$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.mft File: 5AE2131384B411127BE4CF7467B12F83CBAD9996.mft (raw, json) Hash identifier: ayW5fVr8AUijJ7Sz4tU0Jc+SFoHHFVqgbBcM3JXrUMY= Subject key identifier: 27:70:75:EC:15:4E:28:26:F1:57:2C:27:EE:CB:B7:7B:92:F3:A7:64 Authority key identifier: 5A:E2:13:13:84:B4:11:12:7B:E4:CF:74:67:B1:2F:83:CB:AD:99:96 Certificate issuer: /CN=5AE2131384B411127BE4CF7467B12F83CBAD9996 Certificate serial: 72E046BB427F930910F58B1E6F4A6160F073078F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AE2131384B411127BE4CF7467B12F83CBAD9996.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.mft Manifest number: BB Signing time: Sat 19 Sep 2026 23:46:41 +0000 Manifest this update: Sat 19 Sep 2026 23:41:41 +0000 Manifest next update: Mon 21 Sep 2026 00:10:41 +0000 Files and hashes: 1: 5AE2131384B411127BE4CF7467B12F83CBAD9996.crl (hash: Em+PpeYTmxo/+QnKJwlTr1RetDkO67fpoJiGqybKy2o=) 2: 3130332e3137372e31312e302f32342d3234203d3e20313437313634.roa (hash: NmIt0iuskNCmt4uz1oIpjbFNHodPs9Y9zQPXOPslKF0=) 3: 3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa (hash: I0jTp/Lb+KlyYGeSMZScDem+MblcbAhoI37lZDiIvac=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.crl rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AE2131384B411127BE4CF7467B12F83CBAD9996.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 00:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:e0:46:bb:42:7f:93:09:10:f5:8b:1e:6f:4a:61:60:f0:73:07:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE2131384B411127BE4CF7467B12F83CBAD9996 Validity Not Before: Sep 19 23:41:41 2026 GMT Not After : Sep 21 00:10:41 2026 GMT Subject: CN=277075EC154E2826F1572C27EECBB77B92F3A764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b3:f1:28:5b:8e:0f:92:e7:26:8b:53:39:f9: f5:07:56:8b:72:9c:28:cf:88:0c:f8:f6:d8:1d:5a: b3:15:30:22:aa:fe:11:50:d6:14:3b:20:fc:6e:0e: 28:ef:60:70:f5:d3:c5:44:fe:73:fe:80:28:32:12: 03:b3:ee:e5:c0:e0:1a:69:d0:b0:f9:a0:21:ca:8b: 04:45:86:6b:c0:e5:00:b5:7e:12:7d:9e:87:06:f9: 30:1b:63:b0:6a:7f:67:ba:e4:cb:54:7e:68:e9:fd: 71:57:b5:67:21:7b:6a:27:55:2b:ff:63:f8:f6:a4: 24:54:e9:cd:16:d7:1d:37:fa:41:99:b5:77:55:fa: 6f:ec:bd:ec:40:03:88:fd:51:ca:6f:10:b9:e9:d6: 48:b8:10:23:a6:52:f3:db:9f:54:d2:6f:bb:b1:f0: 49:77:5d:c9:32:de:81:4e:b6:8e:ef:22:74:dc:e8: e2:fc:d9:1e:05:bb:c5:f1:2b:a8:9c:de:71:52:bd: 72:c8:ba:a8:0e:2a:bc:f9:82:8d:20:e9:48:54:6b: 02:4a:9b:9a:2a:53:f5:20:27:ac:59:aa:47:58:ad: cb:5e:81:d5:cc:8d:12:d0:86:e8:a5:24:cf:2b:d1: 33:52:2c:b8:8e:cc:0c:94:62:98:04:4c:c5:fb:41: b2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:70:75:EC:15:4E:28:26:F1:57:2C:27:EE:CB:B7:7B:92:F3:A7:64 X509v3 Authority Key Identifier: keyid:5A:E2:13:13:84:B4:11:12:7B:E4:CF:74:67:B1:2F:83:CB:AD:99:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AE2131384B411127BE4CF7467B12F83CBAD9996.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:95:3d:37:05:3c:7a:74:9c:c2:e6:42:4f:2f:c3:b6:a7:e8: 30:dd:fa:be:24:fb:f9:1d:53:c0:15:b8:6a:a5:a0:5b:20:69: 1f:b7:74:bf:70:00:d8:19:44:9b:2f:af:53:92:ba:b9:1b:37: 29:81:bb:e8:73:a4:f3:4b:d0:9e:70:a6:36:f7:95:64:67:65: 8a:4c:77:d4:65:52:38:39:f3:b2:bd:75:a6:ae:63:67:f3:00: 3f:4c:7b:f7:59:7c:aa:bb:dd:db:c6:aa:7b:23:06:81:02:4d: b7:8f:bc:84:b2:d2:76:6c:30:bf:3f:a6:39:54:b1:1a:77:2b: 66:1c:66:f3:e1:9c:e3:8f:44:dd:1e:df:77:57:47:1e:1e:00: 29:c0:d9:a1:b5:83:fe:8c:cc:0e:04:3e:43:67:be:4a:9f:f6: 57:19:20:1a:23:c6:f8:da:6c:3b:b6:bd:52:e0:7d:fd:59:e9: 22:53:b3:f0:1c:0f:88:33:70:04:96:db:66:d0:d7:10:b0:46: 5d:d2:84:1c:18:a9:04:94:2c:6c:7f:d9:15:23:9b:24:65:64: 4d:15:bf:b2:b8:a1:27:c2:c3:c9:82:b1:a6:10:2f:99:6d:80: af:83:0c:47:d4:88:e6:71:dc:c3:f0:c1:6b:07:c6:9c:4c:69: b7:9b:28:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcuBGu0J/kwkQ9Yseb0phYPBzB48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFMjEzMTM4NEI0MTExMjdCRTRDRjc0NjdCMTJGODND QkFEOTk5NjAeFw0yNjA5MTkyMzQxNDFaFw0yNjA5MjEwMDEwNDFaMDMxMTAvBgNV BAMTKDI3NzA3NUVDMTU0RTI4MjZGMTU3MkMyN0VFQ0JCNzdCOTJGM0E3NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTs/EoW44Pkucmi1M5+fUHVoty nCjPiAz49tgdWrMVMCKq/hFQ1hQ7IPxuDijvYHD108VE/nP+gCgyEgOz7uXA4Bpp 0LD5oCHKiwRFhmvA5QC1fhJ9nocG+TAbY7Bqf2e65MtUfmjp/XFXtWche2onVSv/ Y/j2pCRU6c0W1x03+kGZtXdV+m/svexAA4j9UcpvELnp1ki4ECOmUvPbn1TSb7ux 8El3Xcky3oFOto7vInTc6OL82R4Fu8XxK6ic3nFSvXLIuqgOKrz5go0g6UhUawJK m5oqU/UgJ6xZqkdYrctegdXMjRLQhuilJM8r0TNSLLiOzAyUYpgETMX7QbJpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ3B17BVOKCbxVywn7su3e5Lzp2QwHwYDVR0j BBgwFoAUWuITE4S0ERJ75M90Z7Evg8utmZYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQxOTZkNjUtMjFhOC00YjA0LWE5ZGUtNzI4M2ZiZTNjMWNiLzAvNUFFMjEzMTM4 NEI0MTExMjdCRTRDRjc0NjdCMTJGODNDQkFEOTk5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QUUyMTMxMzg0QjQxMTEyN0JFNENGNzQ2N0IxMkY4M0NCQUQ5 OTk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQxOTZkNjUtMjFhOC00YjA0LWE5 ZGUtNzI4M2ZiZTNjMWNiLzAvNUFFMjEzMTM4NEI0MTExMjdCRTRDRjc0NjdCMTJG ODNDQkFEOTk5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIiVPTcFPHp0nMLmQk8vw7an6DDd+r4k+/kd U8AVuGqloFsgaR+3dL9wANgZRJsvr1OSurkbNymBu+hzpPNL0J5wpjb3lWRnZYpM d9RlUjg587K9daauY2fzAD9Me/dZfKq73dvGqnsjBoECTbePvISy0nZsML8/pjlU sRp3K2YcZvPhnOOPRN0e33dXRx4eACnA2aG1g/6MzA4EPkNnvkqf9lcZIBojxvja bDu2vVLgff1Z6SJTs/AcD4gzcASW22bQ1xCwRl3ShBwYqQSULGx/2RUjmyRlZE0V v7K4oSfCw8mCsaYQL5ltgK+DDEfUiOZx3MPwwWsHxpxMabebKEo= -----END CERTIFICATE-----Generated at Sun Sep 20 18:27:00 2026 by rpki-client