$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft File: 5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft (raw, json) Hash identifier: f9wtB891Q6ctEOPXhAIs8tdoY9UJa6/5uv/7zkoyaNQ= Subject key identifier: 00:B7:D3:76:04:F1:B0:DE:1E:42:1C:66:66:1B:5B:0F:3F:81:4F:FF Authority key identifier: 52:97:FC:0B:52:CD:4F:C7:F0:6C:16:53:10:D1:13:C8:1A:16:F8:DF Certificate issuer: /CN=5297FC0B52CD4FC7F06C165310D113C81A16F8DF Certificate serial: 74B56444FF224CD3AE5C15C8CF72A253DA5E60B6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft Manifest number: BE Signing time: Sun 20 Sep 2026 20:47:41 +0000 Manifest this update: Sun 20 Sep 2026 20:42:41 +0000 Manifest next update: Mon 21 Sep 2026 23:21:41 +0000 Files and hashes: 1: 3135372e36362e36322e302f32332d3233203d3e20313431363039.roa (hash: s0qL2weEhTe4sBj4h3x5XjkUykXaQaRd3WPD4VdRPq0=) 2: 3135372e36362e36332e302f32342d3234203d3e20313431363039.roa (hash: Xm5n/XLcKtlX7vaWLbK2D/7cXu3TQ6c3pSXsVlfA9/0=) 3: 3135372e36362e36322e302f32342d3234203d3e20313431363039.roa (hash: NHw4QH7kx6gwhf24chR9MVQWVvSl6RuQvk3rMGt5qyQ=) 4: 5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl (hash: uNJf/IPkcWeZ8OnfbvNwHkXet70htE9yIBGWVarjFos=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:b5:64:44:ff:22:4c:d3:ae:5c:15:c8:cf:72:a2:53:da:5e:60:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5297FC0B52CD4FC7F06C165310D113C81A16F8DF Validity Not Before: Sep 20 20:42:41 2026 GMT Not After : Sep 21 23:21:41 2026 GMT Subject: CN=00B7D37604F1B0DE1E421C66661B5B0F3F814FFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5e:b7:c1:ee:f0:62:c5:e2:0b:95:1e:47:f8: 23:ac:d5:fe:6c:b6:b3:60:c4:70:3a:eb:ec:7c:79: 63:e4:f6:1d:3a:0c:74:73:bb:da:1f:26:35:5d:2b: 2e:87:f6:31:83:7f:13:83:1f:9f:e6:36:33:8f:52: 60:8e:c2:c8:f7:9c:ae:e5:d8:ef:3c:3a:8e:dc:ed: a7:97:3b:b6:c8:c0:9f:5a:af:87:ed:f8:68:a1:fd: db:8b:96:ea:f0:4f:c3:8f:d9:87:60:4f:05:d9:b0: 7b:88:c4:43:8f:67:7a:f1:51:30:63:57:c7:e4:a3: 63:bd:8f:a7:4c:a7:d6:d4:38:f5:ad:66:70:87:59: a4:93:b7:9f:41:52:8a:14:91:b3:4b:f8:12:2b:38: 68:8e:7e:f3:23:92:66:82:62:11:4b:92:78:6e:47: 96:67:ee:81:bd:1a:40:ec:2f:c7:f0:7b:dd:f8:96: 51:c5:b7:a1:0f:9b:ac:af:d1:f1:2f:1a:36:33:b0: b0:0b:66:ef:d2:d9:7c:db:d0:5b:3a:54:58:96:0b: a6:90:8c:d8:e8:ec:84:1c:c1:2a:90:86:2f:83:ec: c4:27:b6:76:6a:10:bc:4d:52:72:9b:33:cb:03:15: d6:6b:c6:91:54:5d:86:99:56:0e:c9:16:81:12:85: aa:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B7:D3:76:04:F1:B0:DE:1E:42:1C:66:66:1B:5B:0F:3F:81:4F:FF X509v3 Authority Key Identifier: keyid:52:97:FC:0B:52:CD:4F:C7:F0:6C:16:53:10:D1:13:C8:1A:16:F8:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:84:5e:93:f9:bc:cc:88:66:c0:58:35:3a:3a:a1:a8:2b:56: 52:04:20:77:e6:1f:c6:34:85:c8:00:a6:00:88:a0:c5:93:a4: 9d:1c:7e:9b:31:18:e4:8d:81:a5:d6:fd:c7:c9:bd:c0:ca:fd: 29:04:94:a4:a9:3c:d4:cb:7c:88:16:9a:2f:5c:39:be:4a:0e: da:3d:4b:c5:55:f6:d0:90:44:f9:7d:b5:8a:16:cc:e2:5a:97: f1:b3:ea:56:84:eb:47:36:26:20:4a:2d:ea:1e:45:0c:22:88: 79:79:ea:c4:01:6a:c2:39:38:23:bc:04:23:a9:71:56:b0:ba: 32:cf:0c:e6:42:2b:0b:47:ae:b7:da:c1:4f:8e:56:a5:28:94: 4a:6d:b2:d3:58:c1:c9:b4:bf:10:2a:0a:df:52:46:85:1a:f5: d5:db:c3:36:67:61:25:d8:92:85:df:50:df:bc:fe:6c:3d:dd: dc:45:6a:4c:f2:6d:c0:b5:7c:de:c8:23:a5:63:a9:95:7a:9f: a5:f3:8f:e1:f7:78:89:e7:8a:de:c6:d1:e0:f7:f6:ba:b2:c6: b1:0c:98:d7:6b:d2:85:b7:ed:bf:eb:ed:02:f6:14:b4:47:43: c2:d6:e9:69:36:7c:dd:dc:b0:3f:e8:e6:d8:2b:85:43:dd:e9: 5a:3d:55:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdLVkRP8iTNOuXBXIz3KiU9peYLYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5N0ZDMEI1MkNENEZDN0YwNkMxNjUzMTBEMTEzQzgx QTE2RjhERjAeFw0yNjA5MjAyMDQyNDFaFw0yNjA5MjEyMzIxNDFaMDMxMTAvBgNV BAMTKDAwQjdEMzc2MDRGMUIwREUxRTQyMUM2NjY2MUI1QjBGM0Y4MTRGRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiXrfB7vBixeILlR5H+COs1f5s trNgxHA66+x8eWPk9h06DHRzu9ofJjVdKy6H9jGDfxODH5/mNjOPUmCOwsj3nK7l 2O88Oo7c7aeXO7bIwJ9ar4ft+Gih/duLlurwT8OP2YdgTwXZsHuIxEOPZ3rxUTBj V8fko2O9j6dMp9bUOPWtZnCHWaSTt59BUooUkbNL+BIrOGiOfvMjkmaCYhFLknhu R5Zn7oG9GkDsL8fwe934llHFt6EPm6yv0fEvGjYzsLALZu/S2Xzb0Fs6VFiWC6aQ jNjo7IQcwSqQhi+D7MQntnZqELxNUnKbM8sDFdZrxpFUXYaZVg7JFoEShar/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUALfTdgTxsN4eQhxmZhtbDz+BT/8wHwYDVR0j BBgwFoAUUpf8C1LNT8fwbBZTENETyBoW+N8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2RkYmI3OWMtOWVhMi00N2YwLWI0NWYtMTgxNjY1MGJhMjNmLzAvNTI5N0ZDMEI1 MkNENEZDN0YwNkMxNjUzMTBEMTEzQzgxQTE2RjhERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81Mjk3RkMwQjUyQ0Q0RkM3RjA2QzE2NTMxMEQxMTNDODFBMTZG OERGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2RkYmI3OWMtOWVhMi00N2YwLWI0 NWYtMTgxNjY1MGJhMjNmLzAvNTI5N0ZDMEI1MkNENEZDN0YwNkMxNjUzMTBEMTEz QzgxQTE2RjhERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJiEXpP5vMyIZsBYNTo6oagrVlIEIHfmH8Y0 hcgApgCIoMWTpJ0cfpsxGOSNgaXW/cfJvcDK/SkElKSpPNTLfIgWmi9cOb5KDto9 S8VV9tCQRPl9tYoWzOJal/Gz6laE60c2JiBKLeoeRQwiiHl56sQBasI5OCO8BCOp cVawujLPDOZCKwtHrrfawU+OVqUolEptstNYwcm0vxAqCt9SRoUa9dXbwzZnYSXY koXfUN+8/mw93dxFakzybcC1fN7II6VjqZV6n6Xzj+H3eInnit7G0eD39rqyxrEM mNdr0oW37b/r7QL2FLRHQ8LW6Wk2fN3csD/o5tgrhUPd6Vo9VYs= -----END CERTIFICATE-----Generated at Mon Sep 21 06:29:23 2026 by rpki-client