$ rpki-client -vvvf rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.mft File: 509D7A005D22B25F29771D4736A9F3273A87402B.mft (raw, json) Hash identifier: rA6/joFLIUVL6lpPsFlAnZ6kTI1QuMw+qfGR8ad7EZk= Subject key identifier: BD:EC:E7:36:72:73:6F:C2:36:B6:7B:6C:7E:37:73:EE:69:F7:0E:26 Authority key identifier: 50:9D:7A:00:5D:22:B2:5F:29:77:1D:47:36:A9:F3:27:3A:87:40:2B Certificate issuer: /CN=509D7A005D22B25F29771D4736A9F3273A87402B Certificate serial: 0EC79EF9BF672B3E4BE77B328EE03A5EDC38E31E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/509D7A005D22B25F29771D4736A9F3273A87402B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.mft Manifest number: BD Signing time: Sun 20 Sep 2026 20:57:49 +0000 Manifest this update: Sun 20 Sep 2026 20:52:49 +0000 Manifest next update: Mon 21 Sep 2026 23:40:49 +0000 Files and hashes: 1: 3130332e39372e342e302f32342d3234203d3e20313336313237.roa (hash: 3XT6Qf//u+3dqP7/6tKzMllxBOnpkDd6boyw9AssiHI=) 2: 3130332e39372e352e302f32342d3234203d3e20313336313237.roa (hash: gia04ffSWp+0qNudeLLR7irdY7oXCN/dKfEZqry+RoQ=) 3: 3130332e39372e372e302f32342d3234203d3e20313336313237.roa (hash: u9MbGwZTtdpRxvA0JKGeSH6mVkoh1gSizjeQTtefh6M=) 4: 509D7A005D22B25F29771D4736A9F3273A87402B.crl (hash: QPyWZ51reidjY9A0R8q0njTXxegpVZ6zPjW+j+1iXhg=) 5: 3130332e39372e342e302f32322d3234203d3e20313336313237.roa (hash: JKx5cXFJ9JwbuaKvmzbMBf7ucrHYe7PUJvHjTqORfvc=) 6: 323430313a383034303a3a2f33322d3332203d3e20313336313237.roa (hash: Dj85ZEdEHR8+WCo+8/1VIzd5RABBzm91ckkaaPaldnM=) 7: 3130332e39372e362e302f32342d3234203d3e20313336313237.roa (hash: RQSgO7tNppNvAC3aE8/fyIG2xxaOqC+3ztcNnXjPeng=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.crl rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/509D7A005D22B25F29771D4736A9F3273A87402B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 23:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:c7:9e:f9:bf:67:2b:3e:4b:e7:7b:32:8e:e0:3a:5e:dc:38:e3:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509D7A005D22B25F29771D4736A9F3273A87402B Validity Not Before: Sep 20 20:52:49 2026 GMT Not After : Sep 21 23:40:49 2026 GMT Subject: CN=BDECE73672736FC236B67B6C7E3773EE69F70E26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ff:c1:7c:0f:52:d0:e5:09:81:0f:10:c4:0e: 1d:50:4b:35:f9:78:56:28:f5:48:89:4d:69:76:19: f1:6f:15:c3:72:6a:f1:41:35:f5:e5:44:34:e1:28: ea:ea:64:95:f6:bd:6b:17:42:cf:b4:27:14:85:f5: 57:1a:7b:32:74:ee:45:c9:47:73:11:76:ae:13:1c: 7e:cb:23:d9:d2:46:e2:da:e1:83:8b:58:b5:32:be: 74:4f:74:88:df:fc:bc:3b:83:d3:96:b6:db:02:8f: 76:86:2c:e7:f3:dc:46:80:5d:d8:06:78:84:aa:36: fb:32:78:bc:ff:c5:64:10:ce:f1:37:98:28:0f:46: 8e:27:4f:74:7d:53:70:61:8a:8f:17:6e:95:36:89: 77:95:e8:11:29:a7:a2:9e:d2:86:27:ab:60:73:1b: 7a:ef:bd:81:a8:f8:b1:c0:de:61:f9:f9:0c:8a:33: b5:dd:47:a7:0f:b8:31:91:25:a3:1e:d9:48:c9:08: 49:e8:2b:b6:6f:5f:9d:f6:6e:08:44:f4:d0:78:64: 80:e0:8f:a2:5f:44:cd:0f:66:c5:75:58:c6:ac:c9: 80:1c:af:c6:12:f4:c8:c6:7e:16:a5:19:f1:cd:97: 13:ab:b6:3d:0d:c3:c0:1e:ad:97:1e:d8:ad:d5:02: bc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:EC:E7:36:72:73:6F:C2:36:B6:7B:6C:7E:37:73:EE:69:F7:0E:26 X509v3 Authority Key Identifier: keyid:50:9D:7A:00:5D:22:B2:5F:29:77:1D:47:36:A9:F3:27:3A:87:40:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/509D7A005D22B25F29771D4736A9F3273A87402B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:82:11:93:9d:3a:c7:73:f3:44:a5:c4:91:a0:1f:22:a8:47: 6a:f4:ed:7d:31:1c:1a:fb:ab:4f:4f:5b:0d:f0:11:d7:af:da: e5:24:c9:1e:50:a5:58:da:da:aa:8f:da:0c:cc:56:9b:82:8a: 3c:b2:4d:1a:de:ce:56:c7:49:89:49:a2:fc:8a:ee:e8:82:48: f6:4a:ed:9c:03:fc:89:57:03:1f:c5:df:d7:43:d1:23:a4:a5: e3:26:f0:c6:bd:0b:1c:1e:46:e2:9a:34:69:f1:6a:27:72:5f: 97:11:68:89:4d:e1:98:c2:53:ee:de:f4:23:86:09:04:0a:f4: 76:a3:32:8b:7a:b6:7d:ea:58:db:7f:6d:24:1c:43:4b:55:4e: b1:7c:e0:b2:ba:49:86:ed:16:3b:34:b4:d0:93:9e:37:74:ba: b3:5c:8e:92:77:62:c9:5b:20:c5:e6:8e:cd:83:85:30:9c:b3: f0:1e:22:54:c7:94:a7:0c:18:eb:14:4e:3a:8c:5b:d6:6b:af: b2:28:91:03:33:38:53:5b:58:02:63:9a:36:fa:fc:62:d6:6c: e2:04:ff:da:58:ba:ae:84:39:2e:65:62:7e:de:24:72:2c:68: 32:39:97:c9:be:53:e4:91:0a:2b:7d:5a:08:ec:a7:e6:91:5d: 20:39:13:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDsee+b9nKz5L53syjuA6Xtw44x4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA5RDdBMDA1RDIyQjI1RjI5NzcxRDQ3MzZBOUYzMjcz QTg3NDAyQjAeFw0yNjA5MjAyMDUyNDlaFw0yNjA5MjEyMzQwNDlaMDMxMTAvBgNV BAMTKEJERUNFNzM2NzI3MzZGQzIzNkI2N0I2QzdFMzc3M0VFNjlGNzBFMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8/8F8D1LQ5QmBDxDEDh1QSzX5 eFYo9UiJTWl2GfFvFcNyavFBNfXlRDThKOrqZJX2vWsXQs+0JxSF9VcaezJ07kXJ R3MRdq4THH7LI9nSRuLa4YOLWLUyvnRPdIjf/Lw7g9OWttsCj3aGLOfz3EaAXdgG eISqNvsyeLz/xWQQzvE3mCgPRo4nT3R9U3Bhio8XbpU2iXeV6BEpp6Ke0oYnq2Bz G3rvvYGo+LHA3mH5+QyKM7XdR6cPuDGRJaMe2UjJCEnoK7ZvX532bghE9NB4ZIDg j6JfRM0PZsV1WMasyYAcr8YS9MjGfhalGfHNlxOrtj0Nw8AerZce2K3VArynAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUveznNnJzb8I2tntsfjdz7mn3DiYwHwYDVR0j BBgwFoAUUJ16AF0isl8pdx1HNqnzJzqHQCswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDRiMjczMDMtOWUzZC00ZDQyLWFmMjUtNmEwZjExODA4ZjI3LzAvNTA5RDdBMDA1 RDIyQjI1RjI5NzcxRDQ3MzZBOUYzMjczQTg3NDAyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MDlEN0EwMDVEMjJCMjVGMjk3NzFENDczNkE5RjMyNzNBODc0 MDJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDRiMjczMDMtOWUzZC00ZDQyLWFm MjUtNmEwZjExODA4ZjI3LzAvNTA5RDdBMDA1RDIyQjI1RjI5NzcxRDQ3MzZBOUYz MjczQTg3NDAyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCCEZOdOsdz80SlxJGgHyKoR2r07X0xHBr7 q09PWw3wEdev2uUkyR5QpVja2qqP2gzMVpuCijyyTRrezlbHSYlJovyK7uiCSPZK 7ZwD/IlXAx/F39dD0SOkpeMm8Ma9CxweRuKaNGnxaidyX5cRaIlN4ZjCU+7e9COG CQQK9HajMot6tn3qWNt/bSQcQ0tVTrF84LK6SYbtFjs0tNCTnjd0urNcjpJ3Yslb IMXmjs2DhTCcs/AeIlTHlKcMGOsUTjqMW9Zrr7IokQMzOFNbWAJjmjb6/GLWbOIE /9pYuq6EOS5lYn7eJHIsaDI5l8m+U+SRCit9Wgjsp+aRXSA5E5c= -----END CERTIFICATE-----Generated at Mon Sep 21 18:40:48 2026 by rpki-client