$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft File: 986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft (raw, json) Hash identifier: RcsUIeaqRvIaPnirxcM59OSITiUDxyJVyKkn2L6hD08= Subject key identifier: 73:ED:B2:99:0F:D4:B5:2A:81:E3:60:D8:0A:78:4A:5A:27:A0:F4:F1 Authority key identifier: 98:6A:A3:A0:6E:40:D1:71:D9:93:DC:74:DE:F4:BE:49:8C:29:ED:C5 Certificate issuer: /CN=986AA3A06E40D171D993DC74DEF4BE498C29EDC5 Certificate serial: 546980B0A5A0931717487876615F79BE4B458B73 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 09:14:57 +0000 Manifest this update: Wed 02 Sep 2026 09:09:57 +0000 Manifest next update: Thu 03 Sep 2026 10:41:57 +0000 Files and hashes: 1: 986AA3A06E40D171D993DC74DEF4BE498C29EDC5.crl (hash: LVJFj74BQeUAL+QQ+PzxiEAu4XIyvnqYumkt/gI7z8U=) 2: 3130332e3133302e38302e302f32332d3234203d3e20313339393737.roa (hash: CodcG2RlcElofIyHkhWkjp7iwOM0brF/BMzNO8nhSZI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.crl rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 10:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:69:80:b0:a5:a0:93:17:17:48:78:76:61:5f:79:be:4b:45:8b:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=986AA3A06E40D171D993DC74DEF4BE498C29EDC5 Validity Not Before: Sep 2 09:09:57 2026 GMT Not After : Sep 3 10:41:57 2026 GMT Subject: CN=73EDB2990FD4B52A81E360D80A784A5A27A0F4F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f0:23:c3:a7:b7:48:d7:84:73:cf:e0:46:cf: d6:1e:54:d9:ee:99:9b:7a:44:df:10:f7:3c:52:e5: 49:80:ae:04:48:e2:c0:32:d5:eb:3d:74:0a:e0:46: 01:b7:be:cd:13:6d:ab:1a:97:87:1d:2c:85:c7:71: 6f:46:5d:e9:f9:90:60:ac:6e:39:c5:18:34:8b:88: f4:f2:65:7e:23:74:df:86:71:00:d1:05:1b:1c:fc: 6f:f5:e9:22:20:bc:79:a9:e7:e2:16:1d:c2:02:a8: 99:92:df:9b:ab:84:01:5d:4d:01:a0:26:84:8e:91: 73:22:00:0c:e6:02:8b:be:b3:6e:ba:82:ac:b8:75: 1a:76:ee:48:a7:cf:e6:ab:7e:15:d4:59:ac:4f:e5: 45:f6:15:34:7a:bf:6d:9d:2d:e7:6a:b7:d9:f2:80: 87:11:02:8b:4f:7d:c5:c7:ac:da:e4:c7:41:10:7c: 5a:00:35:7b:c5:d8:1a:67:16:d3:ca:da:08:e8:2b: 21:0a:c6:89:4b:11:da:61:c5:e3:54:ea:50:4d:93: b8:15:fd:6d:41:7d:06:b0:f4:89:3b:33:04:c2:db: d2:f0:d3:df:ab:bd:73:65:b3:be:cb:d0:d9:fb:b7: 53:b2:f3:42:8e:32:d7:ff:a8:10:71:49:b7:15:48: 38:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:ED:B2:99:0F:D4:B5:2A:81:E3:60:D8:0A:78:4A:5A:27:A0:F4:F1 X509v3 Authority Key Identifier: keyid:98:6A:A3:A0:6E:40:D1:71:D9:93:DC:74:DE:F4:BE:49:8C:29:ED:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:75:3d:0e:da:d8:19:58:70:bf:1d:0c:a2:9b:e3:b3:32:ba: 0b:58:ad:1d:3d:46:99:42:26:54:fd:ea:f7:1d:1a:2c:8f:55: 8c:11:ec:1b:65:26:88:a8:3d:37:22:21:e7:32:88:8c:bd:03: 5e:cc:be:0f:48:75:f3:de:6a:0e:b8:67:7d:7e:fb:5e:b7:eb: fd:ad:8c:bb:b8:19:a3:10:10:5d:04:7b:f3:0c:cd:b0:5c:77: 09:b0:8c:83:1e:aa:06:55:a4:2d:a5:ea:72:f2:a1:8f:3e:72: 8f:47:37:e0:29:a1:7e:da:c5:58:bb:2c:ea:14:3e:9c:ac:58: 2d:42:43:c5:5c:27:76:8c:31:ee:bc:af:be:b6:0f:e9:6b:08: 42:39:e7:1e:61:98:ab:d0:8b:42:9c:cb:58:a6:08:f7:75:26: 7c:b2:85:e1:47:e0:c0:ff:70:64:03:41:3e:34:33:0b:33:14: 2f:5a:01:db:9f:39:89:03:2f:5d:d3:86:f0:6c:f0:74:47:8b: fd:a0:a0:6e:54:fe:25:dd:d7:3f:f8:ca:17:63:55:cc:f4:1c: 95:2e:28:3b:e1:0d:5c:71:bd:34:49:f5:02:62:13:e2:d7:7b: b9:d7:b0:92:51:2b:18:f7:80:b4:5c:d2:9b:74:8f:81:4b:eb: 0b:10:ce:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVGmAsKWgkxcXSHh2YV95vktFi3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg2QUEzQTA2RTQwRDE3MUQ5OTNEQzc0REVGNEJFNDk4 QzI5RURDNTAeFw0yNjA5MDIwOTA5NTdaFw0yNjA5MDMxMDQxNTdaMDMxMTAvBgNV BAMTKDczRURCMjk5MEZENEI1MkE4MUUzNjBEODBBNzg0QTVBMjdBMEY0RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY8CPDp7dI14Rzz+BGz9YeVNnu mZt6RN8Q9zxS5UmArgRI4sAy1es9dArgRgG3vs0Tbasal4cdLIXHcW9GXen5kGCs bjnFGDSLiPTyZX4jdN+GcQDRBRsc/G/16SIgvHmp5+IWHcICqJmS35urhAFdTQGg JoSOkXMiAAzmAou+s266gqy4dRp27kinz+arfhXUWaxP5UX2FTR6v22dLedqt9ny gIcRAotPfcXHrNrkx0EQfFoANXvF2BpnFtPK2gjoKyEKxolLEdphxeNU6lBNk7gV /W1BfQaw9Ik7MwTC29Lw09+rvXNls77L0Nn7t1Oy80KOMtf/qBBxSbcVSDjlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc+2ymQ/UtSqB42DYCnhKWieg9PEwHwYDVR0j BBgwFoAUmGqjoG5A0XHZk9x03vS+SYwp7cUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTRhZTU3YjMtNDZhMi00MjNkLWIyNDQtMDNmZmVlMTA1Yjc3LzAvOTg2QUEzQTA2 RTQwRDE3MUQ5OTNEQzc0REVGNEJFNDk4QzI5RURDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODZBQTNBMDZFNDBEMTcxRDk5M0RDNzRERUY0QkU0OThDMjlF REM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTRhZTU3YjMtNDZhMi00MjNkLWIy NDQtMDNmZmVlMTA1Yjc3LzAvOTg2QUEzQTA2RTQwRDE3MUQ5OTNEQzc0REVGNEJF NDk4QzI5RURDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZ1PQ7a2BlYcL8dDKKb47MyugtYrR09RplC JlT96vcdGiyPVYwR7BtlJoioPTciIecyiIy9A17Mvg9IdfPeag64Z31++1636/2t jLu4GaMQEF0Ee/MMzbBcdwmwjIMeqgZVpC2l6nLyoY8+co9HN+ApoX7axVi7LOoU PpysWC1CQ8VcJ3aMMe68r762D+lrCEI55x5hmKvQi0Kcy1imCPd1JnyyheFH4MD/ cGQDQT40MwszFC9aAdufOYkDL13ThvBs8HRHi/2goG5U/iXd1z/4yhdjVcz0HJUu KDvhDVxxvTRJ9QJiE+LXe7nXsJJRKxj3gLRc0pt0j4FL6wsQzpY= -----END CERTIFICATE-----Generated at Thu Sep 3 03:13:20 2026 by rpki-client