$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft File: 5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft (raw, json) Hash identifier: SK7pAKb2gD74nXIp0NM1vyp/mnJYKEADQGcUTz7GJb8= Subject key identifier: 0F:A9:9A:55:94:16:60:7B:54:DC:93:9D:40:9B:FB:9D:F3:68:3D:F2 Authority key identifier: 5D:F5:DB:B1:48:D0:F4:EA:BB:1A:70:87:D8:CA:D8:7F:B2:A9:15:64 Certificate issuer: /CN=5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564 Certificate serial: 029469B5FA251102867F5B918508C45CAFEEFC1B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft Manifest number: BD Signing time: Mon 21 Sep 2026 15:30:53 +0000 Manifest this update: Mon 21 Sep 2026 15:25:53 +0000 Manifest next update: Tue 22 Sep 2026 16:08:53 +0000 Files and hashes: 1: 3130332e3134322e38382e302f32332d3233203d3e20313339333638.roa (hash: 85nzKNKm1prDMlKjYCs/G3skXgXdFpd3BSx7AhsXh80=) 2: 3130332e3134322e38382e302f32342d3234203d3e20313339333638.roa (hash: tQktaum4KycUd3NVfEb+S8gEbr6uIhyBlDiFsL9oiH8=) 3: 3130332e3134322e38392e302f32342d3234203d3e20313339333638.roa (hash: 4JRcCjrbt6UQy9keTGtyxuVyA16nB/RDNc0x3IcBoFU=) 4: 5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.crl (hash: 5Z53O8sueeq8eLXmXyO0BCYxodaUNLIG9/E+1Qlwrns=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.crl rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:94:69:b5:fa:25:11:02:86:7f:5b:91:85:08:c4:5c:af:ee:fc:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564 Validity Not Before: Sep 21 15:25:53 2026 GMT Not After : Sep 22 16:08:53 2026 GMT Subject: CN=0FA99A559416607B54DC939D409BFB9DF3683DF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:82:af:8a:44:cb:fa:4a:ff:98:20:c1:55:d8: 99:25:db:c6:b7:7a:7a:12:9d:2c:a0:f7:b9:8c:31: ca:d8:bf:ac:ac:c2:d7:f2:a2:86:a4:a1:86:84:d7: 38:ca:e5:31:74:08:06:7d:61:1b:cd:c9:13:38:14: c7:5e:3e:d4:73:87:86:50:30:7a:b2:51:fe:9e:b5: b9:8a:e2:9c:8f:51:dd:21:f1:87:d4:02:90:a8:3e: 73:29:33:b5:49:b5:6f:84:0d:7e:cf:f4:d6:41:2e: 2f:c9:76:36:63:01:b2:f9:7a:07:e6:e3:62:d1:bc: e2:08:0c:e0:02:63:88:a7:d9:c1:be:66:df:9f:9c: a6:56:a6:63:fb:7a:b6:f9:d4:08:92:a1:ef:f5:5c: 7e:7b:1f:63:79:41:1c:ee:72:64:9f:85:3b:55:6f: d6:65:08:e5:d1:42:8b:fe:e9:62:04:10:28:3b:e7: 62:cf:ce:43:23:a9:0a:92:16:f4:7a:94:73:e2:0d: 5b:3b:ee:66:a8:4d:e7:6e:b6:af:8b:a9:37:be:98: a8:a5:03:be:8b:8c:8e:84:5b:b1:db:00:cb:4d:50: 16:b7:38:e9:21:f5:35:ae:8f:ea:fc:06:35:00:26: 56:a2:64:d2:70:c1:73:0d:68:c9:a8:53:cc:28:e9: a8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A9:9A:55:94:16:60:7B:54:DC:93:9D:40:9B:FB:9D:F3:68:3D:F2 X509v3 Authority Key Identifier: keyid:5D:F5:DB:B1:48:D0:F4:EA:BB:1A:70:87:D8:CA:D8:7F:B2:A9:15:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:d8:01:98:5f:e8:cd:a5:a2:07:d9:f0:e0:a2:d9:97:b4:cd: 1f:5e:35:ea:00:87:42:16:0d:10:e7:9b:dc:3e:c5:bd:6a:b0: b9:7b:8c:7d:08:d6:c6:4f:2d:ba:1f:b2:eb:ef:ec:78:fe:d9: 54:5f:6c:84:46:6d:42:a3:0a:27:d2:c7:bd:03:fd:24:70:0c: 01:d1:5f:90:f1:4a:56:c5:55:d4:c0:a7:65:f1:cd:a0:1d:c1: d6:26:19:ce:2b:1f:17:48:ac:2c:e4:d9:05:a9:04:33:f9:56: 51:29:54:0f:ea:0b:da:b8:82:3c:8a:fe:34:5e:44:28:ff:08: 83:ca:db:00:52:d3:55:4c:05:98:13:9c:7e:06:f3:2a:74:f2: 9e:e1:10:81:fb:f6:ee:91:30:b4:60:9f:70:84:3c:79:32:7e: e3:38:d7:82:ec:65:b6:f4:29:7c:30:be:32:03:4a:e2:bb:52: ae:8f:6d:73:ed:6c:2a:c1:eb:c0:63:d7:55:be:29:67:72:93: be:1b:b8:81:01:65:6f:94:c4:8f:70:aa:b1:76:95:80:ae:02: 63:ff:1f:cf:91:5e:9a:07:9f:95:e4:8b:dd:00:ff:84:59:63: 23:89:6f:34:a6:5b:f2:58:b1:ee:0c:da:ed:25:fc:16:3d:a8: db:22:2f:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUApRptfolEQKGf1uRhQjEXK/u/BswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGNURCQjE0OEQwRjRFQUJCMUE3MDg3RDhDQUQ4N0ZC MkE5MTU2NDAeFw0yNjA5MjExNTI1NTNaFw0yNjA5MjIxNjA4NTNaMDMxMTAvBgNV BAMTKDBGQTk5QTU1OTQxNjYwN0I1NERDOTM5RDQwOUJGQjlERjM2ODNERjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCygq+KRMv6Sv+YIMFV2Jkl28a3 enoSnSyg97mMMcrYv6yswtfyooakoYaE1zjK5TF0CAZ9YRvNyRM4FMdePtRzh4ZQ MHqyUf6etbmK4pyPUd0h8YfUApCoPnMpM7VJtW+EDX7P9NZBLi/JdjZjAbL5egfm 42LRvOIIDOACY4in2cG+Zt+fnKZWpmP7erb51AiSoe/1XH57H2N5QRzucmSfhTtV b9ZlCOXRQov+6WIEECg752LPzkMjqQqSFvR6lHPiDVs77maoTedutq+LqTe+mKil A76LjI6EW7HbAMtNUBa3OOkh9TWuj+r8BjUAJlaiZNJwwXMNaMmoU8wo6ahbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD6maVZQWYHtU3JOdQJv7nfNoPfIwHwYDVR0j BBgwFoAUXfXbsUjQ9Oq7GnCH2MrYf7KpFWQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWQ0OWQ0OWItZGFlYS00OGMwLThkNzctMTM3MzhiNzQ1NzcyLzAvNURGNURCQjE0 OEQwRjRFQUJCMUE3MDg3RDhDQUQ4N0ZCMkE5MTU2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81REY1REJCMTQ4RDBGNEVBQkIxQTcwODdEOENBRDg3RkIyQTkx NTY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWQ0OWQ0OWItZGFlYS00OGMwLThk NzctMTM3MzhiNzQ1NzcyLzAvNURGNURCQjE0OEQwRjRFQUJCMUE3MDg3RDhDQUQ4 N0ZCMkE5MTU2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTYAZhf6M2logfZ8OCi2Ze0zR9eNeoAh0IW DRDnm9w+xb1qsLl7jH0I1sZPLbofsuvv7Hj+2VRfbIRGbUKjCifSx70D/SRwDAHR X5DxSlbFVdTAp2XxzaAdwdYmGc4rHxdIrCzk2QWpBDP5VlEpVA/qC9q4gjyK/jRe RCj/CIPK2wBS01VMBZgTnH4G8yp08p7hEIH79u6RMLRgn3CEPHkyfuM414LsZbb0 KXwwvjIDSuK7Uq6PbXPtbCrB68Bj11W+KWdyk74buIEBZW+UxI9wqrF2lYCuAmP/ H8+RXpoHn5Xki90A/4RZYyOJbzSmW/JYse4M2u0l/BY9qNsiL3w= -----END CERTIFICATE-----Generated at Mon Sep 21 17:49:45 2026 by rpki-client