$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft File: 5FF85953C6850E359467A581C3FE1AC78E529F2F.mft (raw, json) Hash identifier: IZiC6/EkTqjlRpFMTgVQ28inO80Bj3IPG0/DAMLDA6k= Subject key identifier: A9:1F:01:9A:28:90:BE:A7:43:81:F2:8C:CB:F1:42:6C:5F:89:BF:5F Authority key identifier: 5F:F8:59:53:C6:85:0E:35:94:67:A5:81:C3:FE:1A:C7:8E:52:9F:2F Certificate issuer: /CN=5FF85953C6850E359467A581C3FE1AC78E529F2F Certificate serial: 08A9A5706BA40039917AFB06601A24BBE4FBF5D8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft Manifest number: BD Signing time: Sun 20 Sep 2026 18:09:14 +0000 Manifest this update: Sun 20 Sep 2026 18:04:14 +0000 Manifest next update: Mon 21 Sep 2026 21:33:14 +0000 Files and hashes: 1: 5FF85953C6850E359467A581C3FE1AC78E529F2F.crl (hash: JhEj+IcFI7waDbd2mC6PI8fAOKOaSDJLi9vzHZ/Fop0=) 2: 3131352e3136362e39362e302f31392d3234203d3e203234353335.roa (hash: MmVOOc/LuqFNSXqQ5IddobFw0Ch137C+avOoyFd6ZzY=) 3: 3131352e3136362e3131312e302f32342d3234203d3e203134363138.roa (hash: kPUK2GFDFYlKn9GXNmNAqFN8ChpgIluMw/CP+FmKw0o=) 4: 323430333a666630303a3a2f33322d3438203d3e203234353335.roa (hash: +qKLLz9ehRuOchJ8m6wI99oYtklf5Gx9ixqGHWMAzMw=) 5: 3131352e3136362e3131312e302f32342d3234203d3e20333936393832.roa (hash: t97u2GqJ2jtckgSGR6Sjz6Jn9nKSQHkBxpLPsPLvaYM=) 6: 35382e36352e3234302e302f32312d3234203d3e203234353335.roa (hash: AwkHb7HGSUt+TaaLZZEdADtv/v78j6fMphbiNKpRchs=) 7: 3131352e3136362e3131312e302f32342d3234203d3e203136353039.roa (hash: uTaNGo7IDdsOGs73zESne28tA+ZzMyK0wMRINMuXTcQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.crl rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 21:33:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:a9:a5:70:6b:a4:00:39:91:7a:fb:06:60:1a:24:bb:e4:fb:f5:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF85953C6850E359467A581C3FE1AC78E529F2F Validity Not Before: Sep 20 18:04:14 2026 GMT Not After : Sep 21 21:33:14 2026 GMT Subject: CN=A91F019A2890BEA74381F28CCBF1426C5F89BF5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0a:3d:a2:09:09:90:c6:bb:29:45:b6:73:31: 44:c2:f1:8e:70:c5:1b:00:17:6e:80:7f:2b:f5:a8: bf:4a:0f:c2:04:5e:2b:78:d8:9a:9c:b2:a6:8d:45: a8:59:15:79:60:d8:dc:cb:f6:0e:93:5f:ec:99:84: 81:ca:3f:9c:0c:36:eb:b9:ff:4f:de:2f:5c:85:0e: 81:27:99:53:b8:6f:2b:40:18:58:f4:ef:a7:20:99: e9:b1:e9:f9:d9:e8:51:e5:2f:79:8e:34:70:1c:f1: 26:83:88:e1:0e:ea:ca:a5:6b:79:2b:a2:77:5c:18: 0d:8a:cc:e4:ab:90:d0:84:e1:e3:aa:6c:8e:51:65: 39:09:a2:9f:0b:01:5e:95:18:95:14:37:74:ce:2c: b9:a4:d7:e1:45:55:f1:96:9d:81:9c:4d:50:08:cd: 3e:7a:41:eb:0a:0f:8f:ad:45:9a:11:f3:5d:9c:bf: 73:16:87:c5:86:08:78:09:28:07:8f:30:41:03:32: ef:17:50:f7:38:c4:ba:8a:cd:f0:b8:d3:87:6e:94: c2:dc:a8:65:34:69:98:22:ff:45:63:e4:31:ac:38: 8f:a8:ef:66:10:34:46:6e:3e:1a:0f:ba:ab:c0:a4: 52:50:04:a1:be:ac:45:39:fc:f8:6e:9a:c3:f2:a5: 1a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1F:01:9A:28:90:BE:A7:43:81:F2:8C:CB:F1:42:6C:5F:89:BF:5F X509v3 Authority Key Identifier: keyid:5F:F8:59:53:C6:85:0E:35:94:67:A5:81:C3:FE:1A:C7:8E:52:9F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:a0:d4:87:17:80:bc:b9:a2:d1:4e:95:44:d5:02:a7:b3:e4: c5:3f:b3:09:a4:9a:99:01:ba:99:d1:0b:10:73:11:3d:1f:81: f5:cb:35:9f:fa:43:71:2d:2f:50:89:5e:0c:d7:15:7a:45:f3: 2a:fa:24:87:06:b9:c5:6a:f4:12:e9:c7:3f:28:db:c7:3c:e5: 99:b5:4d:54:4c:1b:ed:7c:a6:83:66:6f:5c:9c:d7:39:d7:84: a4:80:d6:f6:1c:97:12:fb:ca:dd:cc:41:90:ca:30:6a:86:6f: 8c:7f:70:57:61:30:81:d6:02:91:6d:72:99:d8:ee:35:22:3c: 8a:49:32:e7:46:51:7f:2c:9f:54:79:6b:81:b4:15:e6:43:1a: f5:c5:32:1e:c9:ee:4d:a1:33:95:e8:47:1f:10:06:7a:14:2a: 01:21:f0:d3:d9:f9:18:79:0b:87:86:00:44:f8:d2:8a:8e:46: 23:c9:1b:39:f1:6d:3e:5d:5a:41:4c:3e:d3:5b:cd:f7:6f:03: 3d:bf:93:f6:32:11:8e:f2:0f:39:a0:e0:18:5c:f6:97:c8:b6: 63:54:2e:a2:bb:37:ac:30:ee:f0:9d:5a:2f:dc:09:c4:3d:76: 3f:3f:59:25:b4:c3:64:cd:f1:ec:1a:8f:6a:45:53:c9:ba:58: 61:13:c0:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCKmlcGukADmRevsGYBoku+T79dgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGODU5NTNDNjg1MEUzNTk0NjdBNTgxQzNGRTFBQzc4 RTUyOUYyRjAeFw0yNjA5MjAxODA0MTRaFw0yNjA5MjEyMTMzMTRaMDMxMTAvBgNV BAMTKEE5MUYwMTlBMjg5MEJFQTc0MzgxRjI4Q0NCRjE0MjZDNUY4OUJGNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRCj2iCQmQxrspRbZzMUTC8Y5w xRsAF26Afyv1qL9KD8IEXit42JqcsqaNRahZFXlg2NzL9g6TX+yZhIHKP5wMNuu5 /0/eL1yFDoEnmVO4bytAGFj076cgmemx6fnZ6FHlL3mONHAc8SaDiOEO6sqla3kr ondcGA2KzOSrkNCE4eOqbI5RZTkJop8LAV6VGJUUN3TOLLmk1+FFVfGWnYGcTVAI zT56QesKD4+tRZoR812cv3MWh8WGCHgJKAePMEEDMu8XUPc4xLqKzfC404dulMLc qGU0aZgi/0Vj5DGsOI+o72YQNEZuPhoPuqvApFJQBKG+rEU5/PhumsPypRpxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqR8BmiiQvqdDgfKMy/FCbF+Jv18wHwYDVR0j BBgwFoAUX/hZU8aFDjWUZ6WBw/4ax45Sny8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmRkNDdmNTYtZWM1My00MmViLTliOGItZmEwOGY4NzRkMzE5LzAvNUZGODU5NTND Njg1MEUzNTk0NjdBNTgxQzNGRTFBQzc4RTUyOUYyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkY4NTk1M0M2ODUwRTM1OTQ2N0E1ODFDM0ZFMUFDNzhFNTI5 RjJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmRkNDdmNTYtZWM1My00MmViLTli OGItZmEwOGY4NzRkMzE5LzAvNUZGODU5NTNDNjg1MEUzNTk0NjdBNTgxQzNGRTFB Qzc4RTUyOUYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFag1IcXgLy5otFOlUTVAqez5MU/swmkmpkB upnRCxBzET0fgfXLNZ/6Q3EtL1CJXgzXFXpF8yr6JIcGucVq9BLpxz8o28c85Zm1 TVRMG+18poNmb1yc1znXhKSA1vYclxL7yt3MQZDKMGqGb4x/cFdhMIHWApFtcpnY 7jUiPIpJMudGUX8sn1R5a4G0FeZDGvXFMh7J7k2hM5XoRx8QBnoUKgEh8NPZ+Rh5 C4eGAET40oqORiPJGznxbT5dWkFMPtNbzfdvAz2/k/YyEY7yDzmg4Bhc9pfItmNU LqK7N6ww7vCdWi/cCcQ9dj8/WSW0w2TN8ewaj2pFU8m6WGETwB4= -----END CERTIFICATE-----Generated at Mon Sep 21 12:34:35 2026 by rpki-client