$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft File: 04D52083D82721F61634E6629E16C7C7A870B9F5.mft (raw, json) Hash identifier: o8gLreBGg0Vm9Md2Hab83+KzeNyJBYe5dzNNIqYrtHw= Subject key identifier: 03:04:7D:EB:FA:B9:EF:0D:E4:38:6C:8A:85:0E:45:AC:5B:4E:6A:CB Authority key identifier: 04:D5:20:83:D8:27:21:F6:16:34:E6:62:9E:16:C7:C7:A8:70:B9:F5 Certificate issuer: /CN=04D52083D82721F61634E6629E16C7C7A870B9F5 Certificate serial: 056456EC3B2E42BC479BFBC403B3B4F59EB3F462 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 14:22:36 +0000 Manifest this update: Sat 26 Sep 2026 14:17:36 +0000 Manifest next update: Sun 27 Sep 2026 16:17:36 +0000 Files and hashes: 1: 04D52083D82721F61634E6629E16C7C7A870B9F5.crl (hash: 4FYKbWr9v7i+AIax74o+tmIm27J6hwrQQR9k5HKsRBE=) 2: 3130332e3131362e38322e302f32342d3234203d3e20313530393539.roa (hash: JXl9nF73Wg0ANBBDSP3R1eZt9u9/t+JbOCpzL0EVDI8=) 3: 3130332e3131362e38332e302f32342d3234203d3e20313530393539.roa (hash: VKlwIPdpyMpqk0maSmWSiVv4EZTH1WpK0M+m3jBjjUU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.crl rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 16:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:64:56:ec:3b:2e:42:bc:47:9b:fb:c4:03:b3:b4:f5:9e:b3:f4:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04D52083D82721F61634E6629E16C7C7A870B9F5 Validity Not Before: Sep 26 14:17:36 2026 GMT Not After : Sep 27 16:17:36 2026 GMT Subject: CN=03047DEBFAB9EF0DE4386C8A850E45AC5B4E6ACB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:21:7a:de:bd:c5:25:ff:03:20:2b:9c:1b:05: 37:56:29:5d:82:55:6c:79:21:c5:b0:ef:1e:ce:72: a7:63:87:94:67:d3:1f:57:04:92:f0:b6:42:67:fc: a8:be:fb:da:6f:a8:a8:72:ac:23:bd:6c:0d:a6:b7: 85:3c:52:48:6a:ba:69:53:15:ab:8d:23:5d:0b:98: 8c:1b:c9:bb:1b:98:ab:22:4f:0b:ac:e5:44:32:01: e5:76:fd:c2:96:00:63:9b:99:ab:2a:30:64:70:9e: 9e:c5:bb:a7:16:a4:13:82:4e:23:2d:5b:c6:d1:69: 5e:bb:7f:97:a1:e9:52:c9:df:ad:64:26:a5:44:e5: 8d:6d:a3:9f:7d:19:b3:55:fc:92:10:7a:9f:37:6b: 56:f8:31:2b:c5:d3:3c:e2:1c:4d:f8:13:c8:60:b5: 9b:67:1f:2e:a3:ad:00:54:b4:cc:75:8c:a4:1f:a4: 2e:53:15:1f:9f:3a:f9:46:7a:ec:6e:78:6d:a7:73: ce:c4:32:4b:a9:65:d6:5a:44:18:91:61:7a:9c:d5: b3:84:ab:25:2a:9e:77:df:a5:d7:ec:c8:2e:47:fa: 22:a5:8b:1a:0d:a8:ca:86:27:10:7d:bc:75:d5:38: 35:b6:90:39:84:32:4c:da:e1:19:d3:4b:9e:ed:7a: c3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:04:7D:EB:FA:B9:EF:0D:E4:38:6C:8A:85:0E:45:AC:5B:4E:6A:CB X509v3 Authority Key Identifier: keyid:04:D5:20:83:D8:27:21:F6:16:34:E6:62:9E:16:C7:C7:A8:70:B9:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:77:ba:00:6f:e5:47:f6:31:ba:3f:cd:0c:2f:82:e0:26:46: 36:38:6f:cc:f6:a3:4b:70:ed:39:3e:d3:b3:28:eb:47:14:b8: 47:c8:ec:f5:95:b6:43:ad:81:81:9c:35:02:b7:72:f1:43:7e: 2b:60:ae:7d:44:2e:5a:e7:b4:21:78:2a:59:48:67:5f:e1:2a: e0:11:11:33:fa:22:f5:d2:30:22:55:f9:d0:2c:b6:31:a8:83: 84:65:05:1f:40:f7:ac:7f:6c:f7:2e:60:b8:3b:fe:7a:9f:ec: 2c:82:fa:bf:aa:f7:ad:ee:61:d7:b3:95:6e:5e:8e:57:ec:36: 74:09:ef:94:23:3c:6c:8a:de:47:da:5a:41:56:39:ae:ed:20: 6d:cc:07:95:5a:16:6f:cd:58:3c:d1:50:56:8f:cd:79:77:63: 52:4c:fe:90:6b:63:d9:7b:ae:5f:d6:f2:b4:96:cb:f5:ec:27: d3:a9:22:ed:10:19:44:3d:6d:d4:c9:07:05:e5:13:f1:a3:50: 69:f7:16:ba:df:d7:bf:a2:71:04:73:66:97:8f:5e:fa:66:fa: 2a:66:59:7e:3c:aa:a4:71:86:a6:a3:ad:39:7e:f1:fd:e3:7a: 4b:8e:10:c4:94:86:6b:0f:a7:90:5b:99:10:64:3f:6b:ab:84: a6:e8:f1:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBWRW7DsuQrxHm/vEA7O09Z6z9GIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRENTIwODNEODI3MjFGNjE2MzRFNjYyOUUxNkM3QzdB ODcwQjlGNTAeFw0yNjA5MjYxNDE3MzZaFw0yNjA5MjcxNjE3MzZaMDMxMTAvBgNV BAMTKDAzMDQ3REVCRkFCOUVGMERFNDM4NkM4QTg1MEU0NUFDNUI0RTZBQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqIXrevcUl/wMgK5wbBTdWKV2C VWx5IcWw7x7Ocqdjh5Rn0x9XBJLwtkJn/Ki++9pvqKhyrCO9bA2mt4U8UkhqumlT FauNI10LmIwbybsbmKsiTwus5UQyAeV2/cKWAGObmasqMGRwnp7Fu6cWpBOCTiMt W8bRaV67f5eh6VLJ361kJqVE5Y1to599GbNV/JIQep83a1b4MSvF0zziHE34E8hg tZtnHy6jrQBUtMx1jKQfpC5TFR+fOvlGeuxueG2nc87EMkupZdZaRBiRYXqc1bOE qyUqnnffpdfsyC5H+iKlixoNqMqGJxB9vHXVODW2kDmEMkza4RnTS57tesPfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAwR96/q57w3kOGyKhQ5FrFtOasswHwYDVR0j BBgwFoAUBNUgg9gnIfYWNOZinhbHx6hwufUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWU5MjI0M2EtNzYzZC00NGI4LTk4N2QtMDhiZDBkYTllZTNkLzAvMDRENTIwODNE ODI3MjFGNjE2MzRFNjYyOUUxNkM3QzdBODcwQjlGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNEQ1MjA4M0Q4MjcyMUY2MTYzNEU2NjI5RTE2QzdDN0E4NzBC OUY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWU5MjI0M2EtNzYzZC00NGI4LTk4 N2QtMDhiZDBkYTllZTNkLzAvMDRENTIwODNEODI3MjFGNjE2MzRFNjYyOUUxNkM3 QzdBODcwQjlGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIV3ugBv5Uf2Mbo/zQwvguAmRjY4b8z2o0tw 7Tk+07Mo60cUuEfI7PWVtkOtgYGcNQK3cvFDfitgrn1ELlrntCF4KllIZ1/hKuAR ETP6IvXSMCJV+dAstjGog4RlBR9A96x/bPcuYLg7/nqf7CyC+r+q963uYdezlW5e jlfsNnQJ75QjPGyK3kfaWkFWOa7tIG3MB5VaFm/NWDzRUFaPzXl3Y1JM/pBrY9l7 rl/W8rSWy/XsJ9OpIu0QGUQ9bdTJBwXlE/GjUGn3Frrf17+icQRzZpePXvpm+ipm WX48qqRxhqajrTl+8f3jekuOEMSUhmsPp5BbmRBkP2urhKbo8cM= -----END CERTIFICATE-----Generated at Sun Sep 27 11:01:29 2026 by rpki-client