$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft File: 5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft (raw, json) Hash identifier: 3jOekWSzqRdN5kkE09FiMvGcNgHzx4twxuiNPKVaIOQ= Subject key identifier: 8E:3F:02:E6:62:37:BA:08:25:44:36:30:53:22:4E:14:25:19:23:85 Authority key identifier: 5D:10:A7:2C:87:21:CE:50:C0:93:BD:9B:5D:1A:C9:BB:6F:E9:34:95 Certificate issuer: /CN=5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495 Certificate serial: 1EDCD70A2E73D71AA47E17C0FE8C8BB14D658F1D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft Manifest number: BD Signing time: Mon 21 Sep 2026 04:11:46 +0000 Manifest this update: Mon 21 Sep 2026 04:06:46 +0000 Manifest next update: Tue 22 Sep 2026 07:08:46 +0000 Files and hashes: 1: 5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.crl (hash: +r7QIYMb/EckKa80EACIBrUyhU1nrnKOUXAT3D6OF0A=) 2: 3136302e31392e38392e302f32342d3234203d3e20313532373839.roa (hash: JniyB+kykIY2ndXJuy/YxGMo3Dbdi9UVhfqGmbiBAvY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.crl rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:dc:d7:0a:2e:73:d7:1a:a4:7e:17:c0:fe:8c:8b:b1:4d:65:8f:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495 Validity Not Before: Sep 21 04:06:46 2026 GMT Not After : Sep 22 07:08:46 2026 GMT Subject: CN=8E3F02E66237BA082544363053224E1425192385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:04:03:26:45:73:a1:ee:24:81:bb:a9:d6:cd: 79:39:d0:b5:2d:fe:ea:03:9c:8a:a7:b2:72:40:97: 40:55:5c:71:a7:7c:32:bf:35:cf:b5:c6:93:eb:27: ec:d0:0f:31:96:4e:aa:d9:2b:f1:ef:e1:6e:dd:f9: c8:69:c9:c1:b0:c3:ee:2f:54:95:44:cf:d1:47:eb: 76:c1:cb:be:ce:2b:a6:9f:8c:f9:22:fe:42:a1:14: 21:02:cc:2e:c5:36:51:02:2c:12:b5:18:7e:ff:52: db:0f:fd:28:52:ff:09:46:41:e9:c7:3c:07:82:ba: d2:8a:ab:a9:e2:a4:cd:6f:53:99:2d:21:91:3b:ba: b3:0a:93:5a:88:d0:26:2d:e6:65:d1:9f:db:ec:03: 64:29:9d:7c:73:ea:0e:62:24:59:3b:ed:6b:06:38: be:e8:37:4e:e8:75:ad:36:1f:69:68:bc:58:2b:f6: cf:94:65:48:60:fb:75:96:71:f5:b9:0a:c7:24:0a: a0:32:e0:e1:d9:6d:e4:73:0c:41:f0:b8:c9:59:9b: 82:70:ff:ee:de:29:92:40:e8:53:fb:03:86:a9:38: 72:27:f4:55:68:1a:a8:ff:1b:9e:f7:c7:27:66:b6: 7b:47:37:0d:55:fc:ca:4f:ae:6d:73:4b:c9:3e:62: 77:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:3F:02:E6:62:37:BA:08:25:44:36:30:53:22:4E:14:25:19:23:85 X509v3 Authority Key Identifier: keyid:5D:10:A7:2C:87:21:CE:50:C0:93:BD:9B:5D:1A:C9:BB:6F:E9:34:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:0e:c5:e7:80:24:00:67:c2:c1:92:4b:e6:2a:f4:a8:c8:6c: a8:c4:c1:c7:72:20:59:54:1c:1b:4d:14:4c:ce:da:a3:06:cf: 8c:18:ea:73:48:5d:2f:1f:f1:ed:90:66:9c:b1:a0:1c:a4:ff: 16:c4:f1:a1:6d:c7:0a:7a:f3:cd:15:84:8c:1d:36:a4:71:68: ad:bf:09:8c:cc:74:b7:18:9b:7d:d9:1a:90:a7:b2:9e:a4:09: b1:67:f6:1a:d5:c1:3e:9c:0b:3e:d3:4f:70:df:34:54:82:67: fa:ae:ce:8f:eb:5d:e4:b4:a4:56:bf:76:39:0f:6f:76:8b:c2: 14:37:e2:b9:ed:5a:81:46:34:83:c3:ca:d9:ec:04:2b:92:ad: a3:b4:b6:d0:2a:f4:39:fb:5d:1f:91:e4:ff:d6:2d:df:c8:0b: f4:f5:4d:e2:ae:8a:fb:d3:59:c5:ec:a6:71:6b:c0:f0:05:0a: ad:2d:fa:3f:0a:f7:3b:b3:f6:b7:00:87:15:61:06:9e:c8:46: d9:b5:56:5f:0c:5e:d5:b7:43:86:d4:f8:90:7f:b4:2a:79:5b: 54:95:93:e7:69:25:fd:60:21:e0:7d:e6:6a:a0:e2:61:6f:a8: 10:60:a2:c9:e7:de:9b:b7:bb:0a:1b:9a:d2:be:14:b3:7f:7a: 72:c3:8e:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHtzXCi5z1xqkfhfA/oyLsU1ljx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQxMEE3MkM4NzIxQ0U1MEMwOTNCRDlCNUQxQUM5QkI2 RkU5MzQ5NTAeFw0yNjA5MjEwNDA2NDZaFw0yNjA5MjIwNzA4NDZaMDMxMTAvBgNV BAMTKDhFM0YwMkU2NjIzN0JBMDgyNTQ0MzYzMDUzMjI0RTE0MjUxOTIzODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvBAMmRXOh7iSBu6nWzXk50LUt /uoDnIqnsnJAl0BVXHGnfDK/Nc+1xpPrJ+zQDzGWTqrZK/Hv4W7d+chpycGww+4v VJVEz9FH63bBy77OK6afjPki/kKhFCECzC7FNlECLBK1GH7/UtsP/ShS/wlGQenH PAeCutKKq6nipM1vU5ktIZE7urMKk1qI0CYt5mXRn9vsA2QpnXxz6g5iJFk77WsG OL7oN07oda02H2lovFgr9s+UZUhg+3WWcfW5CsckCqAy4OHZbeRzDEHwuMlZm4Jw /+7eKZJA6FP7A4apOHIn9FVoGqj/G573xydmtntHNw1V/MpPrm1zS8k+YncfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjj8C5mI3ugglRDYwUyJOFCUZI4UwHwYDVR0j BBgwFoAUXRCnLIchzlDAk72bXRrJu2/pNJUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGRjMTAwN2QtZmQ2MS00NTQzLThmNWYtM2ZkZmZhNGIwMWU2LzAvNUQxMEE3MkM4 NzIxQ0U1MEMwOTNCRDlCNUQxQUM5QkI2RkU5MzQ5NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81RDEwQTcyQzg3MjFDRTUwQzA5M0JEOUI1RDFBQzlCQjZGRTkz NDk1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGRjMTAwN2QtZmQ2MS00NTQzLThm NWYtM2ZkZmZhNGIwMWU2LzAvNUQxMEE3MkM4NzIxQ0U1MEMwOTNCRDlCNUQxQUM5 QkI2RkU5MzQ5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAOxeeAJABnwsGSS+Yq9KjIbKjEwcdyIFlU HBtNFEzO2qMGz4wY6nNIXS8f8e2QZpyxoByk/xbE8aFtxwp6880VhIwdNqRxaK2/ CYzMdLcYm33ZGpCnsp6kCbFn9hrVwT6cCz7TT3DfNFSCZ/quzo/rXeS0pFa/djkP b3aLwhQ34rntWoFGNIPDytnsBCuSraO0ttAq9Dn7XR+R5P/WLd/IC/T1TeKuivvT WcXspnFrwPAFCq0t+j8K9zuz9rcAhxVhBp7IRtm1Vl8MXtW3Q4bU+JB/tCp5W1SV k+dpJf1gIeB95mqg4mFvqBBgosnn3pu3uwobmtK+FLN/enLDjnQ= -----END CERTIFICATE-----Generated at Mon Sep 21 20:38:23 2026 by rpki-client