$ rpki-client -vvvf rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft File: 5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft (raw, json) Hash identifier: l/djCTt98t5xroPjEzq9ajin61yacfMlLw8NBJ1uFGc= Subject key identifier: F1:5C:66:29:CD:F6:45:E4:F3:23:8B:44:50:CC:14:FE:A9:A7:DE:77 Authority key identifier: 5B:84:74:CD:5A:D7:F5:98:A4:82:68:99:DD:65:21:7A:1B:B8:5C:61 Certificate issuer: /CN=5B8474CD5AD7F598A4826899DD65217A1BB85C61 Certificate serial: 4ACA4A0499A91065A3C85669751BC45141DD522E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft Manifest number: BF Signing time: Tue 22 Sep 2026 08:01:35 +0000 Manifest this update: Tue 22 Sep 2026 07:56:35 +0000 Manifest next update: Wed 23 Sep 2026 09:18:35 +0000 Files and hashes: 1: 323430323a326134303a3a2f33322d3438203d3e20313336383733.roa (hash: ZSQfDBDx08SMOJ9/mfQRF6dJyZ/7l6GG2dcY9tQkt/U=) 2: 5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl (hash: qCf+CISG66u/rEINa3hLwQTI/hpABgpWBOnijJiybog=) 3: 3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa (hash: BWylbxtj1ROm+MVww31ybQOgEWW9jWHft5tLSvCMDwM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ca:4a:04:99:a9:10:65:a3:c8:56:69:75:1b:c4:51:41:dd:52:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B8474CD5AD7F598A4826899DD65217A1BB85C61 Validity Not Before: Sep 22 07:56:35 2026 GMT Not After : Sep 23 09:18:35 2026 GMT Subject: CN=F15C6629CDF645E4F3238B4450CC14FEA9A7DE77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:42:18:42:fd:be:20:cc:81:b9:e8:6e:a9:50: 1c:02:5b:c4:5d:bd:58:56:13:6b:bc:eb:b7:11:d5: f2:9f:a7:ec:7b:6a:cf:d8:a5:c3:5a:2c:6f:d6:a4: 12:3a:9f:36:f1:b9:22:a5:ca:0e:ed:7b:a0:fb:eb: 97:c8:81:dc:4d:dd:f6:09:a9:06:69:c9:25:55:46: 95:35:48:76:21:a2:5e:c8:e9:35:10:af:f5:22:3a: fd:63:92:7c:53:93:57:25:da:7b:cc:92:07:e1:d5: da:74:e5:a5:f4:3b:c2:66:bb:f8:9a:c6:ae:4d:43: b0:9b:c6:ac:3a:bb:cb:50:0b:34:ef:56:f9:46:e6: cd:2f:03:39:bf:cd:12:27:0b:5c:9a:23:b1:8c:69: 99:4c:63:19:7d:d7:95:a5:8d:43:19:27:7b:b8:12: 38:91:67:25:23:7b:2e:f2:c7:35:df:da:c0:38:05: 78:d5:be:da:74:6f:dd:64:d8:55:99:c3:f6:ac:34: 1e:48:be:d4:9e:3d:e7:a5:be:e8:a5:07:23:69:cb: 2e:58:a8:1d:d1:6c:d4:4c:1e:da:c6:01:61:5b:f6: 6e:0c:86:88:00:cd:1a:30:10:c4:54:f4:1e:85:7d: b3:26:f0:04:b0:8e:ba:9a:bb:e2:b9:4a:53:db:72: 75:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:5C:66:29:CD:F6:45:E4:F3:23:8B:44:50:CC:14:FE:A9:A7:DE:77 X509v3 Authority Key Identifier: keyid:5B:84:74:CD:5A:D7:F5:98:A4:82:68:99:DD:65:21:7A:1B:B8:5C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:86:03:b4:57:ed:e9:6b:85:30:40:7f:c9:fe:8b:58:01:40: 8b:3a:9f:96:28:77:77:19:00:4b:ab:b6:d0:b3:d5:c2:8a:d3: 01:0a:fb:6a:ce:81:7e:28:3f:55:cc:6e:63:bb:85:e0:4d:62: aa:ef:32:09:25:d4:5f:eb:85:87:c0:01:28:a2:6a:20:d2:f3: 39:bb:fc:92:4a:ee:d3:c7:76:3e:4a:75:0e:2c:5a:a0:97:6e: 7f:f3:71:38:cc:d8:d1:42:bf:f7:07:76:01:55:f0:0d:9b:54: 00:71:ad:ab:a7:d3:98:45:e5:fa:03:6e:c2:a7:ec:02:2d:14: de:dc:3d:2a:1d:a6:be:cc:53:68:e6:ba:cc:91:90:a4:ed:bf: 53:ff:9b:1a:9b:db:8a:60:cd:a1:44:44:bd:3e:db:33:d3:ff: 28:fb:01:ef:f5:e0:63:78:74:38:d6:f4:ff:c7:83:17:dd:55: e4:ac:be:29:0a:ec:08:09:c8:47:73:ac:35:38:3c:65:db:bf: 7d:fa:fc:60:91:9f:45:fc:ec:00:8a:ac:6b:65:d6:35:47:f5: 06:2f:4e:ee:cd:88:b7:2d:01:b5:60:6c:ef:44:72:58:0d:a4: b9:d3:74:e6:8e:9d:40:9d:c1:6d:74:42:6e:ce:ee:06:fc:1b: 3c:37:76:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSspKBJmpEGWjyFZpdRvEUUHdUi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI4NDc0Q0Q1QUQ3RjU5OEE0ODI2ODk5REQ2NTIxN0Ex QkI4NUM2MTAeFw0yNjA5MjIwNzU2MzVaFw0yNjA5MjMwOTE4MzVaMDMxMTAvBgNV BAMTKEYxNUM2NjI5Q0RGNjQ1RTRGMzIzOEI0NDUwQ0MxNEZFQTlBN0RFNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBQhhC/b4gzIG56G6pUBwCW8Rd vVhWE2u867cR1fKfp+x7as/YpcNaLG/WpBI6nzbxuSKlyg7te6D765fIgdxN3fYJ qQZpySVVRpU1SHYhol7I6TUQr/UiOv1jknxTk1cl2nvMkgfh1dp05aX0O8Jmu/ia xq5NQ7Cbxqw6u8tQCzTvVvlG5s0vAzm/zRInC1yaI7GMaZlMYxl915WljUMZJ3u4 EjiRZyUjey7yxzXf2sA4BXjVvtp0b91k2FWZw/asNB5IvtSePeelvuilByNpyy5Y qB3RbNRMHtrGAWFb9m4MhogAzRowEMRU9B6FfbMm8ASwjrqau+K5SlPbcnXtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8VxmKc32ReTzI4tEUMwU/qmn3ncwHwYDVR0j BBgwFoAUW4R0zVrX9ZikgmiZ3WUhehu4XGEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU3YTZiY2ItOWViNi00OWRlLWI5OTgtMGJlZDNjNWMxMjc4LzAvNUI4NDc0Q0Q1 QUQ3RjU5OEE0ODI2ODk5REQ2NTIxN0ExQkI4NUM2MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81Qjg0NzRDRDVBRDdGNTk4QTQ4MjY4OTlERDY1MjE3QTFCQjg1 QzYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU3YTZiY2ItOWViNi00OWRlLWI5 OTgtMGJlZDNjNWMxMjc4LzAvNUI4NDc0Q0Q1QUQ3RjU5OEE0ODI2ODk5REQ2NTIx N0ExQkI4NUM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGiGA7RX7elrhTBAf8n+i1gBQIs6n5Yod3cZ AEurttCz1cKK0wEK+2rOgX4oP1XMbmO7heBNYqrvMgkl1F/rhYfAASiiaiDS8zm7 /JJK7tPHdj5KdQ4sWqCXbn/zcTjM2NFCv/cHdgFV8A2bVABxraun05hF5foDbsKn 7AItFN7cPSodpr7MU2jmusyRkKTtv1P/mxqb24pgzaFERL0+2zPT/yj7Ae/14GN4 dDjW9P/HgxfdVeSsvikK7AgJyEdzrDU4PGXbv336/GCRn0X87ACKrGtl1jVH9QYv Tu7NiLctAbVgbO9EclgNpLnTdOaOnUCdwW10Qm7O7gb8Gzw3djI= -----END CERTIFICATE-----Generated at Tue Sep 22 11:46:58 2026 by rpki-client