$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft File: 5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft (raw, json) Hash identifier: IhiUXlbf/97A9KVgrSrriaETlkTFfQ0C880u8mAXRYA= Subject key identifier: 7D:7E:2F:F9:F9:96:B5:C0:D0:DE:B7:EE:E0:48:D3:AA:EB:F0:D4:3A Authority key identifier: 56:63:B2:97:05:FF:9D:2D:72:08:CD:39:4C:57:67:D5:A2:89:9F:1B Certificate issuer: /CN=5663B29705FF9D2D7208CD394C5767D5A2899F1B Certificate serial: 04A18F837D03F331AEAA89D441518DB64BF8E811 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5663B29705FF9D2D7208CD394C5767D5A2899F1B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft Manifest number: CF Signing time: Sat 03 Oct 2026 05:42:43 +0000 Manifest this update: Sat 03 Oct 2026 05:37:43 +0000 Manifest next update: Sun 04 Oct 2026 08:45:43 +0000 Files and hashes: 1: 3130332e32372e3139322e302f32342d3234203d3e20313530323632.roa (hash: Wb6gH+JiAvO+ARbeGk8L44agijONRst7EWLeoO4CUoU=) 2: 3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa (hash: tFFR6+x+fpHHrNjo8i5wrXGQVmpCIjPUzPsVU8CszYg=) 3: 3130332e32372e3139322e302f32332d3233203d3e20313530323632.roa (hash: PFdBLc9JDIxArwgoU/YzuObUbGI99im6tjm/eoPLbM8=) 4: 5663B29705FF9D2D7208CD394C5767D5A2899F1B.crl (hash: nz+LnhEfve7zWcxdHt7pmWqDtRlymXFovIFmKjtNEyg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.crl rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5663B29705FF9D2D7208CD394C5767D5A2899F1B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 08:45:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:a1:8f:83:7d:03:f3:31:ae:aa:89:d4:41:51:8d:b6:4b:f8:e8:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5663B29705FF9D2D7208CD394C5767D5A2899F1B Validity Not Before: Oct 3 05:37:43 2026 GMT Not After : Oct 4 08:45:43 2026 GMT Subject: CN=7D7E2FF9F996B5C0D0DEB7EEE048D3AAEBF0D43A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ed:c3:7c:38:40:7d:f9:a7:ca:a1:84:2d:4c: 8d:5b:cd:18:f2:cc:14:f2:e1:37:52:41:8d:f0:2f: 31:ea:e1:c6:57:ab:28:ac:6c:05:c5:24:94:bc:b9: a2:ed:9b:84:78:6e:c8:61:ba:d7:2e:91:83:9b:49: cf:d8:bc:84:ad:d4:f1:8d:65:ac:25:a7:dc:47:b7: ed:46:13:83:77:dc:af:7b:56:ee:8c:80:73:32:02: 2c:f8:ea:8e:cb:65:6b:63:69:d8:fd:e3:40:21:5d: b5:63:a2:43:2e:a9:a7:83:c4:2b:8d:87:7e:3e:bf: 91:41:7f:d2:ac:0f:aa:06:c1:4b:58:54:af:dd:1a: a6:54:05:2d:41:9d:9a:a2:2d:55:c2:39:85:a6:83: 1f:3f:1e:8c:7b:06:f2:d1:45:9f:c0:2d:a8:5b:1b: 32:c9:2f:63:76:87:2b:69:a2:76:84:c8:5e:d1:28: b7:27:b8:42:cd:c9:45:ed:7d:eb:97:b1:7a:a5:0b: a6:ba:44:0d:91:c0:b7:19:ab:20:f6:a9:23:5a:4d: a7:dd:f5:33:a8:8f:19:20:b6:a8:b7:65:93:a8:d7: fb:3d:df:9c:18:87:d5:62:31:fd:62:b1:6b:09:21: da:96:99:dd:84:e2:8b:a9:6a:21:c6:78:5d:3a:d9: 2e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7E:2F:F9:F9:96:B5:C0:D0:DE:B7:EE:E0:48:D3:AA:EB:F0:D4:3A X509v3 Authority Key Identifier: keyid:56:63:B2:97:05:FF:9D:2D:72:08:CD:39:4C:57:67:D5:A2:89:9F:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5663B29705FF9D2D7208CD394C5767D5A2899F1B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:92:7f:c1:f1:fe:7c:8b:0f:87:f2:27:1c:ca:ad:a4:d0:90: d6:c1:1f:23:53:92:01:92:76:77:60:86:a0:60:e1:d0:02:a7: 62:b4:22:21:ba:81:69:44:b3:5a:29:b5:d8:bb:42:70:43:16: 98:15:e5:7f:e1:5b:0b:36:c2:fd:f9:85:e6:a9:fe:bc:dc:5f: c3:de:17:6e:4f:9b:18:d2:2d:e2:4e:f4:69:bc:80:91:30:48: b1:df:39:04:5b:2e:ed:e0:83:5e:8d:18:71:00:7e:b9:2c:33: 16:cd:6e:bc:c4:4d:cb:62:df:97:c3:04:60:d0:10:ee:37:66: 2e:29:c6:5c:a1:b6:87:c3:2d:7c:f5:bd:4f:08:a5:74:94:41: 67:a6:52:e5:c8:eb:da:11:ab:22:ca:4a:27:9f:a9:1d:c7:e2: ee:f4:63:22:10:c0:ed:f6:f9:4d:35:18:25:a5:f9:2e:da:6a: ff:f4:64:c0:af:3d:14:30:31:a8:0d:b3:0b:23:8c:10:b1:03: f5:4d:04:4d:90:a0:0c:7b:29:dd:5c:c1:0c:f1:8a:12:15:24: d5:5b:ca:94:53:52:e4:9a:ae:43:98:d1:19:65:09:ad:81:4d: 75:3c:53:df:b9:73:c5:dc:5f:78:3e:22:38:76:94:fa:c1:32: 5d:c5:3d:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBKGPg30D8zGuqonUQVGNtkv46BEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY2M0IyOTcwNUZGOUQyRDcyMDhDRDM5NEM1NzY3RDVB Mjg5OUYxQjAeFw0yNjEwMDMwNTM3NDNaFw0yNjEwMDQwODQ1NDNaMDMxMTAvBgNV BAMTKDdEN0UyRkY5Rjk5NkI1QzBEMERFQjdFRUUwNDhEM0FBRUJGMEQ0M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP7cN8OEB9+afKoYQtTI1bzRjy zBTy4TdSQY3wLzHq4cZXqyisbAXFJJS8uaLtm4R4bshhutcukYObSc/YvISt1PGN Zawlp9xHt+1GE4N33K97Vu6MgHMyAiz46o7LZWtjadj940AhXbVjokMuqaeDxCuN h34+v5FBf9KsD6oGwUtYVK/dGqZUBS1BnZqiLVXCOYWmgx8/Hox7BvLRRZ/ALahb GzLJL2N2hytponaEyF7RKLcnuELNyUXtfeuXsXqlC6a6RA2RwLcZqyD2qSNaTafd 9TOojxkgtqi3ZZOo1/s935wYh9ViMf1isWsJIdqWmd2E4oupaiHGeF062S53AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfX4v+fmWtcDQ3rfu4EjTquvw1DowHwYDVR0j BBgwFoAUVmOylwX/nS1yCM05TFdn1aKJnxswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDIyN2IxNzYtNGMxNy00MjQ0LWJhZGYtZjQ5NmJjYjE1ZTIwLzAvNTY2M0IyOTcw NUZGOUQyRDcyMDhDRDM5NEM1NzY3RDVBMjg5OUYxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NjYzQjI5NzA1RkY5RDJENzIwOENEMzk0QzU3NjdENUEyODk5 RjFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDIyN2IxNzYtNGMxNy00MjQ0LWJh ZGYtZjQ5NmJjYjE1ZTIwLzAvNTY2M0IyOTcwNUZGOUQyRDcyMDhDRDM5NEM1NzY3 RDVBMjg5OUYxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKSSf8Hx/nyLD4fyJxzKraTQkNbBHyNTkgGS dndghqBg4dACp2K0IiG6gWlEs1optdi7QnBDFpgV5X/hWws2wv35heap/rzcX8Pe F25PmxjSLeJO9Gm8gJEwSLHfOQRbLu3gg16NGHEAfrksMxbNbrzETcti35fDBGDQ EO43Zi4pxlyhtofDLXz1vU8IpXSUQWemUuXI69oRqyLKSiefqR3H4u70YyIQwO32 +U01GCWl+S7aav/0ZMCvPRQwMagNswsjjBCxA/VNBE2QoAx7Kd1cwQzxihIVJNVb ypRTUuSarkOY0RllCa2BTXU8U9+5c8XcX3g+Ijh2lPrBMl3FPQE= -----END CERTIFICATE-----Generated at Sun Oct 4 02:13:55 2026 by rpki-client