$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft File: 5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft (raw, json) Hash identifier: p2r3e4k9YuKH12uYmi24WdqBfzP846uTUHYyCoXh3K8= Subject key identifier: AB:5C:0F:62:BD:9C:FB:FC:D0:1E:93:01:99:48:E8:3C:06:2D:5C:1C Authority key identifier: 5F:71:52:CE:E0:4F:DA:FB:4A:3E:4A:0F:3F:D0:AD:F8:22:C5:CD:24 Certificate issuer: /CN=5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24 Certificate serial: 35AE7E446DDDA3ECE6FEF22348AA0E6B00F151DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft Manifest number: BE Signing time: Mon 21 Sep 2026 06:24:33 +0000 Manifest this update: Mon 21 Sep 2026 06:19:33 +0000 Manifest next update: Tue 22 Sep 2026 07:39:33 +0000 Files and hashes: 1: 3130332e36382e3233332e302f32342d3234203d3e20313530353431.roa (hash: hrwaL58bLcWsXLir3kxI1OkAj6GGFQmLA1ZKUXd0Ogs=) 2: 3130332e36382e3233322e302f32342d3234203d3e20313530353431.roa (hash: swr4aEtGPRWs62gogwkO9Y1o8MbTFhHlDaee8r9gWcE=) 3: 5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl (hash: FZ1z6k38Y8eC9nzhL8oklKKg9pAwvMtdY9M4bcQKLv4=) 4: 3130332e36382e3233322e302f32332d3233203d3e20313530353431.roa (hash: jrMRupZddQA8qjBzuVH771xwK+1/f2hSGRy4MrlXlSc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:ae:7e:44:6d:dd:a3:ec:e6:fe:f2:23:48:aa:0e:6b:00:f1:51:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24 Validity Not Before: Sep 21 06:19:33 2026 GMT Not After : Sep 22 07:39:33 2026 GMT Subject: CN=AB5C0F62BD9CFBFCD01E93019948E83C062D5C1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:dd:86:80:fe:b8:5f:33:16:c5:3d:87:4a:d0: ff:7a:62:27:7a:cf:29:7a:75:8c:a6:24:ea:52:43: d9:27:22:3b:c9:8a:0e:ec:72:c5:74:cb:41:9b:c6: 5b:f3:9f:83:42:62:55:31:0d:46:a2:5b:7b:22:40: 79:d5:57:a9:91:b4:24:99:cd:42:55:a8:af:0f:c4: 01:19:02:1b:f2:c5:de:6a:dd:24:df:8e:df:a8:b9: be:6e:91:a7:66:a4:45:6e:aa:91:d9:47:aa:0a:2d: 54:da:3b:ed:ee:c9:0b:5a:71:32:9b:b0:1e:ff:68: 45:c0:1f:53:39:93:c1:4f:92:42:c1:05:44:cb:2c: c4:e4:50:c9:2f:75:6b:43:4d:77:27:43:fe:da:ea: 6b:d8:3a:35:57:78:16:41:a3:dc:5b:a9:5b:04:ec: cc:6e:f3:48:7f:60:33:4a:40:4f:d1:b4:a9:44:44: 1c:f9:7f:c7:a9:2d:61:0d:97:55:37:b9:23:86:e4: 9a:1b:3d:6f:f0:8d:4b:dc:95:2e:e5:61:db:bb:8e: b2:01:69:d3:72:59:ef:b7:b0:c7:0e:a5:c4:eb:b9: d7:16:59:76:9b:60:87:bc:9c:12:ee:71:42:95:dc: fb:27:70:6f:0c:76:b4:c1:17:77:5b:90:db:a2:7d: ac:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5C:0F:62:BD:9C:FB:FC:D0:1E:93:01:99:48:E8:3C:06:2D:5C:1C X509v3 Authority Key Identifier: keyid:5F:71:52:CE:E0:4F:DA:FB:4A:3E:4A:0F:3F:D0:AD:F8:22:C5:CD:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:1e:be:c4:ee:58:fa:52:6d:66:2c:bd:93:af:b6:94:dd:e0: eb:bc:c7:b2:5e:71:d2:9b:e8:eb:1f:99:f2:27:ba:95:97:7b: e8:18:36:99:96:d7:6b:c1:0e:de:94:0b:dc:5f:ec:5c:a7:02: cc:40:3e:38:47:a5:dd:f7:39:2b:a2:b1:11:d4:d1:63:e7:39: 32:38:bc:08:af:4e:f3:77:d0:79:05:bf:b6:a9:04:04:6b:ff: 51:98:2a:34:f3:65:89:ef:56:1b:93:91:69:ce:b3:bf:54:a9: db:b6:ee:b7:1c:ef:53:da:4e:bc:b1:5b:42:2b:e6:fc:42:2e: 1d:05:e0:23:48:04:a4:28:76:2a:f9:87:bb:95:2b:af:64:97: c0:87:31:25:04:18:14:4e:f2:e9:51:6e:fd:99:90:b7:0e:be: 13:f8:a1:21:9c:a5:3f:45:5e:13:a3:7b:f7:b4:79:38:dc:0c: 68:f8:93:6c:cb:53:21:ae:d9:62:d1:39:cf:0c:5b:2f:c5:36: 85:a4:17:e9:eb:f6:0a:ca:d1:87:57:65:9e:c5:1f:9c:4d:29: 87:4c:e7:54:cf:32:3c:e4:1a:63:99:61:81:9e:2a:10:72:8f: 22:55:14:5b:8c:c1:15:92:f4:64:13:91:79:09:c5:8f:c3:81: f6:7e:ce:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNa5+RG3do+zm/vIjSKoOawDxUd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY3MTUyQ0VFMDRGREFGQjRBM0U0QTBGM0ZEMEFERjgy MkM1Q0QyNDAeFw0yNjA5MjEwNjE5MzNaFw0yNjA5MjIwNzM5MzNaMDMxMTAvBgNV BAMTKEFCNUMwRjYyQkQ5Q0ZCRkNEMDFFOTMwMTk5NDhFODNDMDYyRDVDMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM3YaA/rhfMxbFPYdK0P96Yid6 zyl6dYymJOpSQ9knIjvJig7scsV0y0Gbxlvzn4NCYlUxDUaiW3siQHnVV6mRtCSZ zUJVqK8PxAEZAhvyxd5q3STfjt+oub5ukadmpEVuqpHZR6oKLVTaO+3uyQtacTKb sB7/aEXAH1M5k8FPkkLBBUTLLMTkUMkvdWtDTXcnQ/7a6mvYOjVXeBZBo9xbqVsE 7Mxu80h/YDNKQE/RtKlERBz5f8epLWENl1U3uSOG5JobPW/wjUvclS7lYdu7jrIB adNyWe+3sMcOpcTrudcWWXabYIe8nBLucUKV3PsncG8MdrTBF3dbkNuifayzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq1wPYr2c+/zQHpMBmUjoPAYtXBwwHwYDVR0j BBgwFoAUX3FSzuBP2vtKPkoPP9Ct+CLFzSQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTgxNTU0NWMtYzk5Ni00NjBmLTkyZGQtNjI5NGFlYzkyYzUyLzAvNUY3MTUyQ0VF MDRGREFGQjRBM0U0QTBGM0ZEMEFERjgyMkM1Q0QyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RjcxNTJDRUUwNEZEQUZCNEEzRTRBMEYzRkQwQURGODIyQzVD RDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTgxNTU0NWMtYzk5Ni00NjBmLTky ZGQtNjI5NGFlYzkyYzUyLzAvNUY3MTUyQ0VFMDRGREFGQjRBM0U0QTBGM0ZEMEFE RjgyMkM1Q0QyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIevsTuWPpSbWYsvZOvtpTd4Ou8x7JecdKb 6OsfmfInupWXe+gYNpmW12vBDt6UC9xf7FynAsxAPjhHpd33OSuisRHU0WPnOTI4 vAivTvN30HkFv7apBARr/1GYKjTzZYnvVhuTkWnOs79Uqdu27rcc71PaTryxW0Ir 5vxCLh0F4CNIBKQodir5h7uVK69kl8CHMSUEGBRO8ulRbv2ZkLcOvhP4oSGcpT9F XhOje/e0eTjcDGj4k2zLUyGu2WLROc8MWy/FNoWkF+nr9grK0YdXZZ7FH5xNKYdM 51TPMjzkGmOZYYGeKhByjyJVFFuMwRWS9GQTkXkJxY/DgfZ+zo8= -----END CERTIFICATE-----Generated at Mon Sep 21 18:24:47 2026 by rpki-client