$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft File: 5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft (raw, json) Hash identifier: lhiUpm9ianmNGLNZGQjRe4r3L+27pOTnO2+dN/+33/0= Subject key identifier: 3A:BF:79:49:E7:0E:DF:7C:52:40:59:41:D9:E8:88:6D:D1:4B:DA:DF Authority key identifier: 5F:BE:DE:98:3A:63:22:B9:99:A4:6A:B6:AA:CC:F6:A7:C6:06:3F:B5 Certificate issuer: /CN=5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5 Certificate serial: 7A284C9691745567F3FD8E7D60FBEF89BC1CCB4E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft Manifest number: C1 Signing time: Tue 22 Sep 2026 14:13:51 +0000 Manifest this update: Tue 22 Sep 2026 14:08:51 +0000 Manifest next update: Wed 23 Sep 2026 17:22:51 +0000 Files and hashes: 1: 3130332e3135342e35322e302f32342d3234203d3e20313430343739.roa (hash: hB2D7K4UTkw5fpBq+t9X3VNB/1j6WvNNmkdz6+J5cvo=) 2: 323430363a353463303a383030303a3a2f33332d3333203d3e20313430343739.roa (hash: bIsAPyP9rDpPX3/Ob3Qv6l0T0cqP2nXkNSsYJzMdy0g=) 3: 3130332e3135342e35332e302f32342d3234203d3e20313430343739.roa (hash: /1UO8tVQ+wLCWDJC+/9ddMEbFB3CgcFjCBFNxuu9120=) 4: 5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.crl (hash: xOcFTLJ4EnyTNzGCV8lxLgaA8GZjeFJKHQq2UPzKSmw=) 5: 323430363a353463303a3a2f33332d3333203d3e20313430343739.roa (hash: 2cV6nPzmY4kD2CJExVdWuMSGfjJCPD1xihnYeBD8ieA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.crl rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 17:22:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:28:4c:96:91:74:55:67:f3:fd:8e:7d:60:fb:ef:89:bc:1c:cb:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5 Validity Not Before: Sep 22 14:08:51 2026 GMT Not After : Sep 23 17:22:51 2026 GMT Subject: CN=3ABF7949E70EDF7C52405941D9E8886DD14BDADF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:87:aa:ea:40:4e:cf:2c:b3:c2:bf:2b:16:c5: c6:fa:c8:3e:38:9e:40:11:b8:6f:d1:be:09:bf:b9: 82:8e:a8:79:48:49:57:b8:a0:39:2f:46:5e:11:fc: 20:3b:41:ef:13:b2:0f:ec:b9:13:87:a0:e9:4e:e0: 57:d9:57:65:27:32:47:ce:9f:94:f0:2a:73:fb:a9: 2e:bf:68:41:3f:11:d8:40:2d:62:f0:fd:08:15:e3: cc:f2:93:c1:b5:f7:46:19:19:ab:8a:65:59:c4:7b: dd:3c:8c:86:79:35:f2:1a:33:05:4c:f2:30:1b:4b: 2b:54:d7:2e:54:fe:ce:0a:0c:f2:00:77:b7:39:f2: b9:3a:5c:87:df:04:b8:f7:ea:97:1e:be:f2:e2:66: 9a:1e:ac:71:a7:d4:34:e3:e6:50:fb:d6:2a:f0:44: dc:9d:e9:eb:b9:e3:cb:08:f4:2f:ff:e5:9b:e8:ee: ce:74:8a:15:d5:1c:04:41:b9:43:2a:c4:62:72:4f: 12:55:96:b3:5d:0e:de:b9:9b:33:e3:fa:18:4f:cc: 0f:32:19:bf:bf:61:53:23:b2:6e:fb:71:48:2a:f8: ca:b7:75:69:d2:7d:76:17:5a:bd:d2:75:a6:94:f1: d2:c5:68:4f:98:93:39:98:ac:71:44:cb:85:5b:82: 7f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:BF:79:49:E7:0E:DF:7C:52:40:59:41:D9:E8:88:6D:D1:4B:DA:DF X509v3 Authority Key Identifier: keyid:5F:BE:DE:98:3A:63:22:B9:99:A4:6A:B6:AA:CC:F6:A7:C6:06:3F:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:98:34:61:d4:68:17:e6:19:07:f1:40:40:37:0a:8e:21:58: 5d:c8:50:1b:6d:66:aa:77:cd:20:e4:d5:d3:0f:5e:5c:d6:6f: d7:08:3a:ec:6e:f0:2a:85:01:3a:58:95:5f:a3:f8:a2:7b:93: e4:cd:42:28:a1:0c:35:40:35:04:ba:bf:62:55:ce:3d:54:e1: ef:a8:77:b7:b0:a4:4a:8e:20:50:14:85:83:79:46:19:23:20: ab:d9:96:83:07:24:81:c3:b0:a0:23:dd:ff:60:ae:00:0d:be: b2:7f:ec:6d:16:d9:b2:6f:0e:ee:c0:09:1b:01:c6:e1:3f:6a: ad:69:27:1e:a9:e5:e0:2d:37:11:da:da:ac:03:d1:b2:58:d7: 2c:e5:99:4e:a3:b4:9a:73:0c:6b:3e:1f:ef:3e:2a:3b:16:4d: c9:7c:8c:49:66:e1:42:0f:6c:d8:11:fa:98:7f:68:cc:7e:43: 27:f7:da:3d:86:96:8d:45:d4:34:8b:7c:a6:05:c3:33:93:31: ab:d0:b5:d4:7b:90:15:a0:fe:b9:8f:27:77:ee:62:fe:3d:e7: 19:a2:3f:9f:07:41:5f:fe:c2:7b:c3:65:38:dc:dc:e4:59:0b: c7:4f:c2:64:cf:ac:cd:85:d8:ca:b4:64:a6:f4:9d:e1:b3:c9: b2:ac:8b:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeihMlpF0VWfz/Y59YPvvibwcy04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCRURFOTgzQTYzMjJCOTk5QTQ2QUI2QUFDQ0Y2QTdD NjA2M0ZCNTAeFw0yNjA5MjIxNDA4NTFaFw0yNjA5MjMxNzIyNTFaMDMxMTAvBgNV BAMTKDNBQkY3OTQ5RTcwRURGN0M1MjQwNTk0MUQ5RTg4ODZERDE0QkRBREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3h6rqQE7PLLPCvysWxcb6yD44 nkARuG/Rvgm/uYKOqHlISVe4oDkvRl4R/CA7Qe8Tsg/suROHoOlO4FfZV2UnMkfO n5TwKnP7qS6/aEE/EdhALWLw/QgV48zyk8G190YZGauKZVnEe908jIZ5NfIaMwVM 8jAbSytU1y5U/s4KDPIAd7c58rk6XIffBLj36pcevvLiZpoerHGn1DTj5lD71irw RNyd6eu548sI9C//5Zvo7s50ihXVHARBuUMqxGJyTxJVlrNdDt65mzPj+hhPzA8y Gb+/YVMjsm77cUgq+Mq3dWnSfXYXWr3SdaaU8dLFaE+YkzmYrHFEy4Vbgn/ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOr95SecO33xSQFlB2eiIbdFL2t8wHwYDVR0j BBgwFoAUX77emDpjIrmZpGq2qsz2p8YGP7UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGM3NjVkNTEtYjBiMS00MzVkLWE2NmItNjA0YzZlNWQyOWVmLzAvNUZCRURFOTgz QTYzMjJCOTk5QTQ2QUI2QUFDQ0Y2QTdDNjA2M0ZCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkJFREU5ODNBNjMyMkI5OTlBNDZBQjZBQUNDRjZBN0M2MDYz RkI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGM3NjVkNTEtYjBiMS00MzVkLWE2 NmItNjA0YzZlNWQyOWVmLzAvNUZCRURFOTgzQTYzMjJCOTk5QTQ2QUI2QUFDQ0Y2 QTdDNjA2M0ZCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABiYNGHUaBfmGQfxQEA3Co4hWF3IUBttZqp3 zSDk1dMPXlzWb9cIOuxu8CqFATpYlV+j+KJ7k+TNQiihDDVANQS6v2JVzj1U4e+o d7ewpEqOIFAUhYN5RhkjIKvZloMHJIHDsKAj3f9grgANvrJ/7G0W2bJvDu7ACRsB xuE/aq1pJx6p5eAtNxHa2qwD0bJY1yzlmU6jtJpzDGs+H+8+KjsWTcl8jElm4UIP bNgR+ph/aMx+Qyf32j2Glo1F1DSLfKYFwzOTMavQtdR7kBWg/rmPJ3fuYv495xmi P58HQV/+wnvDZTjc3ORZC8dPwmTPrM2F2Mq0ZKb0neGzybKsi7Q= -----END CERTIFICATE-----Generated at Tue Sep 22 20:29:01 2026 by rpki-client