$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft File: 5BD70FF0C393471CFAF795433474B327BD4832F9.mft (raw, json) Hash identifier: u7SxHkcSycvrbFSzP7B8q7awsfIQ6z1jM4TwD2cRUOo= Subject key identifier: A4:2D:F9:CF:12:3A:8A:0B:27:C0:96:BA:99:D4:FE:F8:7E:B8:30:71 Authority key identifier: 5B:D7:0F:F0:C3:93:47:1C:FA:F7:95:43:34:74:B3:27:BD:48:32:F9 Certificate issuer: /CN=5BD70FF0C393471CFAF795433474B327BD4832F9 Certificate serial: 6947DB045EA10B99E53E68FADE950BC8F73048E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BD70FF0C393471CFAF795433474B327BD4832F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft Manifest number: C3 Signing time: Wed 23 Sep 2026 10:54:38 +0000 Manifest this update: Wed 23 Sep 2026 10:49:38 +0000 Manifest next update: Thu 24 Sep 2026 12:00:38 +0000 Files and hashes: 1: 3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa (hash: bBQLsVkx2CpNTLhQIb39ezRJZR+3VFuLJFWKGpnOARA=) 2: 3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa (hash: kDdkImc9WCIWpXnaeyzXyBkOibkDgoSjiG8qhXynUZA=) 3: 5BD70FF0C393471CFAF795433474B327BD4832F9.crl (hash: h27ld0LHqys/0K5eBX65hkhNY5N7p5wmEUeZsMyBySQ=) 4: 3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa (hash: VRIdIq5putn/ECgQ5btezrubt1dqb54ZcZ8apLF1yIY=) 5: 3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa (hash: tdzqlaQf0fF4d+ZUvSQhNIWl0HYGOdoxh6aHUWDnZjg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.crl rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BD70FF0C393471CFAF795433474B327BD4832F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 12:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:47:db:04:5e:a1:0b:99:e5:3e:68:fa:de:95:0b:c8:f7:30:48:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD70FF0C393471CFAF795433474B327BD4832F9 Validity Not Before: Sep 23 10:49:38 2026 GMT Not After : Sep 24 12:00:38 2026 GMT Subject: CN=A42DF9CF123A8A0B27C096BA99D4FEF87EB83071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1c:bf:b9:ce:65:02:ef:76:86:ac:97:2e:d8: 92:cf:1c:d0:f0:2b:1e:bc:f2:a8:1b:4d:b4:46:1e: 2a:27:9b:94:db:84:2d:42:22:00:00:58:2e:f8:60: fa:23:a5:5c:f1:1e:fb:2a:5d:43:9c:da:a5:bd:7b: a4:f8:a1:c2:22:10:a8:14:4e:28:f0:20:f4:e1:ee: 97:55:11:f2:8b:ef:56:46:86:21:6f:ba:72:64:db: 83:09:6a:10:74:d8:85:6a:f7:b7:65:cf:6b:86:5e: 29:1b:08:35:a4:cf:92:a7:09:5c:ad:0c:c4:4c:2f: 0a:17:cf:26:78:84:7e:3d:07:23:2e:f8:b0:26:77: 3c:04:3a:ed:e1:60:ab:23:cb:9a:a5:b3:d4:75:a1: dd:8b:fc:9b:38:66:a2:34:be:50:59:8e:af:58:97: f3:32:38:7e:ae:92:bd:92:1e:c8:b1:53:0d:cb:03: 4d:fc:de:e5:6c:55:21:73:0a:28:bd:0d:7c:92:62: ad:b2:2b:77:db:84:9b:33:fd:6b:13:1a:53:c5:18: ad:38:99:e5:3c:02:61:0a:06:b7:b5:56:8b:39:07: 07:6e:78:33:60:7b:c9:0e:5e:3a:47:2d:d2:31:84: bd:c4:c0:f4:c1:82:22:52:c2:67:43:a5:95:d4:4e: 99:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2D:F9:CF:12:3A:8A:0B:27:C0:96:BA:99:D4:FE:F8:7E:B8:30:71 X509v3 Authority Key Identifier: keyid:5B:D7:0F:F0:C3:93:47:1C:FA:F7:95:43:34:74:B3:27:BD:48:32:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BD70FF0C393471CFAF795433474B327BD4832F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:26:15:66:d0:f0:fc:0e:8e:d8:a4:08:5c:06:b7:d9:a7:54: 41:25:d1:38:ba:32:53:b7:4a:30:de:db:4b:89:99:59:fa:7c: 94:07:aa:63:24:6a:86:5c:e4:ec:24:41:f0:c6:1c:ac:df:8f: 77:7e:36:4b:3e:06:98:7a:9a:c6:09:88:c2:1d:c0:1c:97:e3: c0:9a:de:a8:2b:30:e1:4b:12:d9:e8:33:2f:3b:2e:b5:03:cf: dc:b3:2d:55:65:fa:44:ba:fc:be:34:0a:18:75:f8:ae:51:bc: 2d:5f:1a:86:01:e2:61:d2:30:87:26:cb:ff:b9:43:cd:20:60: d4:98:5d:03:8f:84:6b:90:ff:54:9b:73:b8:95:79:9b:10:36: c9:2f:53:11:c3:e8:d2:49:fb:db:6a:34:f5:f0:e3:c0:59:33: 00:26:70:d3:c3:3b:d6:7a:97:23:7e:d4:e7:f0:58:f5:33:38: c9:b4:78:39:d2:43:55:4d:b1:3b:b4:4e:e5:d9:60:3b:19:12: 04:2f:a2:00:d9:3c:a4:4b:74:e2:63:a5:a6:73:ec:53:d6:94: 7c:ae:97:3b:8f:1c:ed:c0:3f:0c:23:e6:f8:a0:1d:83:9e:c0: 8f:58:3a:f4:ba:26:a5:06:76:0a:8d:61:97:98:fc:c3:0d:a2: 66:52:32:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaUfbBF6hC5nlPmj63pULyPcwSOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJENzBGRjBDMzkzNDcxQ0ZBRjc5NTQzMzQ3NEIzMjdC RDQ4MzJGOTAeFw0yNjA5MjMxMDQ5MzhaFw0yNjA5MjQxMjAwMzhaMDMxMTAvBgNV BAMTKEE0MkRGOUNGMTIzQThBMEIyN0MwOTZCQTk5RDRGRUY4N0VCODMwNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8HL+5zmUC73aGrJcu2JLPHNDw Kx688qgbTbRGHionm5TbhC1CIgAAWC74YPojpVzxHvsqXUOc2qW9e6T4ocIiEKgU TijwIPTh7pdVEfKL71ZGhiFvunJk24MJahB02IVq97dlz2uGXikbCDWkz5KnCVyt DMRMLwoXzyZ4hH49ByMu+LAmdzwEOu3hYKsjy5qls9R1od2L/Js4ZqI0vlBZjq9Y l/MyOH6ukr2SHsixUw3LA0383uVsVSFzCii9DXySYq2yK3fbhJsz/WsTGlPFGK04 meU8AmEKBre1Vos5BwdueDNge8kOXjpHLdIxhL3EwPTBgiJSwmdDpZXUTpk9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpC35zxI6igsnwJa6mdT++H64MHEwHwYDVR0j BBgwFoAUW9cP8MOTRxz695VDNHSzJ71IMvkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkyNGZhOWEtZTVmMy00MjY1LTllMWQtODRlNDUzNTk2MWQwLzAvNUJENzBGRjBD MzkzNDcxQ0ZBRjc5NTQzMzQ3NEIzMjdCRDQ4MzJGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QkQ3MEZGMEMzOTM0NzFDRkFGNzk1NDMzNDc0QjMyN0JENDgz MkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkyNGZhOWEtZTVmMy00MjY1LTll MWQtODRlNDUzNTk2MWQwLzAvNUJENzBGRjBDMzkzNDcxQ0ZBRjc5NTQzMzQ3NEIz MjdCRDQ4MzJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwmFWbQ8PwOjtikCFwGt9mnVEEl0Ti6MlO3 SjDe20uJmVn6fJQHqmMkaoZc5OwkQfDGHKzfj3d+Nks+Bph6msYJiMIdwByX48Ca 3qgrMOFLEtnoMy87LrUDz9yzLVVl+kS6/L40Chh1+K5RvC1fGoYB4mHSMIcmy/+5 Q80gYNSYXQOPhGuQ/1Sbc7iVeZsQNskvUxHD6NJJ+9tqNPXw48BZMwAmcNPDO9Z6 lyN+1OfwWPUzOMm0eDnSQ1VNsTu0TuXZYDsZEgQvogDZPKRLdOJjpaZz7FPWlHyu lzuPHO3APwwj5vigHYOewI9YOvS6JqUGdgqNYZeY/MMNomZSMoM= -----END CERTIFICATE-----Generated at Thu Sep 24 02:48:05 2026 by rpki-client