$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft File: 1587930E115B02B61F9967A961669E9C2E5D3155.mft (raw, json) Hash identifier: GzQYE/vu1WPqHmpG1ZNCS2aJrz0xEH3UvoH2oTsOqKg= Subject key identifier: ED:30:25:AC:71:EA:FA:76:06:73:96:51:41:F3:F0:78:CF:FA:48:CD Authority key identifier: 15:87:93:0E:11:5B:02:B6:1F:99:67:A9:61:66:9E:9C:2E:5D:31:55 Certificate issuer: /CN=1587930E115B02B61F9967A961669E9C2E5D3155 Certificate serial: 3AAD011E58039F82724A3234F62B88E9857BAB19 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1587930E115B02B61F9967A961669E9C2E5D3155.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft Manifest number: C5 Signing time: Fri 25 Sep 2026 17:21:44 +0000 Manifest this update: Fri 25 Sep 2026 17:16:44 +0000 Manifest next update: Sat 26 Sep 2026 21:04:44 +0000 Files and hashes: 1: 1587930E115B02B61F9967A961669E9C2E5D3155.crl (hash: 723eo8SDXfcZaM6BSGFpQzYNuGyQAFVwlo5Mcg+ZHK8=) 2: 3230322e35322e35302e302f32342d3234203d3e203436303536.roa (hash: jclNRlrhqL+AfaCj+qvPSgX0Z4Wtr2IefaNqa2LPL2c=) 3: 323030313a6466303a3434613a3a2f34382d3438203d3e203436303536.roa (hash: UOVDSlhXigw/Uz77MSYpnkR4v33gbqMyBOUU19NWXlU=) 4: 3130332e3234352e3132332e302f32342d3234203d3e203436303536.roa (hash: WdT499tVpG8NeV+SEnNVp+8I6jVjAbHrv0KbxNWN8RU=) 5: 3130332e3234352e3132322e302f32342d3234203d3e203436303536.roa (hash: bWoZrHRRCMJiRa1MlW6R+wP7Q96czuFPoxQnXJiuOos=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.crl rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1587930E115B02B61F9967A961669E9C2E5D3155.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ad:01:1e:58:03:9f:82:72:4a:32:34:f6:2b:88:e9:85:7b:ab:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1587930E115B02B61F9967A961669E9C2E5D3155 Validity Not Before: Sep 25 17:16:44 2026 GMT Not After : Sep 26 21:04:44 2026 GMT Subject: CN=ED3025AC71EAFA760673965141F3F078CFFA48CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:16:b6:8e:94:bb:c5:ea:ed:d7:9e:eb:4e:02: c3:b7:9c:5f:af:7d:dd:78:e2:9e:65:a7:4e:91:da: 80:37:fe:52:e4:d8:e2:e0:25:1a:02:41:a8:62:d6: 3b:0e:fc:8f:92:21:41:0c:fa:a0:df:c1:9c:ce:94: 65:b5:a7:16:a2:04:e0:5b:1c:3a:45:4d:00:3b:cf: 54:e0:9c:7b:db:59:47:0c:21:63:96:12:9c:3b:d8: dc:4f:79:2a:b7:b6:01:25:63:b9:c2:fd:73:9c:5f: c6:c3:77:1e:07:c1:53:18:c4:aa:82:58:8c:88:80: 22:df:07:ce:8b:ce:32:83:0d:c0:fd:02:59:eb:08: 35:a4:ec:3a:8d:9b:d3:78:0e:89:a1:48:40:78:a9: af:2a:cd:9c:c1:ef:46:2b:24:72:a0:a6:d0:1b:81: 56:19:99:00:06:83:50:97:78:bb:2f:65:cf:a0:fd: 88:28:bf:a1:5e:18:7b:11:de:c5:39:2b:b2:5b:04: ff:0f:65:6e:c4:be:66:76:1c:a8:62:4d:d6:08:8a: 30:89:55:c1:82:2d:31:04:8c:ee:3d:98:43:ae:6b: e0:7b:dd:b1:1f:c3:4e:9b:f2:e0:00:9f:5b:16:fb: be:ee:8b:93:95:b8:79:75:31:f8:86:01:99:38:12: 84:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:30:25:AC:71:EA:FA:76:06:73:96:51:41:F3:F0:78:CF:FA:48:CD X509v3 Authority Key Identifier: keyid:15:87:93:0E:11:5B:02:B6:1F:99:67:A9:61:66:9E:9C:2E:5D:31:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1587930E115B02B61F9967A961669E9C2E5D3155.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:5d:92:48:f1:c7:67:c0:69:ae:1a:06:36:50:01:d3:a4:e1: 7c:18:4f:95:ea:f8:d6:1d:ff:0a:9d:61:bd:dc:6a:e4:a5:9f: 47:56:d4:94:b0:1c:35:a1:98:29:af:90:0b:d1:44:f8:6c:d1: 84:f0:e1:2d:8f:81:19:24:b9:4c:e9:12:59:be:d9:66:a5:90: fd:f4:0f:ad:b6:01:73:28:d1:41:4a:56:5f:9c:3a:bd:61:da: 7c:bb:54:16:8c:03:d8:90:3c:89:a3:ca:3c:a3:4f:f0:56:c3: ca:3b:76:29:ac:a2:d3:dd:42:80:ce:89:cd:80:ad:25:14:85: e4:24:15:65:1f:71:88:66:f4:83:93:7e:d8:31:ce:b2:8e:d2: 29:f0:42:f7:b9:7d:37:23:31:ae:a6:2a:06:ad:6b:c7:6b:c8: 2d:f4:d8:d7:ed:6f:d8:41:69:25:58:42:db:da:6f:be:13:65: ef:05:6c:ba:a9:fa:17:b6:fa:54:dc:c3:d0:e9:50:58:48:0a: 36:dd:41:fd:02:1e:28:27:97:d7:52:19:88:f3:fa:15:34:ab: 54:0a:92:8b:b1:64:e7:57:a6:59:ba:35:0f:51:be:f4:1d:3d: f2:c6:b9:6b:05:9f:7c:c7:7c:39:dc:ec:7a:a9:54:35:30:60: 77:ad:e2:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOq0BHlgDn4JySjI09iuI6YV7qxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU4NzkzMEUxMTVCMDJCNjFGOTk2N0E5NjE2NjlFOUMy RTVEMzE1NTAeFw0yNjA5MjUxNzE2NDRaFw0yNjA5MjYyMTA0NDRaMDMxMTAvBgNV BAMTKEVEMzAyNUFDNzFFQUZBNzYwNjczOTY1MTQxRjNGMDc4Q0ZGQTQ4Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsFraOlLvF6u3XnutOAsO3nF+v fd144p5lp06R2oA3/lLk2OLgJRoCQahi1jsO/I+SIUEM+qDfwZzOlGW1pxaiBOBb HDpFTQA7z1TgnHvbWUcMIWOWEpw72NxPeSq3tgElY7nC/XOcX8bDdx4HwVMYxKqC WIyIgCLfB86LzjKDDcD9AlnrCDWk7DqNm9N4DomhSEB4qa8qzZzB70YrJHKgptAb gVYZmQAGg1CXeLsvZc+g/Ygov6FeGHsR3sU5K7JbBP8PZW7EvmZ2HKhiTdYIijCJ VcGCLTEEjO49mEOua+B73bEfw06b8uAAn1sW+77ui5OVuHl1MfiGAZk4EoRrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7TAlrHHq+nYGc5ZRQfPweM/6SM0wHwYDVR0j BBgwFoAUFYeTDhFbArYfmWepYWaenC5dMVUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjQxMGZhNDMtMGJlMy00NzFhLTljMjAtODEwNDYyOTFjYTExLzAvMTU4NzkzMEUx MTVCMDJCNjFGOTk2N0E5NjE2NjlFOUMyRTVEMzE1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTg3OTMwRTExNUIwMkI2MUY5OTY3QTk2MTY2OUU5QzJFNUQz MTU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjQxMGZhNDMtMGJlMy00NzFhLTlj MjAtODEwNDYyOTFjYTExLzAvMTU4NzkzMEUxMTVCMDJCNjFGOTk2N0E5NjE2NjlF OUMyRTVEMzE1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRdkkjxx2fAaa4aBjZQAdOk4XwYT5Xq+NYd /wqdYb3cauSln0dW1JSwHDWhmCmvkAvRRPhs0YTw4S2PgRkkuUzpElm+2WalkP30 D622AXMo0UFKVl+cOr1h2ny7VBaMA9iQPImjyjyjT/BWw8o7dimsotPdQoDOic2A rSUUheQkFWUfcYhm9IOTftgxzrKO0inwQve5fTcjMa6mKgata8dryC302Nftb9hB aSVYQtvab74TZe8FbLqp+he2+lTcw9DpUFhICjbdQf0CHignl9dSGYjz+hU0q1QK kouxZOdXplm6NQ9RvvQdPfLGuWsFn3zHfDnc7HqpVDUwYHet4s8= -----END CERTIFICATE-----Generated at Sat Sep 26 10:42:19 2026 by rpki-client