$ rpki-client -vvvf rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft File: 5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft (raw, json) Hash identifier: 0KNzuGB2LoUoXRPqQvVvA0CfrL0TlLLIC/wXDKVJw7g= Subject key identifier: 52:E2:FF:11:94:71:6E:D3:69:21:BC:E0:77:55:64:85:34:EC:8B:62 Authority key identifier: 5A:C7:FD:C1:38:0E:98:33:9F:28:DB:DC:57:B2:1E:7D:2F:95:A0:C0 Certificate issuer: /CN=5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0 Certificate serial: 56BB4A7BD0FD7EBFC24664EB4DF64182C391C464 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft Manifest number: BC Signing time: Sun 20 Sep 2026 06:19:54 +0000 Manifest this update: Sun 20 Sep 2026 06:14:54 +0000 Manifest next update: Mon 21 Sep 2026 09:19:54 +0000 Files and hashes: 1: 5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.crl (hash: OmzxX8xVgQ4Ox/aMt9gTdfqWxrRxYQTZpN8RobIeoYU=) 2: 3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa (hash: 4g4u+OEshRSiXLYJx+dZnyPxCHcmqZ8djxIy4N3tcCM=) 3: 3130332e3135352e3131332e302f32342d3234203d3e20313431303538.roa (hash: KmWWkFu4uWgTsq2Hfq2FHIMCUvYeIO46DVlLY6UTkvU=) 4: 323430313a633432303a3a2f33322d3438203d3e20313431303538.roa (hash: fc+4JU1Tpp/1O31vstVFMWqbX3rMZmX9kGoVnJ5dzDQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.crl rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 09:19:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:bb:4a:7b:d0:fd:7e:bf:c2:46:64:eb:4d:f6:41:82:c3:91:c4:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0 Validity Not Before: Sep 20 06:14:54 2026 GMT Not After : Sep 21 09:19:54 2026 GMT Subject: CN=52E2FF1194716ED36921BCE07755648534EC8B62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1a:37:cb:80:0d:88:a2:bc:9a:af:8f:00:c2: 06:c5:a6:b8:1c:69:87:fb:84:d9:06:84:d7:c7:b8: 1c:80:9b:4b:d5:c5:7b:c6:3e:99:f5:61:b9:33:99: 42:28:ee:bb:7e:dc:bd:9d:92:56:85:bb:ec:d3:fc: 65:28:86:61:b8:51:2c:43:34:65:fd:7a:fc:bb:7a: 8a:db:61:46:c6:c7:f0:8c:f5:d0:4b:fe:66:a1:d7: 5a:e0:55:14:64:14:4b:54:4c:53:03:33:1d:6c:11: 18:57:3f:d2:64:63:91:bb:90:9d:fe:fe:7f:df:64: ca:24:d7:d6:98:5a:e3:fa:c5:60:22:fd:62:49:ac: c3:52:ba:1e:b5:5c:37:2a:bf:3c:3f:61:f1:68:df: 4b:fc:53:85:12:6f:5a:a5:8b:0a:28:6f:39:d7:68: a4:d1:00:4e:16:e8:52:44:27:6f:d4:ec:70:9a:8a: 37:93:7e:55:a0:33:d7:4f:71:7a:cc:ca:df:d6:34: 35:5a:22:c3:15:b4:ec:79:59:ab:84:44:a4:39:7b: 54:0a:42:76:b4:d8:a4:1c:ae:92:b2:2d:2a:51:22: 24:52:b7:16:16:da:05:d5:dd:a2:a4:21:b6:44:d8: d2:56:0f:4e:f7:98:70:e5:74:e8:a0:f6:f2:72:a2: 4d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E2:FF:11:94:71:6E:D3:69:21:BC:E0:77:55:64:85:34:EC:8B:62 X509v3 Authority Key Identifier: keyid:5A:C7:FD:C1:38:0E:98:33:9F:28:DB:DC:57:B2:1E:7D:2F:95:A0:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:31:8e:bc:ca:ce:e3:95:40:00:42:02:86:04:b7:84:05:ce: b0:10:b0:5c:a0:f8:d1:e5:42:37:29:5c:53:90:ce:69:ad:58: c4:3c:b4:a0:03:0e:ec:88:8c:c0:51:36:1d:5a:1a:34:2b:37: 06:76:c4:cd:d6:cd:3d:56:19:72:de:99:f0:3c:85:1d:f4:90: de:7d:fa:d7:99:22:be:84:2a:e3:ac:1d:0c:df:07:a6:fe:ac: a7:93:bf:89:e7:44:fb:91:a9:51:4e:d3:2f:9d:55:28:15:e1: 74:87:7a:43:60:1b:82:f5:7f:fd:6d:22:57:e0:f0:70:5a:1f: 6e:c2:16:25:98:cc:e1:ac:11:8c:6f:db:21:56:08:4d:da:0c: 0c:e7:75:ba:e6:f3:31:cb:42:e6:81:ac:50:41:2f:90:63:da: 68:df:7a:40:de:92:85:ce:28:bb:43:9f:c8:4d:90:f9:52:9a: 3b:5d:05:ed:ec:a0:7e:57:7b:5b:e3:70:3b:51:af:2d:c3:bc: 99:e7:06:7c:52:b5:a1:76:d8:fb:32:ae:af:b2:1b:51:6f:8c: 2b:64:7b:7a:44:57:f3:18:4c:bd:e0:71:fa:d5:9f:1d:31:57: 2e:cf:c7:80:4e:f6:c2:64:bd:36:23:c0:7a:70:7e:dd:68:e7: 14:43:bb:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVrtKe9D9fr/CRmTrTfZBgsORxGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFDN0ZEQzEzODBFOTgzMzlGMjhEQkRDNTdCMjFFN0Qy Rjk1QTBDMDAeFw0yNjA5MjAwNjE0NTRaFw0yNjA5MjEwOTE5NTRaMDMxMTAvBgNV BAMTKDUyRTJGRjExOTQ3MTZFRDM2OTIxQkNFMDc3NTU2NDg1MzRFQzhCNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfGjfLgA2Ioryar48AwgbFprgc aYf7hNkGhNfHuByAm0vVxXvGPpn1YbkzmUIo7rt+3L2dklaFu+zT/GUohmG4USxD NGX9evy7eorbYUbGx/CM9dBL/mah11rgVRRkFEtUTFMDMx1sERhXP9JkY5G7kJ3+ /n/fZMok19aYWuP6xWAi/WJJrMNSuh61XDcqvzw/YfFo30v8U4USb1qliwoobznX aKTRAE4W6FJEJ2/U7HCaijeTflWgM9dPcXrMyt/WNDVaIsMVtOx5WauERKQ5e1QK Qna02KQcrpKyLSpRIiRStxYW2gXV3aKkIbZE2NJWD073mHDldOig9vJyok3fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUuL/EZRxbtNpIbzgd1VkhTTsi2IwHwYDVR0j BBgwFoAUWsf9wTgOmDOfKNvcV7IefS+VoMAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTNiODU4ZjYtZGUyMC00MTIxLWJjZWEtOTA3NmVkY2NjMDk3LzAvNUFDN0ZEQzEz ODBFOTgzMzlGMjhEQkRDNTdCMjFFN0QyRjk1QTBDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QUM3RkRDMTM4MEU5ODMzOUYyOERCREM1N0IyMUU3RDJGOTVB MEMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTNiODU4ZjYtZGUyMC00MTIxLWJj ZWEtOTA3NmVkY2NjMDk3LzAvNUFDN0ZEQzEzODBFOTgzMzlGMjhEQkRDNTdCMjFF N0QyRjk1QTBDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJIxjrzKzuOVQABCAoYEt4QFzrAQsFyg+NHl QjcpXFOQzmmtWMQ8tKADDuyIjMBRNh1aGjQrNwZ2xM3WzT1WGXLemfA8hR30kN59 +teZIr6EKuOsHQzfB6b+rKeTv4nnRPuRqVFO0y+dVSgV4XSHekNgG4L1f/1tIlfg 8HBaH27CFiWYzOGsEYxv2yFWCE3aDAzndbrm8zHLQuaBrFBBL5Bj2mjfekDekoXO KLtDn8hNkPlSmjtdBe3soH5Xe1vjcDtRry3DvJnnBnxStaF22Psyrq+yG1FvjCtk e3pEV/MYTL3gcfrVnx0xVy7Px4BO9sJkvTYjwHpwft1o5xRDu50= -----END CERTIFICATE-----Generated at Mon Sep 21 01:45:44 2026 by rpki-client