$ rpki-client -vvvf rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft File: 5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft (raw, json) Hash identifier: BYku4JHd4KUrI93hH5fJdHS1lYYZZwuXzhINqCqo3Ic= Subject key identifier: 88:39:AB:28:45:3B:65:88:26:C0:BA:70:31:78:F8:A3:2A:45:95:9E Authority key identifier: 5E:25:E7:5E:AD:14:FB:9C:87:77:75:CF:A5:C7:68:C9:9B:F8:31:CB Certificate issuer: /CN=5E25E75EAD14FB9C877775CFA5C768C99BF831CB Certificate serial: 0C6E8A8E778AA046F6B0F42FD71697FFFE6FFB0A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft Manifest number: BE Signing time: Tue 22 Sep 2026 15:05:03 +0000 Manifest this update: Tue 22 Sep 2026 15:00:03 +0000 Manifest next update: Wed 23 Sep 2026 17:46:03 +0000 Files and hashes: 1: 323030313a6466303a666534303a3a2f34382d3438203d3e20313439393133.roa (hash: Mx1Bs+uk4ORbPOJY3X4OSkdxpVJJ2TqdAiAI7XjMvYw=) 2: 3130332e3139312e35352e302f32342d3234203d3e20313439393133.roa (hash: U6ZrAajnenCJBZYC9uBM6kAorfrc1n55yTDGAGbaXuI=) 3: 3130332e3139312e35342e302f32342d3234203d3e20313439393133.roa (hash: GheubIEbC2RH3FMbulGJZm2AS1TBwHys9ZC8vY6htKI=) 4: 5E25E75EAD14FB9C877775CFA5C768C99BF831CB.crl (hash: ckNI4t60wFGw/UH6iNZ6EGlRkpB12MDevzSd+UCns0g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.crl rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 17:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:6e:8a:8e:77:8a:a0:46:f6:b0:f4:2f:d7:16:97:ff:fe:6f:fb:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E25E75EAD14FB9C877775CFA5C768C99BF831CB Validity Not Before: Sep 22 15:00:03 2026 GMT Not After : Sep 23 17:46:03 2026 GMT Subject: CN=8839AB28453B658826C0BA703178F8A32A45959E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:47:8a:06:79:00:86:45:5d:a9:d2:94:c7:90: 4f:8f:e1:60:ef:b2:c0:68:0a:33:89:b4:46:ca:2c: ed:0d:f2:af:ba:bf:83:7c:93:46:3c:a0:9b:2a:6b: 72:f1:d4:ed:96:2d:e2:11:6f:c6:10:66:d2:1b:d3: a8:2d:b5:08:9b:ae:19:8e:bc:2a:31:a4:85:ff:ea: 14:b7:cb:52:08:11:7f:66:f2:be:85:de:23:e3:ea: 80:c2:af:f4:b8:41:63:4f:47:97:7a:84:25:fe:b6: 03:f5:e3:8f:5b:8c:83:00:e7:36:50:31:1d:36:ee: 7a:b9:ff:31:4a:de:b2:e1:09:e3:46:43:b8:05:b9: 98:f8:3d:25:06:7a:da:22:a2:18:c1:34:c0:b2:7b: 80:07:20:12:51:e2:f1:2e:4e:f6:eb:7b:62:c3:5f: c8:cb:0b:24:1c:56:7e:15:1c:9c:63:6c:5d:fd:02: 20:ac:7e:9c:2d:69:b5:09:32:b3:cd:f5:7e:ac:6d: a2:f2:d1:72:e0:1e:a2:2f:f3:6b:f6:16:28:f8:94: a8:43:85:1e:ac:39:8e:30:54:7e:96:41:46:95:da: 7f:94:13:ea:ab:5c:63:77:87:e8:0b:ed:40:ba:24: ec:03:a4:3e:bc:8b:dc:45:e5:7f:44:fe:1a:14:44: d0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:39:AB:28:45:3B:65:88:26:C0:BA:70:31:78:F8:A3:2A:45:95:9E X509v3 Authority Key Identifier: keyid:5E:25:E7:5E:AD:14:FB:9C:87:77:75:CF:A5:C7:68:C9:9B:F8:31:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:20:d6:d2:c6:6a:73:98:56:b6:bb:d1:4c:c4:2e:66:10:54: d0:99:34:ae:92:64:1e:62:22:1a:18:76:31:54:18:32:e1:6f: 9c:83:97:5f:0b:31:6e:c7:ca:28:97:cb:a8:ce:8e:c5:21:fc: 82:91:5d:73:11:a4:af:76:8e:80:0a:e9:09:78:1b:9f:38:58: 2a:db:12:b5:08:47:1b:02:ce:1c:9d:5c:02:6f:1d:44:cb:bd: c7:2d:cc:63:c8:9c:45:04:1d:de:6a:e9:f9:6c:ac:87:a6:e5: e0:c0:eb:18:fb:21:e2:eb:0d:4a:4e:08:81:cf:1f:20:6c:56: df:b4:36:e8:61:db:c7:69:5d:f4:50:bf:f6:1b:64:9e:40:40: f2:e9:7c:93:b4:a6:93:4f:f9:fc:25:13:48:b5:9e:e0:0b:66: 0b:3f:e1:26:5f:c1:2c:1c:1b:ce:c2:ca:43:bc:6e:6b:e0:11: 62:31:7d:68:7a:9c:db:7f:91:37:3e:2e:fe:a9:20:55:ea:ac: 74:36:3a:4a:d1:97:ad:e9:dc:20:de:43:70:66:65:78:31:76: d7:43:8a:2f:31:6a:7f:71:9c:80:27:34:25:88:63:1a:2e:f0: 38:44:5f:00:1a:d5:b6:c9:dd:c8:77:1d:86:19:3f:3e:99:c8: 89:74:d4:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDG6KjneKoEb2sPQv1xaX//5v+wowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUyNUU3NUVBRDE0RkI5Qzg3Nzc3NUNGQTVDNzY4Qzk5 QkY4MzFDQjAeFw0yNjA5MjIxNTAwMDNaFw0yNjA5MjMxNzQ2MDNaMDMxMTAvBgNV BAMTKDg4MzlBQjI4NDUzQjY1ODgyNkMwQkE3MDMxNzhGOEEzMkE0NTk1OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnR4oGeQCGRV2p0pTHkE+P4WDv ssBoCjOJtEbKLO0N8q+6v4N8k0Y8oJsqa3Lx1O2WLeIRb8YQZtIb06gttQibrhmO vCoxpIX/6hS3y1IIEX9m8r6F3iPj6oDCr/S4QWNPR5d6hCX+tgP1449bjIMA5zZQ MR027nq5/zFK3rLhCeNGQ7gFuZj4PSUGetoiohjBNMCye4AHIBJR4vEuTvbre2LD X8jLCyQcVn4VHJxjbF39AiCsfpwtabUJMrPN9X6sbaLy0XLgHqIv82v2Fij4lKhD hR6sOY4wVH6WQUaV2n+UE+qrXGN3h+gL7UC6JOwDpD68i9xF5X9E/hoURNC1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiDmrKEU7ZYgmwLpwMXj4oypFlZ4wHwYDVR0j BBgwFoAUXiXnXq0U+5yHd3XPpcdoyZv4McswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg2ZDZiYTEtMWY3My00Nzc2LThhNmEtNGY0NTEyMDc5MmIxLzAvNUUyNUU3NUVB RDE0RkI5Qzg3Nzc3NUNGQTVDNzY4Qzk5QkY4MzFDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RTI1RTc1RUFEMTRGQjlDODc3Nzc1Q0ZBNUM3NjhDOTlCRjgz MUNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg2ZDZiYTEtMWY3My00Nzc2LThh NmEtNGY0NTEyMDc5MmIxLzAvNUUyNUU3NUVBRDE0RkI5Qzg3Nzc3NUNGQTVDNzY4 Qzk5QkY4MzFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0g1tLGanOYVra70UzELmYQVNCZNK6SZB5i IhoYdjFUGDLhb5yDl18LMW7HyiiXy6jOjsUh/IKRXXMRpK92joAK6Ql4G584WCrb ErUIRxsCzhydXAJvHUTLvcctzGPInEUEHd5q6flsrIem5eDA6xj7IeLrDUpOCIHP HyBsVt+0Nuhh28dpXfRQv/YbZJ5AQPLpfJO0ppNP+fwlE0i1nuALZgs/4SZfwSwc G87CykO8bmvgEWIxfWh6nNt/kTc+Lv6pIFXqrHQ2OkrRl63p3CDeQ3BmZXgxdtdD ii8xan9xnIAnNCWIYxou8DhEXwAa1bbJ3ch3HYYZPz6ZyIl01A4= -----END CERTIFICATE-----Generated at Tue Sep 22 21:13:48 2026 by rpki-client