$ rpki-client -vvf rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft File: CDAD8AE64850B7306026A1B46FF84D08284104C9.mft (raw, json) Hash identifier: yms5e/dzvK2ebVGTOKIYEBZjHJ7pvwCT1G5a/W1g6gg= Subject key identifier: 8B:F1:23:A5:AB:01:DE:AC:1F:98:64:B7:F1:06:AD:F6:27:AA:4B:A2 Authority key identifier: CD:AD:8A:E6:48:50:B7:30:60:26:A1:B4:6F:F8:4D:08:28:41:04:C9 Certificate issuer: /CN=CDAD8AE64850B7306026A1B46FF84D08284104C9 Certificate serial: 2E0BE1AFB9AEB273386FDF8058C03255D3834ACE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDAD8AE64850B7306026A1B46FF84D08284104C9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft Manifest number: 91 Signing time: Wed 19 Aug 2026 05:07:39 +0000 Manifest this update: Wed 19 Aug 2026 05:02:39 +0000 Manifest next update: Thu 20 Aug 2026 05:09:39 +0000 Files and hashes: 1: 3130332e3136392e3235322e302f32332d3234203d3e203137393935.roa (hash: Rie1EWmYCW5AS7gherk1HJqeE5vY8I4Pjrh2HLZJQzM=) 2: CDAD8AE64850B7306026A1B46FF84D08284104C9.crl (hash: u0waT9x0SCrA2v/RUnMDiwDubQtjiKdYFwQjd7P55EA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.crl rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDAD8AE64850B7306026A1B46FF84D08284104C9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Aug 2026 05:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:0b:e1:af:b9:ae:b2:73:38:6f:df:80:58:c0:32:55:d3:83:4a:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDAD8AE64850B7306026A1B46FF84D08284104C9 Validity Not Before: Aug 19 05:02:39 2026 GMT Not After : Aug 20 05:09:39 2026 GMT Subject: CN=8BF123A5AB01DEAC1F9864B7F106ADF627AA4BA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:9a:a7:4a:94:d7:1c:a3:6e:94:5d:de:9c:27: cb:89:05:2a:9a:13:39:b0:29:34:f4:03:1b:2c:df: 8e:67:ba:a3:85:a2:32:6e:8d:d5:89:28:e6:07:6a: 79:f7:3a:3f:69:f8:03:fa:b9:23:b3:04:dc:01:dd: ae:fc:bb:cd:b3:47:75:47:55:8d:3d:6d:0a:24:43: 35:52:3f:bc:03:39:d6:a8:05:ca:2e:27:fc:1f:95: 6c:3a:67:5b:fb:8d:8f:98:da:86:a7:0b:84:2e:18: 2f:53:e0:ee:ee:ea:ed:5a:70:19:45:a8:bc:b4:24: b2:d5:4f:b4:d5:22:d7:86:5b:14:89:a2:1d:08:d9: e6:b9:9c:8f:95:a4:4a:b8:a8:ac:45:bf:bc:94:01: 9d:9f:bf:af:a6:e8:ad:80:bd:85:9a:97:67:94:42: d1:c4:41:52:44:5b:41:21:ff:8d:ed:a2:fd:df:85: 2a:6d:dd:28:14:f5:7d:28:69:71:4e:25:d3:01:26: d1:d3:cf:ee:ee:5f:20:b0:4f:a8:59:0f:e6:0e:33: cc:a9:91:d2:8b:12:6c:94:d4:98:8f:b6:1d:15:4b: da:22:ce:ce:97:a8:be:71:e0:34:9b:b2:18:09:23: bf:94:c0:12:23:c8:9b:49:e0:fa:06:8e:6d:6f:f4: d2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F1:23:A5:AB:01:DE:AC:1F:98:64:B7:F1:06:AD:F6:27:AA:4B:A2 X509v3 Authority Key Identifier: keyid:CD:AD:8A:E6:48:50:B7:30:60:26:A1:B4:6F:F8:4D:08:28:41:04:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDAD8AE64850B7306026A1B46FF84D08284104C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e2:5e:d1:0f:c9:53:5b:ca:7d:bf:ad:c1:9d:74:57:be:6e: e7:12:95:f8:69:2f:79:eb:76:5e:40:9f:88:7f:fa:68:50:e0: 02:90:ac:bd:08:62:c5:b2:b4:9b:56:e0:13:ff:7b:09:a2:cf: 15:e7:5a:17:c0:1e:36:2b:19:f6:3a:94:e7:26:b4:13:2c:46: 53:7d:dd:da:fa:a0:0d:07:52:21:a3:73:8c:45:5b:09:c3:6c: 17:8f:4a:b5:66:72:35:b1:4e:c2:1f:63:af:49:ab:e9:0c:51: 56:52:99:18:f3:8e:95:59:ef:e6:97:f4:5a:6c:3d:92:f0:ef: ab:7d:9b:6d:28:7c:46:bd:c8:24:4a:8d:84:9a:6e:28:7d:5e: e2:1a:38:04:f9:3b:26:e0:8a:04:2b:71:55:1b:77:8f:56:50: e6:72:82:8c:9e:78:61:48:f8:a0:a5:fb:35:89:09:4a:4c:a0: 79:97:49:71:6d:f5:59:f1:31:65:74:0f:50:ef:de:60:c6:ec: b1:bc:4f:c9:a2:11:16:04:dc:84:d4:41:e2:a0:ad:ff:28:42: f8:a9:dd:5d:5c:0a:b5:fa:8d:54:fb:4a:c7:3c:cd:71:48:a0: 7d:c0:d7:cb:f3:51:3b:27:34:3a:8e:8f:5b:ce:6f:2a:f0:b0: f3:91:12:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULgvhr7musnM4b9+AWMAyVdODSs4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RBRDhBRTY0ODUwQjczMDYwMjZBMUI0NkZGODREMDgy ODQxMDRDOTAeFw0yNjA4MTkwNTAyMzlaFw0yNjA4MjAwNTA5MzlaMDMxMTAvBgNV BAMTKDhCRjEyM0E1QUIwMURFQUMxRjk4NjRCN0YxMDZBREY2MjdBQTRCQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwmqdKlNcco26UXd6cJ8uJBSqa EzmwKTT0Axss345nuqOFojJujdWJKOYHann3Oj9p+AP6uSOzBNwB3a78u82zR3VH VY09bQokQzVSP7wDOdaoBcouJ/wflWw6Z1v7jY+Y2oanC4QuGC9T4O7u6u1acBlF qLy0JLLVT7TVIteGWxSJoh0I2ea5nI+VpEq4qKxFv7yUAZ2fv6+m6K2AvYWal2eU QtHEQVJEW0Eh/43tov3fhSpt3SgU9X0oaXFOJdMBJtHTz+7uXyCwT6hZD+YOM8yp kdKLEmyU1JiPth0VS9oizs6XqL5x4DSbshgJI7+UwBIjyJtJ4PoGjm1v9NIhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi/EjpasB3qwfmGS38Qat9ieqS6IwHwYDVR0j BBgwFoAUza2K5khQtzBgJqG0b/hNCChBBMkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWI4YzU0M2MtZGUxZi00ZWY0LTkyYjEtNjg1NTZmZjEzMWEzLzAvQ0RBRDhBRTY0 ODUwQjczMDYwMjZBMUI0NkZGODREMDgyODQxMDRDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DREFEOEFFNjQ4NTBCNzMwNjAyNkExQjQ2RkY4NEQwODI4NDEw NEM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWI4YzU0M2MtZGUxZi00ZWY0LTky YjEtNjg1NTZmZjEzMWEzLzAvQ0RBRDhBRTY0ODUwQjczMDYwMjZBMUI0NkZGODRE MDgyODQxMDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACziXtEPyVNbyn2/rcGddFe+bucSlfhpL3nr dl5An4h/+mhQ4AKQrL0IYsWytJtW4BP/ewmizxXnWhfAHjYrGfY6lOcmtBMsRlN9 3dr6oA0HUiGjc4xFWwnDbBePSrVmcjWxTsIfY69Jq+kMUVZSmRjzjpVZ7+aX9Fps PZLw76t9m20ofEa9yCRKjYSabih9XuIaOAT5OybgigQrcVUbd49WUOZygoyeeGFI +KCl+zWJCUpMoHmXSXFt9VnxMWV0D1Dv3mDG7LG8T8miERYE3ITUQeKgrf8oQvip 3V1cCrX6jVT7Ssc8zXFIoH3A18vzUTsnNDqOj1vObyrwsPOREtE= -----END CERTIFICATE-----Generated at Wed Aug 19 16:22:57 2026 by rpki-client