$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft File: 5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft (raw, json) Hash identifier: QIqgpD6hDrr5DPirHm+eLYQ2oBE+zUvQP2HPODZUAoU= Subject key identifier: B7:2A:43:6B:1E:E0:CC:B9:BF:5E:2F:6D:80:61:54:DC:B5:4E:62:9E Authority key identifier: 53:00:D0:EE:C7:A2:1A:AF:AD:61:B6:E4:08:28:CB:BA:7C:03:C8:49 Certificate issuer: /CN=5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849 Certificate serial: 54DC884C27FFE2371633C9291C0593D7902A6E13 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft Manifest number: BE Signing time: Mon 21 Sep 2026 04:27:09 +0000 Manifest this update: Mon 21 Sep 2026 04:22:09 +0000 Manifest next update: Tue 22 Sep 2026 07:15:09 +0000 Files and hashes: 1: 3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa (hash: 1t9yzNFOj0CAbODcXUQcoM9eYOKr+Gim4y4R0hZm1ws=) 2: 5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.crl (hash: IH+0uO0CjKF5izp5XTodNDx3i5Wx8XpUO99uXMVOn6w=) 3: 3130332e3136322e3135332e302f32342d3234203d3e20313431363630.roa (hash: d/lQ7Oz9/jWtBq0Ck1NBYGMJFkT573cCc0+ynKJPdok=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.crl rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:dc:88:4c:27:ff:e2:37:16:33:c9:29:1c:05:93:d7:90:2a:6e:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849 Validity Not Before: Sep 21 04:22:09 2026 GMT Not After : Sep 22 07:15:09 2026 GMT Subject: CN=B72A436B1EE0CCB9BF5E2F6D806154DCB54E629E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:74:fb:a2:9c:39:fe:e1:c4:3e:1c:6a:db:fb: 50:b0:3e:99:5d:51:0a:a9:bb:af:6d:46:3a:31:f5: 0e:31:68:33:58:b7:c4:81:cc:26:5e:b0:6d:21:cd: a4:20:46:cb:8a:3c:1b:cf:4c:46:31:ea:8d:9a:6c: c9:05:3f:11:f9:09:c5:34:fd:c7:28:26:ff:a8:6b: 4b:3b:df:88:ba:f4:9d:00:11:da:85:8f:cc:f9:37: 60:0f:91:06:d6:34:d6:13:75:27:8f:64:ee:8b:8b: 90:d5:58:cf:f0:98:2d:41:31:bb:d3:5d:c0:c2:26: f3:fe:e4:1d:91:fa:b4:d7:47:c6:7a:15:4a:4b:46: 31:45:a0:8e:e4:34:91:cf:6f:4d:d5:3e:c8:53:7a: d4:7f:e3:10:08:ad:55:6a:87:51:e0:72:09:ac:a7: 05:c7:b8:8c:93:21:6f:28:62:c9:82:04:04:e1:2d: 8f:06:5e:cc:d7:2f:04:c0:ef:49:de:31:a8:fd:16: f4:8d:e7:97:cf:58:4a:55:31:60:f3:c9:a0:0b:03: 4b:99:c7:93:c5:0c:4c:37:43:67:57:68:e1:4c:94: 2a:58:17:40:34:02:4f:f1:b4:e9:73:01:4e:a9:ba: 55:73:5a:77:55:6d:70:05:df:7c:cd:c8:ce:05:5a: 7e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:2A:43:6B:1E:E0:CC:B9:BF:5E:2F:6D:80:61:54:DC:B5:4E:62:9E X509v3 Authority Key Identifier: keyid:53:00:D0:EE:C7:A2:1A:AF:AD:61:B6:E4:08:28:CB:BA:7C:03:C8:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ad:fa:4c:d7:c8:3b:37:e1:50:05:b7:d3:e4:52:98:39:38: 51:9d:a0:dd:40:bf:de:5b:92:41:bd:24:20:5f:ad:55:e0:6f: 50:7c:52:06:ab:e9:f6:f4:d5:ba:e1:7d:f9:b2:c3:b7:42:4d: 65:31:13:41:90:45:e6:cd:92:62:2a:5d:de:89:f1:c7:5e:ff: d3:ab:35:92:06:89:84:a7:2c:4d:cc:5f:c5:18:91:b6:af:e2: c7:ee:01:e6:4e:12:3e:b6:3e:8c:a7:f1:92:c2:1d:69:f0:db: 2b:8b:a6:16:9b:ea:ed:d7:c6:0a:b9:95:3d:bb:70:f6:0b:f6: 8a:8f:0c:3d:8d:56:b7:fd:f8:37:a4:55:1f:54:35:c4:06:a5: 05:6e:e2:f3:68:81:70:04:96:32:16:3e:9b:61:d9:4f:ec:b5: dc:85:19:aa:83:e9:ff:21:20:49:06:cb:27:e3:13:93:28:a7: 6f:43:e9:87:9e:2b:b2:96:62:e0:a3:c0:9f:17:b7:de:a4:58: 52:ca:fe:4b:b9:7a:76:a5:36:c1:dc:9c:9b:0d:93:d9:f1:05: 98:2f:5f:36:ff:71:8b:3c:8c:d2:fe:36:2e:5d:3d:93:c1:da: 65:b5:c3:54:3a:08:e0:5e:63:6d:1f:7e:75:51:3b:ec:f0:41: 7b:e2:71:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVNyITCf/4jcWM8kpHAWT15AqbhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMwMEQwRUVDN0EyMUFBRkFENjFCNkU0MDgyOENCQkE3 QzAzQzg0OTAeFw0yNjA5MjEwNDIyMDlaFw0yNjA5MjIwNzE1MDlaMDMxMTAvBgNV BAMTKEI3MkE0MzZCMUVFMENDQjlCRjVFMkY2RDgwNjE1NERDQjU0RTYyOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjdPuinDn+4cQ+HGrb+1CwPpld UQqpu69tRjox9Q4xaDNYt8SBzCZesG0hzaQgRsuKPBvPTEYx6o2abMkFPxH5CcU0 /ccoJv+oa0s734i69J0AEdqFj8z5N2APkQbWNNYTdSePZO6Li5DVWM/wmC1BMbvT XcDCJvP+5B2R+rTXR8Z6FUpLRjFFoI7kNJHPb03VPshTetR/4xAIrVVqh1Hgcgms pwXHuIyTIW8oYsmCBAThLY8GXszXLwTA70neMaj9FvSN55fPWEpVMWDzyaALA0uZ x5PFDEw3Q2dXaOFMlCpYF0A0Ak/xtOlzAU6pulVzWndVbXAF33zNyM4FWn6NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtypDax7gzLm/Xi9tgGFU3LVOYp4wHwYDVR0j BBgwFoAUUwDQ7seiGq+tYbbkCCjLunwDyEkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGFiM2MwM2QtMmUyZS00ODk3LTg2OWItMjFjZTQ4NjAxNjE5LzAvNTMwMEQwRUVD N0EyMUFBRkFENjFCNkU0MDgyOENCQkE3QzAzQzg0OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzAwRDBFRUM3QTIxQUFGQUQ2MUI2RTQwODI4Q0JCQTdDMDND ODQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGFiM2MwM2QtMmUyZS00ODk3LTg2 OWItMjFjZTQ4NjAxNjE5LzAvNTMwMEQwRUVDN0EyMUFBRkFENjFCNkU0MDgyOENC QkE3QzAzQzg0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqt+kzXyDs34VAFt9PkUpg5OFGdoN1Av95b kkG9JCBfrVXgb1B8Ugar6fb01brhffmyw7dCTWUxE0GQRebNkmIqXd6J8cde/9Or NZIGiYSnLE3MX8UYkbav4sfuAeZOEj62Poyn8ZLCHWnw2yuLphab6u3Xxgq5lT27 cPYL9oqPDD2NVrf9+DekVR9UNcQGpQVu4vNogXAEljIWPpth2U/stdyFGaqD6f8h IEkGyyfjE5Mop29D6YeeK7KWYuCjwJ8Xt96kWFLK/ku5enalNsHcnJsNk9nxBZgv Xzb/cYs8jNL+Ni5dPZPB2mW1w1Q6COBeY20ffnVRO+zwQXvicRs= -----END CERTIFICATE-----Generated at Mon Sep 21 19:47:42 2026 by rpki-client