$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft File: A5251C27E1AF09AE2F28618250807EA4D573694B.mft (raw, json) Hash identifier: n9ALLpt+euJmgxcnltLCeTV37V89jFv+h5+lJjRi8DE= Subject key identifier: A5:5E:43:D0:D1:EC:B1:5C:A0:FA:65:8B:F5:D6:4B:2A:1F:5E:6E:A4 Authority key identifier: A5:25:1C:27:E1:AF:09:AE:2F:28:61:82:50:80:7E:A4:D5:73:69:4B Certificate issuer: /CN=A5251C27E1AF09AE2F28618250807EA4D573694B Certificate serial: 5550DFA36F9648B98093F7C496C9D441C044DA68 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A5251C27E1AF09AE2F28618250807EA4D573694B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft Manifest number: BD Signing time: Sun 20 Sep 2026 17:08:12 +0000 Manifest this update: Sun 20 Sep 2026 17:03:12 +0000 Manifest next update: Mon 21 Sep 2026 18:32:12 +0000 Files and hashes: 1: A5251C27E1AF09AE2F28618250807EA4D573694B.crl (hash: vTJNZzg33vvHHFre3GHWcVbq97ma87KgkI+j63eGM7I=) 2: 3135372e31352e3131362e302f32332d3234203d3e20313532333732.roa (hash: 8PPdaCX6mIjApYArjunSo3wNOsnTma7JcAZ0c6t+SzU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.crl rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A5251C27E1AF09AE2F28618250807EA4D573694B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:50:df:a3:6f:96:48:b9:80:93:f7:c4:96:c9:d4:41:c0:44:da:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5251C27E1AF09AE2F28618250807EA4D573694B Validity Not Before: Sep 20 17:03:12 2026 GMT Not After : Sep 21 18:32:12 2026 GMT Subject: CN=A55E43D0D1ECB15CA0FA658BF5D64B2A1F5E6EA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:30:0a:84:9f:15:c0:f2:17:af:25:12:65:1c: 7b:15:7b:90:cc:3f:5b:f1:11:e7:2c:96:5b:c4:53: 6c:41:97:92:f4:03:9e:a3:80:ac:62:7a:a4:08:52: 42:10:9a:54:a0:5c:00:cd:b0:92:54:c9:e4:1f:71: 97:32:f6:17:9e:56:7a:ea:d4:85:8f:50:20:8a:90: 33:66:a1:92:73:52:a5:5d:d4:12:40:a6:ea:0f:c8: 81:69:e3:b4:60:74:40:7a:a5:c9:11:8c:e3:bb:43: ec:4c:c4:54:e3:38:83:a0:97:f7:25:c3:65:1e:fd: d5:72:11:41:0b:7d:d7:ca:dc:e9:25:ee:1f:43:38: 18:00:f5:84:35:af:f2:3d:a2:65:10:92:b3:d1:09: 50:89:25:8d:eb:6c:fe:18:57:da:63:a2:19:19:1d: 30:29:18:72:a9:33:04:f1:6c:5c:12:8c:45:f8:6b: 7f:77:ae:52:d5:b5:01:f8:27:27:1f:22:74:e8:08: 2a:e8:bc:a9:4b:f7:79:41:38:95:38:3b:00:14:d5: c3:80:40:30:d2:d8:fb:60:ba:4d:39:18:2e:b7:a4: f3:94:b6:51:91:f9:5a:24:a4:23:77:32:5d:0f:e3: 0c:2e:0b:3d:ca:d2:90:55:77:d9:aa:17:fa:fb:22: 0a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:5E:43:D0:D1:EC:B1:5C:A0:FA:65:8B:F5:D6:4B:2A:1F:5E:6E:A4 X509v3 Authority Key Identifier: keyid:A5:25:1C:27:E1:AF:09:AE:2F:28:61:82:50:80:7E:A4:D5:73:69:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A5251C27E1AF09AE2F28618250807EA4D573694B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:66:f2:f4:9c:f8:e0:2d:b0:ec:b0:ad:5d:3b:a7:a3:3c:9e: 6b:3f:37:fc:40:b8:18:10:31:fa:d1:3c:ee:9b:10:fe:57:06: 3d:3c:a7:6c:fc:d1:ef:83:5d:2e:0a:8c:81:70:26:47:b1:37: 9a:a8:6f:ef:53:8a:a9:be:02:60:4a:0b:fc:dc:0c:b4:0d:ef: 93:86:ca:fd:29:8a:7b:b2:f0:8f:e8:ea:7d:7f:b4:5b:a2:1e: 7c:89:f2:d5:f8:dd:1a:de:97:68:27:f6:48:32:40:93:c9:09: fb:d0:3b:dd:fa:3e:4d:35:52:97:16:9a:18:7b:3c:e8:f6:8e: 5c:a6:db:dd:f0:e2:a6:8d:8d:b6:7e:f1:b8:86:8d:d0:dd:c8: e5:87:b1:f2:2b:cf:fc:68:4e:8d:a7:b7:e6:7b:d5:65:48:0c: a8:6c:54:a4:94:23:84:c7:ff:5f:27:56:2c:c3:42:e0:c5:98: c6:75:3a:c9:df:39:a3:1f:bc:c6:48:c4:1b:1f:68:9f:2a:aa: 1e:94:42:57:85:08:5e:f0:bd:03:58:94:f5:76:63:7c:ac:4f: e8:eb:37:aa:87:23:a4:46:15:39:1b:09:26:92:62:83:55:c1: 0c:00:e5:8a:b3:57:23:dc:0b:7a:d8:56:52:9f:bc:18:86:7b: 4e:6e:cd:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVVDfo2+WSLmAk/fElsnUQcBE2mgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUyNTFDMjdFMUFGMDlBRTJGMjg2MTgyNTA4MDdFQTRE NTczNjk0QjAeFw0yNjA5MjAxNzAzMTJaFw0yNjA5MjExODMyMTJaMDMxMTAvBgNV BAMTKEE1NUU0M0QwRDFFQ0IxNUNBMEZBNjU4QkY1RDY0QjJBMUY1RTZFQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuMAqEnxXA8hevJRJlHHsVe5DM P1vxEecsllvEU2xBl5L0A56jgKxieqQIUkIQmlSgXADNsJJUyeQfcZcy9heeVnrq 1IWPUCCKkDNmoZJzUqVd1BJApuoPyIFp47RgdEB6pckRjOO7Q+xMxFTjOIOgl/cl w2Ue/dVyEUELfdfK3Okl7h9DOBgA9YQ1r/I9omUQkrPRCVCJJY3rbP4YV9pjohkZ HTApGHKpMwTxbFwSjEX4a393rlLVtQH4JycfInToCCrovKlL93lBOJU4OwAU1cOA QDDS2Ptguk05GC63pPOUtlGR+VokpCN3Ml0P4wwuCz3K0pBVd9mqF/r7IgqTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpV5D0NHssVyg+mWL9dZLKh9ebqQwHwYDVR0j BBgwFoAUpSUcJ+GvCa4vKGGCUIB+pNVzaUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzQ3ZjZjZjYtZGQyYi00ODIzLWIyNjQtZTJiZjRmMzBhYmZlLzAvQTUyNTFDMjdF MUFGMDlBRTJGMjg2MTgyNTA4MDdFQTRENTczNjk0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BNTI1MUMyN0UxQUYwOUFFMkYyODYxODI1MDgwN0VBNEQ1NzM2 OTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzQ3ZjZjZjYtZGQyYi00ODIzLWIy NjQtZTJiZjRmMzBhYmZlLzAvQTUyNTFDMjdFMUFGMDlBRTJGMjg2MTgyNTA4MDdF QTRENTczNjk0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINm8vSc+OAtsOywrV07p6M8nms/N/xAuBgQ MfrRPO6bEP5XBj08p2z80e+DXS4KjIFwJkexN5qob+9Tiqm+AmBKC/zcDLQN75OG yv0pinuy8I/o6n1/tFuiHnyJ8tX43Rrel2gn9kgyQJPJCfvQO936Pk01UpcWmhh7 POj2jlym293w4qaNjbZ+8biGjdDdyOWHsfIrz/xoTo2nt+Z71WVIDKhsVKSUI4TH /18nVizDQuDFmMZ1OsnfOaMfvMZIxBsfaJ8qqh6UQleFCF7wvQNYlPV2Y3ysT+jr N6qHI6RGFTkbCSaSYoNVwQwA5YqzVyPcC3rYVlKfvBiGe05uzdU= -----END CERTIFICATE-----Generated at Mon Sep 21 06:53:53 2026 by rpki-client