$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft File: 05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft (raw, json) Hash identifier: x66IPmWu/m6uWCma+wB/SdavV9oLxfj8pROA/iQsFHM= Subject key identifier: FB:DC:77:A7:11:19:53:9D:98:59:22:44:C1:13:6E:C2:DE:3D:B4:2C Authority key identifier: 05:37:9F:0D:08:D0:5D:F8:DE:41:D2:AC:19:AD:0B:EF:87:3C:B1:DC Certificate issuer: /CN=05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC Certificate serial: 439C550E8A426FB9E6517A0B1630FE1CB825FC74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft Manifest number: BE Signing time: Sun 20 Sep 2026 17:18:19 +0000 Manifest this update: Sun 20 Sep 2026 17:13:19 +0000 Manifest next update: Mon 21 Sep 2026 20:55:19 +0000 Files and hashes: 1: 3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa (hash: 4wSG33FQW497l9wd4KCTscDggwNpLmu4SJOzxz44RVQ=) 2: 3130332e32342e3134382e302f32322d3234203d3e203233393439.roa (hash: 7oQYk70vQKgevBK4UvvhjpK8SNhKYOZ4R1FXSVnjFQo=) 3: 05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.crl (hash: yk2CPjxLMikKrQuxba0dGwvG8JP70vFOqm6w2kEmBZY=) 4: 34332e3232392e32302e302f32322d3234203d3e203233393439.roa (hash: 5ip0zyOFzxKc/CLTR+cuhj/u/zV2t14XhZlqC+WxFAQ=) 5: 323430313a653438303a3a2f33322d3438203d3e203233393439.roa (hash: Tj1GCuxVuIwoJv3jzrY6G2gcMOfZzcLibiYAvCSsF9Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.crl rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 20:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:9c:55:0e:8a:42:6f:b9:e6:51:7a:0b:16:30:fe:1c:b8:25:fc:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC Validity Not Before: Sep 20 17:13:19 2026 GMT Not After : Sep 21 20:55:19 2026 GMT Subject: CN=FBDC77A71119539D98592244C1136EC2DE3DB42C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:07:51:3c:3c:36:70:76:54:87:0b:d3:ba:42: 3c:95:8d:eb:77:99:c0:f5:fb:e9:d8:60:dc:60:ee: 38:ef:a4:78:1f:f8:f3:bb:8a:bb:5c:9b:b0:47:f4: d5:43:09:73:f4:94:d1:af:b8:43:e0:66:ea:35:90: 8e:bb:f9:73:44:63:03:29:05:72:c3:29:d8:e8:f4: 07:06:de:d1:c4:16:00:71:df:15:d6:55:02:d7:68: bc:b8:81:7d:80:79:dc:c9:88:52:77:eb:05:76:49: 93:fb:3b:b1:13:1f:8f:64:bb:74:df:7f:09:3c:e1: 2b:ed:be:0f:7d:07:f1:f1:43:bf:06:b9:24:77:33: f2:b9:92:10:86:1d:8f:0b:1e:f0:43:30:b3:17:df: cc:0b:59:36:13:45:52:0c:f6:ff:03:36:a5:e3:85: e1:29:db:1c:5e:29:9a:fd:59:0c:c8:43:03:a6:4c: 6b:7c:05:27:e1:6b:36:cd:2e:14:28:36:22:86:ee: 8b:fb:78:b8:80:58:4d:14:5c:88:9f:ca:c1:64:63: 69:5b:d5:24:18:ac:25:6d:cc:8e:8d:0b:c4:63:3c: 96:46:81:48:2a:c3:e0:fd:eb:e2:c5:75:3f:fb:f2: 80:33:e9:d9:33:7e:35:0b:8a:70:dc:0a:39:d5:4c: 09:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:DC:77:A7:11:19:53:9D:98:59:22:44:C1:13:6E:C2:DE:3D:B4:2C X509v3 Authority Key Identifier: keyid:05:37:9F:0D:08:D0:5D:F8:DE:41:D2:AC:19:AD:0B:EF:87:3C:B1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:88:6c:42:31:3a:ba:d0:f0:0b:31:52:c8:92:6a:2d:23:15: 7c:fc:f3:4e:15:5b:9a:d5:67:21:a5:e7:6b:fe:3e:03:cd:73: 6a:fc:3a:87:21:fb:17:f9:43:ad:a5:e4:73:90:02:09:65:42: ee:1d:56:74:c0:0f:89:7c:5d:a6:3a:c7:a5:92:64:47:f8:49: fb:8c:b6:48:b5:fb:22:9a:9a:c6:69:94:46:fd:70:cd:56:8f: 3c:34:c9:c1:89:eb:bd:d9:3b:48:bd:64:16:2e:e7:12:6a:4b: d1:57:e8:e7:0c:ce:32:95:d4:0a:4b:12:49:d0:03:c4:e7:72: a5:9f:54:b9:f5:91:47:87:3b:fe:1b:a7:0f:62:11:7d:36:51: 9e:0e:d4:85:aa:1f:66:3c:bf:e8:1a:f8:9f:5b:5e:26:a5:fa: c3:df:9d:25:53:16:cc:f8:e3:4b:7a:e9:2b:04:43:c8:47:c0: 67:ce:16:1b:84:91:66:45:91:43:cc:ff:2c:b6:0b:c4:38:2f: a3:95:36:c7:54:51:9a:14:7b:98:63:e4:2f:34:a4:a9:3c:b9: a3:00:01:41:95:6f:aa:7a:6b:b7:b5:48:f1:95:ce:e1:12:92: 70:38:13:7b:28:26:b8:38:d8:9e:95:e9:b8:d1:a4:f9:1a:9f: 48:5b:8c:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ5xVDopCb7nmUXoLFjD+HLgl/HQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDUzNzlGMEQwOEQwNURGOERFNDFEMkFDMTlBRDBCRUY4 NzNDQjFEQzAeFw0yNjA5MjAxNzEzMTlaFw0yNjA5MjEyMDU1MTlaMDMxMTAvBgNV BAMTKEZCREM3N0E3MTExOTUzOUQ5ODU5MjI0NEMxMTM2RUMyREUzREI0MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIB1E8PDZwdlSHC9O6QjyVjet3 mcD1++nYYNxg7jjvpHgf+PO7irtcm7BH9NVDCXP0lNGvuEPgZuo1kI67+XNEYwMp BXLDKdjo9AcG3tHEFgBx3xXWVQLXaLy4gX2AedzJiFJ36wV2SZP7O7ETH49ku3Tf fwk84Svtvg99B/HxQ78GuSR3M/K5khCGHY8LHvBDMLMX38wLWTYTRVIM9v8DNqXj heEp2xxeKZr9WQzIQwOmTGt8BSfhazbNLhQoNiKG7ov7eLiAWE0UXIifysFkY2lb 1SQYrCVtzI6NC8RjPJZGgUgqw+D96+LFdT/78oAz6dkzfjULinDcCjnVTAkjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+9x3pxEZU52YWSJEwRNuwt49tCwwHwYDVR0j BBgwFoAUBTefDQjQXfjeQdKsGa0L74c8sdwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmI2OTgyMmMtMmUyMi00OGJlLThiYTItNjM0ZjU4MmMyZWNiLzAvMDUzNzlGMEQw OEQwNURGOERFNDFEMkFDMTlBRDBCRUY4NzNDQjFEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNTM3OUYwRDA4RDA1REY4REU0MUQyQUMxOUFEMEJFRjg3M0NC MURDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmI2OTgyMmMtMmUyMi00OGJlLThi YTItNjM0ZjU4MmMyZWNiLzAvMDUzNzlGMEQwOEQwNURGOERFNDFEMkFDMTlBRDBC RUY4NzNDQjFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGIbEIxOrrQ8AsxUsiSai0jFXz8804VW5rV ZyGl52v+PgPNc2r8Ooch+xf5Q62l5HOQAgllQu4dVnTAD4l8XaY6x6WSZEf4SfuM tki1+yKamsZplEb9cM1Wjzw0ycGJ673ZO0i9ZBYu5xJqS9FX6OcMzjKV1ApLEknQ A8TncqWfVLn1kUeHO/4bpw9iEX02UZ4O1IWqH2Y8v+ga+J9bXial+sPfnSVTFsz4 40t66SsEQ8hHwGfOFhuEkWZFkUPM/yy2C8Q4L6OVNsdUUZoUe5hj5C80pKk8uaMA AUGVb6p6a7e1SPGVzuESknA4E3soJrg42J6V6bjRpPkan0hbjKQ= -----END CERTIFICATE-----Generated at Mon Sep 21 10:40:28 2026 by rpki-client