$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft File: A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft (raw, json) Hash identifier: eRtBsfe1YwxRA1Chzbr7asYTvX8jkpFkfaMyAb4t+1o= Subject key identifier: 17:89:7C:3E:AC:A0:DD:D3:D9:A0:41:2B:9F:3A:29:56:8A:B8:AE:08 Authority key identifier: A5:33:6F:EF:F1:11:D5:B9:25:A8:95:4E:53:C4:C9:C5:E2:2A:B8:00 Certificate issuer: /CN=A5336FEFF111D5B925A8954E53C4C9C5E22AB800 Certificate serial: 2B8295D516DCC516DC673825C233B277B5DCBB21 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft Manifest number: A2 Signing time: Mon 31 Aug 2026 20:35:19 +0000 Manifest this update: Mon 31 Aug 2026 20:30:19 +0000 Manifest next update: Tue 01 Sep 2026 21:32:19 +0000 Files and hashes: 1: 3130332e3132352e31332e302f32342d3234203d3e20313335363336.roa (hash: 8YrdvedqGs1zZAIQAtRZi80VSrXLRsF6zbtnQUstSsA=) 2: 3130332e3132352e31322e302f32342d3234203d3e20313533333137.roa (hash: AZJ4QAHlxTzcVIbJwO/UxabGeC31FjTnD/rHg0D3/ME=) 3: 3130332e3132352e31352e302f32342d3234203d3e20313335363336.roa (hash: +IUhzjX4iJxCcMgbcQWdmMHcD7sxtYcY/3hZmSmLykA=) 4: 3130332e3132352e31342e302f32342d3234203d3e20313335363336.roa (hash: m7Frx9lSqsLf1s8zbJ/qpER1sGLgEtc9hyQy6nCFDhY=) 5: A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl (hash: l8TDl3JmTo9mSSdfO8anqQAWMaa8NDaCoqQlRnck6Ac=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 21:32:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:82:95:d5:16:dc:c5:16:dc:67:38:25:c2:33:b2:77:b5:dc:bb:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5336FEFF111D5B925A8954E53C4C9C5E22AB800 Validity Not Before: Aug 31 20:30:19 2026 GMT Not After : Sep 1 21:32:19 2026 GMT Subject: CN=17897C3EACA0DDD3D9A0412B9F3A29568AB8AE08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:58:84:33:95:95:2e:f5:d6:d2:0b:ee:d8:99: 33:86:12:df:85:b0:c6:5d:09:ea:7b:63:7d:86:f2: 75:50:d7:06:2c:c2:0d:5d:e5:65:b4:1b:ec:b1:42: 2f:07:08:a7:9f:cc:f2:db:36:c9:bc:a1:4e:ca:e4: 4a:03:14:84:84:d6:35:94:96:b0:fe:23:4e:aa:ee: 1c:70:2b:e0:ff:a2:ec:86:c1:41:74:1d:7c:3d:93: f8:17:2e:2f:dc:91:5d:7e:39:d8:ef:2f:8e:d4:b8: 74:e5:25:4a:c0:5c:de:93:b0:a6:49:86:af:89:d2: a2:4c:47:a6:2d:74:c1:a6:a0:82:64:f5:cb:85:86: 4b:af:e2:9a:9d:70:5a:18:a6:d7:35:21:6b:29:c8: fb:24:12:5a:c6:cd:3f:d4:7d:67:be:a1:f2:99:29: 2f:5f:72:e4:ba:92:bf:a4:a8:bc:d6:66:a4:e7:4b: 31:4e:74:50:25:e5:77:fc:9c:6b:f6:8c:93:6a:e3: 4f:e6:cd:72:f8:c3:68:ba:5c:a1:e1:c8:e3:d8:10: eb:db:80:83:ad:ac:eb:b0:b9:2a:7c:6d:2e:94:20: 6f:38:ca:44:b1:db:bc:81:8c:0a:17:1f:a1:41:3c: 0e:ca:1a:ff:10:ea:27:d3:13:f2:9d:4e:88:20:0b: 0a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:89:7C:3E:AC:A0:DD:D3:D9:A0:41:2B:9F:3A:29:56:8A:B8:AE:08 X509v3 Authority Key Identifier: keyid:A5:33:6F:EF:F1:11:D5:B9:25:A8:95:4E:53:C4:C9:C5:E2:2A:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:43:e7:7b:13:f8:80:4c:24:4c:8a:75:2d:5d:70:18:fb:7d: 23:58:b3:6b:2f:c4:35:4f:6e:cd:54:f8:0e:a5:6c:7c:4d:36: 70:52:dc:6a:1c:cb:80:c7:e4:ef:6b:cc:a0:65:27:6d:b5:8c: 9a:f3:da:ea:58:59:16:67:0f:a7:9b:fe:5d:8b:7f:ae:42:f3: d8:e3:f7:92:47:65:40:ab:3a:f3:a3:b9:52:90:7c:8c:6a:02: 83:b7:0b:dd:71:8d:99:77:16:c9:12:9b:00:68:ef:70:25:15: 62:96:a4:2a:f4:53:00:e5:3b:e3:dd:29:4b:27:7b:0f:89:32: 1a:1a:a7:0f:b5:2a:c1:53:fb:f3:30:bb:25:33:73:7a:61:6b: f4:c9:01:a9:9b:07:64:50:b9:c9:52:35:4a:98:04:ce:c4:d4: 30:3b:7f:7f:aa:8a:d8:99:68:33:7e:55:33:65:b2:6d:8a:ca: 1a:c9:11:3d:80:ba:e4:47:b9:92:00:32:c3:c6:93:50:c2:75: 2d:b6:b1:6b:44:76:6f:11:da:0f:e1:21:ff:4d:e3:65:62:39: 63:6b:0c:79:61:96:58:3b:b3:13:34:2c:5d:c5:06:ed:10:24: fd:e2:01:f7:dd:9f:de:c0:61:1f:14:47:ee:29:b2:3a:af:fa: ca:91:bd:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK4KV1RbcxRbcZzglwjOyd7XcuyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzMzZGRUZGMTExRDVCOTI1QTg5NTRFNTNDNEM5QzVF MjJBQjgwMDAeFw0yNjA4MzEyMDMwMTlaFw0yNjA5MDEyMTMyMTlaMDMxMTAvBgNV BAMTKDE3ODk3QzNFQUNBMERERDNEOUEwNDEyQjlGM0EyOTU2OEFCOEFFMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNWIQzlZUu9dbSC+7YmTOGEt+F sMZdCep7Y32G8nVQ1wYswg1d5WW0G+yxQi8HCKefzPLbNsm8oU7K5EoDFISE1jWU lrD+I06q7hxwK+D/ouyGwUF0HXw9k/gXLi/ckV1+OdjvL47UuHTlJUrAXN6TsKZJ hq+J0qJMR6YtdMGmoIJk9cuFhkuv4pqdcFoYptc1IWspyPskElrGzT/UfWe+ofKZ KS9fcuS6kr+kqLzWZqTnSzFOdFAl5Xf8nGv2jJNq40/mzXL4w2i6XKHhyOPYEOvb gIOtrOuwuSp8bS6UIG84ykSx27yBjAoXH6FBPA7KGv8Q6ifTE/KdToggCwqpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF4l8Pqyg3dPZoEErnzopVoq4rggwHwYDVR0j BBgwFoAUpTNv7/ER1bklqJVOU8TJxeIquAAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGM1NGJlOWEtOWI1ZC00YzY0LWI0ZTgtNjFjNzRlOWVjZWRjLzAvQTUzMzZGRUZG MTExRDVCOTI1QTg5NTRFNTNDNEM5QzVFMjJBQjgwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNTMzNkZFRkYxMTFENUI5MjVBODk1NEU1M0M0QzlDNUUyMkFC ODAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGM1NGJlOWEtOWI1ZC00YzY0LWI0 ZTgtNjFjNzRlOWVjZWRjLzAvQTUzMzZGRUZGMTExRDVCOTI1QTg5NTRFNTNDNEM5 QzVFMjJBQjgwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZD53sT+IBMJEyKdS1dcBj7fSNYs2svxDVP bs1U+A6lbHxNNnBS3Gocy4DH5O9rzKBlJ221jJrz2upYWRZnD6eb/l2Lf65C89jj 95JHZUCrOvOjuVKQfIxqAoO3C91xjZl3FskSmwBo73AlFWKWpCr0UwDlO+PdKUsn ew+JMhoapw+1KsFT+/MwuyUzc3pha/TJAambB2RQuclSNUqYBM7E1DA7f3+qitiZ aDN+VTNlsm2KyhrJET2AuuRHuZIAMsPGk1DCdS22sWtEdm8R2g/hIf9N42ViOWNr DHlhllg7sxM0LF3FBu0QJP3iAffdn97AYR8UR+4psjqv+sqRvZQ= -----END CERTIFICATE-----Generated at Tue Sep 1 05:20:17 2026 by rpki-client