$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.mft File: 5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.mft (raw, json) Hash identifier: bGohJ4i1sp3/ih90ybF1I4kL9GzCEReWnTln2k/o3OA= Subject key identifier: A6:E2:AC:A6:C1:89:3F:99:26:A0:82:73:C1:6C:4F:F5:84:3E:EE:CF Authority key identifier: 5F:C4:5B:E9:ED:AC:7B:AD:3D:07:04:61:0E:37:4B:87:3F:C7:B6:1C Certificate issuer: /CN=5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C Certificate serial: 0B82FF06197E48752C0D4BCBB71992AE03A9CAC0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.mft Manifest number: A2 Signing time: Mon 31 Aug 2026 20:09:48 +0000 Manifest this update: Mon 31 Aug 2026 20:04:48 +0000 Manifest next update: Tue 01 Sep 2026 23:37:48 +0000 Files and hashes: 1: 323430343a636534303a313a3a2f34382d3438203d3e20313338383834.roa (hash: dxfdhNXh202P44oHhJYRmZOKu5Lqt6H/PJxnBPCKWdo=) 2: 323430343a636534303a3a2f33322d3332203d3e20313338383834.roa (hash: T2qYaU04VQzWeYCnQwxqbKhnW+Yc8luFZj24cheJV1Y=) 3: 323430343a636534303a333a3a2f34382d3438203d3e20313338383834.roa (hash: 0ARU4umpFLyMta2vB6qYPPj5Ig4hYBGPCu9MzyUF/8A=) 4: 3130332e3133382e37302e302f32342d3234203d3e20313338383834.roa (hash: djEgtSTkE/m5IayWnkoTKB0EhOrsppytUQzWTVEnG/A=) 5: 3130332e3133382e37302e302f32332d3233203d3e20313338383834.roa (hash: 0qSPCAZrOfi5Y9XILy5crgt/ktdpcPhlsL8t7vKQnzI=) 6: 323430343a636534303a3a2f34382d3438203d3e20313338383834.roa (hash: hSK8N/vC2/9gXsGi7sFYityEE3YHIpxX/5Nfow0h5pI=) 7: 3130332e3133382e37312e302f32342d3234203d3e20313338383834.roa (hash: mjGJxH6ziPyBnTtwEJk9cCU5dFx1hVDJJz3eyJDrtfU=) 8: 5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.crl (hash: aupl+dyaaeEZ4fHd7l7uSHzPw/0pU7Bhsua0Zz4AlOY=) 9: 323430343a636534303a3a2f33362d3336203d3e20313338383834.roa (hash: k71wAWLK9lWSB9of2XNi/2f+HUpw7qh91wC52CYzZ9I=) 10: 323430343a636534303a313030303a3a2f33362d3336203d3e20313338383834.roa (hash: zhBd5a5gGTbtet5YBbXE5S+qo1B6mGLmWLRBGJ6q7+o=) 11: 323430343a636534303a323a3a2f34382d3438203d3e20313338383834.roa (hash: /gmLM+AlvVZmZ1aC4xTqncyP3CJDlsdR9nXHmByTkCU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.crl rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 23:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:82:ff:06:19:7e:48:75:2c:0d:4b:cb:b7:19:92:ae:03:a9:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C Validity Not Before: Aug 31 20:04:48 2026 GMT Not After : Sep 1 23:37:48 2026 GMT Subject: CN=A6E2ACA6C1893F9926A08273C16C4FF5843EEECF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:17:d5:20:e7:1d:19:fa:08:8e:bb:8a:ac:63: f0:b9:bb:86:fa:c5:02:2f:5d:fd:00:50:7f:54:d8: 5d:d4:02:c6:aa:07:41:7c:73:50:01:48:74:4d:1f: 20:00:b5:96:86:cb:44:79:e5:9f:c2:76:99:e7:b9: a0:3d:76:15:ff:c0:f4:5a:c9:4b:a2:c6:14:67:44: 9c:93:8e:d2:b4:1a:d4:ba:97:a5:f3:3f:6d:bc:e3: c7:0b:75:aa:d6:28:76:41:cb:f5:af:19:20:cc:68: 11:7a:52:47:be:09:bc:73:8e:a6:18:fd:42:43:12: 1f:84:28:07:1d:d7:0d:d7:ff:55:3a:d9:8a:83:56: 06:4b:aa:88:33:80:ab:b7:91:2a:99:82:8e:e3:0d: 52:bd:ee:af:40:42:50:9d:75:3a:73:49:34:ca:6b: d1:2a:1b:09:05:a7:f3:66:f4:c9:03:05:35:2f:92: 08:dc:0c:40:5c:77:af:44:70:a2:8b:4e:15:d0:91: c5:93:b9:71:45:3e:96:4d:ea:26:17:51:14:6e:e1: eb:c7:d6:ff:1b:04:28:95:45:e3:e0:bf:3e:07:92: e5:c6:cc:63:5a:e8:96:63:c6:31:15:bf:8a:9e:bf: 00:1b:bb:ef:77:23:ef:e2:22:0f:ce:3e:d2:ab:8d: fd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E2:AC:A6:C1:89:3F:99:26:A0:82:73:C1:6C:4F:F5:84:3E:EE:CF X509v3 Authority Key Identifier: keyid:5F:C4:5B:E9:ED:AC:7B:AD:3D:07:04:61:0E:37:4B:87:3F:C7:B6:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:1d:35:c5:f2:f8:2f:0a:96:d6:8a:52:bc:6e:62:2b:23:b9: 8b:e0:9f:77:87:10:d9:2f:cc:aa:93:79:69:8b:c4:7b:fc:b7: d6:3d:23:95:84:39:44:43:35:83:2d:a3:5a:e9:d5:39:7f:74: 23:63:06:5d:29:08:e8:8d:f0:07:f2:ef:37:f8:63:d8:8a:2d: 06:f5:03:b4:4b:0b:d8:aa:47:3e:97:20:04:66:1b:f2:01:3d: 94:b6:81:df:e7:d5:9c:47:7b:4a:94:8c:f9:e9:cc:31:1b:ef: b2:c1:a7:8b:79:d5:70:ce:a6:bf:ee:4d:e1:35:ec:0f:59:cb: 06:f4:cd:27:f9:de:fa:45:da:24:aa:9d:66:d7:18:f9:eb:e1: ed:27:91:b7:85:05:52:55:7d:98:b4:48:1c:dc:fa:58:d4:35: 24:cb:ae:0d:4f:20:77:cb:ce:69:fc:ff:00:5c:ea:31:e6:7e: ca:3a:f3:f4:8f:85:d5:a6:9f:13:53:b8:3d:04:1d:37:f0:99: 63:49:f7:2b:bc:e4:c2:74:95:5c:93:f8:b1:90:fc:52:4e:c8: d6:50:eb:2f:4a:b0:34:64:80:46:f8:ae:96:bf:11:16:22:0b: 01:0d:7e:9a:a4:79:da:40:b5:a0:f5:a6:18:3f:47:b6:09:fc: 6d:81:45:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC4L/Bhl+SHUsDUvLtxmSrgOpysAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDNDVCRTlFREFDN0JBRDNEMDcwNDYxMEUzNzRCODcz RkM3QjYxQzAeFw0yNjA4MzEyMDA0NDhaFw0yNjA5MDEyMzM3NDhaMDMxMTAvBgNV BAMTKEE2RTJBQ0E2QzE4OTNGOTkyNkEwODI3M0MxNkM0RkY1ODQzRUVFQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCF9Ug5x0Z+giOu4qsY/C5u4b6 xQIvXf0AUH9U2F3UAsaqB0F8c1ABSHRNHyAAtZaGy0R55Z/CdpnnuaA9dhX/wPRa yUuixhRnRJyTjtK0GtS6l6XzP22848cLdarWKHZBy/WvGSDMaBF6Uke+CbxzjqYY /UJDEh+EKAcd1w3X/1U62YqDVgZLqogzgKu3kSqZgo7jDVK97q9AQlCddTpzSTTK a9EqGwkFp/Nm9MkDBTUvkgjcDEBcd69EcKKLThXQkcWTuXFFPpZN6iYXURRu4evH 1v8bBCiVRePgvz4HkuXGzGNa6JZjxjEVv4qevwAbu+93I+/iIg/OPtKrjf1HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpuKspsGJP5kmoIJzwWxP9YQ+7s8wHwYDVR0j BBgwFoAUX8Rb6e2se609BwRhDjdLhz/HthwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjIwYzZkNjktNjI5MC00MDJmLWE4NGUtZDI4OWM2ZTkzYTczLzAvNUZDNDVCRTlF REFDN0JBRDNEMDcwNDYxMEUzNzRCODczRkM3QjYxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkM0NUJFOUVEQUM3QkFEM0QwNzA0NjEwRTM3NEI4NzNGQzdC NjFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjIwYzZkNjktNjI5MC00MDJmLWE4 NGUtZDI4OWM2ZTkzYTczLzAvNUZDNDVCRTlFREFDN0JBRDNEMDcwNDYxMEUzNzRC ODczRkM3QjYxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUdNcXy+C8KltaKUrxuYisjuYvgn3eHENkv zKqTeWmLxHv8t9Y9I5WEOURDNYMto1rp1Tl/dCNjBl0pCOiN8Afy7zf4Y9iKLQb1 A7RLC9iqRz6XIARmG/IBPZS2gd/n1ZxHe0qUjPnpzDEb77LBp4t51XDOpr/uTeE1 7A9Zywb0zSf53vpF2iSqnWbXGPnr4e0nkbeFBVJVfZi0SBzc+ljUNSTLrg1PIHfL zmn8/wBc6jHmfso68/SPhdWmnxNTuD0EHTfwmWNJ9yu85MJ0lVyT+LGQ/FJOyNZQ 6y9KsDRkgEb4rpa/ERYiCwENfpqkedpAtaD1phg/R7YJ/G2BRUk= -----END CERTIFICATE-----Generated at Tue Sep 1 06:24:20 2026 by rpki-client