$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft File: 5C0C0165C2202336BADFB9247E38D0C985467004.mft (raw, json) Hash identifier: TJeLgMk7y4Bj1UNRuBWjtkY9D5g7mtV9A70eqP5a+5o= Subject key identifier: E8:85:9F:AB:FE:A0:79:3F:DC:68:A8:D9:36:B1:FA:6A:67:47:2D:0F Authority key identifier: 5C:0C:01:65:C2:20:23:36:BA:DF:B9:24:7E:38:D0:C9:85:46:70:04 Certificate issuer: /CN=5C0C0165C2202336BADFB9247E38D0C985467004 Certificate serial: 3D68FCAC9BB4DC39B7CE5646252087ADE4F6B038 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C0C0165C2202336BADFB9247E38D0C985467004.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft Manifest number: A4 Signing time: Tue 01 Sep 2026 00:29:55 +0000 Manifest this update: Tue 01 Sep 2026 00:24:55 +0000 Manifest next update: Wed 02 Sep 2026 03:56:55 +0000 Files and hashes: 1: 5C0C0165C2202336BADFB9247E38D0C985467004.crl (hash: nhT1WhzIi/t+LaYDfucIPdi638L6gEPnQpnTtY9YYeg=) 2: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (hash: /DtJd8dT2bjoU0kUlHmis7kzNqsj8Fecx0D1VoaowR0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.crl rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C0C0165C2202336BADFB9247E38D0C985467004.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 02:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:68:fc:ac:9b:b4:dc:39:b7:ce:56:46:25:20:87:ad:e4:f6:b0:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C0C0165C2202336BADFB9247E38D0C985467004 Validity Not Before: Sep 1 00:24:55 2026 GMT Not After : Sep 2 03:56:55 2026 GMT Subject: CN=E8859FABFEA0793FDC68A8D936B1FA6A67472D0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0e:90:c7:7b:07:04:03:46:ef:f3:36:f6:47: 29:fb:b0:e4:c9:c9:68:73:a2:ed:29:95:87:7b:0f: 34:e5:08:50:40:30:04:8a:56:4d:f7:76:b0:bb:c4: 97:00:71:d9:84:69:d1:d4:79:98:37:de:7b:b1:33: e0:68:33:4b:0a:79:46:78:97:4f:13:b0:ed:d8:a5: 73:47:03:36:d0:c1:f6:a0:3d:1d:fe:2a:75:6a:e8: cf:80:98:69:3e:fa:27:17:db:74:40:da:6a:e3:8e: 04:f1:a3:43:70:da:06:a6:cf:94:e8:b9:89:03:26: 7f:27:d2:42:7f:b6:b3:b8:f7:65:c4:2f:98:84:ec: bb:78:2e:ce:98:27:56:39:d2:e6:19:7f:e9:e6:b1: c6:3b:ab:75:f8:41:43:df:18:30:e0:19:0c:03:a4: d4:c6:ee:a4:c6:32:05:ff:42:db:07:f7:6d:03:6f: ab:dc:b3:64:da:ad:76:f2:0c:57:a7:17:f8:09:9e: 1a:80:cd:f1:e2:79:a3:e6:9f:ee:f2:63:fa:8f:48: 6c:c9:ae:b5:48:bd:90:17:15:e0:6a:3d:4b:f0:81: 89:f7:3a:2a:65:2c:67:ec:e9:52:d4:23:a2:02:76: fe:f7:a9:12:fa:0e:26:11:c9:b4:e2:3d:5f:78:bc: 46:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:85:9F:AB:FE:A0:79:3F:DC:68:A8:D9:36:B1:FA:6A:67:47:2D:0F X509v3 Authority Key Identifier: keyid:5C:0C:01:65:C2:20:23:36:BA:DF:B9:24:7E:38:D0:C9:85:46:70:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C0C0165C2202336BADFB9247E38D0C985467004.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:0f:31:9d:c6:0d:f0:20:a4:aa:31:1d:fc:b7:66:db:0d:76: 8f:e0:f6:df:88:23:8b:b9:d2:e6:ec:73:17:9b:bb:ae:f3:a0: b7:9a:86:a7:90:5b:46:31:fd:6f:be:3a:57:d4:21:c7:92:fd: 63:7c:b8:ce:01:b1:81:db:59:19:09:a2:13:db:62:4e:0f:e1: f6:08:37:03:7f:cc:7f:b1:8c:40:9c:0f:a0:dc:a1:ac:37:65: 13:e5:9e:c9:1e:2f:4e:f3:b4:38:fe:ff:c0:63:3c:5d:03:4b: b4:31:31:b9:41:0a:09:c1:5b:ef:1e:46:99:c6:d8:cb:9e:30: c0:0b:2e:8d:02:b4:2d:01:f1:ab:bd:2e:fb:7f:27:31:8f:80: 97:e7:55:0c:14:d2:f9:cc:05:ad:22:73:05:a8:41:5e:87:60: 3a:dc:68:82:39:b7:4d:c3:54:19:5d:29:71:75:ab:9a:ae:2b: 93:4e:87:d3:f1:97:b9:e1:4e:1f:1a:97:b6:0a:c4:ec:f4:c1: 05:13:63:07:8a:40:65:e5:3a:20:ea:78:5c:52:76:45:d2:6f: d8:06:ce:c5:60:f6:15:d9:4f:04:4d:19:c3:b9:d1:4e:d6:6b: 4d:88:52:1c:71:f1:30:01:ba:7c:d0:b7:9a:54:da:ca:55:28: a0:dd:a4:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPWj8rJu03Dm3zlZGJSCHreT2sDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMwQzAxNjVDMjIwMjMzNkJBREZCOTI0N0UzOEQwQzk4 NTQ2NzAwNDAeFw0yNjA5MDEwMDI0NTVaFw0yNjA5MDIwMzU2NTVaMDMxMTAvBgNV BAMTKEU4ODU5RkFCRkVBMDc5M0ZEQzY4QThEOTM2QjFGQTZBNjc0NzJEMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYDpDHewcEA0bv8zb2Ryn7sOTJ yWhzou0plYd7DzTlCFBAMASKVk33drC7xJcAcdmEadHUeZg33nuxM+BoM0sKeUZ4 l08TsO3YpXNHAzbQwfagPR3+KnVq6M+AmGk++icX23RA2mrjjgTxo0Nw2gamz5To uYkDJn8n0kJ/trO492XEL5iE7Lt4Ls6YJ1Y50uYZf+nmscY7q3X4QUPfGDDgGQwD pNTG7qTGMgX/QtsH920Db6vcs2TarXbyDFenF/gJnhqAzfHieaPmn+7yY/qPSGzJ rrVIvZAXFeBqPUvwgYn3OiplLGfs6VLUI6ICdv73qRL6DiYRybTiPV94vEZBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6IWfq/6geT/caKjZNrH6amdHLQ8wHwYDVR0j BBgwFoAUXAwBZcIgIza637kkfjjQyYVGcAQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U1MTZlNmUtYzY3OS00ZTUwLWI3YWItMWU0MDY3OTEyNWNkLzAvNUMwQzAxNjVD MjIwMjMzNkJBREZCOTI0N0UzOEQwQzk4NTQ2NzAwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QzBDMDE2NUMyMjAyMzM2QkFERkI5MjQ3RTM4RDBDOTg1NDY3 MDA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U1MTZlNmUtYzY3OS00ZTUwLWI3 YWItMWU0MDY3OTEyNWNkLzAvNUMwQzAxNjVDMjIwMjMzNkJBREZCOTI0N0UzOEQw Qzk4NTQ2NzAwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMPMZ3GDfAgpKoxHfy3ZtsNdo/g9t+II4u5 0ubscxebu67zoLeahqeQW0Yx/W++OlfUIceS/WN8uM4BsYHbWRkJohPbYk4P4fYI NwN/zH+xjECcD6Dcoaw3ZRPlnskeL07ztDj+/8BjPF0DS7QxMblBCgnBW+8eRpnG 2MueMMALLo0CtC0B8au9Lvt/JzGPgJfnVQwU0vnMBa0icwWoQV6HYDrcaII5t03D VBldKXF1q5quK5NOh9Pxl7nhTh8al7YKxOz0wQUTYweKQGXlOiDqeFxSdkXSb9gG zsVg9hXZTwRNGcO50U7Wa02IUhxx8TABunzQt5pU2spVKKDdpNA= -----END CERTIFICATE-----Generated at Tue Sep 1 06:20:55 2026 by rpki-client