$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.mft File: D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.mft (raw, json) Hash identifier: k3INw1LjnKGuka/vyfVgpggcn6lRRIQH94JwGBm/2fs= Subject key identifier: 01:9B:49:7F:24:F9:45:6A:8F:95:E9:41:42:CB:9E:DB:15:87:05:77 Authority key identifier: D5:CE:8C:4E:21:EC:81:F4:95:8C:F6:07:42:0F:1E:EB:48:B2:E5:EC Certificate issuer: /CN=D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC Certificate serial: 7C0135FA4596DF7A1CA66C65CD8E338488C3768B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.mft Manifest number: BD Signing time: Sun 20 Sep 2026 21:08:06 +0000 Manifest this update: Sun 20 Sep 2026 21:03:06 +0000 Manifest next update: Tue 22 Sep 2026 00:07:06 +0000 Files and hashes: 1: D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.crl (hash: l5gF5t/cGN92moJUXSt04emildyeGN36bB5eiAOBTHo=) 2: 3130332e37392e3132382e302f32332d3234203d3e20313339393531.roa (hash: Zd8dKndrIl4VSQfqixAyA/TOWCY5DaeyRMvOby+h3uw=) 3: 3130332e37392e3132392e302f32342d3234203d3e20313339393531.roa (hash: RqUjB86YVPgt7tRWRmn7/EkRMj2UXiSSsOWSw1LcnVs=) 4: 3130332e37392e3132382e302f32342d3234203d3e20313339393531.roa (hash: c5ycRdkZmzicMcHlVxH8DNqWq6vMY1pMgkNwLRJ1u08=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.crl rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:01:35:fa:45:96:df:7a:1c:a6:6c:65:cd:8e:33:84:88:c3:76:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC Validity Not Before: Sep 20 21:03:06 2026 GMT Not After : Sep 22 00:07:06 2026 GMT Subject: CN=019B497F24F9456A8F95E94142CB9EDB15870577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a5:81:d4:4d:bd:3b:47:65:e0:f0:82:68:9f: 09:db:15:90:f5:23:1e:1c:83:dd:37:7d:0e:60:64: ba:d1:ce:b7:05:f5:9e:b5:26:06:84:26:5c:11:75: 9c:49:25:8a:65:b8:28:1d:2b:d4:f6:72:99:6e:7a: 01:8e:0a:f7:67:74:b0:de:e2:7d:1f:91:1c:0b:0b: 0c:87:95:c6:3c:d8:54:fe:88:7a:52:83:cc:17:fc: 83:06:8a:84:7c:52:56:e9:7a:a9:6d:5e:e2:6d:b8: fe:66:cb:94:e7:86:d4:9f:ff:b4:e3:b2:96:01:c2: 7a:e9:61:21:04:d7:90:aa:8d:4f:fc:31:7d:a7:e2: 71:9e:dd:ec:35:8d:f2:a8:2a:c1:e8:87:72:60:3d: d8:4d:18:6d:d8:7b:fd:de:e1:92:d7:a5:65:28:10: 2f:69:ce:6f:84:68:4d:92:35:9c:0a:84:cf:3e:0f: 0b:db:8a:aa:cd:6c:fa:51:42:3c:9f:b6:72:07:d6: 20:22:42:39:7a:f1:2b:59:77:86:4a:30:4f:be:35: e1:8f:32:09:c3:6e:ff:4c:1a:ca:d1:66:6b:07:7e: bb:99:25:72:b9:3e:f2:b5:b1:c8:d6:f0:86:d2:04: 22:b6:54:54:d4:a5:64:44:c0:d4:b4:94:23:8c:66: c9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:9B:49:7F:24:F9:45:6A:8F:95:E9:41:42:CB:9E:DB:15:87:05:77 X509v3 Authority Key Identifier: keyid:D5:CE:8C:4E:21:EC:81:F4:95:8C:F6:07:42:0F:1E:EB:48:B2:E5:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:a0:8e:82:13:60:53:ee:1e:91:55:f6:ca:b3:ab:22:e9:4a: a5:2b:97:48:14:01:96:15:61:e2:e5:40:8a:e5:33:18:85:e2: 20:b1:0d:68:03:a8:0b:a7:07:98:84:88:b7:cd:f6:d7:89:2b: 6b:c3:0f:5f:5f:d5:aa:e3:f1:69:71:55:9b:29:db:6a:96:e9: 4b:4e:34:43:31:93:67:a8:fb:34:f5:82:b8:ab:5c:5e:22:3d: b7:37:57:8f:23:42:dc:52:fc:da:f7:5c:42:48:ad:a2:18:db: d1:4b:4a:2d:4e:3b:f7:0c:9b:e8:00:5f:33:65:07:d8:2a:4d: 8d:a9:2d:49:28:a0:dd:fe:6e:6c:fe:ef:89:73:e9:e8:d9:c2: 02:7c:43:8c:3c:9f:5c:68:a0:41:36:4c:25:4c:18:6c:22:b9: 55:dc:21:15:ae:5c:9f:85:61:51:51:40:b1:6b:48:ed:24:13: 81:2a:c6:cc:ef:d6:60:01:e7:14:86:bb:83:8a:8f:b9:26:11: 54:2c:b3:85:ad:6e:48:09:8b:12:8e:30:ae:90:7d:51:1d:20: 86:0b:69:80:44:d1:82:d3:38:40:4a:2b:73:5a:a6:98:eb:50: 0e:65:60:c3:4b:91:4b:d7:0e:c4:95:e6:d2:02:4f:9e:96:ba: 0e:19:3a:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfAE1+kWW33ocpmxlzY4zhIjDdoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVDRThDNEUyMUVDODFGNDk1OENGNjA3NDIwRjFFRUI0 OEIyRTVFQzAeFw0yNjA5MjAyMTAzMDZaFw0yNjA5MjIwMDA3MDZaMDMxMTAvBgNV BAMTKDAxOUI0OTdGMjRGOTQ1NkE4Rjk1RTk0MTQyQ0I5RURCMTU4NzA1NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWpYHUTb07R2Xg8IJonwnbFZD1 Ix4cg903fQ5gZLrRzrcF9Z61JgaEJlwRdZxJJYpluCgdK9T2cpluegGOCvdndLDe 4n0fkRwLCwyHlcY82FT+iHpSg8wX/IMGioR8UlbpeqltXuJtuP5my5TnhtSf/7Tj spYBwnrpYSEE15CqjU/8MX2n4nGe3ew1jfKoKsHoh3JgPdhNGG3Ye/3e4ZLXpWUo EC9pzm+EaE2SNZwKhM8+DwvbiqrNbPpRQjyftnIH1iAiQjl68StZd4ZKME++NeGP MgnDbv9MGsrRZmsHfruZJXK5PvK1scjW8IbSBCK2VFTUpWREwNS0lCOMZsmnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAZtJfyT5RWqPlelBQsue2xWHBXcwHwYDVR0j BBgwFoAU1c6MTiHsgfSVjPYHQg8e60iy5ewwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTVjOGI5ZTMtYjQ0Zi00OTBiLWJmNTEtOTlmMmRkMmExMzY0LzAvRDVDRThDNEUy MUVDODFGNDk1OENGNjA3NDIwRjFFRUI0OEIyRTVFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENUNFOEM0RTIxRUM4MUY0OTU4Q0Y2MDc0MjBGMUVFQjQ4QjJF NUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTVjOGI5ZTMtYjQ0Zi00OTBiLWJm NTEtOTlmMmRkMmExMzY0LzAvRDVDRThDNEUyMUVDODFGNDk1OENGNjA3NDIwRjFF RUI0OEIyRTVFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+gjoITYFPuHpFV9sqzqyLpSqUrl0gUAZYV YeLlQIrlMxiF4iCxDWgDqAunB5iEiLfN9teJK2vDD19f1arj8WlxVZsp22qW6UtO NEMxk2eo+zT1grirXF4iPbc3V48jQtxS/Nr3XEJIraIY29FLSi1OO/cMm+gAXzNl B9gqTY2pLUkooN3+bmz+74lz6ejZwgJ8Q4w8n1xooEE2TCVMGGwiuVXcIRWuXJ+F YVFRQLFrSO0kE4Eqxszv1mAB5xSGu4OKj7kmEVQss4WtbkgJixKOMK6QfVEdIIYL aYBE0YLTOEBKK3NappjrUA5lYMNLkUvXDsSV5tICT56Wug4ZOmE= -----END CERTIFICATE-----Generated at Mon Sep 21 01:13:50 2026 by rpki-client