$ rpki-client -vvvf rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft File: 5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft (raw, json) Hash identifier: vtBey0M9mMyjVEL/qYqJeRlOxLDcZS1ZSJE995eZCwQ= Subject key identifier: FE:66:F2:8D:58:8C:FE:36:47:38:CB:84:8C:D2:F1:26:23:23:A8:CE Authority key identifier: 5C:1F:8B:81:BA:95:84:8F:A5:18:96:E0:95:DB:7A:42:92:09:7E:FA Certificate issuer: /CN=5C1F8B81BA95848FA51896E095DB7A4292097EFA Certificate serial: 3F08A06661F5FB444A6FF3C4AA6831656C285383 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C1F8B81BA95848FA51896E095DB7A4292097EFA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft Manifest number: BF Signing time: Tue 22 Sep 2026 03:00:22 +0000 Manifest this update: Tue 22 Sep 2026 02:55:22 +0000 Manifest next update: Wed 23 Sep 2026 06:47:22 +0000 Files and hashes: 1: 3130332e3138362e39322e302f32332d3234203d3e20313439363937.roa (hash: 59pE6Ft4WIHTXAP3g5lUlDtYPeQDKcESjhCmblAbyfo=) 2: 3130332e3138362e39332e302f32342d3234203d3e20313439363937.roa (hash: 1KOQAKv6O99pd7ry74vlSf/BC5MqWkjxGtXhI66S9EE=) 3: 5C1F8B81BA95848FA51896E095DB7A4292097EFA.crl (hash: ZkfV41Ih1cCXlk7yWc8a2Pgv6QFVy6i/jUdlEUUdUhA=) 4: 3130332e3138362e39322e302f32342d3234203d3e20313439363937.roa (hash: SYK3QYwE1Bkhg2g4VRE2icwWvyuVDU6csoYcYgAZP3U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.crl rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C1F8B81BA95848FA51896E095DB7A4292097EFA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 06:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:08:a0:66:61:f5:fb:44:4a:6f:f3:c4:aa:68:31:65:6c:28:53:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C1F8B81BA95848FA51896E095DB7A4292097EFA Validity Not Before: Sep 22 02:55:22 2026 GMT Not After : Sep 23 06:47:22 2026 GMT Subject: CN=FE66F28D588CFE364738CB848CD2F1262323A8CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4a:f8:33:d8:5b:78:0c:29:1b:4e:a5:36:8c: 9e:e1:29:7a:a3:65:bf:8c:d4:01:95:27:4e:4b:0f: 6d:bb:70:ec:b3:75:76:f1:0b:75:79:23:f2:62:f9: b8:ba:02:d8:37:1c:cd:2c:98:68:bb:3e:6e:39:5c: fc:2d:d2:53:a4:4f:cc:71:f7:8a:9d:6c:64:38:e4: fc:8d:cc:5f:5a:b4:96:53:8a:d8:89:4e:07:ff:8e: bc:6f:e5:54:f4:c9:92:e1:b7:02:6f:29:ff:96:a7: d6:49:b7:7e:5f:39:e6:32:0e:32:dc:2d:cb:d0:f9: 1c:e3:42:76:8a:9b:ec:ab:17:f7:d9:53:a9:32:e8: a7:8b:a8:0f:82:c2:bd:42:1a:61:05:25:49:49:ea: b4:3c:46:8a:62:98:4a:4b:28:37:35:9d:51:c4:58: f1:29:55:e4:1a:a1:af:01:1f:d9:14:5d:8e:53:80: a2:2e:0a:98:9a:1f:23:d5:53:57:c5:89:3e:c0:a3: 4f:49:39:a4:9a:c8:75:59:dd:d0:19:51:e8:3d:51: ca:81:b3:5f:d3:14:03:94:52:6a:08:7d:e5:49:32: 58:c1:14:83:06:71:4a:7d:a2:31:32:d0:e0:5f:41: 22:e7:f1:85:ed:6d:fd:75:fe:fa:68:eb:bc:67:dd: 91:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:66:F2:8D:58:8C:FE:36:47:38:CB:84:8C:D2:F1:26:23:23:A8:CE X509v3 Authority Key Identifier: keyid:5C:1F:8B:81:BA:95:84:8F:A5:18:96:E0:95:DB:7A:42:92:09:7E:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C1F8B81BA95848FA51896E095DB7A4292097EFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:dc:c6:18:89:aa:1b:43:c6:dd:ab:bc:3e:6a:70:45:cc:46: 76:2a:f8:70:3d:b7:2a:17:1b:84:35:ad:6e:67:88:4f:46:61: 91:15:45:2d:a0:f4:04:ae:bc:07:dc:13:7a:61:6d:9f:84:13: f1:39:93:bb:3e:69:8f:fd:65:99:5b:45:17:b7:0b:26:73:9c: 86:c1:ca:3d:e1:a1:77:61:e3:cc:a0:63:7e:a2:ff:f4:49:28: af:61:86:bc:4f:7d:70:ed:a3:57:55:72:7d:9d:56:1b:39:41: 00:56:4e:43:07:18:42:c5:f0:5e:93:e7:74:ba:2a:6c:77:3f: 4b:34:93:ab:0e:78:96:30:19:2a:c4:a6:a4:43:18:c9:f7:e3: 7c:06:c7:08:5d:36:fe:fb:ab:f3:b7:e7:83:b5:c7:93:67:f2: e5:f3:68:ef:e2:a4:71:ee:ec:a2:ed:6b:69:c1:14:00:a8:f1: 2f:d6:0d:2f:42:08:8f:49:3e:40:83:e0:91:60:31:fc:fb:d1: 2d:1d:23:8c:31:62:89:7d:c5:ee:54:90:bf:06:0f:37:85:ba: 81:fd:f3:dd:bd:f7:f0:db:a7:52:24:25:f7:1c:4c:0e:f1:fc: 9e:07:50:fb:f3:69:bd:68:da:01:b8:2e:99:1d:2c:80:ff:4e: 81:80:4b:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPwigZmH1+0RKb/PEqmgxZWwoU4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMxRjhCODFCQTk1ODQ4RkE1MTg5NkUwOTVEQjdBNDI5 MjA5N0VGQTAeFw0yNjA5MjIwMjU1MjJaFw0yNjA5MjMwNjQ3MjJaMDMxMTAvBgNV BAMTKEZFNjZGMjhENTg4Q0ZFMzY0NzM4Q0I4NDhDRDJGMTI2MjMyM0E4Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjSvgz2Ft4DCkbTqU2jJ7hKXqj Zb+M1AGVJ05LD227cOyzdXbxC3V5I/Ji+bi6Atg3HM0smGi7Pm45XPwt0lOkT8xx 94qdbGQ45PyNzF9atJZTitiJTgf/jrxv5VT0yZLhtwJvKf+Wp9ZJt35fOeYyDjLc LcvQ+RzjQnaKm+yrF/fZU6ky6KeLqA+Cwr1CGmEFJUlJ6rQ8RopimEpLKDc1nVHE WPEpVeQaoa8BH9kUXY5TgKIuCpiaHyPVU1fFiT7Ao09JOaSayHVZ3dAZUeg9UcqB s1/TFAOUUmoIfeVJMljBFIMGcUp9ojEy0OBfQSLn8YXtbf11/vpo67xn3ZFHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/mbyjViM/jZHOMuEjNLxJiMjqM4wHwYDVR0j BBgwFoAUXB+LgbqVhI+lGJbgldt6QpIJfvowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTRlMWFjN2MtOTA0ZC00OTNmLWJhNWUtNWUwODM3ZGNiZDI5LzAvNUMxRjhCODFC QTk1ODQ4RkE1MTg5NkUwOTVEQjdBNDI5MjA5N0VGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QzFGOEI4MUJBOTU4NDhGQTUxODk2RTA5NURCN0E0MjkyMDk3 RUZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTRlMWFjN2MtOTA0ZC00OTNmLWJh NWUtNWUwODM3ZGNiZDI5LzAvNUMxRjhCODFCQTk1ODQ4RkE1MTg5NkUwOTVEQjdB NDI5MjA5N0VGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbcxhiJqhtDxt2rvD5qcEXMRnYq+HA9tyoX G4Q1rW5niE9GYZEVRS2g9ASuvAfcE3phbZ+EE/E5k7s+aY/9ZZlbRRe3CyZznIbB yj3hoXdh48ygY36i//RJKK9hhrxPfXDto1dVcn2dVhs5QQBWTkMHGELF8F6T53S6 Kmx3P0s0k6sOeJYwGSrEpqRDGMn343wGxwhdNv77q/O354O1x5Nn8uXzaO/ipHHu 7KLta2nBFACo8S/WDS9CCI9JPkCD4JFgMfz70S0dI4wxYol9xe5UkL8GDzeFuoH9 89299/Dbp1IkJfccTA7x/J4HUPvzab1o2gG4LpkdLID/ToGASyw= -----END CERTIFICATE-----Generated at Tue Sep 22 17:19:30 2026 by rpki-client