$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft File: 0D2802EC43905EEA387602B994B8B579041C8507.mft (raw, json) Hash identifier: bnPIeR2YQRqdTK38FFYG41PRH+YJ9uOkF3Q+OS/fqts= Subject key identifier: 83:2C:DE:A8:70:3D:D9:E6:0A:38:37:F8:96:71:56:66:97:EF:26:B2 Authority key identifier: 0D:28:02:EC:43:90:5E:EA:38:76:02:B9:94:B8:B5:79:04:1C:85:07 Certificate issuer: /CN=0D2802EC43905EEA387602B994B8B579041C8507 Certificate serial: 5B45DDE71B4185F2782BBF87EACF08188C31A0F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 21:29:17 +0000 Manifest this update: Wed 02 Sep 2026 21:24:17 +0000 Manifest next update: Thu 03 Sep 2026 22:39:17 +0000 Files and hashes: 1: 3130332e3133372e33382e302f32332d3233203d3e20313534343130.roa (hash: vSt0O12iEjIfejoamLvxd1FSHE5umSqpwwku+iFtKN4=) 2: 3130332e3133372e33382e302f32332d3234203d3e20313338383232.roa (hash: cszw5piIkmysL+SZS8lElBtByo5QIz3Wp1PoZt/A7vY=) 3: 323430343a613463303a666163653a3a2f34382d3438203d3e20313338383232.roa (hash: qd7L3Ietl/ythiF1v/evymxuReB0q3gMulxwNnwRr60=) 4: 323430343a613463303a3a2f33322d3438203d3e20313338383232.roa (hash: reeIiuxuHqr4MgHpxEsClw20lXN/gmt1yXdlXdiGltI=) 5: 0D2802EC43905EEA387602B994B8B579041C8507.crl (hash: 5RAHLnro/PjOuQ70GzMMD5SIFaDM0LanrVKLmWPHja8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.crl rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:45:dd:e7:1b:41:85:f2:78:2b:bf:87:ea:cf:08:18:8c:31:a0:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D2802EC43905EEA387602B994B8B579041C8507 Validity Not Before: Sep 2 21:24:17 2026 GMT Not After : Sep 3 22:39:17 2026 GMT Subject: CN=832CDEA8703DD9E60A3837F89671566697EF26B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6d:41:4e:87:0c:9a:61:58:c2:22:a2:48:8d: fd:70:01:31:6a:ee:9c:90:70:eb:4a:46:ab:a3:f3: ab:09:e8:7e:99:d8:6a:9f:93:97:9d:96:fc:f5:25: a8:ec:de:75:a6:a8:81:54:4f:e7:fb:3e:67:02:ce: b0:8d:bf:55:a4:a7:43:16:9d:fc:c1:11:9b:26:e0: f1:1d:19:5f:e4:33:8e:45:04:36:3a:00:e7:91:a4: a7:06:6f:cd:b0:fb:dd:cb:24:83:63:3d:7b:da:0c: 8f:61:e0:02:1d:2d:c8:72:cf:8a:7b:de:09:82:ad: 6a:d9:3b:57:ab:51:ae:78:f7:d8:3e:2c:c6:51:9a: c1:09:eb:42:87:dc:b2:92:64:1b:7b:af:68:42:7b: fc:73:f4:ff:a4:83:33:30:04:f2:49:bf:58:65:d3: 50:bf:94:6e:ad:f3:b1:61:17:20:7c:07:3d:83:1f: b7:ec:bb:3e:bf:ec:07:3c:94:d8:a0:ab:9f:36:fd: 2b:a5:bf:ab:fc:1d:3d:76:d2:8d:4d:58:e5:29:b4: f3:55:77:0a:eb:71:5b:b8:74:78:86:42:e8:97:00: dc:f8:2e:f1:cf:4f:9f:75:d1:d2:ce:16:87:37:a0: 1f:98:c4:f6:42:2a:84:f1:1e:16:b9:3d:f5:7b:c1: fd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2C:DE:A8:70:3D:D9:E6:0A:38:37:F8:96:71:56:66:97:EF:26:B2 X509v3 Authority Key Identifier: keyid:0D:28:02:EC:43:90:5E:EA:38:76:02:B9:94:B8:B5:79:04:1C:85:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:81:3c:a3:d8:15:6a:fd:36:01:d7:17:12:c3:ad:67:02:73: 68:97:38:ef:8d:7b:71:fb:bd:d7:5c:ba:a4:17:4e:3c:6f:1a: a0:4f:d9:f4:72:e1:76:04:dd:a1:a9:ce:58:b5:51:15:e8:9e: 2f:dd:97:c7:e3:d1:37:1d:df:02:94:14:0f:c6:44:94:7e:52: 49:b4:7a:e4:73:5b:f8:4f:3a:dc:73:e9:db:89:c9:9e:19:a3: 57:1a:c1:14:5a:d7:e9:b5:e4:1c:6c:0f:cc:33:01:0c:e1:f6: 81:38:76:dc:12:71:54:d6:0c:3a:6a:dd:9b:a2:35:b9:63:a9: 06:0b:d2:a2:bd:f8:51:c4:13:ab:df:42:26:3b:73:f4:35:70: fe:1b:6c:67:b4:07:b1:1e:78:0b:0e:1d:bc:d1:2c:ef:ef:63: 6b:20:84:25:9d:ff:ce:b7:4e:2b:5a:6b:7c:28:af:a6:5e:2e: ab:94:dc:03:b9:75:c3:79:65:4e:c6:36:c9:63:56:bd:e6:4a: ef:d8:7f:77:3f:b1:5b:6c:3e:60:33:7f:59:ed:c3:1b:57:e6: 24:fd:29:2e:f5:1a:91:73:47:f1:99:16:be:be:e7:41:57:68: 4c:b6:99:e3:2f:f0:df:b7:d9:d7:58:66:8e:9e:3e:c9:48:3c: 02:79:2e:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW0Xd5xtBhfJ4K7+H6s8IGIwxoPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQyODAyRUM0MzkwNUVFQTM4NzYwMkI5OTRCOEI1Nzkw NDFDODUwNzAeFw0yNjA5MDIyMTI0MTdaFw0yNjA5MDMyMjM5MTdaMDMxMTAvBgNV BAMTKDgzMkNERUE4NzAzREQ5RTYwQTM4MzdGODk2NzE1NjY2OTdFRjI2QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWbUFOhwyaYVjCIqJIjf1wATFq 7pyQcOtKRquj86sJ6H6Z2Gqfk5edlvz1Jajs3nWmqIFUT+f7PmcCzrCNv1Wkp0MW nfzBEZsm4PEdGV/kM45FBDY6AOeRpKcGb82w+93LJINjPXvaDI9h4AIdLchyz4p7 3gmCrWrZO1erUa5499g+LMZRmsEJ60KH3LKSZBt7r2hCe/xz9P+kgzMwBPJJv1hl 01C/lG6t87FhFyB8Bz2DH7fsuz6/7Ac8lNigq582/Sulv6v8HT120o1NWOUptPNV dwrrcVu4dHiGQuiXANz4LvHPT5910dLOFoc3oB+YxPZCKoTxHha5PfV7wf3rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgyzeqHA92eYKODf4lnFWZpfvJrIwHwYDVR0j BBgwFoAUDSgC7EOQXuo4dgK5lLi1eQQchQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTNiYmYxZGEtZTMxNy00OGVmLWFkNmQtZmU4YThiZjA4NDAwLzAvMEQyODAyRUM0 MzkwNUVFQTM4NzYwMkI5OTRCOEI1NzkwNDFDODUwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRDI4MDJFQzQzOTA1RUVBMzg3NjAyQjk5NEI4QjU3OTA0MUM4 NTA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTNiYmYxZGEtZTMxNy00OGVmLWFk NmQtZmU4YThiZjA4NDAwLzAvMEQyODAyRUM0MzkwNUVFQTM4NzYwMkI5OTRCOEI1 NzkwNDFDODUwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+BPKPYFWr9NgHXFxLDrWcCc2iXOO+Ne3H7 vddcuqQXTjxvGqBP2fRy4XYE3aGpzli1URXoni/dl8fj0Tcd3wKUFA/GRJR+Ukm0 euRzW/hPOtxz6duJyZ4Zo1cawRRa1+m15BxsD8wzAQzh9oE4dtwScVTWDDpq3Zui NbljqQYL0qK9+FHEE6vfQiY7c/Q1cP4bbGe0B7EeeAsOHbzRLO/vY2sghCWd/863 Titaa3wor6ZeLquU3AO5dcN5ZU7GNsljVr3mSu/Yf3c/sVtsPmAzf1ntwxtX5iT9 KS71GpFzR/GZFr6+50FXaEy2meMv8N+32ddYZo6ePslIPAJ5Lt0= -----END CERTIFICATE-----Generated at Thu Sep 3 09:45:41 2026 by rpki-client