$ rpki-client -vvvf rpki-rsync.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.mft File: 5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.mft (raw, json) Hash identifier: R/moUArhdHzcWUhRqDtJgtP/oYzbKj37tvFJGb8BaYY= Subject key identifier: 04:6B:9B:09:EB:AB:14:5E:B6:E9:A2:5B:78:99:FF:0F:3C:53:37:31 Authority key identifier: 5A:FE:24:D2:3E:36:25:48:4D:7D:9B:3E:BA:00:25:AA:9C:0E:EE:A2 Certificate issuer: /CN=5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2 Certificate serial: 5B71EE3620675F9B7534A93BA8500CEFEF4BE97A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.mft Manifest number: D9 Signing time: Sat 10 Oct 2026 14:30:30 +0000 Manifest this update: Sat 10 Oct 2026 14:25:30 +0000 Manifest next update: Sun 11 Oct 2026 18:00:30 +0000 Files and hashes: 1: 3135372e32302e3233382e302f32332d3233203d3e20313532343239.roa (hash: j3/lM2rV4nx+Cn6dsqDo2ERknLnpkGf86BWvcy+vYVs=) 2: 5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.crl (hash: PLGSBkbutThbA94nGKDlt7qRpx+CPTRJ8HrrIg7y/eY=) 3: 3135372e32302e3233382e302f32342d3234203d3e20313532343239.roa (hash: Fy9HvcnOOuartl2MyrCM5SQFmtu1CV6p6EtA15KIkk0=) 4: 3135372e32302e3233392e302f32342d3234203d3e20313532343239.roa (hash: lTUq2TXc5o2FAnT0cBjbniSYESMJX3Ig96J0JouvM0I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.crl rsync://rpki-rsync.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 01:46:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:71:ee:36:20:67:5f:9b:75:34:a9:3b:a8:50:0c:ef:ef:4b:e9:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2 Validity Not Before: Oct 10 14:25:30 2026 GMT Not After : Oct 11 18:00:30 2026 GMT Subject: CN=046B9B09EBAB145EB6E9A25B7899FF0F3C533731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:89:3c:16:17:91:a4:36:41:69:df:bc:91:c8: 5a:6e:db:f8:01:e5:22:ab:59:44:93:e1:6f:e0:c8: 5d:3a:1e:fb:86:89:e3:04:c2:30:4d:88:ec:5f:cf: 88:bb:51:ed:5c:ca:99:3a:b0:0a:27:42:6c:02:9d: c8:21:ac:c4:b5:d4:a2:c0:e6:87:ea:93:6f:2b:4a: 08:5e:55:d0:d3:41:8c:1c:4c:de:1d:c4:cc:91:5d: e6:5c:59:a5:fb:11:d9:6f:02:38:1a:07:41:0c:13: 83:09:ba:be:51:20:51:d6:20:6b:42:dc:15:7b:07: 72:69:c0:24:1c:c8:7b:97:83:3a:11:20:44:eb:5b: 01:62:0f:63:0d:7b:88:47:b2:8f:10:dd:86:2c:52: 30:02:41:1a:1d:27:47:63:86:67:05:e7:52:ba:1d: c8:c8:38:95:55:04:2c:ec:4a:ed:03:bf:77:49:73: e0:ba:89:a7:d2:fc:e7:41:94:44:da:0a:f3:7c:59: 58:fa:17:8d:d5:55:1b:07:d7:30:e0:f4:5e:8b:12: ca:23:6f:2c:94:b7:5c:3e:78:9d:9a:5e:5b:4a:77: 41:bf:68:0c:57:71:25:97:c9:c7:36:35:d1:f9:af: 52:9c:24:82:c5:56:a5:39:7e:fd:1e:6a:cc:4f:87: e6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:6B:9B:09:EB:AB:14:5E:B6:E9:A2:5B:78:99:FF:0F:3C:53:37:31 X509v3 Authority Key Identifier: keyid:5A:FE:24:D2:3E:36:25:48:4D:7D:9B:3E:BA:00:25:AA:9C:0E:EE:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:f3:50:42:fa:f8:e6:1e:ce:96:1f:f0:fa:e9:33:d7:f1:e5: 1a:e7:2e:5b:9d:58:66:3d:68:d4:c4:a5:e7:92:56:30:77:35: f4:45:65:c8:59:7e:c1:6f:53:e6:7d:4d:13:08:9c:22:7d:4a: c2:85:71:cf:65:80:a5:89:d0:8a:3d:31:eb:0d:6c:de:e0:47: f7:a5:ec:c5:c7:78:42:a4:65:ff:d5:b6:5b:3c:34:26:b0:4a: a8:8e:55:e8:a3:6d:f1:c2:87:a1:62:fa:4b:f0:4f:a3:09:b2: 3c:c4:6d:0c:ac:ee:b3:34:a2:2d:cf:ec:a8:fe:88:56:1e:c4: 11:bc:82:d9:95:12:f0:40:7c:9e:2e:b9:41:c8:36:b0:4e:a7: 23:ca:e3:47:a6:32:e5:d2:e5:36:9d:92:46:ff:c3:0e:e2:64: d1:02:89:f5:c9:62:4b:ae:37:36:5c:55:80:ee:c8:ea:77:7f: 58:90:c0:e1:1b:9e:cd:19:57:0b:88:2c:1d:c2:a9:fb:d1:44: 71:4d:a5:39:25:22:e5:e5:ca:22:f9:09:b2:0b:cc:76:d6:15: 4a:6c:93:45:10:13:34:b6:14:22:4d:ba:f9:e4:16:08:65:4c: 6d:35:89:1c:24:a7:d1:fc:13:cf:d6:b6:3b:07:2b:38:51:20: 8b:55:7b:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW3HuNiBnX5t1NKk7qFAM7+9L6XowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFGRTI0RDIzRTM2MjU0ODREN0Q5QjNFQkEwMDI1QUE5 QzBFRUVBMjAeFw0yNjEwMTAxNDI1MzBaFw0yNjEwMTExODAwMzBaMDMxMTAvBgNV BAMTKDA0NkI5QjA5RUJBQjE0NUVCNkU5QTI1Qjc4OTlGRjBGM0M1MzM3MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCliTwWF5GkNkFp37yRyFpu2/gB 5SKrWUST4W/gyF06HvuGieMEwjBNiOxfz4i7Ue1cypk6sAonQmwCncghrMS11KLA 5ofqk28rSgheVdDTQYwcTN4dxMyRXeZcWaX7EdlvAjgaB0EME4MJur5RIFHWIGtC 3BV7B3JpwCQcyHuXgzoRIETrWwFiD2MNe4hHso8Q3YYsUjACQRodJ0djhmcF51K6 HcjIOJVVBCzsSu0Dv3dJc+C6iafS/OdBlETaCvN8WVj6F43VVRsH1zDg9F6LEsoj byyUt1w+eJ2aXltKd0G/aAxXcSWXycc2NdH5r1KcJILFVqU5fv0easxPh+aTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBGubCeurFF626aJbeJn/DzxTNzEwHwYDVR0j BBgwFoAUWv4k0j42JUhNfZs+ugAlqpwO7qIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MThkMWM0NDktOTc4Yy00ODQ1LWI4MjMtYjU5MjVhOTA1NDI3LzAvNUFGRTI0RDIz RTM2MjU0ODREN0Q5QjNFQkEwMDI1QUE5QzBFRUVBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81QUZFMjREMjNFMzYyNTQ4NEQ3RDlCM0VCQTAwMjVBQTlDMEVF RUEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMThkMWM0NDktOTc4Yy00ODQ1LWI4 MjMtYjU5MjVhOTA1NDI3LzAvNUFGRTI0RDIzRTM2MjU0ODREN0Q5QjNFQkEwMDI1 QUE5QzBFRUVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfzUEL6+OYezpYf8PrpM9fx5RrnLludWGY9 aNTEpeeSVjB3NfRFZchZfsFvU+Z9TRMInCJ9SsKFcc9lgKWJ0Io9MesNbN7gR/el 7MXHeEKkZf/Vtls8NCawSqiOVeijbfHCh6Fi+kvwT6MJsjzEbQys7rM0oi3P7Kj+ iFYexBG8gtmVEvBAfJ4uuUHINrBOpyPK40emMuXS5Tadkkb/ww7iZNECifXJYkuu NzZcVYDuyOp3f1iQwOEbns0ZVwuILB3CqfvRRHFNpTklIuXlyiL5CbILzHbWFUps k0UQEzS2FCJNuvnkFghlTG01iRwkp9H8E8/WtjsHKzhRIItVe/U= -----END CERTIFICATE-----Generated at Sat Oct 10 17:17:02 2026 by rpki-client