$ rpki-client -vvvf rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft File: 5D885821D2406437CDFEC04380E967515A67AECC.mft (raw, json) Hash identifier: E8UvVNv91iCILYO7zqYIqGvNos0bUTU/JWG482BXIIU= Subject key identifier: 51:6C:BE:5A:DD:A3:DE:BF:41:1A:76:83:A0:6D:6B:6E:6F:60:48:79 Authority key identifier: 5D:88:58:21:D2:40:64:37:CD:FE:C0:43:80:E9:67:51:5A:67:AE:CC Certificate issuer: /CN=5D885821D2406437CDFEC04380E967515A67AECC Certificate serial: 214C89C2A8CC92AD73ADFE077CCA766F1B0CFF58 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft Manifest number: BC Signing time: Sun 20 Sep 2026 10:55:36 +0000 Manifest this update: Sun 20 Sep 2026 10:50:36 +0000 Manifest next update: Mon 21 Sep 2026 14:15:36 +0000 Files and hashes: 1: 3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa (hash: K0RHUYKMgdp0wpj2LpgjeiPXy+duWorfZjM80sQwxyc=) 2: 3130332e35342e3137312e302f32342d3234203d3e20313431303731.roa (hash: L6gQCpLzy7aXDtfuVgbwQW0xcldnnRmpgqFEsdoAP3Q=) 3: 5D885821D2406437CDFEC04380E967515A67AECC.crl (hash: VvdiQIWCMBQi0XARzRuWOor/qGgu71DR4Z+280RCDS0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.crl rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:15:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:4c:89:c2:a8:cc:92:ad:73:ad:fe:07:7c:ca:76:6f:1b:0c:ff:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D885821D2406437CDFEC04380E967515A67AECC Validity Not Before: Sep 20 10:50:36 2026 GMT Not After : Sep 21 14:15:36 2026 GMT Subject: CN=516CBE5ADDA3DEBF411A7683A06D6B6E6F604879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:96:35:8a:6a:e0:08:2e:b0:91:48:11:f9:66: 62:d4:d5:64:db:01:f5:4d:85:9b:8b:03:36:c1:59: 55:63:71:34:96:13:e4:62:8f:05:0a:89:40:be:fc: bb:9d:9d:4e:d9:f3:c4:9d:46:ee:f8:b9:65:a7:69: 68:94:51:fe:ae:25:5f:a7:11:e9:53:ad:38:09:fa: c7:19:9c:0b:95:df:fd:ef:6b:3f:7e:23:66:33:d2: 22:a8:6e:08:fb:84:21:26:6e:34:0f:b0:70:71:3e: 87:d4:b8:00:f9:9a:35:d9:27:0f:92:e6:74:90:d4: e4:dd:f1:2f:be:17:04:98:28:0f:06:70:98:89:4d: 94:e7:32:7f:17:20:86:d1:9d:d2:41:97:5d:f3:72: fa:da:8a:87:7e:4f:c8:78:64:83:69:28:8b:55:0b: 69:8f:e6:90:4e:ac:4a:e1:b6:2d:52:21:76:bd:9e: c6:1b:df:a1:54:b4:88:76:4e:43:7f:dc:39:9a:9b: a8:6d:1e:7e:30:0a:2e:d3:8d:4c:38:cc:f5:fd:e1: 44:73:f0:77:0c:24:ce:e9:28:2b:40:d1:a4:a5:9b: 6b:c3:ad:a6:8b:64:8b:e1:6d:94:cd:7f:be:ee:67: 6a:9d:a3:58:12:7e:de:78:b8:af:49:93:7b:90:5b: 11:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:6C:BE:5A:DD:A3:DE:BF:41:1A:76:83:A0:6D:6B:6E:6F:60:48:79 X509v3 Authority Key Identifier: keyid:5D:88:58:21:D2:40:64:37:CD:FE:C0:43:80:E9:67:51:5A:67:AE:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:e2:75:58:db:1f:6c:8c:60:fd:77:83:12:97:5b:33:2f:bd: db:3b:9d:81:b0:df:e7:20:75:e2:3d:8c:f8:b8:33:8c:1c:5c: eb:7f:d4:17:79:cf:37:ab:6e:13:1b:71:41:57:e1:2d:43:82: 83:7e:0f:04:b9:10:af:95:0d:c8:ee:ec:85:bc:42:8d:11:b0: ba:5b:ee:cb:e4:5f:3c:2c:62:15:bc:09:7c:76:06:27:28:42: 17:0f:1b:4b:5a:95:19:34:ed:99:39:11:cb:10:56:29:cd:bd: 23:bf:9a:62:6e:60:33:de:dd:02:b3:1e:34:f4:59:11:be:78: 95:b4:ca:fe:cd:12:b4:b6:c4:0a:28:6e:e9:c6:d8:3f:27:bd: 0b:da:b1:62:1a:a0:5d:93:5a:31:dc:10:9f:b9:91:4d:ab:11: bd:9c:2b:72:17:50:7e:e1:cd:b4:e4:89:51:19:16:07:c6:a3: 14:f3:c1:3b:fd:44:c9:67:16:85:d3:5c:48:63:90:71:85:3b: ff:ba:e7:9f:74:70:61:10:a5:58:71:3c:fb:17:61:f2:61:2b: 47:ca:eb:38:98:ad:51:2a:ee:da:d5:97:b5:c8:67:e6:5f:b0: 4f:73:89:d3:e2:7f:9a:48:52:5f:e6:fe:4c:f9:5b:db:86:78: 21:75:50:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIUyJwqjMkq1zrf4HfMp2bxsM/1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ4ODU4MjFEMjQwNjQzN0NERkVDMDQzODBFOTY3NTE1 QTY3QUVDQzAeFw0yNjA5MjAxMDUwMzZaFw0yNjA5MjExNDE1MzZaMDMxMTAvBgNV BAMTKDUxNkNCRTVBRERBM0RFQkY0MTFBNzY4M0EwNkQ2QjZFNkY2MDQ4NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkljWKauAILrCRSBH5ZmLU1WTb AfVNhZuLAzbBWVVjcTSWE+RijwUKiUC+/LudnU7Z88SdRu74uWWnaWiUUf6uJV+n EelTrTgJ+scZnAuV3/3vaz9+I2Yz0iKobgj7hCEmbjQPsHBxPofUuAD5mjXZJw+S 5nSQ1OTd8S++FwSYKA8GcJiJTZTnMn8XIIbRndJBl13zcvraiod+T8h4ZINpKItV C2mP5pBOrErhti1SIXa9nsYb36FUtIh2TkN/3Dmam6htHn4wCi7TjUw4zPX94URz 8HcMJM7pKCtA0aSlm2vDraaLZIvhbZTNf77uZ2qdo1gSft54uK9Jk3uQWxFpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUWy+Wt2j3r9BGnaDoG1rbm9gSHkwHwYDVR0j BBgwFoAUXYhYIdJAZDfN/sBDgOlnUVpnrswwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODM3Njk0YjctMzI1Ni00NjY2LWEzZmUtNmU4MmU3ODNiMWUxLzAvNUQ4ODU4MjFE MjQwNjQzN0NERkVDMDQzODBFOTY3NTE1QTY3QUVDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDg4NTgyMUQyNDA2NDM3Q0RGRUMwNDM4MEU5Njc1MTVBNjdB RUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODM3Njk0YjctMzI1Ni00NjY2LWEz ZmUtNmU4MmU3ODNiMWUxLzAvNUQ4ODU4MjFEMjQwNjQzN0NERkVDMDQzODBFOTY3 NTE1QTY3QUVDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjidVjbH2yMYP13gxKXWzMvvds7nYGw3+cg deI9jPi4M4wcXOt/1Bd5zzerbhMbcUFX4S1DgoN+DwS5EK+VDcju7IW8Qo0RsLpb 7svkXzwsYhW8CXx2BicoQhcPG0talRk07Zk5EcsQVinNvSO/mmJuYDPe3QKzHjT0 WRG+eJW0yv7NErS2xAoobunG2D8nvQvasWIaoF2TWjHcEJ+5kU2rEb2cK3IXUH7h zbTkiVEZFgfGoxTzwTv9RMlnFoXTXEhjkHGFO/+65590cGEQpVhxPPsXYfJhK0fK 6ziYrVEq7trVl7XIZ+ZfsE9zidPif5pIUl/m/kz5W9uGeCF1UFY= -----END CERTIFICATE-----Generated at Mon Sep 21 06:22:50 2026 by rpki-client