$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft File: 256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft (raw, json) Hash identifier: 57jlPT9JLD7BajzcI2Z9701UhuzUeKQ8cvu+hNZU4cs= Subject key identifier: BE:07:CC:DF:61:D0:99:17:FE:1F:6C:B8:23:EE:47:F5:3C:A7:74:C0 Authority key identifier: 25:6E:03:BC:2F:1D:A4:F9:03:1E:71:C6:81:4D:01:90:C4:49:46:ED Certificate issuer: /CN=256E03BC2F1DA4F9031E71C6814D0190C44946ED Certificate serial: 66976124DA08AF41F3EEE4C0D07A92A382528A79 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 09:45:33 +0000 Manifest this update: Wed 02 Sep 2026 09:40:33 +0000 Manifest next update: Thu 03 Sep 2026 12:32:33 +0000 Files and hashes: 1: 3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa (hash: seLt9J4Omc3hnlGUE3OGC5XsPU9/YgeAHtEiSSm80kY=) 2: 256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl (hash: wGZsU0cnYZfuN6u9O0gNvA4iMvcujXMnxinS8rYuEs4=) 3: 3130332e3133302e3131362e302f32342d3234203d3e203435333035.roa (hash: cfTJoIKD7v5E50NDw9RdyVoXvRV8kIdsxzrTBtYWbZI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 12:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:97:61:24:da:08:af:41:f3:ee:e4:c0:d0:7a:92:a3:82:52:8a:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256E03BC2F1DA4F9031E71C6814D0190C44946ED Validity Not Before: Sep 2 09:40:33 2026 GMT Not After : Sep 3 12:32:33 2026 GMT Subject: CN=BE07CCDF61D09917FE1F6CB823EE47F53CA774C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:30:23:12:b7:8a:f3:cc:52:eb:02:7f:a6:c8: 47:67:59:83:60:fa:b4:b2:c2:b9:4c:ab:28:70:bc: b5:65:7b:60:03:54:8b:bf:13:9c:f1:99:71:04:d8: 4f:1d:72:69:7f:09:9c:20:b0:eb:ca:d3:1b:18:83: 34:d8:28:91:80:af:c7:9c:37:0e:b2:27:ef:84:26: cd:a1:a2:c2:2f:22:07:67:46:63:26:22:2c:3e:de: 66:19:3d:1b:5f:82:b4:b0:f4:88:26:cb:48:04:2a: 00:01:b2:f6:1d:f9:93:70:e8:03:1d:9d:cc:ea:59: 18:af:9c:74:47:e9:9e:aa:5e:4d:83:a5:33:9d:38: a2:8c:fe:89:fc:22:94:73:2c:8e:05:ca:10:b6:e9: 08:50:7e:4e:0e:f5:b3:1b:c5:8a:06:63:7c:1c:aa: 5c:1b:5b:2f:24:a9:38:dc:f1:1b:12:1e:8e:64:fb: b9:16:05:76:52:12:a4:c4:07:16:db:29:ad:f7:d7: 80:72:64:0b:64:42:79:4e:d1:0a:d1:8b:a0:7f:a4: 92:e6:35:c1:b9:06:06:38:6f:36:16:0f:38:e8:29: 4c:b4:8b:59:96:04:28:3f:28:f8:fe:4c:f6:b5:92: 8c:91:d6:54:bc:41:09:65:41:0e:5f:22:2f:21:77: a0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:07:CC:DF:61:D0:99:17:FE:1F:6C:B8:23:EE:47:F5:3C:A7:74:C0 X509v3 Authority Key Identifier: keyid:25:6E:03:BC:2F:1D:A4:F9:03:1E:71:C6:81:4D:01:90:C4:49:46:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ee:d6:91:76:9b:50:93:24:94:d2:25:23:a7:b2:87:d0:f0: 54:0a:0f:49:44:56:5e:4f:c6:a7:3d:05:a1:86:1e:63:9d:6f: 42:b9:41:4c:f1:42:05:dc:b8:70:64:92:14:92:b8:42:4d:64: 18:47:c8:f7:cc:ce:b0:3f:1c:0f:f8:62:80:92:62:87:0b:e9: 69:3b:dd:aa:1c:25:67:ec:e1:41:f9:5e:83:f5:38:ce:a2:c7: a1:92:48:b6:23:36:de:6a:cc:1e:81:ae:5f:22:a7:ee:fe:28: 26:1d:88:54:af:92:1a:46:e2:08:7c:61:65:69:20:86:8c:15: 0b:60:62:8d:da:0c:e5:42:32:0e:90:ab:bd:df:c9:6e:56:25: 92:75:5a:e8:b0:89:e6:1d:9a:e6:da:29:99:4a:83:94:e6:7a: 3a:c7:fe:a4:48:d8:13:d8:76:35:79:80:53:4a:7e:a4:1d:5d: 90:be:96:d4:26:5d:10:84:d9:8b:09:39:9d:b4:ff:c1:ea:9b: 9c:02:31:80:d3:f9:1d:4d:7d:c6:0b:38:4a:c7:90:ef:31:6a: 7c:64:b5:8a:e8:cc:94:44:7a:96:a1:fb:c0:5c:b3:f7:95:18: e0:74:47:6e:79:01:ca:92:d3:21:db:7e:81:8a:cc:76:98:78: 2d:f5:ce:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZpdhJNoIr0Hz7uTA0HqSo4JSinkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2RTAzQkMyRjFEQTRGOTAzMUU3MUM2ODE0RDAxOTBD NDQ5NDZFRDAeFw0yNjA5MDIwOTQwMzNaFw0yNjA5MDMxMjMyMzNaMDMxMTAvBgNV BAMTKEJFMDdDQ0RGNjFEMDk5MTdGRTFGNkNCODIzRUU0N0Y1M0NBNzc0QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHMCMSt4rzzFLrAn+myEdnWYNg +rSywrlMqyhwvLVle2ADVIu/E5zxmXEE2E8dcml/CZwgsOvK0xsYgzTYKJGAr8ec Nw6yJ++EJs2hosIvIgdnRmMmIiw+3mYZPRtfgrSw9Igmy0gEKgABsvYd+ZNw6AMd nczqWRivnHRH6Z6qXk2DpTOdOKKM/on8IpRzLI4FyhC26QhQfk4O9bMbxYoGY3wc qlwbWy8kqTjc8RsSHo5k+7kWBXZSEqTEBxbbKa3314ByZAtkQnlO0QrRi6B/pJLm NcG5BgY4bzYWDzjoKUy0i1mWBCg/KPj+TPa1koyR1lS8QQllQQ5fIi8hd6ABAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvgfM32HQmRf+H2y4I+5H9TyndMAwHwYDVR0j BBgwFoAUJW4DvC8dpPkDHnHGgU0BkMRJRu0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ZmZGMyYjctZjMwNS00ZTA3LWFhYzUtNDY5ZTkxMTNiMGI0LzAvMjU2RTAzQkMy RjFEQTRGOTAzMUU3MUM2ODE0RDAxOTBDNDQ5NDZFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTZFMDNCQzJGMURBNEY5MDMxRTcxQzY4MTREMDE5MEM0NDk0 NkVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ZmZGMyYjctZjMwNS00ZTA3LWFh YzUtNDY5ZTkxMTNiMGI0LzAvMjU2RTAzQkMyRjFEQTRGOTAzMUU3MUM2ODE0RDAx OTBDNDQ5NDZFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3u1pF2m1CTJJTSJSOnsofQ8FQKD0lEVl5P xqc9BaGGHmOdb0K5QUzxQgXcuHBkkhSSuEJNZBhHyPfMzrA/HA/4YoCSYocL6Wk7 3aocJWfs4UH5XoP1OM6ix6GSSLYjNt5qzB6Brl8ip+7+KCYdiFSvkhpG4gh8YWVp IIaMFQtgYo3aDOVCMg6Qq73fyW5WJZJ1WuiwieYdmubaKZlKg5TmejrH/qRI2BPY djV5gFNKfqQdXZC+ltQmXRCE2YsJOZ20/8Hqm5wCMYDT+R1NfcYLOErHkO8xanxk tYrozJREepah+8Bcs/eVGOB0R255AcqS0yHbfoGKzHaYeC31zrs= -----END CERTIFICATE-----Generated at Thu Sep 3 05:06:47 2026 by rpki-client