:34:e3:c0: 39:4c:34:2e:7e:03:5a:1e:0e:5c:a7:0d:a3:ef:9c: fb:47:fc:ea:ee:c8:c5:97:be:29:86:26:57:29:29: 32:3e:d3:4b:f3:6d:c1:f7:71:b8:84:19:28:bd:91: 47:4e:82:1b:12:ef:c8:a7:2d:18:ce:68:b0:bf:75: 8f:ac:63:30:38:3a:b2:d8:da:22:3a:1d:84:79:72: 21:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:83:4A:5F:DD:1B:47:3E:CE:A2:8D:10:10:8A:14:CB:90:C6:1F:34 X509v3 Authority Key Identifier: keyid:51:37:BC:6C:64:28:18:ED:44:76:1C:E2:4B:D5:91:36:B8:6E:95:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5137BC6C642818ED44761CE24BD59136B86E9502.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:3b:d9:34:f2:d3:74:20:a5:ba:90:82:74:f3:60:df:9a:85: 95:2b:f0:25:49:bb:af:10:bd:bd:f3:3a:71:09:31:b0:bf:52: 38:9b:1d:a1:ca:81:51:fd:2d:68:a4:e7:46:84:10:81:1e:5b: 1a:d7:78:a6:aa:e8:df:dc:6c:ff:85:2a:61:74:d0:e4:7b:49: bd:a7:cf:ac:2c:8c:a6:96:f2:ca:36:bb:e7:7b:64:3e:4f:6c: 4f:9a:34:ae:73:1d:26:82:45:a6:32:fa:70:6c:a2:57:9e:54: 21:4b:91:09:a5:c3:22:db:ea:82:7d:13:35:c2:19:e8:01:0c: 0d:d2:33:9d:bc:7a:d4:e0:d8:70:c2:d1:50:ea:59:8c:f3:08: 5d:41:6c:fa:d8:b6:a5:58:49:0a:16:eb:fc:86:2d:81:64:30: 2a:08:9b:d7:b9:d8:8a:83:07:0a:8a:0f:33:d4:83:23:cb:4e: 80:8d:27:20:bc:ce:30:8b:d2:16:a5:29:f1:7a:49:46:61:b4: 7b:4b:63:d3:e2:a9:f4:d2:24:f0:b7:00:eb:32:ee:72:55:e0: 39:45:99:87:b5:a9:96:a1:d9:5b:ea:29:f6:81:48:46:14:87: 8b:70:ab:60:a4:bd:51:32:71:95:03:b4:2b:28:24:d5:1c:02: f2:36:9e:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWEWrGu0zZLAMKlFklYdsl8+I1SAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEzN0JDNkM2NDI4MThFRDQ0NzYxQ0UyNEJENTkxMzZC ODZFOTUwMjAeFw0yNjA5MDMwNjQ2MDdaFw0yNjA5MDQwODA3MDdaMDMxMTAvBgNV BAMTKDE5ODM0QTVGREQxQjQ3M0VDRUEyOEQxMDEwOEExNENCOTBDNjFGMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDekCVy71ERx7FP1d8eMjzUI26T 5pJGjYrqY+aZ0yYeQbBDvtrVqiyN6RCkiJNU9voe3Le8xiA4uDkaj7M/2ZGrt0wc JVLD+Sz2m87dBSknXP9999q+tBZs7Te5PE7WHvSKqfhCfLSpziOHQ3OSiaPT1slN znheHhjo6yYT+E+Nmxul2tSd01vVEf7FCazG9UCMyL3LBy/sk8VLjmjo3i/6REPu /fSGl6uI7OrV2ycj9DTjwDlMNC5+A1oeDlynDaPvnPtH/OruyMWXvimGJlcpKTI+ 00vzbcH3cbiEGSi9kUdOghsS78inLRjOaLC/dY+sYzA4OrLY2iI6HYR5ciHXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGYNKX90bRz7Ooo0QEIoUy5DGHzQwHwYDVR0j BBgwFoAUUTe8bGQoGO1EdhziS9WRNrhulQIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzhmNmJlYjgtZTRlOC00ZTM5LTgyNzUtMWM2ZDc3YzNlZWY4LzAvNTEzN0JDNkM2 NDI4MThFRDQ0NzYxQ0UyNEJENTkxMzZCODZFOTUwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MTM3QkM2QzY0MjgxOEVENDQ3NjFDRTI0QkQ1OTEzNkI4NkU5 NTAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzhmNmJlYjgtZTRlOC00ZTM5LTgy NzUtMWM2ZDc3YzNlZWY4LzAvNTEzN0JDNkM2NDI4MThFRDQ0NzYxQ0UyNEJENTkx MzZCODZFOTUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKM72TTy03QgpbqQgnTzYN+ahZUr8CVJu68Q vb3zOnEJMbC/UjibHaHKgVH9LWik50aEEIEeWxrXeKaq6N/cbP+FKmF00OR7Sb2n z6wsjKaW8so2u+d7ZD5PbE+aNK5zHSaCRaYy+nBsoleeVCFLkQmlwyLb6oJ9EzXC GegBDA3SM528etTg2HDC0VDqWYzzCF1BbPrYtqVYSQoW6/yGLYFkMCoIm9e52IqD BwqKDzPUgyPLToCNJyC8zjCL0halKfF6SUZhtHtLY9PiqfTSJPC3AOsy7nJV4DlF mYe1qZah2VvqKfaBSEYUh4twq2CkvVEycZUDtCsoJNUcAvI2nkg= -----END CERTIFICATE-----Generated at Thu Sep 3 16:18:34 2026 by rpki-client