$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft File: D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft (raw, json) Hash identifier: MgxHEEn6Nn19DEsgaO83oVrBi3siaV9cuPeIwYXcZg8= Subject key identifier: F0:D2:17:52:32:4C:83:D4:10:FD:24:B8:17:CD:E1:23:DF:E3:1E:E8 Authority key identifier: D6:0F:BD:2B:1B:51:51:C3:F4:07:34:AE:4A:95:27:7F:C9:BD:8C:BF Certificate issuer: /CN=D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF Certificate serial: 041C0A0E5B5EC86A29D543B425DFAC54C99F1CC9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 18:35:34 +0000 Manifest this update: Thu 03 Sep 2026 18:30:34 +0000 Manifest next update: Fri 04 Sep 2026 22:34:34 +0000 Files and hashes: 1: 3135372e36362e32302e302f32342d3234203d3e20313337333439.roa (hash: hKC4O+Dbys8awahI6Y0F2x8aosLXlC3tFEHhosWplhc=) 2: 3135372e36362e32312e302f32342d3234203d3e20313431353932.roa (hash: g/M/W8nBgP5S2ayXN1SiAqh0ligQCCsMJq/IueYk4OY=) 3: D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl (hash: v5SOB1fbgkfVSf1TYfUWBjx3D9WCFp4s1vJXZd8FGPQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:1c:0a:0e:5b:5e:c8:6a:29:d5:43:b4:25:df:ac:54:c9:9f:1c:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF Validity Not Before: Sep 3 18:30:34 2026 GMT Not After : Sep 4 22:34:34 2026 GMT Subject: CN=F0D21752324C83D410FD24B817CDE123DFE31EE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:50:db:2f:1b:e4:98:cb:bb:d6:8d:a7:7f:dd: 66:88:4d:c6:ce:26:bc:72:e6:a3:ee:c9:a0:89:1e: 31:03:15:d7:22:27:b8:9b:28:18:96:8d:db:ae:ad: 5e:19:eb:b9:c0:ed:01:64:24:5d:21:88:ea:d4:c7: 4d:d7:d4:83:9c:e4:a9:de:33:07:d5:b7:35:5a:16: df:58:4c:ed:4a:f5:b8:a5:27:59:5c:7f:35:ff:5c: be:eb:03:2b:99:a7:e6:48:7e:09:f1:6d:5f:31:e8: f2:74:fd:a4:56:f1:fd:ae:7e:78:ca:b8:d1:15:74: d0:f1:97:e4:de:bf:bd:f1:90:df:2b:6c:d5:7e:fd: 58:cd:00:3f:e3:94:11:92:5c:44:64:0e:75:6b:56: 49:5b:40:b3:66:41:1e:40:90:f4:33:32:63:a2:b2: 84:12:66:a6:34:c6:1d:db:60:9c:36:93:5b:2e:f8: 9e:e4:f7:fa:1e:ce:12:01:9a:8d:4f:7d:5d:d6:29: f9:30:e9:77:50:0e:3d:8f:af:16:82:8e:ba:e0:af: 33:2f:8f:80:db:72:09:d9:04:71:e4:97:96:d4:3e: 9f:2c:45:f3:62:01:76:9f:17:87:50:f5:ed:a0:f7: 61:03:08:ea:44:56:09:c4:5d:e5:68:d7:89:1d:30: 13:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D2:17:52:32:4C:83:D4:10:FD:24:B8:17:CD:E1:23:DF:E3:1E:E8 X509v3 Authority Key Identifier: keyid:D6:0F:BD:2B:1B:51:51:C3:F4:07:34:AE:4A:95:27:7F:C9:BD:8C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:94:c8:8c:fc:3b:41:27:0a:91:c3:07:f9:b6:b1:1e:c1:7f: 3c:e9:f9:11:fc:4c:b2:62:d0:67:19:34:06:e6:4f:a1:c9:fa: fe:a9:48:ad:bc:28:eb:a0:f9:bc:eb:37:c0:87:68:92:dc:60: 4e:ac:91:ba:5e:c0:8b:ca:af:b9:28:e8:3f:1c:ff:f8:b9:9e: e6:35:3e:88:80:63:39:05:ca:12:0b:35:eb:12:f4:34:83:97: 16:a9:95:4f:27:85:ef:ce:e3:c5:81:8f:d0:99:7e:d2:fc:f8: f4:4f:f1:af:04:38:83:4c:bc:d1:d1:e4:87:a8:52:cd:31:74: b9:c6:9e:74:e2:ec:07:08:16:16:ba:7b:2b:0b:e3:9b:04:7b: 00:1f:01:a3:5b:ff:58:63:75:f1:18:52:45:0d:ac:bb:57:2f: b7:85:26:68:3d:6c:f1:46:03:d4:1d:25:c2:94:3f:d7:31:28: 65:e3:03:10:5e:81:97:47:81:44:c2:ab:33:33:fb:36:c0:ca: c1:f5:47:d6:42:63:f5:4c:eb:eb:03:f0:47:04:f7:51:17:d3: e7:57:cc:e5:68:90:20:0e:8d:1f:5c:4a:19:ee:ec:47:3f:4a: 55:8f:56:fa:5c:15:59:75:d8:95:f2:cb:48:aa:a7:37:32:06: 44:ab:4a:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBBwKDlteyGop1UO0Jd+sVMmfHMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYwRkJEMkIxQjUxNTFDM0Y0MDczNEFFNEE5NTI3N0ZD OUJEOENCRjAeFw0yNjA5MDMxODMwMzRaFw0yNjA5MDQyMjM0MzRaMDMxMTAvBgNV BAMTKEYwRDIxNzUyMzI0QzgzRDQxMEZEMjRCODE3Q0RFMTIzREZFMzFFRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXUNsvG+SYy7vWjad/3WaITcbO Jrxy5qPuyaCJHjEDFdciJ7ibKBiWjduurV4Z67nA7QFkJF0hiOrUx03X1IOc5Kne MwfVtzVaFt9YTO1K9bilJ1lcfzX/XL7rAyuZp+ZIfgnxbV8x6PJ0/aRW8f2ufnjK uNEVdNDxl+Tev73xkN8rbNV+/VjNAD/jlBGSXERkDnVrVklbQLNmQR5AkPQzMmOi soQSZqY0xh3bYJw2k1su+J7k9/oezhIBmo1PfV3WKfkw6XdQDj2PrxaCjrrgrzMv j4DbcgnZBHHkl5bUPp8sRfNiAXafF4dQ9e2g92EDCOpEVgnEXeVo14kdMBPxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8NIXUjJMg9QQ/SS4F83hI9/jHugwHwYDVR0j BBgwFoAU1g+9KxtRUcP0BzSuSpUnf8m9jL8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjVmNWVmMTgtNmZmYS00ZDY5LThjMGMtMzUxOGNmYTg3NThlLzAvRDYwRkJEMkIx QjUxNTFDM0Y0MDczNEFFNEE5NTI3N0ZDOUJEOENCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENjBGQkQyQjFCNTE1MUMzRjQwNzM0QUU0QTk1Mjc3RkM5QkQ4 Q0JGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjVmNWVmMTgtNmZmYS00ZDY5LThj MGMtMzUxOGNmYTg3NThlLzAvRDYwRkJEMkIxQjUxNTFDM0Y0MDczNEFFNEE5NTI3 N0ZDOUJEOENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALiUyIz8O0EnCpHDB/m2sR7Bfzzp+RH8TLJi 0GcZNAbmT6HJ+v6pSK28KOug+bzrN8CHaJLcYE6skbpewIvKr7ko6D8c//i5nuY1 PoiAYzkFyhILNesS9DSDlxaplU8nhe/O48WBj9CZftL8+PRP8a8EOINMvNHR5Ieo Us0xdLnGnnTi7AcIFha6eysL45sEewAfAaNb/1hjdfEYUkUNrLtXL7eFJmg9bPFG A9QdJcKUP9cxKGXjAxBegZdHgUTCqzMz+zbAysH1R9ZCY/VM6+sD8EcE91EX0+dX zOVokCAOjR9cShnu7Ec/SlWPVvpcFVl12JXyy0iqpzcyBkSrShE= -----END CERTIFICATE-----Generated at Thu Sep 3 20:43:34 2026 by rpki-client