$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft File: 5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft (raw, json) Hash identifier: 7Q0suHNjm+T3KnG8BK5KMzavDwKRNnDBA64st+78Wuw= Subject key identifier: 19:15:58:7D:25:5B:E9:EE:89:CA:55:7C:95:FB:D2:0B:54:62:4B:85 Authority key identifier: 5A:1C:0A:49:62:48:63:92:EE:3F:99:8A:F6:D4:FF:70:39:A8:3F:F3 Certificate issuer: /CN=5A1C0A4962486392EE3F998AF6D4FF7039A83FF3 Certificate serial: 5CF8E33C172A804FEE5DA43E958EBC2C42CAF30A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft Manifest number: BE Signing time: Mon 21 Sep 2026 07:15:31 +0000 Manifest this update: Mon 21 Sep 2026 07:10:31 +0000 Manifest next update: Tue 22 Sep 2026 09:04:31 +0000 Files and hashes: 1: 3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa (hash: UIelaNmfU5flXZDJq0nsLusBExENtoFESIIlQRjCnSM=) 2: 3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa (hash: 7DiSKTCfGBXxBlqPDk9dxpdFDrZ/cVVBzOWF8p4BC1M=) 3: 323030313a6466313a383530303a3a2f34382d3438203d3e20313336313131.roa (hash: EBT29i1PsqgcTeXQev4zG3xPyCKZ73fS930Tr0addJQ=) 4: 3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa (hash: WS8lomwMTaspR/6nCKhD2CzQyU48KkvD9JTWAS0vGqs=) 5: 5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl (hash: dqPYJ6JsiB62JLCN+jlXgCaCm4QSSpX8zUkpt0kKWNk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 09:04:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:f8:e3:3c:17:2a:80:4f:ee:5d:a4:3e:95:8e:bc:2c:42:ca:f3:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A1C0A4962486392EE3F998AF6D4FF7039A83FF3 Validity Not Before: Sep 21 07:10:31 2026 GMT Not After : Sep 22 09:04:31 2026 GMT Subject: CN=1915587D255BE9EE89CA557C95FBD20B54624B85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3d:ad:ca:5b:a5:58:06:c1:71:c1:3c:9e:58: e0:52:58:20:f7:80:d6:13:25:30:94:cd:c9:26:8a: fb:c5:da:6f:3a:ec:34:49:c4:37:ad:7e:9f:b2:99: 62:fe:94:ba:3c:69:83:08:8a:d9:29:88:1c:7a:fa: f7:24:38:67:88:c4:a7:36:2c:6f:12:6e:80:69:0a: 92:7b:88:12:45:e8:b7:df:29:b8:b9:b7:ad:ae:49: 61:b1:2a:20:a2:bf:14:66:8b:0e:db:fc:dd:05:fd: fe:8b:c2:60:d3:a5:e0:b7:56:39:53:44:b9:95:bb: c3:50:b8:56:ab:c7:e8:5a:a2:a8:be:50:90:21:eb: 9e:c4:b7:e5:1a:43:a2:db:21:70:21:71:66:15:1d: 27:93:97:dd:9d:d5:88:04:4c:bb:e5:e3:5f:2e:0e: 92:0d:74:96:83:eb:a4:11:4d:52:3e:c7:22:4f:b8: e1:eb:a9:61:78:2f:e6:03:7a:fd:2e:d7:b7:30:0b: a8:03:9a:21:f6:99:fd:63:9e:b8:ee:d9:86:5e:d5: ba:a7:df:2b:fb:8e:28:9a:f3:5e:90:bd:06:ef:eb: 44:54:c8:e0:64:d5:ac:ff:52:b1:6a:9d:0e:e8:6a: 41:b3:52:11:d4:c5:53:da:f8:d5:10:44:7d:aa:a4: 42:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:15:58:7D:25:5B:E9:EE:89:CA:55:7C:95:FB:D2:0B:54:62:4B:85 X509v3 Authority Key Identifier: keyid:5A:1C:0A:49:62:48:63:92:EE:3F:99:8A:F6:D4:FF:70:39:A8:3F:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:7f:61:ff:56:71:0f:0d:4e:d7:5a:6a:3a:07:56:13:35:6b: f1:3f:f2:c7:d0:07:54:03:d5:21:4e:05:ed:3c:73:f5:24:b9: 2c:6c:76:11:24:b4:b2:a0:f7:8b:69:50:93:a6:ea:2b:0f:6e: 4f:b2:ac:37:46:f0:ef:7a:47:21:89:90:18:c4:36:57:02:b5: a9:9a:7e:a8:34:72:0a:c7:d1:30:ee:e8:e6:e6:21:d2:9a:ff: dc:e3:1a:f4:be:01:d3:4f:1c:5e:0a:e1:1c:d6:19:da:72:87: e5:36:4c:52:ff:cf:7a:ed:5d:cd:9f:d8:69:69:b1:1d:dc:78: ce:63:ae:51:e3:ef:43:f8:d6:5b:ca:c5:0b:16:bd:3d:30:ac: 05:1e:f9:3f:46:27:d2:0b:cd:f3:ed:aa:85:7f:ce:f7:75:cf: aa:b8:48:0b:9c:d2:f3:b5:56:a3:77:52:70:c5:76:22:75:3f: 85:5f:a9:a9:27:7d:b8:90:f1:b8:4d:76:96:aa:c6:ab:cb:5e: 35:6e:ee:ef:aa:8b:93:92:29:9a:19:c7:c0:f0:cb:07:76:dd: 5d:93:c2:7e:78:cc:19:f5:bb:4e:81:21:10:c9:4c:f5:22:f2: 72:c2:18:b9:e1:e2:27:5c:c4:b8:77:4a:2a:31:31:f2:1d:34: 4b:fc:9a:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXPjjPBcqgE/uXaQ+lY68LELK8wowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUExQzBBNDk2MjQ4NjM5MkVFM0Y5OThBRjZENEZGNzAz OUE4M0ZGMzAeFw0yNjA5MjEwNzEwMzFaFw0yNjA5MjIwOTA0MzFaMDMxMTAvBgNV BAMTKDE5MTU1ODdEMjU1QkU5RUU4OUNBNTU3Qzk1RkJEMjBCNTQ2MjRCODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAPa3KW6VYBsFxwTyeWOBSWCD3 gNYTJTCUzckmivvF2m867DRJxDetfp+ymWL+lLo8aYMIitkpiBx6+vckOGeIxKc2 LG8SboBpCpJ7iBJF6LffKbi5t62uSWGxKiCivxRmiw7b/N0F/f6LwmDTpeC3VjlT RLmVu8NQuFarx+haoqi+UJAh657Et+UaQ6LbIXAhcWYVHSeTl92d1YgETLvl418u DpINdJaD66QRTVI+xyJPuOHrqWF4L+YDev0u17cwC6gDmiH2mf1jnrju2YZe1bqn 3yv7jiia816QvQbv60RUyOBk1az/UrFqnQ7oakGzUhHUxVPa+NUQRH2qpEJBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGRVYfSVb6e6JylV8lfvSC1RiS4UwHwYDVR0j BBgwFoAUWhwKSWJIY5LuP5mK9tT/cDmoP/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzJmMjg4NzktNDg0NC00MmRlLWIyZDktYTk2NjZkZTI4MmVhLzAvNUExQzBBNDk2 MjQ4NjM5MkVFM0Y5OThBRjZENEZGNzAzOUE4M0ZGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QTFDMEE0OTYyNDg2MzkyRUUzRjk5OEFGNkQ0RkY3MDM5QTgz RkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzJmMjg4NzktNDg0NC00MmRlLWIy ZDktYTk2NjZkZTI4MmVhLzAvNUExQzBBNDk2MjQ4NjM5MkVFM0Y5OThBRjZENEZG NzAzOUE4M0ZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE5/Yf9WcQ8NTtdaajoHVhM1a/E/8sfQB1QD 1SFOBe08c/UkuSxsdhEktLKg94tpUJOm6isPbk+yrDdG8O96RyGJkBjENlcCtama fqg0cgrH0TDu6ObmIdKa/9zjGvS+AdNPHF4K4RzWGdpyh+U2TFL/z3rtXc2f2Glp sR3ceM5jrlHj70P41lvKxQsWvT0wrAUe+T9GJ9ILzfPtqoV/zvd1z6q4SAuc0vO1 VqN3UnDFdiJ1P4VfqaknfbiQ8bhNdpaqxqvLXjVu7u+qi5OSKZoZx8Dwywd23V2T wn54zBn1u06BIRDJTPUi8nLCGLnh4idcxLh3SioxMfIdNEv8mqg= -----END CERTIFICATE-----Generated at Tue Sep 22 01:52:50 2026 by rpki-client