$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.mft File: 1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.mft (raw, json) Hash identifier: 1Iy2fu5/ZGW1eJgNygWXHgxbmncMjvKk6ZJ9DMSn9I4= Subject key identifier: EB:0B:4A:1B:AC:99:01:44:6F:69:C6:1E:00:07:59:5E:8D:62:3A:F9 Authority key identifier: 1F:D1:38:81:4E:D6:ED:10:A7:4A:ED:E6:20:EC:C6:CB:41:4D:8D:49 Certificate issuer: /CN=1FD138814ED6ED10A74AEDE620ECC6CB414D8D49 Certificate serial: 546374E598C3FD91FB396A82D0A9E81BDDD3C8A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 00:43:57 +0000 Manifest this update: Thu 03 Sep 2026 00:38:57 +0000 Manifest next update: Fri 04 Sep 2026 02:41:57 +0000 Files and hashes: 1: AS38755.roa (hash: rrRHicGoTqQQ5KVonJVs0FP/MR7/6NaqqXA8D/2TInc=) 2: AS135457.roa (hash: X1w4nzNuA26rXRd5yVYdj4Puf4QzWuOiYkpDYswCdZY=) 3: AS46024.roa (hash: ylmYw4/KnmlumROmFOx5Ugd+ZvIq9v4dyoc2wy3GxMY=) 4: AS38496.roa (hash: yYz1sIG6N2Kn9PvkhdiFovkBZr7zFMKsgWeqKN8ae+8=) 5: AS140421.roa (hash: NubwM9MWXF/shtYPHNCf93qRquIZw5eXxpOBi0ubSeY=) 6: AS38768.roa (hash: cYG0UjFfYvF8rnbWyEC/rqKPjOD6XMnko8jMH8VBKzc=) 7: AS138885.roa (hash: MXHah2Crj721VSI4LYqxgOTDqWKKFzAoSwM3O6/hIWs=) 8: AS24520.roa (hash: RlHOKG3iuobVB1DAMGAm+asFdd1ASONRpQ1lrWJUUMA=) 9: AS137346.roa (hash: NZ6wUFk5XR7PD9+fJ1hvHsTgRiRIMRLn5KDTlukuqTs=) 10: 1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.crl (hash: rt6/4oEhBf8tTSFvBE7VUvee+Q/Kanlw+PHmbyMLfiw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.crl rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 02:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:63:74:e5:98:c3:fd:91:fb:39:6a:82:d0:a9:e8:1b:dd:d3:c8:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD138814ED6ED10A74AEDE620ECC6CB414D8D49 Validity Not Before: Sep 3 00:38:57 2026 GMT Not After : Sep 4 02:41:57 2026 GMT Subject: CN=EB0B4A1BAC9901446F69C61E0007595E8D623AF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ee:da:c3:b7:05:e1:89:48:2a:e6:c1:3f:c1: 5c:8b:ed:78:86:1b:f9:f1:9e:a1:12:4b:e8:f7:ae: d4:a9:79:04:9b:27:46:ce:67:0c:ec:2c:15:5f:0b: 49:16:c4:8f:23:ca:9e:b3:bc:d6:62:12:6e:6e:e2: b0:92:4d:18:ac:9d:45:11:39:6b:e2:03:4c:5f:d7: 35:60:02:28:18:ed:af:9f:7d:0e:26:f0:9e:33:4b: 8b:76:c0:5d:f2:d5:83:11:25:22:f2:9f:05:37:24: ef:fa:cf:a4:72:db:50:b6:29:27:a0:0b:da:14:e2: b0:6e:eb:79:b8:4b:17:f3:87:97:82:83:bb:20:7a: a5:50:ca:22:ea:36:9a:39:ab:7f:88:39:0f:55:7d: 90:9e:30:69:d6:6f:3d:f8:12:e7:c6:44:91:bd:7e: d5:be:e7:13:60:cf:ec:45:fd:26:7f:8d:a4:78:4a: dc:10:c2:a8:b6:a8:39:87:ab:5b:3b:d3:cb:fa:9e: 77:4f:3d:c0:42:14:f3:45:d5:c6:75:8b:75:cb:6a: 93:b7:9f:76:16:e6:24:7e:e1:aa:ab:9a:a8:29:36: cc:19:9f:30:11:01:fe:26:a8:19:0b:65:5f:e5:16: b4:49:9c:c4:e1:bc:53:bf:eb:8f:03:53:70:1f:b3: be:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0B:4A:1B:AC:99:01:44:6F:69:C6:1E:00:07:59:5E:8D:62:3A:F9 X509v3 Authority Key Identifier: keyid:1F:D1:38:81:4E:D6:ED:10:A7:4A:ED:E6:20:EC:C6:CB:41:4D:8D:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:1f:20:43:71:6b:0c:37:4e:b1:3d:5f:40:b4:a0:96:e3:0b: 3b:e3:78:96:5f:93:7a:b7:42:43:c5:73:37:8b:87:60:02:62: 8c:a1:73:95:46:3b:d3:c7:46:12:ab:7e:a0:82:86:6e:e4:cb: a2:95:60:60:8f:06:51:1a:67:be:fe:8c:dc:58:2e:0e:2f:d5: 48:b4:ff:9e:26:f7:ef:9b:cc:77:56:03:ab:89:cb:29:04:95: ae:24:d5:35:14:3c:19:f6:34:ea:cf:a6:57:7b:45:e8:23:2e: 1a:91:2d:d5:fc:09:15:e3:7f:7a:93:1a:ed:a4:ce:12:98:a4: c3:38:de:0e:38:a9:0e:b1:08:30:72:38:a2:63:26:ec:67:54: f9:04:75:60:ee:ba:60:22:87:68:52:d8:71:c4:35:eb:75:49: 87:6e:a8:68:0a:81:63:bc:7c:40:98:cb:4d:5e:3a:48:f0:10: 09:8f:c4:76:9b:f6:79:d2:6e:35:a6:81:54:5d:ce:f8:1f:f1: e9:55:cd:9d:9e:2a:84:92:20:9c:dc:10:18:bb:b2:7b:8f:d6: 82:1a:fe:65:0f:30:ae:9e:2f:8f:7e:da:28:a0:db:d2:35:5a: e8:f6:50:e0:fd:87:0b:f8:3b:26:f7:f6:4d:61:22:f3:ec:60: fd:dd:9d:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVGN05ZjD/ZH7OWqC0KnoG93TyKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZEMTM4ODE0RUQ2RUQxMEE3NEFFREU2MjBFQ0M2Q0I0 MTREOEQ0OTAeFw0yNjA5MDMwMDM4NTdaFw0yNjA5MDQwMjQxNTdaMDMxMTAvBgNV BAMTKEVCMEI0QTFCQUM5OTAxNDQ2RjY5QzYxRTAwMDc1OTVFOEQ2MjNBRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC37trDtwXhiUgq5sE/wVyL7XiG G/nxnqESS+j3rtSpeQSbJ0bOZwzsLBVfC0kWxI8jyp6zvNZiEm5u4rCSTRisnUUR OWviA0xf1zVgAigY7a+ffQ4m8J4zS4t2wF3y1YMRJSLynwU3JO/6z6Ry21C2KSeg C9oU4rBu63m4Sxfzh5eCg7sgeqVQyiLqNpo5q3+IOQ9VfZCeMGnWbz34EufGRJG9 ftW+5xNgz+xF/SZ/jaR4StwQwqi2qDmHq1s708v6nndPPcBCFPNF1cZ1i3XLapO3 n3YW5iR+4aqrmqgpNswZnzARAf4mqBkLZV/lFrRJnMThvFO/648DU3Afs74RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6wtKG6yZAURvacYeAAdZXo1iOvkwHwYDVR0j BBgwFoAUH9E4gU7W7RCnSu3mIOzGy0FNjUkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTg3MzQ5ZmItNDY1ZS00ZThiLWE5NzQtOTBlOTM5YmNiMGZiLzAvMUZEMTM4ODE0 RUQ2RUQxMEE3NEFFREU2MjBFQ0M2Q0I0MTREOEQ0OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRkQxMzg4MTRFRDZFRDEwQTc0QUVERTYyMEVDQzZDQjQxNEQ4 RDQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTg3MzQ5ZmItNDY1ZS00ZThiLWE5 NzQtOTBlOTM5YmNiMGZiLzAvMUZEMTM4ODE0RUQ2RUQxMEE3NEFFREU2MjBFQ0M2 Q0I0MTREOEQ0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJcfIENxaww3TrE9X0C0oJbjCzvjeJZfk3q3 QkPFczeLh2ACYoyhc5VGO9PHRhKrfqCChm7ky6KVYGCPBlEaZ77+jNxYLg4v1Ui0 /54m9++bzHdWA6uJyykEla4k1TUUPBn2NOrPpld7RegjLhqRLdX8CRXjf3qTGu2k zhKYpMM43g44qQ6xCDByOKJjJuxnVPkEdWDuumAih2hS2HHENet1SYduqGgKgWO8 fECYy01eOkjwEAmPxHab9nnSbjWmgVRdzvgf8elVzZ2eKoSSIJzcEBi7snuP1oIa /mUPMK6eL49+2iig29I1Wuj2UOD9hwv4Oyb39k1hIvPsYP3dncQ= -----END CERTIFICATE-----Generated at Thu Sep 3 14:16:36 2026 by rpki-client