$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft File: 267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft (raw, json) Hash identifier: SJiJhCyAnn4f/Ouvj9/OL9+7K3pDnP8cSWolPG8tTRs= Subject key identifier: 4C:EA:C2:50:EB:87:AD:99:B2:B6:4D:A7:5D:52:CE:9F:37:70:78:ED Authority key identifier: 26:73:81:23:4D:E6:7C:D8:E7:FC:C5:32:54:0C:0B:1A:69:8F:D8:B0 Certificate issuer: /CN=267381234DE67CD8E7FCC532540C0B1A698FD8B0 Certificate serial: 5C4DD337A563CEE38FA79A51D4B802F261D4E9F2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/267381234DE67CD8E7FCC532540C0B1A698FD8B0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 00:43:51 +0000 Manifest this update: Thu 03 Sep 2026 00:38:51 +0000 Manifest next update: Fri 04 Sep 2026 02:54:51 +0000 Files and hashes: 1: 3130332e31352e3231342e302f32342d3234203d3e20313335343737.roa (hash: ZyYg2y6us1LQrG7diwKFALUA9hvUN3acAbNTmnkm8fU=) 2: 3130332e31352e3231352e302f32342d3234203d3e20313335343737.roa (hash: OOL38iHSy0/NkkysB63GXJ99F6I1QYegNu69it5kV/Y=) 3: 267381234DE67CD8E7FCC532540C0B1A698FD8B0.crl (hash: Addzy0DV6sdSnhzslTgBJQYjs4u37RxbI/MKuEDWaG8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.crl rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/267381234DE67CD8E7FCC532540C0B1A698FD8B0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:4d:d3:37:a5:63:ce:e3:8f:a7:9a:51:d4:b8:02:f2:61:d4:e9:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=267381234DE67CD8E7FCC532540C0B1A698FD8B0 Validity Not Before: Sep 3 00:38:51 2026 GMT Not After : Sep 4 02:54:51 2026 GMT Subject: CN=4CEAC250EB87AD99B2B64DA75D52CE9F377078ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:59:d4:0d:a2:f2:dc:58:25:b7:ef:78:57:d8: 34:1f:cb:88:31:b7:97:82:5e:e8:f3:96:0a:05:05: 1e:8b:e5:13:1d:30:d2:36:5a:1c:01:ed:f5:50:ce: a3:72:08:0b:1b:90:64:a8:06:cb:1d:40:46:b5:6b: 03:1f:87:24:27:e4:91:54:ff:23:de:19:bf:cb:71: e0:49:5c:13:cd:5f:f7:3a:46:65:e9:d5:cb:1b:9f: 1f:ed:55:6c:30:53:b9:eb:8c:f3:03:fe:29:e0:17: f4:89:e0:d2:d9:fb:1b:0a:7f:6b:d1:99:28:6c:94: 48:21:34:1d:da:d0:9e:d6:ca:b4:c5:6d:e1:1c:ed: 75:1f:0d:8a:bc:5b:cf:33:d8:47:03:c2:49:01:58: a4:f2:fa:94:f2:9e:bf:77:af:18:96:d2:95:0e:8d: 02:03:1e:02:12:04:38:67:35:b6:50:da:2c:67:a0: 36:ae:ed:e0:25:b7:04:fb:ed:04:22:c7:78:83:e2: d5:e5:f5:13:b4:34:c3:e6:69:fe:31:12:f0:3c:e8: 8f:cd:22:28:db:15:b7:87:23:e1:61:3e:df:38:6d: ca:ae:1d:6a:ee:12:10:d2:71:a9:b2:22:38:e1:ff: 6e:86:a5:26:bf:9a:95:2f:62:42:8c:8c:b2:c7:3b: 91:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:EA:C2:50:EB:87:AD:99:B2:B6:4D:A7:5D:52:CE:9F:37:70:78:ED X509v3 Authority Key Identifier: keyid:26:73:81:23:4D:E6:7C:D8:E7:FC:C5:32:54:0C:0B:1A:69:8F:D8:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/267381234DE67CD8E7FCC532540C0B1A698FD8B0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:0a:f5:2d:b1:5d:f0:06:f8:50:b8:17:60:04:9f:dd:7b:03: b7:1c:4d:fa:d5:d4:f9:fa:ba:95:1c:35:48:da:c7:0c:0a:58: f0:26:2f:4b:98:f3:e3:f0:c6:ab:f0:fc:2e:73:68:f3:7e:03: ae:f2:37:b7:fd:80:0a:55:25:f6:07:8d:65:f8:da:fc:5e:fe: 9e:9d:d6:7b:f0:92:86:e5:19:10:f9:9a:f8:aa:4d:1f:9e:1f: 03:14:03:1d:8b:3e:d3:4e:f9:fa:e6:34:c3:0d:0d:68:e8:cb: 5f:f5:f0:6b:b4:b7:42:0b:9e:e7:77:95:3b:08:b5:5a:f2:8f: 3f:89:31:18:38:92:10:42:7d:95:ba:9c:f0:16:bf:b0:5b:6a: 67:e9:69:51:dd:c3:ac:4b:69:24:67:53:2e:f2:74:ba:c7:53: 21:80:30:19:ec:e9:89:06:ab:4c:29:19:45:c8:f9:0f:e0:be: d3:bb:25:54:76:bd:19:31:19:cb:35:47:7d:ed:6c:19:2f:82: da:a4:7d:4a:23:a5:df:dd:c0:03:15:67:7d:03:33:77:a8:c6: 4e:b1:32:81:28:bf:31:84:94:8a:0f:af:72:d4:9b:75:7c:e7: ba:1e:6f:7c:cd:2d:e0:59:30:e6:c7:fc:c3:92:af:a7:6e:e1: 5a:5a:b5:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXE3TN6VjzuOPp5pR1LgC8mHU6fIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY3MzgxMjM0REU2N0NEOEU3RkNDNTMyNTQwQzBCMUE2 OThGRDhCMDAeFw0yNjA5MDMwMDM4NTFaFw0yNjA5MDQwMjU0NTFaMDMxMTAvBgNV BAMTKDRDRUFDMjUwRUI4N0FEOTlCMkI2NERBNzVENTJDRTlGMzc3MDc4RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFWdQNovLcWCW373hX2DQfy4gx t5eCXujzlgoFBR6L5RMdMNI2WhwB7fVQzqNyCAsbkGSoBssdQEa1awMfhyQn5JFU /yPeGb/LceBJXBPNX/c6RmXp1csbnx/tVWwwU7nrjPMD/ingF/SJ4NLZ+xsKf2vR mShslEghNB3a0J7WyrTFbeEc7XUfDYq8W88z2EcDwkkBWKTy+pTynr93rxiW0pUO jQIDHgISBDhnNbZQ2ixnoDau7eAltwT77QQix3iD4tXl9RO0NMPmaf4xEvA86I/N IijbFbeHI+FhPt84bcquHWruEhDScamyIjjh/26GpSa/mpUvYkKMjLLHO5E3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTOrCUOuHrZmytk2nXVLOnzdweO0wHwYDVR0j BBgwFoAUJnOBI03mfNjn/MUyVAwLGmmP2LAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZmNDc2N2QtZTg0Zi00MjEwLTg0MjMtNDA2OTY2MThmMzc3LzAvMjY3MzgxMjM0 REU2N0NEOEU3RkNDNTMyNTQwQzBCMUE2OThGRDhCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNjczODEyMzRERTY3Q0Q4RTdGQ0M1MzI1NDBDMEIxQTY5OEZE OEIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZmNDc2N2QtZTg0Zi00MjEwLTg0 MjMtNDA2OTY2MThmMzc3LzAvMjY3MzgxMjM0REU2N0NEOEU3RkNDNTMyNTQwQzBC MUE2OThGRDhCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIK9S2xXfAG+FC4F2AEn917A7ccTfrV1Pn6 upUcNUjaxwwKWPAmL0uY8+Pwxqvw/C5zaPN+A67yN7f9gApVJfYHjWX42vxe/p6d 1nvwkoblGRD5mviqTR+eHwMUAx2LPtNO+frmNMMNDWjoy1/18Gu0t0ILnud3lTsI tVryjz+JMRg4khBCfZW6nPAWv7BbamfpaVHdw6xLaSRnUy7ydLrHUyGAMBns6YkG q0wpGUXI+Q/gvtO7JVR2vRkxGcs1R33tbBkvgtqkfUojpd/dwAMVZ30DM3eoxk6x MoEovzGElIoPr3LUm3V857oeb3zNLeBZMObH/MOSr6du4Vpatdc= -----END CERTIFICATE-----Generated at Thu Sep 3 09:27:20 2026 by rpki-client