$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft File: 801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft (raw, json) Hash identifier: eI6Cp6X1WUyj+f2O69ui7TTtvjULjHGCtPEM1hJABDE= Subject key identifier: 4B:49:35:C9:D4:11:BA:2C:04:ED:D0:AB:0C:BA:F3:36:B1:29:12:56 Authority key identifier: 80:1D:1B:4E:E6:BB:69:D3:F7:DA:2D:A9:DF:BD:AE:FB:29:78:37:24 Certificate issuer: /CN=801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724 Certificate serial: 6B40926E633D88198D3C7A2C6D2C6ACCCA27B975 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 15:42:13 +0000 Manifest this update: Wed 02 Sep 2026 15:37:13 +0000 Manifest next update: Thu 03 Sep 2026 15:48:13 +0000 Files and hashes: 1: 801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.crl (hash: uWYxTzQos2VrjXl5ONv46gfOK4hk4S4KNJlsCpmKweo=) 2: 3130332e3138302e3139392e302f32342d3234203d3e20313439333638.roa (hash: PF2pFQ8Y4MjWEElnBJwyA+RuYK7yYkD7ChXjYqS9lpw=) 3: 3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa (hash: 5qu3egPdBZlEVTvgirw7pWXgCRudPnC+xEwHD5lFYU8=) 4: 3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa (hash: 4a9og07u0srQecoyb+IpBZCUaRdvfCWkjUR0wkeGFvU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.crl rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 15:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:40:92:6e:63:3d:88:19:8d:3c:7a:2c:6d:2c:6a:cc:ca:27:b9:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724 Validity Not Before: Sep 2 15:37:13 2026 GMT Not After : Sep 3 15:48:13 2026 GMT Subject: CN=4B4935C9D411BA2C04EDD0AB0CBAF336B1291256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cc:41:0c:1c:aa:71:3b:f5:82:93:b4:af:1b: a0:fd:f6:6c:1a:dd:90:63:d6:74:5c:49:54:e7:51: 02:b2:72:94:6e:bb:2e:8a:ce:b6:00:38:5e:a5:bf: 3c:14:c9:0e:20:3c:41:a3:4a:8b:2e:8e:72:71:7f: 1c:ee:f3:c7:69:e2:d1:6e:e8:62:2b:7f:31:85:8b: 9e:3e:ba:12:2d:18:6a:97:48:ff:49:1e:6b:db:c6: 50:87:08:a1:a7:8b:8d:56:1f:4a:99:e4:81:30:3f: 23:ff:8b:ba:a7:a6:fc:14:81:3a:6d:ba:39:c6:e2: eb:f9:21:e6:20:32:62:77:58:c5:ec:1b:41:23:7d: 9e:b6:75:e7:bb:79:6f:8e:32:ee:54:b9:af:9b:a8: 7e:08:5e:5e:5a:af:4d:dc:d1:c8:10:1f:23:fd:1d: 35:3e:3a:3f:ce:2c:08:b1:1f:c0:3c:d6:a6:dd:f2: e3:49:73:74:2b:49:56:e5:8d:36:cf:48:35:c3:b1: 42:46:f0:1a:9d:70:a4:66:4a:c6:15:43:17:3a:f1: 13:2f:7d:e8:6b:b6:0f:59:b4:c1:8a:66:62:ce:7c: d1:ab:f9:bc:fe:91:37:2c:c7:87:f7:a7:dd:fb:28: bc:18:d1:f1:6e:4e:03:34:d3:ac:30:56:85:eb:ec: 5c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:49:35:C9:D4:11:BA:2C:04:ED:D0:AB:0C:BA:F3:36:B1:29:12:56 X509v3 Authority Key Identifier: keyid:80:1D:1B:4E:E6:BB:69:D3:F7:DA:2D:A9:DF:BD:AE:FB:29:78:37:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:cc:7d:93:b9:1b:da:a7:ed:9c:5d:7e:96:d2:b5:01:a0:ee: bd:8f:99:6d:6f:00:82:99:ef:58:ea:d3:68:aa:fa:3b:54:7f: f3:90:17:c3:a8:d0:0a:90:cb:69:e9:bd:aa:08:7a:9e:9d:e1: 49:ec:65:8d:58:70:b7:e6:aa:b9:ca:61:c2:eb:84:b4:4e:c1: d9:02:68:e2:5e:f8:3f:fe:a5:2f:06:c4:5f:14:8d:55:b7:cb: b1:4d:7e:20:4b:6c:fb:25:9e:f3:0b:22:14:9c:f2:78:c2:c3: 74:bd:bd:15:b2:d0:66:23:ec:bb:8d:e3:63:b6:98:d3:54:f0: e2:60:8f:37:78:8c:5f:ed:41:1e:8a:7b:c6:a3:ce:01:94:f1: 40:44:06:67:d5:0c:0c:63:c6:e3:ad:60:80:f0:6b:69:e7:ab: d9:c1:9d:ab:4a:02:62:75:9c:3c:8f:0c:9b:d9:9a:23:df:d6: 4b:70:91:15:12:c5:e9:f7:1a:5b:3a:79:a8:88:a8:b2:d7:94: e8:2a:7f:86:74:44:47:a0:e5:c8:9a:58:66:19:94:27:57:ca: 34:29:68:09:16:26:a8:e3:ca:cc:36:7c:21:5a:c9:30:99:c0: 99:d3:13:f0:9a:9d:17:18:e3:37:2a:6e:e3:95:1d:43:fb:d5: 0e:8b:04:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa0CSbmM9iBmNPHosbSxqzMonuXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAxRDFCNEVFNkJCNjlEM0Y3REEyREE5REZCREFFRkIy OTc4MzcyNDAeFw0yNjA5MDIxNTM3MTNaFw0yNjA5MDMxNTQ4MTNaMDMxMTAvBgNV BAMTKDRCNDkzNUM5RDQxMUJBMkMwNEVERDBBQjBDQkFGMzM2QjEyOTEyNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6zEEMHKpxO/WCk7SvG6D99mwa 3ZBj1nRcSVTnUQKycpRuuy6KzrYAOF6lvzwUyQ4gPEGjSosujnJxfxzu88dp4tFu 6GIrfzGFi54+uhItGGqXSP9JHmvbxlCHCKGni41WH0qZ5IEwPyP/i7qnpvwUgTpt ujnG4uv5IeYgMmJ3WMXsG0EjfZ62dee7eW+OMu5Uua+bqH4IXl5ar03c0cgQHyP9 HTU+Oj/OLAixH8A81qbd8uNJc3QrSVbljTbPSDXDsUJG8BqdcKRmSsYVQxc68RMv fehrtg9ZtMGKZmLOfNGr+bz+kTcsx4f3p937KLwY0fFuTgM006wwVoXr7FwtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS0k1ydQRuiwE7dCrDLrzNrEpElYwHwYDVR0j BBgwFoAUgB0bTua7adP32i2p372u+yl4NyQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFjODAxYTAtNzkxMi00YjAxLWEyODEtODgwMjQ2MjRhMmQ0LzAvODAxRDFCNEVF NkJCNjlEM0Y3REEyREE5REZCREFFRkIyOTc4MzcyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MDFEMUI0RUU2QkI2OUQzRjdEQTJEQTlERkJEQUVGQjI5Nzgz NzI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFjODAxYTAtNzkxMi00YjAxLWEy ODEtODgwMjQ2MjRhMmQ0LzAvODAxRDFCNEVFNkJCNjlEM0Y3REEyREE5REZCREFF RkIyOTc4MzcyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzMfZO5G9qn7ZxdfpbStQGg7r2PmW1vAIKZ 71jq02iq+jtUf/OQF8Oo0AqQy2npvaoIep6d4UnsZY1YcLfmqrnKYcLrhLROwdkC aOJe+D/+pS8GxF8UjVW3y7FNfiBLbPslnvMLIhSc8njCw3S9vRWy0GYj7LuN42O2 mNNU8OJgjzd4jF/tQR6Ke8ajzgGU8UBEBmfVDAxjxuOtYIDwa2nnq9nBnatKAmJ1 nDyPDJvZmiPf1ktwkRUSxen3Gls6eaiIqLLXlOgqf4Z0REeg5ciaWGYZlCdXyjQp aAkWJqjjysw2fCFayTCZwJnTE/CanRcY4zcqbuOVHUP71Q6LBNE= -----END CERTIFICATE-----Generated at Thu Sep 3 05:56:48 2026 by rpki-client