$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft File: 5843958BB240779320D7F0C2B674ACF5EF6122BC.mft (raw, json) Hash identifier: AE/sGqs7B3mxiC5JzIxCPvZDUX7GAfRkEwAaLmhMu3w= Subject key identifier: 8B:14:61:BE:E4:0D:75:E1:3C:44:7E:FC:A7:37:81:2B:DF:B4:A9:AC Authority key identifier: 58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC Certificate issuer: /CN=5843958BB240779320D7F0C2B674ACF5EF6122BC Certificate serial: 41604AEFB48F0C2E711CBD3FED29968CC92E22EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 22:09:01 +0000 Manifest this update: Mon 21 Sep 2026 22:04:01 +0000 Manifest next update: Tue 22 Sep 2026 22:27:01 +0000 Files and hashes: 1: 3130332e32382e3131322e302f32322d3234203d3e203435333035.roa (hash: yPK7GQUu85mTor59GtzCw8idVr6kmAEeffKza8nzEd8=) 2: 3132342e34302e3234382e302f32312d3234203d3e203435333035.roa (hash: bNdzrUkHylX3nBoyTDryEKwja6jOzq2DQP/kaLdB4H4=) 3: 3230322e35362e3136342e302f32322d3234203d3e203435333035.roa (hash: WeFmDyNsHJ6btvYfzDFQoJzW4vr0tmZoF+30o64Nsw4=) 4: 323030313a6466303a61333a3a2f34382d3438203d3e203435333035.roa (hash: jOCXET8yniqJ02iHiMoBI6iwGo2/5oUN4/jc3LtL0jQ=) 5: 5843958BB240779320D7F0C2B674ACF5EF6122BC.crl (hash: XJdAy7CI8+AZytqJrZTTQeHVbYpgmwJ/V0b0q75LRQQ=) 6: 3132342e34302e3234382e302f32342d3234203d3e20313432333237.roa (hash: zO201tAVoPKGV/ct4ikI5lfPCjZ1ksaQX5GMEkLajwg=) 7: 34332e3235322e3130342e302f32342d3234203d3e20313432333237.roa (hash: 3HeHx0erxEkjN9PtOgU3W6tKucWeXKE5FEYLyXwycJc=) 8: 3132342e34302e3235332e302f32342d3234203d3e20313432333237.roa (hash: t3N8/NmkXItiVJAARc4CSYWSo+yW57apDjW3aqHeSkc=) 9: 34332e3235322e3130342e302f32322d3234203d3e203435333035.roa (hash: lVR5iCrB58ZGOeyqsgP1KQLwdS0WjCcfUKPYsWN8lxI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:60:4a:ef:b4:8f:0c:2e:71:1c:bd:3f:ed:29:96:8c:c9:2e:22:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5843958BB240779320D7F0C2B674ACF5EF6122BC Validity Not Before: Sep 21 22:04:01 2026 GMT Not After : Sep 22 22:27:01 2026 GMT Subject: CN=8B1461BEE40D75E13C447EFCA737812BDFB4A9AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c3:ad:7a:aa:87:15:dc:41:d5:c4:99:7d:8d: a7:29:f0:4a:40:a7:ca:94:a8:e9:f7:f8:28:96:e8: 1c:df:e1:ed:7d:ae:91:6f:31:7d:cb:5f:f3:f0:72: ca:d4:a1:ec:d2:69:4b:f8:df:73:9d:39:ba:7a:65: 17:3a:84:80:a0:fd:1c:4c:b5:f1:c2:d1:59:bc:fa: ff:61:a3:98:06:77:6b:a3:5a:c7:05:17:56:e0:fb: fa:f9:bb:4c:25:11:da:70:59:e1:6c:02:34:fa:4d: fb:70:cd:84:ac:72:8c:1d:05:82:b4:79:41:5c:72: b1:98:46:16:19:c1:bd:31:c1:21:5f:73:dd:cb:a1: 7c:58:83:a8:66:91:87:5e:8c:b5:a6:2a:15:83:91: 37:b4:d4:29:7f:8c:3c:de:1d:47:f9:c4:58:ec:b1: e9:87:f1:03:da:05:a2:e6:ac:76:52:e1:a5:ba:d4: 8f:9f:7a:09:2a:36:4c:ce:10:3b:dd:51:af:22:d1: 0b:5f:c9:68:b7:0a:62:71:e7:16:dc:31:25:c8:2f: 6f:24:bc:c1:31:c0:7d:68:66:d0:e7:d6:20:9b:19: 30:f9:5a:8d:06:d0:98:04:1a:61:15:95:2c:42:00: d6:97:f1:e4:44:99:26:45:45:8e:7c:29:2f:25:6b: 00:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:14:61:BE:E4:0D:75:E1:3C:44:7E:FC:A7:37:81:2B:DF:B4:A9:AC X509v3 Authority Key Identifier: keyid:58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:07:5b:ec:4a:b2:06:ad:77:ec:41:58:47:37:9f:7d:f7:b0: 10:bd:86:a9:94:c6:8d:16:c5:e1:57:39:c1:6c:0b:8d:bb:5d: 2f:7e:60:11:6b:51:d7:23:35:54:76:92:a5:8d:a0:68:ca:6f: 74:6a:8a:03:73:9a:d0:b9:80:1e:b2:eb:09:42:3c:5d:d3:9a: 75:c2:b9:2b:2f:52:44:8d:28:4a:31:a3:84:3c:ab:da:75:a7: 48:07:67:87:8d:e7:bf:7a:05:3b:46:50:fd:34:00:19:1c:a3: 3e:63:ce:57:fe:2c:5b:e3:a9:77:9e:5a:72:22:41:d9:d6:b6: cb:5c:2c:42:bb:7c:cb:75:f2:fc:90:64:52:86:5e:0b:0a:e3: c7:90:5e:85:13:40:2b:75:42:82:ac:6c:95:96:a8:30:1b:69: 56:76:df:03:f0:41:d6:7e:60:09:a3:9e:20:41:71:99:7c:7c: 44:a3:b7:a3:3a:28:bd:73:5c:cd:b8:15:17:50:4e:60:1d:18: ac:f9:9b:ce:e1:16:a1:6d:74:ae:10:19:37:97:08:6f:92:a8: e7:e8:ac:d8:ba:ab:dd:be:6b:25:b2:d6:a3:ba:41:e7:1f:d4: 12:4e:ac:89:4c:45:e6:82:fc:95:74:b4:c4:04:46:ae:7c:16: 04:9d:c7:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQWBK77SPDC5xHL0/7SmWjMkuIuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg0Mzk1OEJCMjQwNzc5MzIwRDdGMEMyQjY3NEFDRjVF RjYxMjJCQzAeFw0yNjA5MjEyMjA0MDFaFw0yNjA5MjIyMjI3MDFaMDMxMTAvBgNV BAMTKDhCMTQ2MUJFRTQwRDc1RTEzQzQ0N0VGQ0E3Mzc4MTJCREZCNEE5QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYw616qocV3EHVxJl9jacp8EpA p8qUqOn3+CiW6Bzf4e19rpFvMX3LX/PwcsrUoezSaUv433OdObp6ZRc6hICg/RxM tfHC0Vm8+v9ho5gGd2ujWscFF1bg+/r5u0wlEdpwWeFsAjT6TftwzYSscowdBYK0 eUFccrGYRhYZwb0xwSFfc93LoXxYg6hmkYdejLWmKhWDkTe01Cl/jDzeHUf5xFjs semH8QPaBaLmrHZS4aW61I+fegkqNkzOEDvdUa8i0QtfyWi3CmJx5xbcMSXIL28k vMExwH1oZtDn1iCbGTD5Wo0G0JgEGmEVlSxCANaX8eREmSZFRY58KS8lawCvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUixRhvuQNdeE8RH78pzeBK9+0qawwHwYDVR0j BBgwFoAUWEOVi7JAd5Mg1/DCtnSs9e9hIrwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ5NWMxOWMtMzI2Mi00OGM3LWFmMDItMzdhODM1ZDBhNzc5LzAvNTg0Mzk1OEJC MjQwNzc5MzIwRDdGMEMyQjY3NEFDRjVFRjYxMjJCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODQzOTU4QkIyNDA3NzkzMjBEN0YwQzJCNjc0QUNGNUVGNjEy MkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ5NWMxOWMtMzI2Mi00OGM3LWFm MDItMzdhODM1ZDBhNzc5LzAvNTg0Mzk1OEJCMjQwNzc5MzIwRDdGMEMyQjY3NEFD RjVFRjYxMjJCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMHW+xKsgatd+xBWEc3n333sBC9hqmUxo0W xeFXOcFsC427XS9+YBFrUdcjNVR2kqWNoGjKb3RqigNzmtC5gB6y6wlCPF3TmnXC uSsvUkSNKEoxo4Q8q9p1p0gHZ4eN5796BTtGUP00ABkcoz5jzlf+LFvjqXeeWnIi QdnWtstcLEK7fMt18vyQZFKGXgsK48eQXoUTQCt1QoKsbJWWqDAbaVZ23wPwQdZ+ YAmjniBBcZl8fESjt6M6KL1zXM24FRdQTmAdGKz5m87hFqFtdK4QGTeXCG+SqOfo rNi6q92+ayWy1qO6Qecf1BJOrIlMReaC/JV0tMQERq58FgSdx6U= -----END CERTIFICATE-----Generated at Tue Sep 22 06:54:44 2026 by rpki-client