$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.mft File: 5137BC6C642818ED44761CE24BD59136B86E9502.mft (raw, json) Hash identifier: 4rQfBY720ck8ndtxXdFYVSHLuQI9rj3ZQI/G9gx66rk= Subject key identifier: 66:CA:A6:30:78:28:78:64:4B:64:91:C6:60:3B:90:7E:F5:1E:3A:D9 Authority key identifier: 51:37:BC:6C:64:28:18:ED:44:76:1C:E2:4B:D5:91:36:B8:6E:95:02 Certificate issuer: /CN=5137BC6C642818ED44761CE24BD59136B86E9502 Certificate serial: 7B74387DBA9702A6FF3A36991D093676A345B066 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5137BC6C642818ED44761CE24BD59136B86E9502.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.mft Manifest number: BD Signing time: Sun 20 Sep 2026 08:48:01 +0000 Manifest this update: Sun 20 Sep 2026 08:43:01 +0000 Manifest next update: Mon 21 Sep 2026 10:17:01 +0000 Files and hashes: 1: 323430333a393530303a3a2f33322d3336203d3e2039363537.roa (hash: Bjupm6rpCAaMTeTPZ2eGuF40Rt3f9ZMn/qqAW7B+FsQ=) 2: 3230322e3133382e3232342e302f31392d3234203d3e2039363537.roa (hash: rnnGREcPzTzqU+DHtFpFgNVjo93sVnYIgoX5i3YQ96Y=) 3: 5137BC6C642818ED44761CE24BD59136B86E9502.crl (hash: x7JiNrnSmivD9UMP9UIPU6Ugr0UT/ZTAhK9Ei5w8aOY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.crl rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5137BC6C642818ED44761CE24BD59136B86E9502.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 10:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:74:38:7d:ba:97:02:a6:ff:3a:36:99:1d:09:36:76:a3:45:b0:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5137BC6C642818ED44761CE24BD59136B86E9502 Validity Not Before: Sep 20 08:43:01 2026 GMT Not After : Sep 21 10:17:01 2026 GMT Subject: CN=66CAA630782878644B6491C6603B907EF51E3AD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c9:c0:8e:93:14:e6:3b:3c:bf:f0:3c:fe:76: 14:38:e7:59:fc:10:a5:1d:3f:69:95:21:ae:17:69: 10:5d:c6:de:7a:c7:41:9e:d0:83:08:07:dc:f9:f2: aa:d8:85:e2:11:84:d4:0d:e5:67:b1:01:cd:ab:47: fb:0d:c0:fe:ed:ae:84:25:e4:3c:cc:85:6d:16:9b: 51:c2:bb:6e:31:2c:c3:6f:93:56:f5:41:36:e8:1e: c8:c4:55:c4:dd:12:f5:d4:22:ed:0f:46:fb:8c:4e: d7:4a:e3:b9:80:45:5d:17:4c:e2:2b:b4:be:e8:09: 6e:97:e4:a4:c9:6b:cb:86:94:6d:5e:b1:3a:62:60: 5e:67:f4:1a:ec:03:4e:fb:a4:3b:e7:fa:7a:79:37: cd:b0:6d:5b:bb:50:4f:2e:62:51:51:75:72:e9:33: 21:8a:1f:7d:7e:af:20:7b:48:4f:a2:68:93:59:4e: f9:6b:51:54:8c:84:af:78:a1:de:a5:f3:b8:23:97: 53:6e:37:3b:fa:7b:14:6b:d8:b1:5f:fd:f5:8e:85: d8:97:93:63:8d:67:6e:fd:50:81:66:9c:a7:83:f4: 2f:ed:38:f6:c3:18:7e:4c:e1:d0:27:c5:2e:a9:44: ce:74:00:68:e0:60:ee:fb:bb:3d:f7:36:03:c1:6a: b5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CA:A6:30:78:28:78:64:4B:64:91:C6:60:3B:90:7E:F5:1E:3A:D9 X509v3 Authority Key Identifier: keyid:51:37:BC:6C:64:28:18:ED:44:76:1C:E2:4B:D5:91:36:B8:6E:95:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5137BC6C642818ED44761CE24BD59136B86E9502.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:9d:08:38:4a:65:ae:f9:e1:ad:e9:64:3b:8d:b3:6f:a4:6c: 04:44:9e:03:25:ca:d1:1b:22:9b:0e:1d:73:e8:56:51:cf:60: 3a:0b:2d:40:37:a6:77:c7:e6:fa:6d:3a:e2:78:ae:1d:01:e1: 6c:c9:93:a5:c8:1a:8a:55:80:83:c8:b6:92:57:19:66:5a:7c: af:80:6d:4c:f3:b0:ee:1d:88:db:35:f1:32:3a:e2:62:55:51: ce:ef:2e:47:b0:af:82:e1:57:47:6f:e3:84:eb:5f:8d:e7:a1: 1d:87:72:cd:f6:63:b2:9b:fb:ce:f1:b9:1d:e8:86:49:d5:04: d1:7c:f4:62:52:82:72:f2:af:34:ee:57:1a:53:fc:65:b1:d2: 3e:6b:53:d1:e5:7d:df:c4:e0:f8:49:5f:11:bd:19:c5:9f:34: ad:f7:61:f1:13:8f:2d:0a:e2:2f:3a:76:c6:84:f3:c4:5b:f0: d8:63:27:ed:e0:8e:51:86:d7:9b:5d:92:3d:e5:79:35:f7:7c: 73:3c:c2:e7:1b:23:d0:8a:df:9b:73:aa:4d:d5:6c:22:be:3e: 82:62:c5:7a:7b:7b:a3:05:1f:9e:cd:e0:2a:54:f9:7f:c0:ae: 7e:fb:5e:7f:c8:18:cc:53:3e:d7:de:d6:9c:89:07:fd:29:0b: 48:04:a9:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe3Q4fbqXAqb/OjaZHQk2dqNFsGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEzN0JDNkM2NDI4MThFRDQ0NzYxQ0UyNEJENTkxMzZC ODZFOTUwMjAeFw0yNjA5MjAwODQzMDFaFw0yNjA5MjExMDE3MDFaMDMxMTAvBgNV BAMTKDY2Q0FBNjMwNzgyODc4NjQ0QjY0OTFDNjYwM0I5MDdFRjUxRTNBRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxycCOkxTmOzy/8Dz+dhQ451n8 EKUdP2mVIa4XaRBdxt56x0Ge0IMIB9z58qrYheIRhNQN5WexAc2rR/sNwP7troQl 5DzMhW0Wm1HCu24xLMNvk1b1QTboHsjEVcTdEvXUIu0PRvuMTtdK47mARV0XTOIr tL7oCW6X5KTJa8uGlG1esTpiYF5n9BrsA077pDvn+np5N82wbVu7UE8uYlFRdXLp MyGKH31+ryB7SE+iaJNZTvlrUVSMhK94od6l87gjl1NuNzv6exRr2LFf/fWOhdiX k2ONZ279UIFmnKeD9C/tOPbDGH5M4dAnxS6pRM50AGjgYO77uz33NgPBarXnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZsqmMHgoeGRLZJHGYDuQfvUeOtkwHwYDVR0j BBgwFoAUUTe8bGQoGO1EdhziS9WRNrhulQIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzhmNmJlYjgtZTRlOC00ZTM5LTgyNzUtMWM2ZDc3YzNlZWY4LzAvNTEzN0JDNkM2 NDI4MThFRDQ0NzYxQ0UyNEJENTkxMzZCODZFOTUwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MTM3QkM2QzY0MjgxOEVENDQ3NjFDRTI0QkQ1OTEzNkI4NkU5 NTAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzhmNmJlYjgtZTRlOC00ZTM5LTgy NzUtMWM2ZDc3YzNlZWY4LzAvNTEzN0JDNkM2NDI4MThFRDQ0NzYxQ0UyNEJENTkx MzZCODZFOTUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKdCDhKZa754a3pZDuNs2+kbAREngMlytEb IpsOHXPoVlHPYDoLLUA3pnfH5vptOuJ4rh0B4WzJk6XIGopVgIPItpJXGWZafK+A bUzzsO4diNs18TI64mJVUc7vLkewr4LhV0dv44TrX43noR2Hcs32Y7Kb+87xuR3o hknVBNF89GJSgnLyrzTuVxpT/GWx0j5rU9Hlfd/E4PhJXxG9GcWfNK33YfETjy0K 4i86dsaE88Rb8NhjJ+3gjlGG15tdkj3leTX3fHM8wucbI9CK35tzqk3VbCK+PoJi xXp7e6MFH57N4CpU+X/Arn77Xn/IGMxTPtfe1pyJB/0pC0gEqZ4= -----END CERTIFICATE-----Generated at Sun Sep 20 20:06:55 2026 by rpki-client