$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft File: 5109EC0B3BA28731E9E261F3B59F3600B563E644.mft (raw, json) Hash identifier: 2+15V9/XiVPnV7ZfW/Jf5iq301i2G3lESlNwMQDMbzo= Subject key identifier: 74:83:2A:DE:D9:33:E9:49:0B:49:F8:92:0A:A7:10:53:FB:94:48:4E Authority key identifier: 51:09:EC:0B:3B:A2:87:31:E9:E2:61:F3:B5:9F:36:00:B5:63:E6:44 Certificate issuer: /CN=5109EC0B3BA28731E9E261F3B59F3600B563E644 Certificate serial: 751A09685A8B7ECA1EBF28CDB0881CFA1694555F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5109EC0B3BA28731E9E261F3B59F3600B563E644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft Manifest number: C1 Signing time: Tue 22 Sep 2026 05:43:32 +0000 Manifest this update: Tue 22 Sep 2026 05:38:32 +0000 Manifest next update: Wed 23 Sep 2026 09:10:32 +0000 Files and hashes: 1: 3130332e3131372e33312e302f32342d3234203d3e2039333431.roa (hash: MF1opaQfJw+Iei/Le09BzIXkrXsDLiX2XTUMp350q1Q=) 2: 5109EC0B3BA28731E9E261F3B59F3600B563E644.crl (hash: eYOowe8Z/BGuFaEOXmoKhTTHMYH0sPr2Q05clZtC/kk=) 3: 3130332e3131372e33302e302f32332d3233203d3e2039333431.roa (hash: WbqdW7MhiN2iDSZWaMRymz0suZjkKuhQk8kC3475/Ds=) 4: 3130332e3131372e33302e302f32342d3234203d3e2039333431.roa (hash: Sxg6YyOUpBblg3g3D4oNcKxKaQWWwQAvP3gO95G7uko=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.crl rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5109EC0B3BA28731E9E261F3B59F3600B563E644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 09:10:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:1a:09:68:5a:8b:7e:ca:1e:bf:28:cd:b0:88:1c:fa:16:94:55:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5109EC0B3BA28731E9E261F3B59F3600B563E644 Validity Not Before: Sep 22 05:38:32 2026 GMT Not After : Sep 23 09:10:32 2026 GMT Subject: CN=74832ADED933E9490B49F8920AA71053FB94484E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0f:cf:89:63:2a:78:b8:0d:bd:a9:39:74:33: 5b:ff:dc:1a:6c:09:0c:3b:fc:9c:0d:9a:eb:34:fa: 49:0e:1e:e2:92:ed:dd:1f:4d:25:03:88:f9:6d:3d: d9:f1:6e:97:30:08:af:69:a4:b3:68:56:1a:6e:5d: cc:8d:f6:86:d6:4e:9c:25:7a:dd:94:ee:f0:ce:52: 4e:b8:e9:31:ef:75:9a:59:0f:ec:45:30:76:a4:74: fd:b4:8d:03:7c:8f:d1:44:0d:a3:8e:0f:39:a8:57: 6d:f0:d5:94:b5:08:fe:a5:c3:f3:25:19:36:88:dc: e9:31:b1:99:55:56:32:73:12:25:fa:e2:8a:5b:4e: 77:b0:a6:5b:50:37:49:3d:e0:1d:7d:87:01:8c:dc: d0:b5:17:ce:2a:1f:14:c1:15:b6:ce:a7:24:46:85: 5c:7d:46:31:45:ba:6a:a9:9f:26:99:23:96:88:9d: 3f:a8:e7:b9:81:01:3a:05:7f:c7:68:84:d7:f3:c7: 95:c0:6d:da:20:8f:b5:ab:77:a7:b8:0b:f1:5a:f5: f9:3d:47:20:88:48:32:7a:3c:84:4c:d5:c1:64:25: a2:35:31:5c:3e:df:e4:5b:cc:9f:b4:43:3b:5d:fe: eb:07:1c:a2:8f:9f:9b:47:7b:f0:49:6d:43:3d:81: b0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:83:2A:DE:D9:33:E9:49:0B:49:F8:92:0A:A7:10:53:FB:94:48:4E X509v3 Authority Key Identifier: keyid:51:09:EC:0B:3B:A2:87:31:E9:E2:61:F3:B5:9F:36:00:B5:63:E6:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5109EC0B3BA28731E9E261F3B59F3600B563E644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:ba:f6:93:c2:11:a2:a5:1a:7c:59:b3:12:80:09:33:ca:07: 96:dc:08:bb:5d:47:59:ea:8e:c1:53:9c:14:18:fb:a3:3b:4a: 06:6b:d4:db:59:4b:36:a5:b9:bc:b0:27:f8:73:f8:25:31:1f: 84:f3:57:6d:26:b0:c9:84:11:7d:d0:57:5a:90:c2:86:2f:5a: f4:aa:0b:94:3a:fc:37:f8:82:a7:a7:6c:0a:e5:b5:87:f4:02: ce:2e:60:ab:82:cf:80:78:da:91:dd:c3:4a:93:30:24:f5:06: 4e:af:7d:05:0f:08:f2:c1:65:e5:9d:04:23:3e:69:2b:0a:ec: d3:fc:c8:22:cf:87:32:46:a3:57:bc:b2:23:02:bc:4e:f9:08: f5:fa:27:21:ce:57:14:37:9b:94:83:8e:17:1e:42:39:30:54: 0a:6f:68:a4:3a:2f:6e:b4:77:ca:b4:a7:9d:83:0a:f5:8a:ad: e7:da:e6:3c:8d:91:bc:50:b5:bf:b5:83:4e:d7:98:c7:4f:2e: e5:ec:2f:68:99:3b:bb:00:ff:12:62:d4:cc:9a:67:49:19:19: bd:21:2d:84:bb:fd:9c:eb:df:23:1e:df:b2:9f:a2:6d:17:df: ba:52:63:52:35:1c:f4:11:fa:48:a7:1b:68:22:18:e1:c5:db: a0:41:a9:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdRoJaFqLfsoevyjNsIgc+haUVV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEwOUVDMEIzQkEyODczMUU5RTI2MUYzQjU5RjM2MDBC NTYzRTY0NDAeFw0yNjA5MjIwNTM4MzJaFw0yNjA5MjMwOTEwMzJaMDMxMTAvBgNV BAMTKDc0ODMyQURFRDkzM0U5NDkwQjQ5Rjg5MjBBQTcxMDUzRkI5NDQ4NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHD8+JYyp4uA29qTl0M1v/3Bps CQw7/JwNmus0+kkOHuKS7d0fTSUDiPltPdnxbpcwCK9ppLNoVhpuXcyN9obWTpwl et2U7vDOUk646THvdZpZD+xFMHakdP20jQN8j9FEDaOODzmoV23w1ZS1CP6lw/Ml GTaI3OkxsZlVVjJzEiX64opbTnewpltQN0k94B19hwGM3NC1F84qHxTBFbbOpyRG hVx9RjFFumqpnyaZI5aInT+o57mBAToFf8dohNfzx5XAbdogj7Wrd6e4C/Fa9fk9 RyCISDJ6PIRM1cFkJaI1MVw+3+RbzJ+0Qztd/usHHKKPn5tHe/BJbUM9gbCpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdIMq3tkz6UkLSfiSCqcQU/uUSE4wHwYDVR0j BBgwFoAUUQnsCzuihzHp4mHztZ82ALVj5kQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzliM2JiMzQtMTVlMi00NDg3LWI1MjctNmU3NTEyODZjZTdkLzAvNTEwOUVDMEIz QkEyODczMUU5RTI2MUYzQjU5RjM2MDBCNTYzRTY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MTA5RUMwQjNCQTI4NzMxRTlFMjYxRjNCNTlGMzYwMEI1NjNF NjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzliM2JiMzQtMTVlMi00NDg3LWI1 MjctNmU3NTEyODZjZTdkLzAvNTEwOUVDMEIzQkEyODczMUU5RTI2MUYzQjU5RjM2 MDBCNTYzRTY0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKW69pPCEaKlGnxZsxKACTPKB5bcCLtdR1nq jsFTnBQY+6M7SgZr1NtZSzalubywJ/hz+CUxH4TzV20msMmEEX3QV1qQwoYvWvSq C5Q6/Df4gqenbArltYf0As4uYKuCz4B42pHdw0qTMCT1Bk6vfQUPCPLBZeWdBCM+ aSsK7NP8yCLPhzJGo1e8siMCvE75CPX6JyHOVxQ3m5SDjhceQjkwVApvaKQ6L260 d8q0p52DCvWKrefa5jyNkbxQtb+1g07XmMdPLuXsL2iZO7sA/xJi1MyaZ0kZGb0h LYS7/Zzr3yMe37Kfom0X37pSY1I1HPQR+kinG2giGOHF26BBqa4= -----END CERTIFICATE-----Generated at Tue Sep 22 16:31:21 2026 by rpki-client