$ rpki-client -vvvf rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft File: 5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft (raw, json) Hash identifier: oSF44yYaBRFdxvOLezUQNtnFpl/cpcpGeR3cTBFwRzQ= Subject key identifier: 7A:A8:BA:0F:8E:D6:00:E6:ED:4C:71:FB:A1:1E:8D:50:C0:45:B3:9F Authority key identifier: 5D:59:59:C0:4A:DE:DB:A5:EB:17:E7:1F:95:F6:C4:02:5E:DE:CB:DB Certificate issuer: /CN=5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB Certificate serial: 5C9761EE39A57F58D312021B00C2C6AAB25BA24D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft Manifest number: BE Signing time: Mon 21 Sep 2026 20:01:10 +0000 Manifest this update: Mon 21 Sep 2026 19:56:10 +0000 Manifest next update: Tue 22 Sep 2026 23:54:10 +0000 Files and hashes: 1: 3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa (hash: HU+tP0ePX+yD7/CYpvvWhY8DWw0D5TG8DRzaRiSU/0w=) 2: 5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.crl (hash: hQrpDtCLgobf0iFCokQlSC/HAbjOBH1RY9C8GC2tdJI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.crl rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:97:61:ee:39:a5:7f:58:d3:12:02:1b:00:c2:c6:aa:b2:5b:a2:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB Validity Not Before: Sep 21 19:56:10 2026 GMT Not After : Sep 22 23:54:10 2026 GMT Subject: CN=7AA8BA0F8ED600E6ED4C71FBA11E8D50C045B39F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:eb:7c:af:f2:34:5b:f6:ea:c1:68:89:7d:14: 18:bf:9b:27:4f:b8:9f:1a:3f:6f:08:cc:c9:ab:2e: f4:0c:f1:31:3a:1f:f4:84:98:cd:78:12:8a:07:d9: 6f:40:b1:02:ca:25:98:df:47:e4:77:50:f3:20:b5: 18:dd:3e:4d:7b:6d:bf:c6:9a:10:4a:21:a9:e5:03: 3b:1e:a4:89:ea:19:ad:23:57:d6:2c:e2:d1:ec:68: d9:d3:1b:5e:b8:4b:4d:fd:ac:09:e8:42:f1:55:1d: 4a:c0:49:e5:ae:5c:81:0d:54:22:d8:58:d8:54:ad: 6d:f4:ac:fe:33:1f:f3:d2:c3:08:9f:26:90:52:78: 5c:72:e2:c1:59:f9:11:25:36:1a:83:96:81:39:60: ed:a7:b6:b0:bb:0f:de:a2:f7:d6:d4:24:8c:d2:0d: eb:fb:eb:16:fd:2e:a9:ed:0c:69:77:bf:cb:59:8b: 30:63:f7:60:85:e3:fe:6e:00:1d:90:1e:0c:38:b8: 45:06:5d:4b:ea:8b:64:f1:f2:20:67:a3:a7:7f:8f: 3b:38:fb:bd:f4:6f:2f:01:13:03:4a:00:6b:e7:d7: 35:12:67:7b:2c:fe:c3:f8:ab:37:f2:2c:4d:8d:aa: ff:41:10:56:21:08:f5:58:d0:e2:d8:ed:48:de:9a: 8c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A8:BA:0F:8E:D6:00:E6:ED:4C:71:FB:A1:1E:8D:50:C0:45:B3:9F X509v3 Authority Key Identifier: keyid:5D:59:59:C0:4A:DE:DB:A5:EB:17:E7:1F:95:F6:C4:02:5E:DE:CB:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:aa:cc:cc:b4:7f:66:40:ec:4b:e7:d7:f9:53:d6:2d:4c:6d: 09:75:84:9e:64:81:79:9a:21:1b:eb:1d:d7:a9:6e:d2:7d:43: 43:35:90:9d:bb:6c:a1:4f:02:c7:bb:f1:69:15:e7:3b:50:ea: 30:96:5c:96:07:44:a1:1e:40:bb:02:d5:29:dc:8c:75:8d:32: bb:6c:3f:7c:00:b9:a0:65:35:54:0e:a0:dd:40:bf:ac:86:e3: 06:1c:94:4c:f0:b3:08:54:39:49:78:1d:48:86:b6:2f:0a:30: fc:0c:46:86:6b:8d:6c:51:4a:8a:ba:2f:c3:12:fd:ba:38:5d: 4d:0d:d8:11:fa:b6:8d:9d:88:45:d3:72:8d:8b:81:98:e1:c0: 5e:02:e1:cd:e9:81:90:df:6b:f7:fe:4b:a2:c1:0a:8e:b2:01: 85:51:19:84:7c:da:10:5a:ce:5d:e4:90:e7:84:f9:bb:37:e8: 44:f2:ac:6a:23:fa:69:f8:f8:17:46:42:96:b4:77:b5:70:8b: f1:d5:99:09:82:75:fd:7c:52:42:87:51:3e:35:97:05:d3:49: 95:44:f3:fa:cb:91:0e:cd:f9:cc:1d:5b:f1:2c:c6:55:6b:cd: 3a:54:0c:f8:9a:ca:02:f7:c9:cf:fe:10:f1:1d:cc:9a:8b:0c: e4:e3:40:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXJdh7jmlf1jTEgIbAMLGqrJbok0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ1OTU5QzA0QURFREJBNUVCMTdFNzFGOTVGNkM0MDI1 RURFQ0JEQjAeFw0yNjA5MjExOTU2MTBaFw0yNjA5MjIyMzU0MTBaMDMxMTAvBgNV BAMTKDdBQThCQTBGOEVENjAwRTZFRDRDNzFGQkExMUU4RDUwQzA0NUIzOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC163yv8jRb9urBaIl9FBi/mydP uJ8aP28IzMmrLvQM8TE6H/SEmM14EooH2W9AsQLKJZjfR+R3UPMgtRjdPk17bb/G mhBKIanlAzsepInqGa0jV9Ys4tHsaNnTG164S039rAnoQvFVHUrASeWuXIENVCLY WNhUrW30rP4zH/PSwwifJpBSeFxy4sFZ+RElNhqDloE5YO2ntrC7D96i99bUJIzS Dev76xb9LqntDGl3v8tZizBj92CF4/5uAB2QHgw4uEUGXUvqi2Tx8iBno6d/jzs4 +730by8BEwNKAGvn1zUSZ3ss/sP4qzfyLE2Nqv9BEFYhCPVY0OLY7UjemozXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeqi6D47WAObtTHH7oR6NUMBFs58wHwYDVR0j BBgwFoAUXVlZwEre26XrF+cflfbEAl7ey9swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDVlYWI0NDItNzQ4MC00NTgxLTgxZGQtMjNhMjAwNjE0MzgyLzAvNUQ1OTU5QzA0 QURFREJBNUVCMTdFNzFGOTVGNkM0MDI1RURFQ0JEQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDU5NTlDMDRBREVEQkE1RUIxN0U3MUY5NUY2QzQwMjVFREVD QkRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDVlYWI0NDItNzQ4MC00NTgxLTgx ZGQtMjNhMjAwNjE0MzgyLzAvNUQ1OTU5QzA0QURFREJBNUVCMTdFNzFGOTVGNkM0 MDI1RURFQ0JEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAqqzMy0f2ZA7Evn1/lT1i1MbQl1hJ5kgXma IRvrHdepbtJ9Q0M1kJ27bKFPAse78WkV5ztQ6jCWXJYHRKEeQLsC1SncjHWNMrts P3wAuaBlNVQOoN1Av6yG4wYclEzwswhUOUl4HUiGti8KMPwMRoZrjWxRSoq6L8MS /bo4XU0N2BH6to2diEXTco2LgZjhwF4C4c3pgZDfa/f+S6LBCo6yAYVRGYR82hBa zl3kkOeE+bs36ETyrGoj+mn4+BdGQpa0d7Vwi/HVmQmCdf18UkKHUT41lwXTSZVE 8/rLkQ7N+cwdW/EsxlVrzTpUDPiaygL3yc/+EPEdzJqLDOTjQJs= -----END CERTIFICATE-----Generated at Tue Sep 22 15:59:44 2026 by rpki-client