$ rpki-client -vvvf rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft File: 540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft (raw, json) Hash identifier: znGs7JAwrbOCeowMbsRRaLBE9D0gd4h0gNJH3C53Qi0= Subject key identifier: 10:5B:3E:11:58:B5:81:3C:84:9E:2A:39:AD:20:1B:8A:8B:3D:DA:DA Authority key identifier: 54:09:72:00:6E:C4:D1:CE:0E:DD:C7:DA:11:D1:41:9F:67:28:16:A7 Certificate issuer: /CN=540972006EC4D1CE0EDDC7DA11D1419F672816A7 Certificate serial: 56D5245F7BBFD7AA0575AF62020C8430EA8FD2D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft Manifest number: BE Signing time: Mon 21 Sep 2026 09:17:56 +0000 Manifest this update: Mon 21 Sep 2026 09:12:56 +0000 Manifest next update: Tue 22 Sep 2026 12:13:56 +0000 Files and hashes: 1: 540972006EC4D1CE0EDDC7DA11D1419F672816A7.crl (hash: QPGqE9PySaPW96FvG18Cq1czU0S1sTy1TNFjOcRrh1Y=) 2: 3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa (hash: Tk0zLG1Hphe7t1mTq1IIDbrzYp4b0d3efGQx1H0ipCc=) 3: 3130332e38362e3131362e302f32342d3234203d3e20313530353532.roa (hash: KN9wGn1zXozmZ3RfAUGCtuXPuU4nroC30cpkr7J9mHQ=) 4: 3130332e38362e3131372e302f32342d3234203d3e20313530353532.roa (hash: AhYVMQlTuT7zbTcLfZGNm75C7shQlDWThwFiJD95reg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.crl rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d5:24:5f:7b:bf:d7:aa:05:75:af:62:02:0c:84:30:ea:8f:d2:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=540972006EC4D1CE0EDDC7DA11D1419F672816A7 Validity Not Before: Sep 21 09:12:56 2026 GMT Not After : Sep 22 12:13:56 2026 GMT Subject: CN=105B3E1158B5813C849E2A39AD201B8A8B3DDADA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d1:22:33:84:c5:11:65:55:b3:ff:cd:4c:98: 59:c0:f2:d5:d8:07:46:4b:58:a8:a3:99:dc:a6:de: e2:8b:c3:b4:20:02:0a:90:62:4d:15:1d:39:f5:e6: fc:cd:bc:b0:9e:b4:cc:64:86:33:ae:cd:c3:01:14: 03:be:98:0f:22:15:d8:fc:30:26:d5:4f:70:c6:26: fc:3e:b1:29:b4:43:48:d5:71:33:80:ef:12:32:7d: 39:2c:f6:a9:25:26:0c:b1:f8:58:3b:68:6c:80:b9: a6:96:2d:27:7e:b2:7b:13:60:6a:82:63:42:49:26: da:a8:37:d6:41:42:24:cd:7d:7f:8c:ee:d9:1d:83: ec:fc:52:d6:76:6d:84:dd:17:30:d6:ba:29:a6:5c: 06:6c:3c:08:7a:24:2f:b5:58:7c:a1:c1:e2:c7:3e: 8f:60:f2:23:1d:ae:1c:70:79:24:d3:e6:a0:6b:8d: 1a:87:d1:f5:a6:09:e8:af:6e:82:3d:93:5d:28:59: ca:84:0e:0f:05:fe:f4:87:1a:9d:7f:ec:4c:a9:a2: c9:92:54:5a:52:8a:3e:90:6f:89:39:df:09:69:d7: 10:d9:e9:4f:ce:48:70:3e:9e:54:3b:3d:8a:71:33: a2:27:2d:21:b3:3c:77:bb:fa:c3:80:a8:60:f7:93: 04:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5B:3E:11:58:B5:81:3C:84:9E:2A:39:AD:20:1B:8A:8B:3D:DA:DA X509v3 Authority Key Identifier: keyid:54:09:72:00:6E:C4:D1:CE:0E:DD:C7:DA:11:D1:41:9F:67:28:16:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:00:f8:73:08:64:a1:51:09:dd:1e:46:be:43:30:79:ca:82: 53:39:55:72:b8:82:f3:af:8b:42:f1:04:ad:0d:cd:d8:2d:d1: 44:16:3b:14:90:06:9f:9e:5c:16:ea:0d:9e:86:ab:2f:f8:f0: bd:38:9c:04:2e:ff:b4:96:15:ac:e7:98:20:bd:96:71:a5:3e: 09:48:82:4d:c5:98:17:cc:91:de:14:ea:ec:4c:57:8a:13:b1: b1:c8:e4:d6:a5:83:e9:e4:61:c2:75:80:cc:89:ee:eb:67:a8: b2:b6:36:db:7a:88:77:0f:13:ae:9f:d5:87:e8:ff:f0:1e:ae: 1d:f4:b9:fc:75:86:0f:44:a4:bb:4e:e5:41:81:5d:72:15:4f: de:14:86:3b:97:91:f4:d1:13:59:d6:02:e7:15:06:fe:b4:2a: 2b:f2:af:df:12:34:4b:96:ea:13:4c:64:14:ff:c9:09:c3:61: 78:7a:fb:0a:3a:3f:21:1c:2e:61:e0:0c:5c:36:76:f2:5b:58: 83:18:14:88:b7:50:e2:af:9d:e2:02:c0:e8:10:9e:8d:1c:fe: db:b4:cd:1c:29:cd:98:5b:be:26:a8:64:08:69:df:97:50:08: 71:37:35:58:4b:46:24:43:95:4b:42:a8:c7:c4:b7:49:0d:31: 3d:8e:7a:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVtUkX3u/16oFda9iAgyEMOqP0tUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQwOTcyMDA2RUM0RDFDRTBFRERDN0RBMTFEMTQxOUY2 NzI4MTZBNzAeFw0yNjA5MjEwOTEyNTZaFw0yNjA5MjIxMjEzNTZaMDMxMTAvBgNV BAMTKDEwNUIzRTExNThCNTgxM0M4NDlFMkEzOUFEMjAxQjhBOEIzRERBREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj0SIzhMURZVWz/81MmFnA8tXY B0ZLWKijmdym3uKLw7QgAgqQYk0VHTn15vzNvLCetMxkhjOuzcMBFAO+mA8iFdj8 MCbVT3DGJvw+sSm0Q0jVcTOA7xIyfTks9qklJgyx+Fg7aGyAuaaWLSd+snsTYGqC Y0JJJtqoN9ZBQiTNfX+M7tkdg+z8UtZ2bYTdFzDWuimmXAZsPAh6JC+1WHyhweLH Po9g8iMdrhxweSTT5qBrjRqH0fWmCeivboI9k10oWcqEDg8F/vSHGp1/7EyposmS VFpSij6Qb4k53wlp1xDZ6U/OSHA+nlQ7PYpxM6InLSGzPHe7+sOAqGD3kwRnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEFs+EVi1gTyEnio5rSAbios92towHwYDVR0j BBgwFoAUVAlyAG7E0c4O3cfaEdFBn2coFqcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODk3MThmNmItYjUxNi00M2FlLWI1ODktODNhMjVmYWEzMGJlLzAvNTQwOTcyMDA2 RUM0RDFDRTBFRERDN0RBMTFEMTQxOUY2NzI4MTZBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDA5NzIwMDZFQzREMUNFMEVEREM3REExMUQxNDE5RjY3Mjgx NkE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODk3MThmNmItYjUxNi00M2FlLWI1 ODktODNhMjVmYWEzMGJlLzAvNTQwOTcyMDA2RUM0RDFDRTBFRERDN0RBMTFEMTQx OUY2NzI4MTZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4A+HMIZKFRCd0eRr5DMHnKglM5VXK4gvOv i0LxBK0Nzdgt0UQWOxSQBp+eXBbqDZ6Gqy/48L04nAQu/7SWFaznmCC9lnGlPglI gk3FmBfMkd4U6uxMV4oTsbHI5Nalg+nkYcJ1gMyJ7utnqLK2Ntt6iHcPE66f1Yfo //Aerh30ufx1hg9EpLtO5UGBXXIVT94UhjuXkfTRE1nWAucVBv60Kivyr98SNEuW 6hNMZBT/yQnDYXh6+wo6PyEcLmHgDFw2dvJbWIMYFIi3UOKvneICwOgQno0c/tu0 zRwpzZhbviaoZAhp35dQCHE3NVhLRiRDlUtCqMfEt0kNMT2Oems= -----END CERTIFICATE-----Generated at Mon Sep 21 21:22:00 2026 by rpki-client