$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.mft File: 5935015AB8D2AA07565ACB7B918A50D49090AA26.mft (raw, json) Hash identifier: jUoq2QDvmJA9HZCcA3vz2zt/K2FzHwJ8sp9ORJjmgeE= Subject key identifier: BD:6B:33:DB:E2:83:60:E2:1D:16:3E:F1:D0:B8:87:91:99:28:BB:23 Authority key identifier: 59:35:01:5A:B8:D2:AA:07:56:5A:CB:7B:91:8A:50:D4:90:90:AA:26 Certificate issuer: /CN=5935015AB8D2AA07565ACB7B918A50D49090AA26 Certificate serial: 7E71C9AAFE2A244D57077E72A5102AA3F2F7012C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5935015AB8D2AA07565ACB7B918A50D49090AA26.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 04:11:42 +0000 Manifest this update: Tue 22 Sep 2026 04:06:42 +0000 Manifest next update: Wed 23 Sep 2026 04:23:42 +0000 Files and hashes: 1: 3130332e3233392e34312e302f32342d3234203d3e20313531353331.roa (hash: YukTsqh5CPIPhkM3TqJo0K1IkyqlUpFEdp2Xtp+n8JI=) 2: 5935015AB8D2AA07565ACB7B918A50D49090AA26.crl (hash: O9GdvYKrEkfj4OvTXE6utKpr+TJefLyUmD/EHyQGMpA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.crl rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5935015AB8D2AA07565ACB7B918A50D49090AA26.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 04:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:71:c9:aa:fe:2a:24:4d:57:07:7e:72:a5:10:2a:a3:f2:f7:01:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5935015AB8D2AA07565ACB7B918A50D49090AA26 Validity Not Before: Sep 22 04:06:42 2026 GMT Not After : Sep 23 04:23:42 2026 GMT Subject: CN=BD6B33DBE28360E21D163EF1D0B887919928BB23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2f:1e:39:ab:4e:a1:bd:28:74:e4:78:5d:42: c4:79:8c:bd:47:4b:92:3c:93:4e:b7:a4:ec:15:e6: b3:37:7f:ef:c7:ab:18:1f:d5:63:27:2e:0c:5e:1c: 53:39:ee:c0:70:b3:51:7d:fe:5a:3c:98:af:7b:35: ce:c7:d5:a0:d6:44:e7:1c:ad:f8:32:91:4f:a7:2d: c6:67:b0:16:2f:b1:2e:ea:68:e3:55:fd:97:6b:4c: 19:6b:41:87:58:34:10:25:5f:2b:2d:11:c1:16:c2: 85:29:72:73:b5:60:42:7d:c9:5c:5f:10:62:05:b8: ff:a4:7f:40:7f:52:25:7e:cc:a4:d8:ce:05:07:9a: 37:95:2b:8f:0f:81:a0:67:9f:5a:2c:d4:c1:d4:7c: ee:98:bd:c5:7a:b5:c2:31:76:70:c0:fa:93:06:c3: ec:6d:ce:2f:5d:33:e7:1d:79:02:ec:52:cb:0a:47: d7:84:a0:42:e9:64:5e:66:a6:d3:7b:63:c3:97:9b: 67:57:60:a3:03:83:68:b2:b5:9a:e1:f3:c0:45:92: c8:46:de:c8:52:e1:44:e0:5c:f1:9e:d2:84:74:c2: a7:63:f2:62:5b:ea:d3:6b:06:09:19:b1:e0:b5:ae: 74:73:f0:0b:a9:d1:cf:56:bf:33:7a:b1:a1:b1:77: 38:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6B:33:DB:E2:83:60:E2:1D:16:3E:F1:D0:B8:87:91:99:28:BB:23 X509v3 Authority Key Identifier: keyid:59:35:01:5A:B8:D2:AA:07:56:5A:CB:7B:91:8A:50:D4:90:90:AA:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5935015AB8D2AA07565ACB7B918A50D49090AA26.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:01:c9:75:02:07:c3:8b:b9:f7:74:f4:32:c7:c3:ae:35:59: 2a:b3:62:7f:1c:96:0a:70:1b:d9:79:a5:68:39:4c:99:5c:dd: 33:52:4a:04:1e:0f:d1:54:bf:29:b6:13:d1:c9:10:54:b2:ca: 40:39:3d:28:56:7b:5c:7d:08:ed:cb:e0:f6:34:6c:fb:0f:75: 87:5e:53:bc:80:c9:06:82:fa:af:e3:2d:12:dd:78:bf:96:5e: a4:82:fd:9d:a3:25:8e:6e:90:cc:87:50:07:45:a3:2f:16:5e: 93:c6:a0:87:e2:16:58:0d:fa:a2:50:b2:f3:87:dc:01:7b:cf: 13:16:00:1e:37:1c:01:14:19:ee:fa:ea:8d:e8:07:1d:c6:75: 70:87:d7:0c:a7:d1:ff:3d:fc:39:5f:5d:3c:4e:80:8c:76:6f: 1b:a9:e3:51:1c:17:71:34:d5:43:fd:2a:c8:bf:a4:32:59:aa: 9c:fd:f8:48:ab:0b:bf:c0:9d:f3:a0:df:e7:22:80:1b:cb:5e: 32:b4:d2:dd:c9:19:43:ef:c2:aa:58:cc:37:5d:5f:09:1e:49: 16:24:6b:c4:49:d3:72:9f:51:f1:3a:d7:f4:b8:0f:9c:da:80: c4:d5:99:24:60:8b:ff:90:4b:7b:53:99:3e:b2:3b:bc:59:b3: 95:a9:3f:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfnHJqv4qJE1XB35ypRAqo/L3ASwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTkzNTAxNUFCOEQyQUEwNzU2NUFDQjdCOTE4QTUwRDQ5 MDkwQUEyNjAeFw0yNjA5MjIwNDA2NDJaFw0yNjA5MjMwNDIzNDJaMDMxMTAvBgNV BAMTKEJENkIzM0RCRTI4MzYwRTIxRDE2M0VGMUQwQjg4NzkxOTkyOEJCMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKLx45q06hvSh05HhdQsR5jL1H S5I8k063pOwV5rM3f+/Hqxgf1WMnLgxeHFM57sBws1F9/lo8mK97Nc7H1aDWROcc rfgykU+nLcZnsBYvsS7qaONV/ZdrTBlrQYdYNBAlXystEcEWwoUpcnO1YEJ9yVxf EGIFuP+kf0B/UiV+zKTYzgUHmjeVK48PgaBnn1os1MHUfO6YvcV6tcIxdnDA+pMG w+xtzi9dM+cdeQLsUssKR9eEoELpZF5mptN7Y8OXm2dXYKMDg2iytZrh88BFkshG 3shS4UTgXPGe0oR0wqdj8mJb6tNrBgkZseC1rnRz8Aup0c9WvzN6saGxdzjrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvWsz2+KDYOIdFj7x0LiHkZkouyMwHwYDVR0j BBgwFoAUWTUBWrjSqgdWWst7kYpQ1JCQqiYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDRiZmM1YzMtYzM5Yy00NWVkLWFlODctMzg0YTZkY2I3OTM4LzAvNTkzNTAxNUFC OEQyQUEwNzU2NUFDQjdCOTE4QTUwRDQ5MDkwQUEyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OTM1MDE1QUI4RDJBQTA3NTY1QUNCN0I5MThBNTBENDkwOTBB QTI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDRiZmM1YzMtYzM5Yy00NWVkLWFl ODctMzg0YTZkY2I3OTM4LzAvNTkzNTAxNUFCOEQyQUEwNzU2NUFDQjdCOTE4QTUw RDQ5MDkwQUEyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsByXUCB8OLufd09DLHw641WSqzYn8clgpw G9l5pWg5TJlc3TNSSgQeD9FUvym2E9HJEFSyykA5PShWe1x9CO3L4PY0bPsPdYde U7yAyQaC+q/jLRLdeL+WXqSC/Z2jJY5ukMyHUAdFoy8WXpPGoIfiFlgN+qJQsvOH 3AF7zxMWAB43HAEUGe766o3oBx3GdXCH1wyn0f89/DlfXTxOgIx2bxup41EcF3E0 1UP9Ksi/pDJZqpz9+EirC7/AnfOg3+cigBvLXjK00t3JGUPvwqpYzDddXwkeSRYk a8RJ03KfUfE61/S4D5zagMTVmSRgi/+QS3tTmT6yO7xZs5WpPwE= -----END CERTIFICATE-----Generated at Tue Sep 22 20:18:01 2026 by rpki-client