$ rpki-client -vvvf rpki-rsync.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/5256FBBE2FC545F984496DD4986EC64B662694E0.mft File: 5256FBBE2FC545F984496DD4986EC64B662694E0.mft (raw, json) Hash identifier: HbY/Yu3lhD7rMup6jvhQnQ9k59mPFb/n9CXKI3sFTRU= Subject key identifier: 2B:1C:E8:1C:15:F8:F2:DC:64:93:1B:32:C7:86:BA:FD:7D:93:F1:E8 Authority key identifier: 52:56:FB:BE:2F:C5:45:F9:84:49:6D:D4:98:6E:C6:4B:66:26:94:E0 Certificate issuer: /CN=5256FBBE2FC545F984496DD4986EC64B662694E0 Certificate serial: 72C2077470650E7370024C339B6BD4BD2AB20DF7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5256FBBE2FC545F984496DD4986EC64B662694E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/5256FBBE2FC545F984496DD4986EC64B662694E0.mft Manifest number: BE Signing time: Tue 22 Sep 2026 17:33:19 +0000 Manifest this update: Tue 22 Sep 2026 17:28:19 +0000 Manifest next update: Wed 23 Sep 2026 17:56:19 +0000 Files and hashes: 1: 5256FBBE2FC545F984496DD4986EC64B662694E0.crl (hash: JDAi/Z+WNwCacA4treOl7nhRQf0gzT2VunJM171cjzA=) 2: 3130332e3235332e3132342e302f32342d3234203d3e203539313432.roa (hash: PVeUI9LzABp9X4uUesClPYyGG94/1D9llRU48PC0AGA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/5256FBBE2FC545F984496DD4986EC64B662694E0.crl rsync://rpki-rsync.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/5256FBBE2FC545F984496DD4986EC64B662694E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5256FBBE2FC545F984496DD4986EC64B662694E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 17:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:c2:07:74:70:65:0e:73:70:02:4c:33:9b:6b:d4:bd:2a:b2:0d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5256FBBE2FC545F984496DD4986EC64B662694E0 Validity Not Before: Sep 22 17:28:19 2026 GMT Not After : Sep 23 17:56:19 2026 GMT Subject: CN=2B1CE81C15F8F2DC64931B32C786BAFD7D93F1E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c8:d1:03:18:6a:24:c8:a9:56:72:88:f1:aa: 7b:c3:b3:1d:cc:c1:91:df:95:a3:02:14:0b:6b:62: ad:6d:01:01:2e:12:8d:8b:24:b9:4b:19:e6:bb:2e: 0f:04:3b:c5:10:ac:0d:d9:94:ac:81:93:b8:ce:bf: 34:34:f8:2b:35:4d:e8:01:54:a4:ae:1d:55:ea:3b: eb:ce:3c:1f:0b:35:b7:fd:22:35:c2:bc:07:9f:a4: 23:4a:b3:04:91:ce:b2:66:5a:e7:49:34:84:cb:5c: 8f:8f:1b:6d:f2:89:c9:34:fb:a5:de:52:2a:48:8a: 20:42:74:6e:b4:57:c3:43:6d:85:ab:fe:54:58:7a: 46:9c:6f:dd:52:21:7b:95:30:fb:37:fb:80:46:66: 88:c9:c4:a5:cf:f0:e9:e2:67:00:0e:3c:6c:de:2f: 39:ff:95:a5:2c:e3:04:29:0e:60:fd:56:45:4f:e7: ab:c8:db:64:4c:7c:ba:70:0c:91:2c:a9:5e:e7:44: cc:d0:1b:59:42:0d:67:bd:27:4b:31:39:a7:8b:24: 73:43:c0:d3:27:5a:b1:81:bd:43:98:61:ee:59:0d: 3c:81:49:bb:4c:41:f8:0b:e8:3a:b1:c9:c4:1e:89: a3:ed:79:01:96:86:1f:e3:78:3b:d4:a3:62:7c:7d: 33:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1C:E8:1C:15:F8:F2:DC:64:93:1B:32:C7:86:BA:FD:7D:93:F1:E8 X509v3 Authority Key Identifier: keyid:52:56:FB:BE:2F:C5:45:F9:84:49:6D:D4:98:6E:C6:4B:66:26:94:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/5256FBBE2FC545F984496DD4986EC64B662694E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5256FBBE2FC545F984496DD4986EC64B662694E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/5256FBBE2FC545F984496DD4986EC64B662694E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:5a:3d:a4:b2:00:e7:b0:cd:c3:3a:67:66:e1:4f:cd:e0:66: 39:95:ee:57:8d:6a:59:93:55:ab:ce:9c:31:60:b7:78:4c:77: 68:1b:e1:c2:f8:50:88:aa:5b:38:57:29:57:e1:d3:34:49:cd: cd:9b:05:5d:1e:b2:1a:64:bf:b8:9a:25:02:b7:4b:16:98:3d: 75:1d:a7:3f:f2:e8:73:fa:76:30:2d:53:72:1f:07:74:2d:5c: 01:3e:d4:ae:dd:10:2d:5f:47:5f:57:f8:55:b4:13:24:d2:aa: 3d:3a:e5:1d:ab:f6:be:88:91:1e:27:62:d8:09:da:8b:e0:bc: 45:39:7e:d6:0f:80:fb:ad:36:9d:68:f2:78:11:65:39:fa:30: c9:71:f6:44:65:fe:49:82:a3:f4:1a:5c:15:06:07:4f:ff:34: 15:89:54:e6:46:20:93:42:ea:af:e9:9e:47:71:d2:48:f1:33: 4c:49:27:55:3e:f5:03:65:e8:9b:ea:cb:9d:67:e5:fc:a9:9b: 61:9f:b9:14:f2:ba:29:fe:24:7c:d4:30:22:a8:df:05:3e:90: 7b:15:7e:1f:d3:49:74:cf:e5:2b:38:25:78:be:97:4a:b2:7f: c7:4d:ac:ca:53:c1:19:0c:05:ae:bc:11:dd:1e:41:bc:19:97: d0:28:48:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcsIHdHBlDnNwAkwzm2vUvSqyDfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI1NkZCQkUyRkM1NDVGOTg0NDk2REQ0OTg2RUM2NEI2 NjI2OTRFMDAeFw0yNjA5MjIxNzI4MTlaFw0yNjA5MjMxNzU2MTlaMDMxMTAvBgNV BAMTKDJCMUNFODFDMTVGOEYyREM2NDkzMUIzMkM3ODZCQUZEN0Q5M0YxRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNyNEDGGokyKlWcojxqnvDsx3M wZHflaMCFAtrYq1tAQEuEo2LJLlLGea7Lg8EO8UQrA3ZlKyBk7jOvzQ0+Cs1TegB VKSuHVXqO+vOPB8LNbf9IjXCvAefpCNKswSRzrJmWudJNITLXI+PG23yick0+6Xe UipIiiBCdG60V8NDbYWr/lRYekacb91SIXuVMPs3+4BGZojJxKXP8OniZwAOPGze Lzn/laUs4wQpDmD9VkVP56vI22RMfLpwDJEsqV7nRMzQG1lCDWe9J0sxOaeLJHND wNMnWrGBvUOYYe5ZDTyBSbtMQfgL6DqxycQeiaPteQGWhh/jeDvUo2J8fTN/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKxzoHBX48txkkxsyx4a6/X2T8egwHwYDVR0j BBgwFoAUUlb7vi/FRfmESW3UmG7GS2YmlOAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTMyYzUxMjEtZjc0OS00YTU0LWE5ZWMtZjZjMzQ5ZjM0MzEwLzAvNTI1NkZCQkUy RkM1NDVGOTg0NDk2REQ0OTg2RUM2NEI2NjI2OTRFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MjU2RkJCRTJGQzU0NUY5ODQ0OTZERDQ5ODZFQzY0QjY2MjY5 NEUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTMyYzUxMjEtZjc0OS00YTU0LWE5 ZWMtZjZjMzQ5ZjM0MzEwLzAvNTI1NkZCQkUyRkM1NDVGOTg0NDk2REQ0OTg2RUM2 NEI2NjI2OTRFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRaPaSyAOewzcM6Z2bhT83gZjmV7leNalmT VavOnDFgt3hMd2gb4cL4UIiqWzhXKVfh0zRJzc2bBV0eshpkv7iaJQK3SxaYPXUd pz/y6HP6djAtU3IfB3QtXAE+1K7dEC1fR19X+FW0EyTSqj065R2r9r6IkR4nYtgJ 2ovgvEU5ftYPgPutNp1o8ngRZTn6MMlx9kRl/kmCo/QaXBUGB0//NBWJVOZGIJNC 6q/pnkdx0kjxM0xJJ1U+9QNl6Jvqy51n5fypm2GfuRTyuin+JHzUMCKo3wU+kHsV fh/TSXTP5Ss4JXi+l0qyf8dNrMpTwRkMBa68Ed0eQbwZl9AoSD4= -----END CERTIFICATE-----Generated at Tue Sep 22 20:35:54 2026 by rpki-client