$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft File: 5A5DD73D891416196AA5239D921D189D149B622B.mft (raw, json) Hash identifier: vOaH/sJ0EUX1BOl9/FRDUVU8PItWDyg/V6w1c3RzbDc= Subject key identifier: A1:F0:59:45:96:74:24:6A:BF:D2:24:3D:9E:DF:44:58:36:EC:4F:30 Authority key identifier: 5A:5D:D7:3D:89:14:16:19:6A:A5:23:9D:92:1D:18:9D:14:9B:62:2B Certificate issuer: /CN=5A5DD73D891416196AA5239D921D189D149B622B Certificate serial: 4AD6711AB05DFCC4E10E67952EACC66EE8471960 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft Manifest number: BD Signing time: Sun 20 Sep 2026 20:01:34 +0000 Manifest this update: Sun 20 Sep 2026 19:56:34 +0000 Manifest next update: Mon 21 Sep 2026 20:28:34 +0000 Files and hashes: 1: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: LUrz0HzKQn3BDSTwVj0zPYkXFEJEXJ4mzlthepJ39U0=) 2: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: qFviTkAJdjhBsY+4vQ6F1D24Kw3W6hG5KcLt5OTgeis=) 3: 5A5DD73D891416196AA5239D921D189D149B622B.crl (hash: K9lsiSo5pLrFaqM8t6apHP2MhqSYEW2tbYG/DzHFuFA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.crl rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 20:28:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d6:71:1a:b0:5d:fc:c4:e1:0e:67:95:2e:ac:c6:6e:e8:47:19:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A5DD73D891416196AA5239D921D189D149B622B Validity Not Before: Sep 20 19:56:34 2026 GMT Not After : Sep 21 20:28:34 2026 GMT Subject: CN=A1F059459674246ABFD2243D9EDF445836EC4F30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:44:32:d2:5a:09:4a:e8:9f:1b:29:f1:42:08: 93:1d:0f:80:1a:4e:bf:0f:b4:62:c3:e8:ce:28:61: 39:7a:6f:a0:bf:21:4f:ac:17:cc:c7:b5:91:9b:e5: 28:3b:d4:2a:16:cb:61:7b:68:97:77:ff:fe:56:dc: 5a:20:5b:04:d8:76:e0:56:b2:96:44:f6:08:53:5b: c2:8b:ec:d4:ff:c0:ce:ac:6d:84:fc:76:53:cc:77: c0:9b:14:c6:8b:e2:4a:0b:d6:a4:ef:21:d3:35:d0: 1f:96:ca:0d:d5:46:2f:e7:29:de:fb:41:52:b8:be: 30:c6:f0:b7:7f:e5:df:2c:a3:1a:89:d7:dc:48:2c: 35:5c:97:a2:8c:8f:81:69:3d:81:e5:f6:ad:71:56: 04:b3:30:c9:8c:64:73:6a:6b:0e:d6:28:f5:fb:14: 9f:46:18:80:e9:37:91:0d:5c:4f:66:73:be:a4:2d: 08:87:10:66:09:12:55:32:cf:37:86:7b:f1:7f:8a: cd:1c:12:4a:06:8f:d7:b3:3f:42:a7:77:e7:be:49: 70:0d:f6:1f:13:5f:d9:5b:73:f8:6c:8e:51:b3:f7: d0:e6:83:d9:37:13:ed:18:fc:6a:52:76:ca:b6:8d: 9d:6b:41:ec:36:5c:6d:b1:8f:26:98:58:67:ae:e3: e6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F0:59:45:96:74:24:6A:BF:D2:24:3D:9E:DF:44:58:36:EC:4F:30 X509v3 Authority Key Identifier: keyid:5A:5D:D7:3D:89:14:16:19:6A:A5:23:9D:92:1D:18:9D:14:9B:62:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:4c:76:c3:49:49:76:ec:58:02:59:c7:86:90:41:a3:26:b3: 17:d3:6e:69:e4:54:fc:39:d8:2a:37:c1:bc:03:84:1c:e8:35: e2:7c:b6:72:f2:43:e7:85:1a:0a:0f:ff:f1:28:07:ff:2f:37: 65:06:e1:9b:54:72:37:5d:44:d2:9e:95:84:27:0f:74:21:d0: e3:a2:b9:76:50:64:75:24:d9:11:f4:8b:f2:70:a1:29:6b:13: a2:a1:f3:d0:3b:8e:39:15:04:83:da:67:1d:86:94:56:51:d2: b4:16:f2:4b:08:03:53:2c:bd:28:fe:bb:52:86:46:22:ba:40: c4:84:28:14:28:2d:61:57:7b:97:e3:a3:d9:36:d8:ca:11:98: 39:76:2b:d0:19:2c:26:78:8b:e2:45:b2:38:42:e0:54:28:d1: 74:2a:48:d7:7d:33:b8:33:02:16:e9:b2:bc:f7:65:1c:74:10: d9:59:fd:0c:da:92:b8:9b:5b:18:58:c0:5b:a0:94:38:e8:77: 5b:01:7e:e5:fb:4b:db:30:0e:63:eb:9c:b8:87:5e:85:1b:7d: 3a:4a:ff:2f:ce:a2:32:1f:1c:c5:f6:a6:12:81:97:97:64:49: 70:8a:42:e2:b9:4c:6d:1b:a5:90:79:39:3c:2f:83:ff:3c:db: e6:6d:e4:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUStZxGrBd/MThDmeVLqzGbuhHGWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE1REQ3M0Q4OTE0MTYxOTZBQTUyMzlEOTIxRDE4OUQx NDlCNjIyQjAeFw0yNjA5MjAxOTU2MzRaFw0yNjA5MjEyMDI4MzRaMDMxMTAvBgNV BAMTKEExRjA1OTQ1OTY3NDI0NkFCRkQyMjQzRDlFREY0NDU4MzZFQzRGMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXRDLSWglK6J8bKfFCCJMdD4Aa Tr8PtGLD6M4oYTl6b6C/IU+sF8zHtZGb5Sg71CoWy2F7aJd3//5W3FogWwTYduBW spZE9ghTW8KL7NT/wM6sbYT8dlPMd8CbFMaL4koL1qTvIdM10B+Wyg3VRi/nKd77 QVK4vjDG8Ld/5d8soxqJ19xILDVcl6KMj4FpPYHl9q1xVgSzMMmMZHNqaw7WKPX7 FJ9GGIDpN5ENXE9mc76kLQiHEGYJElUyzzeGe/F/is0cEkoGj9ezP0Knd+e+SXAN 9h8TX9lbc/hsjlGz99Dmg9k3E+0Y/GpSdsq2jZ1rQew2XG2xjyaYWGeu4+YVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUofBZRZZ0JGq/0iQ9nt9EWDbsTzAwHwYDVR0j BBgwFoAUWl3XPYkUFhlqpSOdkh0YnRSbYiswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE2M2I3ZDctZWE4My00YmU5LWIyZmMtYjMwZWIwYjQ0ZDBhLzAvNUE1REQ3M0Q4 OTE0MTYxOTZBQTUyMzlEOTIxRDE4OUQxNDlCNjIyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QTVERDczRDg5MTQxNjE5NkFBNTIzOUQ5MjFEMTg5RDE0OUI2 MjJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE2M2I3ZDctZWE4My00YmU5LWIy ZmMtYjMwZWIwYjQ0ZDBhLzAvNUE1REQ3M0Q4OTE0MTYxOTZBQTUyMzlEOTIxRDE4 OUQxNDlCNjIyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRMdsNJSXbsWAJZx4aQQaMmsxfTbmnkVPw5 2Co3wbwDhBzoNeJ8tnLyQ+eFGgoP//EoB/8vN2UG4ZtUcjddRNKelYQnD3Qh0OOi uXZQZHUk2RH0i/JwoSlrE6Kh89A7jjkVBIPaZx2GlFZR0rQW8ksIA1MsvSj+u1KG RiK6QMSEKBQoLWFXe5fjo9k22MoRmDl2K9AZLCZ4i+JFsjhC4FQo0XQqSNd9M7gz Ahbpsrz3ZRx0ENlZ/QzakribWxhYwFuglDjod1sBfuX7S9swDmPrnLiHXoUbfTpK /y/OojIfHMX2phKBl5dkSXCKQuK5TG0bpZB5OTwvg/882+Zt5Iw= -----END CERTIFICATE-----Generated at Mon Sep 21 14:32:05 2026 by rpki-client