$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft File: 5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft (raw, json) Hash identifier: tfIew1rljwF6HHCOEwr2c01l8LKZ7L2IlHxI/FrKzmA= Subject key identifier: 83:10:9A:89:C6:B8:79:E2:FC:72:6F:57:E5:01:B9:64:A0:98:68:AA Authority key identifier: 5C:74:45:C1:E1:37:6E:4A:7B:40:4B:C5:3A:71:AC:92:7D:2C:22:04 Certificate issuer: /CN=5C7445C1E1376E4A7B404BC53A71AC927D2C2204 Certificate serial: 70ADDC9DE0A8039EF2358FB1150E0613084D8FAF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 13:32:37 +0000 Manifest this update: Thu 24 Sep 2026 13:27:37 +0000 Manifest next update: Fri 25 Sep 2026 16:05:37 +0000 Files and hashes: 1: 5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl (hash: ZrnQBJJfZobUZgiaJ+j1v242IurrEdg7guXNverpoR4=) 2: 3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa (hash: YDSkpFGq8xybThgooh1RThJN9W0fBsfNyr37Omd1f4w=) 3: 3136302e32352e3137342e302f32342d3234203d3e20313533303733.roa (hash: FXO9CsmctV8fdA5KiII/rw/3Y+5l9AlF4P2ED3TDR8A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ad:dc:9d:e0:a8:03:9e:f2:35:8f:b1:15:0e:06:13:08:4d:8f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7445C1E1376E4A7B404BC53A71AC927D2C2204 Validity Not Before: Sep 24 13:27:37 2026 GMT Not After : Sep 25 16:05:37 2026 GMT Subject: CN=83109A89C6B879E2FC726F57E501B964A09868AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4f:f3:28:50:34:9a:34:97:7a:b8:55:66:e8: 0b:e0:82:6d:b3:71:24:48:81:9e:41:ad:f0:5c:98: 4d:1b:24:76:e8:bb:73:cf:c9:c3:0c:51:f1:84:53: 57:db:a4:ff:f1:b7:13:d9:53:82:8e:63:1d:e5:7a: f2:22:a3:9c:0e:45:91:ca:09:64:8b:56:e2:ab:13: bf:a2:ef:27:50:04:e0:c1:29:65:a7:e7:9d:0d:ae: a2:de:68:55:89:4c:0e:64:ea:ec:60:fb:f0:de:a0: f0:82:2f:6f:ff:e0:52:3c:12:b7:ff:da:9d:91:a5: 1c:16:2b:49:b5:dd:08:de:33:66:a8:81:3f:e6:4d: 76:48:be:3d:d0:29:46:b1:dd:77:94:76:43:fa:f0: 12:bd:7b:5b:58:00:a6:72:d3:13:30:61:9e:d2:8f: 7b:15:0c:64:4c:18:56:98:72:c1:16:15:91:1a:81: 67:5d:e9:8f:69:84:9a:70:5b:40:d5:33:82:a5:b6: 89:20:cf:95:19:c4:ae:1a:c8:da:ee:57:f5:70:0c: cf:b5:70:81:c4:cc:6d:44:97:02:0d:d6:41:01:fb: 26:7f:95:d8:7c:b8:52:ad:54:a1:e7:7e:fe:49:4f: d4:a7:4b:ee:a1:0b:53:a4:be:68:05:a0:83:a4:57: 04:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:10:9A:89:C6:B8:79:E2:FC:72:6F:57:E5:01:B9:64:A0:98:68:AA X509v3 Authority Key Identifier: keyid:5C:74:45:C1:E1:37:6E:4A:7B:40:4B:C5:3A:71:AC:92:7D:2C:22:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:4d:fa:a0:08:ba:80:9d:1c:c0:3d:61:03:b6:2d:26:16:af: 36:9e:2c:8a:51:c1:20:61:27:14:56:d5:09:cf:90:d6:30:48: 73:6f:4e:2d:ba:f7:af:25:80:30:9c:18:82:b3:9d:28:67:38: a4:71:59:54:2e:5f:df:b9:f4:f4:5d:6d:93:c5:45:21:8a:01: 78:6f:66:6b:f7:21:d2:81:39:0d:68:9d:2a:11:7b:2e:8b:a4: df:42:6e:11:a8:15:8b:da:d2:8a:80:b0:90:55:af:71:1a:33: df:86:15:c7:7c:7c:08:54:5f:88:49:b1:16:73:ab:d4:eb:da: 01:bf:1b:8a:f1:06:c0:e8:0e:9d:bf:5d:1f:34:45:cc:67:a1: f3:54:b3:80:9f:57:08:d0:71:00:bc:4c:c5:7e:01:54:36:47: 6f:06:1f:fd:d1:e3:57:7c:36:71:6a:3e:e1:c9:a6:d1:5d:ff: 03:51:55:37:7e:d0:34:41:1e:2e:72:f9:c6:93:f9:c9:7c:b1: d4:a1:12:ee:5a:45:3e:04:3a:fc:f2:e4:85:28:fc:f9:30:4f: 10:78:4a:3c:f5:4e:6c:1f:5a:85:44:9a:5c:01:7a:c0:98:3f: db:e2:43:ec:da:9d:81:53:75:9c:e3:9c:f0:60:60:c6:01:83: db:7a:40:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcK3cneCoA57yNY+xFQ4GEwhNj68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3NDQ1QzFFMTM3NkU0QTdCNDA0QkM1M0E3MUFDOTI3 RDJDMjIwNDAeFw0yNjA5MjQxMzI3MzdaFw0yNjA5MjUxNjA1MzdaMDMxMTAvBgNV BAMTKDgzMTA5QTg5QzZCODc5RTJGQzcyNkY1N0U1MDFCOTY0QTA5ODY4QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMT/MoUDSaNJd6uFVm6Avggm2z cSRIgZ5BrfBcmE0bJHbou3PPycMMUfGEU1fbpP/xtxPZU4KOYx3levIio5wORZHK CWSLVuKrE7+i7ydQBODBKWWn550NrqLeaFWJTA5k6uxg+/DeoPCCL2//4FI8Erf/ 2p2RpRwWK0m13QjeM2aogT/mTXZIvj3QKUax3XeUdkP68BK9e1tYAKZy0xMwYZ7S j3sVDGRMGFaYcsEWFZEagWdd6Y9phJpwW0DVM4Kltokgz5UZxK4ayNruV/VwDM+1 cIHEzG1ElwIN1kEB+yZ/ldh8uFKtVKHnfv5JT9SnS+6hC1OkvmgFoIOkVwTHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgxCaica4eeL8cm9X5QG5ZKCYaKowHwYDVR0j BBgwFoAUXHRFweE3bkp7QEvFOnGskn0sIgQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWM3MmVlM2MtZTE4MC00Mjk2LTlkYWQtOTUwMGVmZDk0ODkwLzAvNUM3NDQ1QzFF MTM3NkU0QTdCNDA0QkM1M0E3MUFDOTI3RDJDMjIwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81Qzc0NDVDMUUxMzc2RTRBN0I0MDRCQzUzQTcxQUM5MjdEMkMy MjA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM3MmVlM2MtZTE4MC00Mjk2LTlk YWQtOTUwMGVmZDk0ODkwLzAvNUM3NDQ1QzFFMTM3NkU0QTdCNDA0QkM1M0E3MUFD OTI3RDJDMjIwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNN+qAIuoCdHMA9YQO2LSYWrzaeLIpRwSBh JxRW1QnPkNYwSHNvTi26968lgDCcGIKznShnOKRxWVQuX9+59PRdbZPFRSGKAXhv Zmv3IdKBOQ1onSoRey6LpN9CbhGoFYva0oqAsJBVr3EaM9+GFcd8fAhUX4hJsRZz q9Tr2gG/G4rxBsDoDp2/XR80RcxnofNUs4CfVwjQcQC8TMV+AVQ2R28GH/3R41d8 NnFqPuHJptFd/wNRVTd+0DRBHi5y+caT+cl8sdShEu5aRT4EOvzy5IUo/PkwTxB4 Sjz1TmwfWoVEmlwBesCYP9viQ+zanYFTdZzjnPBgYMYBg9t6QHA= -----END CERTIFICATE-----Generated at Thu Sep 24 22:55:24 2026 by rpki-client