$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft File: 5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft (raw, json) Hash identifier: GCMfvuLThaij47O48Wdebwgl5KJ7Puhz0yfHnj+IVug= Subject key identifier: 85:11:9A:02:7F:15:08:DD:14:1E:B2:04:A3:9F:0A:70:EF:C9:FB:A3 Authority key identifier: 5F:64:BD:BF:1F:5E:F4:64:EE:DA:DC:0C:7E:E7:F2:53:77:E7:9D:58 Certificate issuer: /CN=5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58 Certificate serial: 2E6129D2952B50297D160596D6B18D87F2498318 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft Manifest number: BE Signing time: Mon 21 Sep 2026 06:34:46 +0000 Manifest this update: Mon 21 Sep 2026 06:29:46 +0000 Manifest next update: Tue 22 Sep 2026 09:17:46 +0000 Files and hashes: 1: 3130332e3136392e3232372e302f32342d3234203d3e20313432333633.roa (hash: 7jJh3/VcK6Y+8JbMHzIyFhICT0ZmzdRr0l5g6HYzQ4U=) 2: 5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.crl (hash: zk4j4JlBW3VB6bGficmWkcBYI9v8XMmQFlax91hjmmM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.crl rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:61:29:d2:95:2b:50:29:7d:16:05:96:d6:b1:8d:87:f2:49:83:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58 Validity Not Before: Sep 21 06:29:46 2026 GMT Not After : Sep 22 09:17:46 2026 GMT Subject: CN=85119A027F1508DD141EB204A39F0A70EFC9FBA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1c:cb:a5:b8:95:bd:8e:38:e1:96:8d:82:12: 52:0a:47:d3:f1:b6:71:9b:67:5e:bb:c3:6c:6e:d2: cf:fa:f7:25:cc:5d:35:27:4c:c2:4f:66:b2:59:da: af:9e:67:70:1c:98:28:44:c7:3f:89:85:b7:05:da: 99:9e:d6:aa:3e:4a:30:ba:dd:8a:af:b3:7c:fe:4f: 83:81:8c:35:6d:0a:8e:6b:7c:42:ec:11:bb:b6:e9: 35:d9:e1:80:18:4a:7a:38:3e:55:5f:21:53:38:43: cc:f5:05:a6:97:83:0c:fb:76:36:fc:b8:a1:a5:73: 75:fa:f8:89:b9:17:77:04:f8:ce:11:05:d6:46:25: 54:9a:10:fb:7c:33:08:0f:84:2c:99:56:4a:5d:d3: 82:b8:13:04:6f:54:19:96:21:1f:5e:d1:b7:78:11: 67:8d:7f:7f:f4:55:2e:dc:48:d0:f9:a0:17:ce:26: d1:4f:8f:08:0c:f0:4b:e0:a6:b8:e7:a3:ca:78:bd: fb:a0:c6:a7:a3:e2:24:4b:f1:60:cf:e3:c9:86:50: 5e:48:a1:cc:a1:ed:a6:22:ba:e3:40:75:7b:b3:02: 56:ee:e0:18:00:fb:a2:ee:a4:5b:5d:da:c5:1c:b2: 55:0b:ed:2c:f9:e8:06:9f:93:59:2b:97:7c:f1:56: 1a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:11:9A:02:7F:15:08:DD:14:1E:B2:04:A3:9F:0A:70:EF:C9:FB:A3 X509v3 Authority Key Identifier: keyid:5F:64:BD:BF:1F:5E:F4:64:EE:DA:DC:0C:7E:E7:F2:53:77:E7:9D:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:74:45:2f:15:67:5e:a1:dd:c8:a9:ed:f6:48:b3:3f:50:01: 90:ec:68:e9:31:17:65:de:6b:28:87:70:f6:2e:33:2d:bf:e0: f9:4b:b7:6d:29:1f:3d:0b:fb:52:5e:de:75:67:bf:c6:76:27: 64:a4:8f:df:6b:52:2b:f9:a2:b8:6a:13:68:27:c2:49:58:9e: cc:6f:cb:89:49:6d:cc:f8:14:f2:24:7a:57:9a:e0:04:69:01: 22:8f:a4:0b:c9:d4:cf:96:4d:37:79:53:e9:22:f6:cc:62:8e: 52:74:4c:2e:89:7b:e6:35:13:d7:e4:cb:16:fa:f7:8a:58:55: 92:16:7a:6c:01:40:18:cb:35:df:1f:20:40:2e:8d:8b:5d:f7: 37:ef:81:ae:3f:a0:0f:43:4a:ac:1c:71:c3:84:c5:be:00:f9: e9:03:a3:3d:e9:b1:4d:84:4c:f5:1f:87:4f:17:02:a8:53:ed: 68:d0:23:54:cb:49:92:41:8a:70:55:b1:b1:53:80:c4:ed:54: 2e:23:ec:25:c3:69:53:92:2b:8b:59:cb:96:fb:71:57:b1:35: 7b:24:94:ad:4c:7e:d9:9d:b6:3a:45:d0:7c:3c:1a:2c:cf:3e: 26:fa:70:6f:fb:58:f6:b0:07:6e:f4:17:46:7e:54:8c:61:18: f7:d9:60:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULmEp0pUrUCl9FgWW1rGNh/JJgxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY2NEJEQkYxRjVFRjQ2NEVFREFEQzBDN0VFN0YyNTM3 N0U3OUQ1ODAeFw0yNjA5MjEwNjI5NDZaFw0yNjA5MjIwOTE3NDZaMDMxMTAvBgNV BAMTKDg1MTE5QTAyN0YxNTA4REQxNDFFQjIwNEEzOUYwQTcwRUZDOUZCQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrHMuluJW9jjjhlo2CElIKR9Px tnGbZ167w2xu0s/69yXMXTUnTMJPZrJZ2q+eZ3AcmChExz+JhbcF2pme1qo+SjC6 3Yqvs3z+T4OBjDVtCo5rfELsEbu26TXZ4YAYSno4PlVfIVM4Q8z1BaaXgwz7djb8 uKGlc3X6+Im5F3cE+M4RBdZGJVSaEPt8MwgPhCyZVkpd04K4EwRvVBmWIR9e0bd4 EWeNf3/0VS7cSND5oBfOJtFPjwgM8Evgprjno8p4vfugxqej4iRL8WDP48mGUF5I ocyh7aYiuuNAdXuzAlbu4BgA+6LupFtd2sUcslUL7Sz56Aafk1krl3zxVhplAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhRGaAn8VCN0UHrIEo58KcO/J+6MwHwYDVR0j BBgwFoAUX2S9vx9e9GTu2twMfufyU3fnnVgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDlhZTk4MjgtMGU4Mi00NDM0LWI4ZjItMmQ4YWQ1OWNlYTg4LzAvNUY2NEJEQkYx RjVFRjQ2NEVFREFEQzBDN0VFN0YyNTM3N0U3OUQ1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RjY0QkRCRjFGNUVGNDY0RUVEQURDMEM3RUU3RjI1Mzc3RTc5 RDU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDlhZTk4MjgtMGU4Mi00NDM0LWI4 ZjItMmQ4YWQ1OWNlYTg4LzAvNUY2NEJEQkYxRjVFRjQ2NEVFREFEQzBDN0VFN0Yy NTM3N0U3OUQ1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC10RS8VZ16h3cip7fZIsz9QAZDsaOkxF2Xe ayiHcPYuMy2/4PlLt20pHz0L+1Je3nVnv8Z2J2Skj99rUiv5orhqE2gnwklYnsxv y4lJbcz4FPIkelea4ARpASKPpAvJ1M+WTTd5U+ki9sxijlJ0TC6Je+Y1E9fkyxb6 94pYVZIWemwBQBjLNd8fIEAujYtd9zfvga4/oA9DSqwcccOExb4A+ekDoz3psU2E TPUfh08XAqhT7WjQI1TLSZJBinBVsbFTgMTtVC4j7CXDaVOSK4tZy5b7cVexNXsk lK1MftmdtjpF0Hw8GizPPib6cG/7WPawB270F0Z+VIxhGPfZYMk= -----END CERTIFICATE-----Generated at Mon Sep 21 13:47:33 2026 by rpki-client