$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft File: 5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft (raw, json) Hash identifier: JhX62Z8sMP/oRc6WvSh0wdpHezrdXCxsYUy5Wp8KoCk= Subject key identifier: 6D:9B:BA:B4:D8:53:98:9A:34:C2:7B:D7:51:2C:0E:A1:5B:95:2D:30 Authority key identifier: 5B:E4:C2:9E:EA:3D:D9:3B:A1:C2:71:DC:BA:88:BA:B8:BC:D9:DA:6A Certificate issuer: /CN=5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A Certificate serial: 629C09B4ED3C7AB82B92EF382A4489F366B7C181 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft Manifest number: BE Signing time: Mon 21 Sep 2026 00:27:09 +0000 Manifest this update: Mon 21 Sep 2026 00:22:09 +0000 Manifest next update: Tue 22 Sep 2026 03:33:09 +0000 Files and hashes: 1: 3130332e31372e37372e302f32342d3234203d3e20313331373831.roa (hash: CZzWnarJZGz+1ihXkwXcLlHMFIQJITOjnmvNdl7iuE0=) 2: 3130332e31372e37362e302f32342d3234203d3e20313331373831.roa (hash: 0nfe7ULTCbnllmGpbf8D6GJGB5XbaGw6kKl4Vys0voA=) 3: 5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.crl (hash: MYzXu15rMqWvaxMM4AvLcBlJYotA+3IJ90dI97Ej9Sw=) 4: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: FPQ2j3eI8yNWuffWW/KivobaVVZM8ZwQRSH4Q+fMF+8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.crl rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:33:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:9c:09:b4:ed:3c:7a:b8:2b:92:ef:38:2a:44:89:f3:66:b7:c1:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A Validity Not Before: Sep 21 00:22:09 2026 GMT Not After : Sep 22 03:33:09 2026 GMT Subject: CN=6D9BBAB4D853989A34C27BD7512C0EA15B952D30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5c:7c:09:06:f7:76:e9:5c:5c:b9:0a:8c:76: d9:2c:70:31:8a:dc:79:fa:5b:a9:f1:ef:12:6b:3c: 41:24:90:8c:69:54:af:1e:65:ee:1a:7a:14:16:0b: 00:ad:0b:b9:38:d8:1f:62:27:72:df:26:5b:37:7d: 90:7f:1c:d2:e0:b8:e6:c3:b5:37:37:d3:09:67:d9: 86:26:60:83:dc:6a:cb:1c:43:09:41:49:fd:ec:5d: 7d:af:22:ad:da:67:d5:30:b2:c5:c6:d9:06:5f:fa: e8:e1:3f:91:f0:a2:b0:b0:ef:32:e6:21:72:3a:bb: a5:3e:75:39:e5:03:30:2d:22:6c:ed:05:fb:be:97: b2:0d:67:1f:86:12:5b:cf:60:5d:81:88:3d:3c:dd: 51:67:59:ba:3d:89:b4:d2:fa:99:04:92:5e:fe:35: 6b:c1:88:24:d7:ce:7f:82:7d:98:8e:73:35:2b:15: e8:41:f7:0a:28:19:0b:8b:3f:db:56:57:5a:59:3e: 91:b2:2c:b3:68:1f:1c:56:90:75:63:47:79:d3:7d: 83:a1:11:ba:ad:b5:56:89:03:fd:5a:10:f5:df:43: eb:88:ca:ce:4c:7e:5c:00:a9:81:f9:74:28:9e:36: d5:12:9e:dc:2a:38:56:16:ff:58:38:6a:6a:12:56: c1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:9B:BA:B4:D8:53:98:9A:34:C2:7B:D7:51:2C:0E:A1:5B:95:2D:30 X509v3 Authority Key Identifier: keyid:5B:E4:C2:9E:EA:3D:D9:3B:A1:C2:71:DC:BA:88:BA:B8:BC:D9:DA:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:b2:25:0d:73:a9:8d:87:bd:6a:c1:68:66:c4:c9:2d:7d:5b: c4:e7:bb:e2:ec:b8:68:43:99:fc:a4:da:81:52:e1:04:1a:df: 1b:71:5f:30:b2:fe:e7:a9:bb:49:23:11:b5:9b:d1:5c:1c:d6: 66:8f:3b:8e:c8:60:57:db:57:6f:cf:ce:db:76:8d:51:19:c0: 31:7f:ce:55:54:35:24:ed:22:28:f2:a4:93:f9:8a:79:2c:b9: 58:bf:02:21:b3:28:4e:9e:ad:41:f5:7c:55:9e:ef:5c:41:c2: 7a:3c:1f:1d:3a:c9:94:37:fc:10:f8:66:13:59:ab:6d:60:5b: 2a:6c:85:d5:a2:d1:a5:42:9f:db:e1:99:0f:a3:15:d2:93:97: ac:2b:9e:3b:5e:17:d1:fb:5f:f7:15:2b:36:7b:f7:6a:c3:13: 7c:67:87:dd:76:bb:18:e8:a8:75:8c:7b:40:15:d3:7e:8b:0c: 2d:c5:e2:e0:a4:c3:bc:c0:2b:4d:e9:e3:b2:7a:7b:eb:c3:6f: 23:4f:3c:c3:6b:2e:00:e7:ed:62:38:29:f7:0a:b4:65:b2:23: 7f:86:2d:37:6c:f6:ba:47:0c:e1:98:e1:a9:e7:3c:bf:b5:1a: 77:42:64:53:5d:80:ed:e7:dd:0a:b4:ef:89:1e:ef:cb:ab:6b: ad:d5:ad:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYpwJtO08ergrku84KkSJ82a3wYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJFNEMyOUVFQTNERDkzQkExQzI3MURDQkE4OEJBQjhC Q0Q5REE2QTAeFw0yNjA5MjEwMDIyMDlaFw0yNjA5MjIwMzMzMDlaMDMxMTAvBgNV BAMTKDZEOUJCQUI0RDg1Mzk4OUEzNEMyN0JENzUxMkMwRUExNUI5NTJEMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChXHwJBvd26VxcuQqMdtkscDGK 3Hn6W6nx7xJrPEEkkIxpVK8eZe4aehQWCwCtC7k42B9iJ3LfJls3fZB/HNLguObD tTc30wln2YYmYIPcasscQwlBSf3sXX2vIq3aZ9UwssXG2QZf+ujhP5HworCw7zLm IXI6u6U+dTnlAzAtImztBfu+l7INZx+GElvPYF2BiD083VFnWbo9ibTS+pkEkl7+ NWvBiCTXzn+CfZiOczUrFehB9wooGQuLP9tWV1pZPpGyLLNoHxxWkHVjR3nTfYOh EbqttVaJA/1aEPXfQ+uIys5MflwAqYH5dCieNtUSntwqOFYW/1g4amoSVsE/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbZu6tNhTmJo0wnvXUSwOoVuVLTAwHwYDVR0j BBgwFoAUW+TCnuo92TuhwnHcuoi6uLzZ2mowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmEwNzE1MTQtZTRkZS00YWNlLWEwZGYtZjdjNGFiODA3NGE1LzAvNUJFNEMyOUVF QTNERDkzQkExQzI3MURDQkE4OEJBQjhCQ0Q5REE2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QkU0QzI5RUVBM0REOTNCQTFDMjcxRENCQTg4QkFCOEJDRDlE QTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmEwNzE1MTQtZTRkZS00YWNlLWEw ZGYtZjdjNGFiODA3NGE1LzAvNUJFNEMyOUVFQTNERDkzQkExQzI3MURDQkE4OEJB QjhCQ0Q5REE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALayJQ1zqY2HvWrBaGbEyS19W8Tnu+LsuGhD mfyk2oFS4QQa3xtxXzCy/uepu0kjEbWb0Vwc1maPO47IYFfbV2/Pztt2jVEZwDF/ zlVUNSTtIijypJP5inksuVi/AiGzKE6erUH1fFWe71xBwno8Hx06yZQ3/BD4ZhNZ q21gWypshdWi0aVCn9vhmQ+jFdKTl6wrnjteF9H7X/cVKzZ792rDE3xnh912uxjo qHWMe0AV036LDC3F4uCkw7zAK03p47J6e+vDbyNPPMNrLgDn7WI4KfcKtGWyI3+G LTds9rpHDOGY4annPL+1GndCZFNdgO3n3Qq074ke78ura63VrZE= -----END CERTIFICATE-----Generated at Mon Sep 21 13:16:43 2026 by rpki-client