$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft File: 5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft (raw, json) Hash identifier: hylh4sA55b8nhRQUQv0pxWYEgSTECAdsWTbrNzL7JEs= Subject key identifier: 55:15:65:39:D2:BB:42:EB:E6:F7:51:51:41:B0:E7:6E:00:40:D2:CE Authority key identifier: 5D:13:BF:84:B8:D9:1A:8A:1A:C8:08:62:27:D5:9F:1D:C1:EA:3F:10 Certificate issuer: /CN=5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10 Certificate serial: 0B86EFB03ED52EAD13D86D7EAA7334BBB8C6F79A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft Manifest number: C1 Signing time: Mon 21 Sep 2026 12:16:32 +0000 Manifest this update: Mon 21 Sep 2026 12:11:32 +0000 Manifest next update: Tue 22 Sep 2026 12:36:32 +0000 Files and hashes: 1: 3130332e3231392e3234382e302f32322d3234203d3e20313335343434.roa (hash: sW+l8TDeWzgFji1PeDbQ2pWWxA4Q2fxlWjumQ/6eJhY=) 2: 323030313a6466323a356130303a3a2f34382d3438203d3e20313335343434.roa (hash: LT7RL4AshZZWaOQ5M4cXziGumEcUQNnqOVToVNyckMU=) 3: 3130332e3233352e37322e302f32342d3234203d3e20313335343434.roa (hash: nEP4w2fSSO/JQDFjA5Ly4wgPOtkX8Po6PEn4YaYfsXM=) 4: 3130332e3233352e37332e302f32342d3234203d3e20313335333630.roa (hash: QFfNhq0siSwOs18xtBIQVVrABzIP0gTxhbpkKx5UaAs=) 5: 3130332e3233352e37342e302f32342d3234203d3e20313335343434.roa (hash: ml3XOM3oooTz4pOGiWF5IYQEjwqeju+NuHaVYP3/oGM=) 6: 3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa (hash: W77EgJV2LrTum+AXobDiJMY0VCB5QZlN1pW9AzTxaMA=) 7: 5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl (hash: 7OCB0V6WBU36kStnPBAGwJ0oBcYwjnfR6O3Hv4bsr3M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 12:36:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:86:ef:b0:3e:d5:2e:ad:13:d8:6d:7e:aa:73:34:bb:b8:c6:f7:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10 Validity Not Before: Sep 21 12:11:32 2026 GMT Not After : Sep 22 12:36:32 2026 GMT Subject: CN=55156539D2BB42EBE6F7515141B0E76E0040D2CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:82:89:e6:48:34:d5:19:b3:49:87:96:b1:ea: 66:60:84:de:29:8e:41:a1:34:e2:f6:8c:16:e0:8c: f6:87:8b:fc:92:80:9d:dc:56:21:d7:b5:62:9c:1b: 04:87:45:27:2a:85:51:34:fe:da:ba:74:0d:84:c1: 02:a4:1d:ad:6a:fc:52:cf:3d:5e:9d:c4:7f:71:39: e8:db:a1:7d:11:15:e2:30:bb:e3:d9:8b:fd:20:4f: fc:37:cd:2d:54:05:96:cf:30:85:c5:3f:be:20:0c: 10:76:9f:c0:09:55:32:00:86:bd:1e:27:f5:37:46: 2e:c6:a5:69:c6:3e:3f:57:cd:f5:36:96:39:ac:0d: b1:fa:e7:bc:00:7b:21:28:ef:13:cb:8f:a3:d3:14: ad:a7:b9:7e:0d:9f:54:84:92:13:79:ef:4e:3a:88: 0d:3a:38:2c:e7:d3:5b:4a:85:a2:14:ba:f7:c7:98: c0:3b:db:01:83:74:b7:9e:55:5d:ee:d9:a4:6e:d6: 60:5d:b5:fe:4e:4f:3d:13:78:6c:4c:d0:be:da:08: 6a:97:5b:bd:ef:27:17:5c:76:54:3b:c7:f8:42:70: 17:37:2d:33:63:0f:9d:5e:ec:af:11:fa:c2:1e:dd: 3f:c5:0a:ff:48:bf:6b:2a:b3:2d:9d:e9:c3:69:f4: 2f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:15:65:39:D2:BB:42:EB:E6:F7:51:51:41:B0:E7:6E:00:40:D2:CE X509v3 Authority Key Identifier: keyid:5D:13:BF:84:B8:D9:1A:8A:1A:C8:08:62:27:D5:9F:1D:C1:EA:3F:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:42:76:cc:7e:0d:ea:95:73:b9:5f:c1:45:37:c6:18:69:8e: 35:29:06:79:f0:89:08:8c:0a:c1:98:fd:b1:af:2c:92:63:a9: 11:ab:84:a3:a2:aa:37:85:5f:67:c9:4d:54:47:9c:df:64:86: 4b:29:50:a4:e0:e0:73:3f:c4:0a:64:a8:90:e2:28:71:a7:ae: c9:ca:23:f1:52:d6:ec:51:cc:a5:70:3b:03:48:4c:bb:af:34: 4f:ef:99:a6:a7:2b:0f:9d:76:7e:72:d7:f2:6c:87:05:0e:4e: a8:14:69:ab:71:76:41:a7:65:10:f9:3c:5e:8f:ec:fb:07:90: 94:c2:74:4d:13:2c:d2:6c:26:95:ca:4f:a6:58:1c:87:3f:6d: 73:6f:08:2a:38:ea:45:f3:3b:00:1d:b9:83:68:8b:66:3d:78: 9b:af:54:ed:03:a2:25:cf:a9:4e:c5:86:97:0e:b3:58:cd:9e: 57:f5:48:f8:eb:c9:38:8e:79:04:a3:a7:e6:43:18:b3:e1:72: 06:25:45:bb:2b:e5:50:25:73:d8:92:39:46:91:02:99:e0:e7: 54:7f:34:bd:78:ba:c3:69:98:4a:67:7a:03:5a:22:b1:19:70: a4:a3:32:bd:0c:cc:f4:09:1f:8d:ab:c8:a0:59:5f:04:e2:9c: 79:dd:68:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC4bvsD7VLq0T2G1+qnM0u7jG95owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQxM0JGODRCOEQ5MUE4QTFBQzgwODYyMjdENTlGMURD MUVBM0YxMDAeFw0yNjA5MjExMjExMzJaFw0yNjA5MjIxMjM2MzJaMDMxMTAvBgNV BAMTKDU1MTU2NTM5RDJCQjQyRUJFNkY3NTE1MTQxQjBFNzZFMDA0MEQyQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUgonmSDTVGbNJh5ax6mZghN4p jkGhNOL2jBbgjPaHi/ySgJ3cViHXtWKcGwSHRScqhVE0/tq6dA2EwQKkHa1q/FLP PV6dxH9xOejboX0RFeIwu+PZi/0gT/w3zS1UBZbPMIXFP74gDBB2n8AJVTIAhr0e J/U3Ri7GpWnGPj9XzfU2ljmsDbH657wAeyEo7xPLj6PTFK2nuX4Nn1SEkhN57046 iA06OCzn01tKhaIUuvfHmMA72wGDdLeeVV3u2aRu1mBdtf5OTz0TeGxM0L7aCGqX W73vJxdcdlQ7x/hCcBc3LTNjD51e7K8R+sIe3T/FCv9Iv2sqsy2d6cNp9C/VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVRVlOdK7Quvm91FRQbDnbgBA0s4wHwYDVR0j BBgwFoAUXRO/hLjZGooayAhiJ9WfHcHqPxAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjFhNzdhZGQtYTQ5YS00YzhmLWE3MzUtZWY5NmMzM2FiMjlmLzAvNUQxM0JGODRC OEQ5MUE4QTFBQzgwODYyMjdENTlGMURDMUVBM0YxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDEzQkY4NEI4RDkxQThBMUFDODA4NjIyN0Q1OUYxREMxRUEz RjEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjFhNzdhZGQtYTQ5YS00YzhmLWE3 MzUtZWY5NmMzM2FiMjlmLzAvNUQxM0JGODRCOEQ5MUE4QTFBQzgwODYyMjdENTlG MURDMUVBM0YxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpCdsx+DeqVc7lfwUU3xhhpjjUpBnnwiQiM CsGY/bGvLJJjqRGrhKOiqjeFX2fJTVRHnN9khkspUKTg4HM/xApkqJDiKHGnrsnK I/FS1uxRzKVwOwNITLuvNE/vmaanKw+ddn5y1/JshwUOTqgUaatxdkGnZRD5PF6P 7PsHkJTCdE0TLNJsJpXKT6ZYHIc/bXNvCCo46kXzOwAduYNoi2Y9eJuvVO0DoiXP qU7FhpcOs1jNnlf1SPjryTiOeQSjp+ZDGLPhcgYlRbsr5VAlc9iSOUaRApng51R/ NL14usNpmEpnegNaIrEZcKSjMr0MzPQJH42ryKBZXwTinHndaD4= -----END CERTIFICATE-----Generated at Tue Sep 22 05:48:56 2026 by rpki-client