$ rpki-client -vvf rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft File: 5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft (raw, json) Hash identifier: RxJ0mRkj8p8Zxr17SqD/5zitDfi+K6FlHRPSsrqKwgk= Subject key identifier: FC:DC:20:6F:A2:B0:AD:77:EF:CE:68:04:B1:5E:0C:4B:6B:1C:64:12 Authority key identifier: 5B:84:74:CD:5A:D7:F5:98:A4:82:68:99:DD:65:21:7A:1B:B8:5C:61 Certificate issuer: /CN=5B8474CD5AD7F598A4826899DD65217A1BB85C61 Certificate serial: 5A9DCF092E4F6FA3844F471A287B9FF450BC52BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft Manifest number: 92 Signing time: Wed 19 Aug 2026 18:51:49 +0000 Manifest this update: Wed 19 Aug 2026 18:46:49 +0000 Manifest next update: Thu 20 Aug 2026 21:46:49 +0000 Files and hashes: 1: 3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa (hash: BWylbxtj1ROm+MVww31ybQOgEWW9jWHft5tLSvCMDwM=) 2: 323430323a326134303a3a2f33322d3438203d3e20313336383733.roa (hash: ZSQfDBDx08SMOJ9/mfQRF6dJyZ/7l6GG2dcY9tQkt/U=) 3: 5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl (hash: tOExp6BxBqBCpouizeJBMmuD57sABxI9+VGUSHP9b9E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Aug 2026 21:46:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:9d:cf:09:2e:4f:6f:a3:84:4f:47:1a:28:7b:9f:f4:50:bc:52:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B8474CD5AD7F598A4826899DD65217A1BB85C61 Validity Not Before: Aug 19 18:46:49 2026 GMT Not After : Aug 20 21:46:49 2026 GMT Subject: CN=FCDC206FA2B0AD77EFCE6804B15E0C4B6B1C6412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3f:b1:4b:a2:dd:57:1f:4c:64:11:d6:ae:e0: f4:98:e0:4e:11:50:7b:09:c0:34:4a:87:f0:9c:a7: 33:c3:40:0a:b3:c8:e9:cd:8c:20:9b:61:88:1a:ce: c2:5f:72:1d:61:5a:28:3f:5c:27:27:a9:a1:c0:6a: 92:42:e5:1d:3a:1e:e4:95:6f:1b:17:73:b9:11:2f: 90:e5:4a:f1:73:0e:92:4e:28:ef:2c:4c:91:00:7d: a4:c5:b4:aa:97:87:bb:e4:fb:29:a7:ce:a5:7c:bb: 46:99:e3:1c:21:38:e6:e0:bc:cf:c8:4f:1d:87:8b: a7:3f:1b:6b:3c:e2:f9:9f:2e:01:96:ce:fb:a7:06: e9:17:2f:6c:72:cd:90:8b:08:96:3f:a2:f5:6e:b4: 28:fb:cb:d4:55:e0:07:5d:4f:3c:5c:24:67:8c:f5: 4f:c7:ba:82:4d:00:59:c4:32:a3:c4:45:b8:ed:53: 2a:2a:30:b1:69:1a:7e:54:76:a8:2b:a3:7f:0f:19: f0:0e:4f:5e:07:a8:29:d5:36:48:1a:94:f5:f1:d3: a3:e2:59:06:7a:7e:a4:37:2a:96:0a:53:0e:40:f8: 97:05:0a:18:ab:7d:36:36:4e:99:f1:6f:9b:32:77: ba:eb:6a:7c:c8:e9:68:2d:68:ce:be:d3:ac:fc:5a: 46:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:DC:20:6F:A2:B0:AD:77:EF:CE:68:04:B1:5E:0C:4B:6B:1C:64:12 X509v3 Authority Key Identifier: keyid:5B:84:74:CD:5A:D7:F5:98:A4:82:68:99:DD:65:21:7A:1B:B8:5C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:0c:73:c6:2c:bb:3b:f8:90:79:64:cb:d2:7f:a4:4f:f9:9a: ff:6d:79:05:e3:d8:ba:c4:6d:ba:3a:dc:33:12:44:6f:d3:88: d2:37:c1:9b:94:b0:c3:8c:9a:8f:61:3a:2a:bf:91:b1:7b:9b: 16:bc:20:7d:25:0f:fe:ef:34:67:51:bd:50:67:7a:8e:d6:fa: 74:b7:79:87:5d:a8:dc:d4:9a:2a:84:b6:07:8d:fb:8d:18:39: ea:9b:aa:4c:4d:e1:2a:46:f1:7b:94:e6:97:c8:3c:92:09:5a: ed:f0:ff:95:75:80:7f:cc:6c:4b:6a:78:f4:44:6c:d6:0f:3e: bc:46:33:56:58:e9:ea:11:74:ee:b9:bd:7d:00:2c:e7:65:65: 63:e4:1d:6c:22:6c:59:3a:33:ba:95:e8:3b:cb:0c:fc:53:8d: a7:1c:41:73:5c:9e:c7:f8:aa:a4:82:78:18:8e:c1:5b:bc:48: 88:a5:78:81:9b:6f:a8:25:04:26:5d:5f:7c:fd:10:d6:8f:a9: a3:5c:12:86:22:bf:1c:06:ce:2a:b7:ee:cc:9c:59:5d:6b:c8: 4d:74:d6:14:27:be:ac:e5:46:f5:28:07:e1:79:a2:19:6c:0d: 87:4a:f8:d9:13:ef:c0:cb:a9:58:a4:c0:df:a4:2e:ac:1e:07: d0:4b:e1:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWp3PCS5Pb6OET0caKHuf9FC8Ur4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI4NDc0Q0Q1QUQ3RjU5OEE0ODI2ODk5REQ2NTIxN0Ex QkI4NUM2MTAeFw0yNjA4MTkxODQ2NDlaFw0yNjA4MjAyMTQ2NDlaMDMxMTAvBgNV BAMTKEZDREMyMDZGQTJCMEFENzdFRkNFNjgwNEIxNUUwQzRCNkIxQzY0MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3P7FLot1XH0xkEdau4PSY4E4R UHsJwDRKh/CcpzPDQAqzyOnNjCCbYYgazsJfch1hWig/XCcnqaHAapJC5R06HuSV bxsXc7kRL5DlSvFzDpJOKO8sTJEAfaTFtKqXh7vk+ymnzqV8u0aZ4xwhOObgvM/I Tx2Hi6c/G2s84vmfLgGWzvunBukXL2xyzZCLCJY/ovVutCj7y9RV4AddTzxcJGeM 9U/HuoJNAFnEMqPERbjtUyoqMLFpGn5Udqgro38PGfAOT14HqCnVNkgalPXx06Pi WQZ6fqQ3KpYKUw5A+JcFChirfTY2Tpnxb5syd7rranzI6WgtaM6+06z8WkY/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Nwgb6KwrXfvzmgEsV4MS2scZBIwHwYDVR0j BBgwFoAUW4R0zVrX9ZikgmiZ3WUhehu4XGEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU3YTZiY2ItOWViNi00OWRlLWI5OTgtMGJlZDNjNWMxMjc4LzAvNUI4NDc0Q0Q1 QUQ3RjU5OEE0ODI2ODk5REQ2NTIxN0ExQkI4NUM2MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81Qjg0NzRDRDVBRDdGNTk4QTQ4MjY4OTlERDY1MjE3QTFCQjg1 QzYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU3YTZiY2ItOWViNi00OWRlLWI5 OTgtMGJlZDNjNWMxMjc4LzAvNUI4NDc0Q0Q1QUQ3RjU5OEE0ODI2ODk5REQ2NTIx N0ExQkI4NUM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIsMc8Ysuzv4kHlky9J/pE/5mv9teQXj2LrE bbo63DMSRG/TiNI3wZuUsMOMmo9hOiq/kbF7mxa8IH0lD/7vNGdRvVBneo7W+nS3 eYddqNzUmiqEtgeN+40YOeqbqkxN4SpG8XuU5pfIPJIJWu3w/5V1gH/MbEtqePRE bNYPPrxGM1ZY6eoRdO65vX0ALOdlZWPkHWwibFk6M7qV6DvLDPxTjaccQXNcnsf4 qqSCeBiOwVu8SIileIGbb6glBCZdX3z9ENaPqaNcEoYivxwGziq37sycWV1ryE10 1hQnvqzlRvUoB+F5ohlsDYdK+NkT78DLqVikwN+kLqweB9BL4Zc= -----END CERTIFICATE-----Generated at Thu Aug 20 10:24:48 2026 by rpki-client