$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft File: A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft (raw, json) Hash identifier: N3zuIbHGrA9c4jJrhIPs/46qx9+ucvZsk3U4JQKy8kE= Subject key identifier: C0:E1:67:9E:29:D7:68:EB:38:2B:44:89:37:DF:6B:3F:1F:DC:02:F4 Authority key identifier: A5:33:6F:EF:F1:11:D5:B9:25:A8:95:4E:53:C4:C9:C5:E2:2A:B8:00 Certificate issuer: /CN=A5336FEFF111D5B925A8954E53C4C9C5E22AB800 Certificate serial: 106C199D40AE18756812481CFC5CABDA0829E5DF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft Manifest number: BE Signing time: Mon 21 Sep 2026 13:48:38 +0000 Manifest this update: Mon 21 Sep 2026 13:43:38 +0000 Manifest next update: Tue 22 Sep 2026 15:45:38 +0000 Files and hashes: 1: 3130332e3132352e31322e302f32342d3234203d3e20313533333137.roa (hash: AZJ4QAHlxTzcVIbJwO/UxabGeC31FjTnD/rHg0D3/ME=) 2: 3130332e3132352e31332e302f32342d3234203d3e20313335363336.roa (hash: 8YrdvedqGs1zZAIQAtRZi80VSrXLRsF6zbtnQUstSsA=) 3: 3130332e3132352e31342e302f32342d3234203d3e20313335363336.roa (hash: m7Frx9lSqsLf1s8zbJ/qpER1sGLgEtc9hyQy6nCFDhY=) 4: 3130332e3132352e31352e302f32342d3234203d3e20313335363336.roa (hash: +IUhzjX4iJxCcMgbcQWdmMHcD7sxtYcY/3hZmSmLykA=) 5: A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl (hash: SaX4bq0QVN8hMVxpVQEwQdy+SOjBqtgHlA0E092yHXc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 15:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:6c:19:9d:40:ae:18:75:68:12:48:1c:fc:5c:ab:da:08:29:e5:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5336FEFF111D5B925A8954E53C4C9C5E22AB800 Validity Not Before: Sep 21 13:43:38 2026 GMT Not After : Sep 22 15:45:38 2026 GMT Subject: CN=C0E1679E29D768EB382B448937DF6B3F1FDC02F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f7:f5:3e:e0:e4:3b:e2:b7:5a:5e:64:36:b2: f7:fe:8c:a3:5a:7c:7c:e0:b4:5a:3d:62:a5:cf:c2: 58:44:11:73:f9:90:d1:12:71:a1:63:4b:73:c8:71: 9b:2e:b5:02:97:e6:6b:44:f6:cc:ab:b5:3a:ff:2b: ab:20:62:00:6c:df:fe:34:6f:24:31:27:57:ee:04: 30:ef:31:ba:f3:8f:e7:58:cf:a6:a5:1a:fd:45:41: 00:fa:fe:ba:14:44:66:64:db:25:b6:5a:dd:0d:eb: 4f:34:a3:e4:f9:ae:f2:8c:57:da:ef:e6:f4:0a:6b: c7:30:44:c6:e7:63:0f:6a:ea:6b:bd:54:c0:ac:ac: 22:b4:d1:9b:2c:dd:44:96:1d:8f:26:ec:a5:96:7e: ab:d0:a4:b3:db:c6:cb:62:3d:88:3a:d3:cf:03:f9: d1:fb:a0:9c:44:0d:9a:bc:ed:b6:04:1a:f7:26:5a: 34:64:48:19:c4:78:9b:a9:a5:7c:8b:67:d8:6c:ce: 0e:8c:45:16:63:a2:e5:58:40:52:16:82:3a:52:05: ee:53:a8:55:5f:ce:44:1e:22:9d:57:51:39:90:4b: 31:44:5a:3d:2d:57:c3:91:08:7c:7b:4c:2b:eb:35: cf:b6:a6:f1:0f:d8:b8:0e:ff:82:9c:ab:8d:ff:cb: 81:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E1:67:9E:29:D7:68:EB:38:2B:44:89:37:DF:6B:3F:1F:DC:02:F4 X509v3 Authority Key Identifier: keyid:A5:33:6F:EF:F1:11:D5:B9:25:A8:95:4E:53:C4:C9:C5:E2:2A:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:3d:a1:dc:60:7b:c6:a7:85:73:13:8f:e3:dc:ee:49:35:a3: 32:7c:a0:76:7b:4a:1f:c8:3d:6b:13:51:db:2b:bb:f4:f5:2a: bf:54:cc:b1:f2:9a:b7:b3:cd:63:2b:20:5b:f0:22:58:2e:0d: 72:d2:97:d4:30:49:f8:a7:76:0c:a9:8c:32:0d:9a:60:03:23: bf:40:5e:73:7e:7f:58:66:b0:35:2d:d7:aa:57:e8:48:42:cf: 88:32:c2:82:82:e2:a5:9b:29:c6:ad:38:03:c5:60:47:af:f6: b4:49:e6:dd:01:3e:b3:ad:e2:16:b9:0f:ae:4c:cc:6c:0d:50: b5:39:af:2e:68:2d:44:68:39:1c:71:6c:a2:5b:fe:f8:df:db: 65:36:92:98:98:16:73:dd:62:c0:b1:ec:98:69:a6:3c:a2:16: 9e:16:4f:ca:d1:65:e3:60:3b:12:df:7c:c4:5f:aa:69:a8:06: 27:42:7f:a8:56:68:9c:0f:cd:90:ee:4a:d0:ed:ad:db:be:94: 96:12:93:ee:9d:eb:c4:d9:de:bd:a9:14:b4:c9:59:a4:0c:66: 1e:43:13:f9:41:96:17:43:cc:fa:99:d5:43:9f:ce:bc:1d:77: ae:38:a7:b7:97:6d:8b:fc:15:3e:7b:40:e2:ed:e4:2b:8c:bb: 91:1b:b7:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEGwZnUCuGHVoEkgc/Fyr2ggp5d8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzMzZGRUZGMTExRDVCOTI1QTg5NTRFNTNDNEM5QzVF MjJBQjgwMDAeFw0yNjA5MjExMzQzMzhaFw0yNjA5MjIxNTQ1MzhaMDMxMTAvBgNV BAMTKEMwRTE2NzlFMjlENzY4RUIzODJCNDQ4OTM3REY2QjNGMUZEQzAyRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq9/U+4OQ74rdaXmQ2svf+jKNa fHzgtFo9YqXPwlhEEXP5kNEScaFjS3PIcZsutQKX5mtE9syrtTr/K6sgYgBs3/40 byQxJ1fuBDDvMbrzj+dYz6alGv1FQQD6/roURGZk2yW2Wt0N6080o+T5rvKMV9rv 5vQKa8cwRMbnYw9q6mu9VMCsrCK00Zss3USWHY8m7KWWfqvQpLPbxstiPYg6088D +dH7oJxEDZq87bYEGvcmWjRkSBnEeJuppXyLZ9hszg6MRRZjouVYQFIWgjpSBe5T qFVfzkQeIp1XUTmQSzFEWj0tV8ORCHx7TCvrNc+2pvEP2LgO/4Kcq43/y4H7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwOFnninXaOs4K0SJN99rPx/cAvQwHwYDVR0j BBgwFoAUpTNv7/ER1bklqJVOU8TJxeIquAAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGM1NGJlOWEtOWI1ZC00YzY0LWI0ZTgtNjFjNzRlOWVjZWRjLzAvQTUzMzZGRUZG MTExRDVCOTI1QTg5NTRFNTNDNEM5QzVFMjJBQjgwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNTMzNkZFRkYxMTFENUI5MjVBODk1NEU1M0M0QzlDNUUyMkFC ODAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGM1NGJlOWEtOWI1ZC00YzY0LWI0 ZTgtNjFjNzRlOWVjZWRjLzAvQTUzMzZGRUZGMTExRDVCOTI1QTg5NTRFNTNDNEM5 QzVFMjJBQjgwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEM9odxge8anhXMTj+Pc7kk1ozJ8oHZ7Sh/I PWsTUdsru/T1Kr9UzLHymrezzWMrIFvwIlguDXLSl9QwSfindgypjDINmmADI79A XnN+f1hmsDUt16pX6EhCz4gywoKC4qWbKcatOAPFYEev9rRJ5t0BPrOt4ha5D65M zGwNULU5ry5oLURoORxxbKJb/vjf22U2kpiYFnPdYsCx7JhppjyiFp4WT8rRZeNg OxLffMRfqmmoBidCf6hWaJwPzZDuStDtrdu+lJYSk+6d68TZ3r2pFLTJWaQMZh5D E/lBlhdDzPqZ1UOfzrwdd644p7eXbYv8FT57QOLt5CuMu5Ebt9I= -----END CERTIFICATE-----Generated at Tue Sep 22 05:39:23 2026 by rpki-client