$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft File: 01572889DF1075E65143A4EF4BC1D8C749046C13.mft (raw, json) Hash identifier: PMJQssPu2OuyjsmK3ygf017g4uf2rhV1X10k+3G/T1s= Subject key identifier: 80:D6:A4:95:EA:90:41:3F:D3:FA:27:1D:80:70:BE:06:3F:63:1E:C2 Authority key identifier: 01:57:28:89:DF:10:75:E6:51:43:A4:EF:4B:C1:D8:C7:49:04:6C:13 Certificate issuer: /CN=01572889DF1075E65143A4EF4BC1D8C749046C13 Certificate serial: 6EAA1B17AEF528FED3AAB863211F3E58139D9A9B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01572889DF1075E65143A4EF4BC1D8C749046C13.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 19:36:51 +0000 Manifest this update: Wed 02 Sep 2026 19:31:51 +0000 Manifest next update: Thu 03 Sep 2026 22:42:51 +0000 Files and hashes: 1: 3130332e3134362e36322e302f32332d3234203d3e20313339343537.roa (hash: fXIslrIHsJvjLRQnP9cWAs1QTJuR4Stfwh7a8LYxHm8=) 2: 323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa (hash: oMj1Nm7h+Y4mu9LBu3K/xKLS+Wp19Y5meMISqDSZ+JY=) 3: 01572889DF1075E65143A4EF4BC1D8C749046C13.crl (hash: UjoP7PYYJYFhUQukN5KltExrqWXTf0vdCmeU2pGI4B4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.crl rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01572889DF1075E65143A4EF4BC1D8C749046C13.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 22:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:aa:1b:17:ae:f5:28:fe:d3:aa:b8:63:21:1f:3e:58:13:9d:9a:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01572889DF1075E65143A4EF4BC1D8C749046C13 Validity Not Before: Sep 2 19:31:51 2026 GMT Not After : Sep 3 22:42:51 2026 GMT Subject: CN=80D6A495EA90413FD3FA271D8070BE063F631EC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:25:53:5b:2d:19:3d:2d:3f:70:15:bc:1a:cd: 83:19:f5:db:f7:b6:7b:e9:8d:5f:37:62:1f:74:aa: da:04:73:ed:ba:e4:3d:22:7a:d3:a9:40:2b:a4:57: 41:3d:05:14:e2:b2:9e:e3:bb:78:93:72:d8:10:89: 32:d0:db:ac:11:b8:09:4c:da:ae:f3:2e:65:54:3f: a6:27:28:66:c1:5d:73:30:16:cd:33:25:b7:05:81: 84:ce:2b:78:8f:59:c2:30:18:f4:fd:7c:ef:94:4d: 67:97:72:c3:bb:65:ae:fa:e7:f4:e2:1f:38:08:cc: 60:e5:20:c3:99:0d:ed:e8:38:d5:d6:a1:1c:00:2d: 00:68:21:dd:b9:81:19:69:93:0c:57:0d:e0:59:3e: 18:51:f6:69:81:f5:b2:7f:37:49:75:fa:4b:3d:5e: df:1f:1b:21:cc:eb:33:e3:83:33:ab:cf:6e:0f:8c: 9a:80:83:80:44:3a:f5:cc:ad:02:8b:40:93:8e:74: 2e:2e:aa:84:bd:15:7b:eb:24:01:04:94:2f:37:89: dd:51:4a:51:4b:8a:4a:f0:17:30:d0:e1:78:32:08: dd:2f:7f:bc:49:62:24:02:70:d7:55:39:f8:62:30: e5:61:22:68:cb:7b:dd:1b:99:84:7c:be:63:c0:18: c5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D6:A4:95:EA:90:41:3F:D3:FA:27:1D:80:70:BE:06:3F:63:1E:C2 X509v3 Authority Key Identifier: keyid:01:57:28:89:DF:10:75:E6:51:43:A4:EF:4B:C1:D8:C7:49:04:6C:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01572889DF1075E65143A4EF4BC1D8C749046C13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ad:0d:6b:e1:c2:db:16:1a:59:99:57:8a:11:9a:8d:f7:f8: c6:56:b8:89:0e:d1:c6:90:dc:62:b0:23:e7:f1:f5:22:e5:55: c3:75:dc:79:a5:9f:c8:7d:b6:95:22:d9:e3:21:b2:93:1f:e7: 4b:51:38:51:fa:e7:3e:48:12:b7:48:ed:e3:3a:a2:05:73:07: 1c:e2:bb:1c:bb:1e:3d:52:5a:0e:3b:9e:1b:63:43:20:5a:07: b1:27:1c:a3:20:6a:2d:5f:c2:1e:ae:e5:9b:10:7e:d2:b9:2b: 95:69:5d:cb:f4:c3:4f:d9:f7:32:89:24:0c:27:d1:57:56:66: 98:44:c2:25:6b:1c:82:ec:5f:83:a2:b7:4c:46:6a:54:16:e6: cb:e8:16:ab:3b:4f:eb:f0:f0:19:99:cf:11:6e:84:40:81:d8: 53:ca:8d:5b:a5:77:ad:96:fb:8f:11:f9:95:ec:7d:ac:a5:02: 65:d1:f8:6d:8f:3b:36:fd:58:b6:d2:8a:51:9e:e2:11:3c:83: ee:15:51:e3:74:44:c2:f6:0c:08:52:bd:be:3c:4e:51:3b:34: 80:75:18:b5:66:90:ff:07:29:0a:7d:eb:68:e2:42:ce:f6:81: be:88:ec:4f:6c:f0:52:d8:ee:66:ef:31:d9:63:bb:35:87:7c: 49:3e:0f:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbqobF671KP7TqrhjIR8+WBOdmpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1NzI4ODlERjEwNzVFNjUxNDNBNEVGNEJDMUQ4Qzc0 OTA0NkMxMzAeFw0yNjA5MDIxOTMxNTFaFw0yNjA5MDMyMjQyNTFaMDMxMTAvBgNV BAMTKDgwRDZBNDk1RUE5MDQxM0ZEM0ZBMjcxRDgwNzBCRTA2M0Y2MzFFQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaJVNbLRk9LT9wFbwazYMZ9dv3 tnvpjV83Yh90qtoEc+265D0ietOpQCukV0E9BRTisp7ju3iTctgQiTLQ26wRuAlM 2q7zLmVUP6YnKGbBXXMwFs0zJbcFgYTOK3iPWcIwGPT9fO+UTWeXcsO7Za765/Ti HzgIzGDlIMOZDe3oONXWoRwALQBoId25gRlpkwxXDeBZPhhR9mmB9bJ/N0l1+ks9 Xt8fGyHM6zPjgzOrz24PjJqAg4BEOvXMrQKLQJOOdC4uqoS9FXvrJAEElC83id1R SlFLikrwFzDQ4XgyCN0vf7xJYiQCcNdVOfhiMOVhImjLe90bmYR8vmPAGMXVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgNakleqQQT/T+icdgHC+Bj9jHsIwHwYDVR0j BBgwFoAUAVcoid8QdeZRQ6TvS8HYx0kEbBMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGVhNzkzNDAtNGRiMi00NThkLTk1ZGQtYWYyMGI0ZmNkYjNkLzAvMDE1NzI4ODlE RjEwNzVFNjUxNDNBNEVGNEJDMUQ4Qzc0OTA0NkMxMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMTU3Mjg4OURGMTA3NUU2NTE0M0E0RUY0QkMxRDhDNzQ5MDQ2 QzEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGVhNzkzNDAtNGRiMi00NThkLTk1 ZGQtYWYyMGI0ZmNkYjNkLzAvMDE1NzI4ODlERjEwNzVFNjUxNDNBNEVGNEJDMUQ4 Qzc0OTA0NkMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqtDWvhwtsWGlmZV4oRmo33+MZWuIkO0caQ 3GKwI+fx9SLlVcN13Hmln8h9tpUi2eMhspMf50tROFH65z5IErdI7eM6ogVzBxzi uxy7Hj1SWg47nhtjQyBaB7EnHKMgai1fwh6u5ZsQftK5K5VpXcv0w0/Z9zKJJAwn 0VdWZphEwiVrHILsX4Oit0xGalQW5svoFqs7T+vw8BmZzxFuhECB2FPKjVuld62W +48R+ZXsfaylAmXR+G2POzb9WLbSilGe4hE8g+4VUeN0RML2DAhSvb48TlE7NIB1 GLVmkP8HKQp962jiQs72gb6I7E9s8FLY7mbvMdljuzWHfEk+D3Y= -----END CERTIFICATE-----Generated at Thu Sep 3 16:21:39 2026 by rpki-client