$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft File: 5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft (raw, json) Hash identifier: 9o8MEnLzHDx5+fwTS5Un0MQNgArLZvB3yjArl2+PEKQ= Subject key identifier: 61:4A:17:1A:FD:75:0C:A8:8F:0C:B0:72:B8:B1:76:9A:92:1A:27:A7 Authority key identifier: 5F:7C:0C:BF:5B:B8:C4:66:1C:32:A0:E0:43:E5:00:56:0D:BF:47:29 Certificate issuer: /CN=5F7C0CBF5BB8C4661C32A0E043E500560DBF4729 Certificate serial: 62AFDFB2A821391A9D502B1B4835ECE72538C125 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft Manifest number: BE Signing time: Mon 21 Sep 2026 14:55:03 +0000 Manifest this update: Mon 21 Sep 2026 14:50:03 +0000 Manifest next update: Tue 22 Sep 2026 17:04:03 +0000 Files and hashes: 1: 5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.crl (hash: uN5MSoy4tQVQx+svsXdfYg+7vXoabrrBprKGRRVHPoY=) 2: 3130332e35322e3231332e302f32342d3234203d3e20313333383136.roa (hash: SfQvGENDC41waooB6j4WUvvJFAlrc4V5XQaGfGIyIVQ=) 3: 3130332e3138352e3139362e302f32342d3234203d3e20313333383136.roa (hash: oPlCdoIfmCJKqeBLs55VVkT8uc2vPldYwiU3y8pfCsM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.crl rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 17:04:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:af:df:b2:a8:21:39:1a:9d:50:2b:1b:48:35:ec:e7:25:38:c1:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F7C0CBF5BB8C4661C32A0E043E500560DBF4729 Validity Not Before: Sep 21 14:50:03 2026 GMT Not After : Sep 22 17:04:03 2026 GMT Subject: CN=614A171AFD750CA88F0CB072B8B1769A921A27A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:5b:f4:e0:6a:1c:2f:cb:7d:0b:5d:f4:88:0b: 8c:ba:6b:e5:8a:5f:aa:82:dd:3f:e3:fb:75:06:e8: f2:09:cf:50:41:b2:ee:fd:96:da:61:cd:c2:12:4e: dd:d2:37:c4:40:e5:d2:93:73:48:9c:24:b5:2f:98: 7b:30:84:02:3f:2b:27:1f:1d:0d:4f:6e:b3:ef:a4: 5f:48:4a:63:00:c8:42:cf:d4:09:23:27:ad:66:77: e2:35:d1:6e:5f:3f:21:8e:c9:6b:3a:6f:36:3e:29: a6:4f:1d:6d:fe:83:33:19:61:4a:7e:97:6a:fc:8d: 21:54:71:38:35:4e:1a:39:53:ea:14:0a:e0:b5:30: 8f:07:2d:4a:26:3c:f3:32:88:65:a1:cb:be:78:80: 00:c8:46:05:00:7c:69:f5:51:2e:ef:ce:44:ba:05: e7:40:6a:8b:ed:d4:18:2a:f3:9f:70:c1:31:18:bc: 1f:ea:78:08:77:a4:9a:cb:3f:9a:a5:8c:71:0e:e7: 87:6f:6c:3c:7b:53:88:ce:f2:e8:a7:83:a6:f4:ba: 77:bf:ee:6c:ef:4c:6a:ef:d9:58:bd:70:8d:08:26: 99:27:65:1f:79:b5:c4:75:0e:5e:9c:e3:52:fb:2a: c4:da:15:e2:df:da:cd:11:9e:53:5a:8d:b7:6e:19: f0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4A:17:1A:FD:75:0C:A8:8F:0C:B0:72:B8:B1:76:9A:92:1A:27:A7 X509v3 Authority Key Identifier: keyid:5F:7C:0C:BF:5B:B8:C4:66:1C:32:A0:E0:43:E5:00:56:0D:BF:47:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:a4:10:1b:80:d9:d1:80:98:c3:26:0d:b6:05:0a:ad:f9:0e: b6:03:c7:18:b9:95:17:22:7c:56:2d:11:35:db:3d:03:07:00: 7c:c7:f0:3b:fa:d0:b9:fb:17:6b:c0:7f:63:b7:44:b9:d5:4a: 97:98:95:62:5d:82:49:14:8d:b8:28:32:26:1f:28:8b:31:18: 4f:02:59:af:9d:8b:e6:5d:e7:96:f2:83:4f:e4:31:2f:61:c1: 56:04:0a:f6:cf:ec:fc:5a:bb:5c:ca:cf:73:1d:7d:f1:90:46: 6d:43:c2:55:d3:eb:0f:ee:10:80:9d:e4:33:5c:d3:42:63:c2: 5f:dd:9f:28:12:d5:f5:71:93:de:4b:45:1f:0a:f3:20:4f:a9: f0:cd:5f:17:10:6d:8b:e5:c7:27:d9:7f:ef:30:32:8a:f6:f6: 89:a4:3f:61:55:a6:53:98:3a:4a:18:fd:65:8e:8a:eb:e4:fb: 2e:5d:b5:e1:eb:9f:15:82:94:f3:0c:14:2f:07:d9:e6:68:12: ca:81:04:8e:4c:5c:2d:dd:f6:b3:3b:de:48:65:69:82:91:0f: 67:20:94:e6:4f:df:c0:16:c5:fe:2d:25:f3:e5:69:12:71:a9: 6c:b3:a4:a2:66:ef:f8:e5:5e:97:bb:43:49:0c:e1:61:4c:19: ad:cf:80:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYq/fsqghORqdUCsbSDXs5yU4wSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY3QzBDQkY1QkI4QzQ2NjFDMzJBMEUwNDNFNTAwNTYw REJGNDcyOTAeFw0yNjA5MjExNDUwMDNaFw0yNjA5MjIxNzA0MDNaMDMxMTAvBgNV BAMTKDYxNEExNzFBRkQ3NTBDQTg4RjBDQjA3MkI4QjE3NjlBOTIxQTI3QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpW/Tgahwvy30LXfSIC4y6a+WK X6qC3T/j+3UG6PIJz1BBsu79ltphzcISTt3SN8RA5dKTc0icJLUvmHswhAI/Kycf HQ1PbrPvpF9ISmMAyELP1AkjJ61md+I10W5fPyGOyWs6bzY+KaZPHW3+gzMZYUp+ l2r8jSFUcTg1Tho5U+oUCuC1MI8HLUomPPMyiGWhy754gADIRgUAfGn1US7vzkS6 BedAaovt1Bgq859wwTEYvB/qeAh3pJrLP5qljHEO54dvbDx7U4jO8uing6b0une/ 7mzvTGrv2Vi9cI0IJpknZR95tcR1Dl6c41L7KsTaFeLf2s0RnlNajbduGfAbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYUoXGv11DKiPDLByuLF2mpIaJ6cwHwYDVR0j BBgwFoAUX3wMv1u4xGYcMqDgQ+UAVg2/RykwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGU5YWJiMWEtZDZjMC00NTRmLTg3MGEtOGJlZWRkODFmY2QyLzAvNUY3QzBDQkY1 QkI4QzQ2NjFDMzJBMEUwNDNFNTAwNTYwREJGNDcyOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RjdDMENCRjVCQjhDNDY2MUMzMkEwRTA0M0U1MDA1NjBEQkY0 NzI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGU5YWJiMWEtZDZjMC00NTRmLTg3 MGEtOGJlZWRkODFmY2QyLzAvNUY3QzBDQkY1QkI4QzQ2NjFDMzJBMEUwNDNFNTAw NTYwREJGNDcyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKkEBuA2dGAmMMmDbYFCq35DrYDxxi5lRci fFYtETXbPQMHAHzH8Dv60Ln7F2vAf2O3RLnVSpeYlWJdgkkUjbgoMiYfKIsxGE8C Wa+di+Zd55byg0/kMS9hwVYECvbP7Pxau1zKz3MdffGQRm1DwlXT6w/uEICd5DNc 00Jjwl/dnygS1fVxk95LRR8K8yBPqfDNXxcQbYvlxyfZf+8wMor29omkP2FVplOY OkoY/WWOiuvk+y5dteHrnxWClPMMFC8H2eZoEsqBBI5MXC3d9rM73khlaYKRD2cg lOZP38AWxf4tJfPlaRJxqWyzpKJm7/jlXpe7Q0kM4WFMGa3PgDM= -----END CERTIFICATE-----Generated at Tue Sep 22 01:07:51 2026 by rpki-client