$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft File: D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft (raw, json) Hash identifier: T2cuC5XFqAH3owAK3bmjPt99r5EMkm6E2uVi/GQ2KMM= Subject key identifier: E9:C3:FB:BA:C0:CE:7B:B3:82:26:AE:AB:FB:0C:DD:B1:80:EB:7C:17 Authority key identifier: D7:10:E4:74:38:E0:99:E6:B0:ED:24:56:74:ED:22:33:E1:D2:B2:C0 Certificate issuer: /CN=D710E47438E099E6B0ED245674ED2233E1D2B2C0 Certificate serial: 1A4A67CC87DBAB6E16B7CB320BC6980B7FD6B85E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 17:39:15 +0000 Manifest this update: Wed 02 Sep 2026 17:34:15 +0000 Manifest next update: Thu 03 Sep 2026 20:41:15 +0000 Files and hashes: 1: 3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa (hash: nih8Qs0LKBkZCWGMFeuGnh3q/46VGBkvPVPuLWWc1eE=) 2: 3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa (hash: Mz/HLsc5z0NW9is9cK/jPV/c2edacNGieAld99v6XRg=) 3: 3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa (hash: tYzh/ONrnE/vB4p4w+wsr7jUrg+O1DSqJcNbYqdE1O4=) 4: D710E47438E099E6B0ED245674ED2233E1D2B2C0.crl (hash: PaEhmA0LPNqD5WXPrwGz6EfdKnGRHU1zFBKhw8Ueljg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.crl rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 20:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:4a:67:cc:87:db:ab:6e:16:b7:cb:32:0b:c6:98:0b:7f:d6:b8:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D710E47438E099E6B0ED245674ED2233E1D2B2C0 Validity Not Before: Sep 2 17:34:15 2026 GMT Not After : Sep 3 20:41:15 2026 GMT Subject: CN=E9C3FBBAC0CE7BB38226AEABFB0CDDB180EB7C17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:27:48:c0:21:be:66:b1:61:c7:84:4c:15:c4: 6c:24:ed:c7:b0:a8:44:e8:99:f6:b3:a2:43:05:b9: 85:d4:41:ad:56:04:99:fd:c9:22:b6:84:5f:22:66: fd:a2:60:e3:61:bc:19:f8:00:01:39:22:da:e0:d0: ab:30:1f:e1:af:b2:64:74:76:7d:fa:29:1b:59:7a: d3:d1:9d:63:2b:12:54:36:4c:59:39:45:d6:45:3b: 5c:39:79:4f:50:2f:87:f1:2d:fe:dc:f2:ba:76:33: ed:87:70:84:1a:78:b2:ab:7b:bb:42:c4:04:ff:f2: 81:ea:e7:46:f4:5f:a1:9f:b4:fd:39:88:1e:10:51: 61:bd:bf:92:32:d6:89:e3:fd:63:da:fe:9f:ff:a3: 43:8f:67:6c:1f:71:26:f5:33:f4:69:ec:4f:ca:c8: 8a:ba:27:76:b8:7c:f0:bd:61:24:f9:9f:42:35:1f: ed:e0:79:b0:f8:f9:fd:08:f6:6b:d7:dd:26:a2:ae: 5a:fd:23:29:4d:92:54:39:12:8f:37:c5:a0:7d:6a: a3:63:6b:ea:a1:4f:25:37:43:81:c1:9a:83:fc:3f: 9e:88:d6:bf:65:ce:ff:14:06:04:63:74:d9:71:1a: 34:b8:e2:2e:57:85:a4:4f:22:35:3b:78:ac:c4:72: 07:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C3:FB:BA:C0:CE:7B:B3:82:26:AE:AB:FB:0C:DD:B1:80:EB:7C:17 X509v3 Authority Key Identifier: keyid:D7:10:E4:74:38:E0:99:E6:B0:ED:24:56:74:ED:22:33:E1:D2:B2:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:1a:9d:c4:45:80:5c:34:25:93:d2:9f:0a:69:1b:03:f7:44: a9:6d:60:be:83:53:d2:8e:e3:33:3a:f0:75:34:34:46:0b:8c: 34:47:5d:30:36:e1:ec:9e:f6:24:43:ca:80:dc:bb:af:3e:a3: 98:f8:74:b0:fa:64:d3:a3:01:f7:99:da:cb:ae:bb:2e:84:0b: 84:e7:72:35:fe:14:24:8c:d7:d4:63:76:1f:89:68:85:38:95: 68:f9:df:d8:01:d8:69:1c:55:1d:c9:7c:a4:0b:a6:c1:3f:7e: c2:76:21:f9:a6:b0:48:53:f1:ea:59:c8:b8:b7:89:1d:ff:a5: 5d:b8:16:b4:db:cb:77:73:82:f4:7c:a2:23:2b:79:39:b7:5d: f0:3c:80:fb:fd:99:70:17:02:df:55:83:03:54:d3:48:f3:ee: 86:f5:29:56:e3:c0:cb:7d:e9:c7:cc:db:20:70:95:35:64:86: ed:a7:a2:3f:5c:81:8c:58:28:07:3b:85:7e:11:b4:64:e4:72: 25:85:70:ff:2d:ad:b0:74:d5:62:0d:d0:cb:49:72:41:15:34: e9:d3:9a:28:a5:59:df:95:ba:b9:fe:82:3c:f2:a5:b4:fa:d5: 77:b2:35:3c:c8:b7:a7:f8:1c:e2:22:2c:c7:06:db:b7:e6:b0: cc:3b:a5:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGkpnzIfbq24Wt8syC8aYC3/WuF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcxMEU0NzQzOEUwOTlFNkIwRUQyNDU2NzRFRDIyMzNF MUQyQjJDMDAeFw0yNjA5MDIxNzM0MTVaFw0yNjA5MDMyMDQxMTVaMDMxMTAvBgNV BAMTKEU5QzNGQkJBQzBDRTdCQjM4MjI2QUVBQkZCMENEREIxODBFQjdDMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoJ0jAIb5msWHHhEwVxGwk7cew qETomfazokMFuYXUQa1WBJn9ySK2hF8iZv2iYONhvBn4AAE5Itrg0KswH+GvsmR0 dn36KRtZetPRnWMrElQ2TFk5RdZFO1w5eU9QL4fxLf7c8rp2M+2HcIQaeLKre7tC xAT/8oHq50b0X6GftP05iB4QUWG9v5Iy1onj/WPa/p//o0OPZ2wfcSb1M/Rp7E/K yIq6J3a4fPC9YST5n0I1H+3gebD4+f0I9mvX3Sairlr9IylNklQ5Eo83xaB9aqNj a+qhTyU3Q4HBmoP8P56I1r9lzv8UBgRjdNlxGjS44i5XhaRPIjU7eKzEcgfzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6cP7usDOe7OCJq6r+wzdsYDrfBcwHwYDVR0j BBgwFoAU1xDkdDjgmeaw7SRWdO0iM+HSssAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDU0ZTQ1NmQtZGJlMi00NjBjLTg2ZDQtZWJjMmQxMTU2MTc2LzAvRDcxMEU0NzQz OEUwOTlFNkIwRUQyNDU2NzRFRDIyMzNFMUQyQjJDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzEwRTQ3NDM4RTA5OUU2QjBFRDI0NTY3NEVEMjIzM0UxRDJC MkMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDU0ZTQ1NmQtZGJlMi00NjBjLTg2 ZDQtZWJjMmQxMTU2MTc2LzAvRDcxMEU0NzQzOEUwOTlFNkIwRUQyNDU2NzRFRDIy MzNFMUQyQjJDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0ancRFgFw0JZPSnwppGwP3RKltYL6DU9KO 4zM68HU0NEYLjDRHXTA24eye9iRDyoDcu68+o5j4dLD6ZNOjAfeZ2suuuy6EC4Tn cjX+FCSM19Rjdh+JaIU4lWj539gB2GkcVR3JfKQLpsE/fsJ2IfmmsEhT8epZyLi3 iR3/pV24FrTby3dzgvR8oiMreTm3XfA8gPv9mXAXAt9VgwNU00jz7ob1KVbjwMt9 6cfM2yBwlTVkhu2noj9cgYxYKAc7hX4RtGTkciWFcP8trbB01WIN0MtJckEVNOnT miilWd+Vurn+gjzypbT61XeyNTzIt6f4HOIiLMcG27fmsMw7pRM= -----END CERTIFICATE-----Generated at Thu Sep 3 05:58:37 2026 by rpki-client