$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft File: 5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft (raw, json) Hash identifier: OBroZrBz0WG54/sphHekxv75SPd7DCBJjt8mLPL2svM= Subject key identifier: 93:F2:37:CC:AC:4D:68:D3:EA:4F:80:F1:FB:F5:E4:9B:0F:26:5B:17 Authority key identifier: 5E:D0:FC:9D:E3:C5:BF:0F:26:41:FB:C8:2E:03:53:3A:D5:A6:C5:C1 Certificate issuer: /CN=5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1 Certificate serial: 3F66BC7F6DE3546C8618E79118EC4EEA0D9F3441 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 23:10:23 +0000 Manifest this update: Mon 21 Sep 2026 23:05:23 +0000 Manifest next update: Wed 23 Sep 2026 01:23:23 +0000 Files and hashes: 1: 3130332e3134382e3130302e302f32332d3234203d3e20313339393838.roa (hash: yFzJDaOR3ALC9R9lcLlFWOcSjWJQYhCD//08bWWKhcU=) 2: 5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.crl (hash: Eb7LwQXAmz/OLVGujTOSDrKaMwFbXsA9q/n4zBy/YWM=) 3: 323430353a636534303a3a2f33322d3438203d3e20313339393838.roa (hash: CgpRUUxgJdvC2DaauFEj0ljqW/Af8HR5RmTcf5er/Ag=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.crl rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 01:23:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:66:bc:7f:6d:e3:54:6c:86:18:e7:91:18:ec:4e:ea:0d:9f:34:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1 Validity Not Before: Sep 21 23:05:23 2026 GMT Not After : Sep 23 01:23:23 2026 GMT Subject: CN=93F237CCAC4D68D3EA4F80F1FBF5E49B0F265B17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:bb:77:bc:9e:02:e3:47:3f:32:61:90:cd:b7: 30:7d:34:5c:a1:b0:ae:43:9a:74:25:42:98:96:dd: 4f:a3:c2:b3:5d:92:4e:c3:c8:ea:c8:bf:62:46:c5: 52:8d:af:b9:9a:4a:3b:5e:eb:32:de:98:09:8e:8e: c9:17:1e:ec:de:7b:83:93:6b:71:f3:01:ad:c1:a4: b5:1d:27:bf:52:4d:95:25:48:37:4a:48:94:34:62: dd:6d:9d:52:b8:6f:d7:a2:da:75:7d:e2:e8:ac:03: 36:38:2e:2c:7b:ac:e4:c9:ba:c6:f9:47:6f:ba:58: 42:51:5b:ca:81:a2:42:b3:fd:84:ab:9e:1a:16:4c: 96:a0:dd:3f:f6:a4:49:82:4f:3e:a8:2b:b2:53:c7: 36:f6:7b:2c:d1:f6:bd:bf:fa:b8:93:e1:40:09:01: 45:1f:52:cd:59:8b:99:73:c0:f9:ad:59:ca:3c:0a: 13:92:ab:9d:18:0b:45:3d:dd:91:eb:56:cc:9a:6f: b4:ec:4f:d1:21:1c:43:0d:82:76:5c:4a:e8:dd:4c: 75:dd:85:00:a3:81:f5:18:3b:40:f0:be:e8:ac:66: b1:2d:e5:21:39:d8:6f:13:ce:ce:eb:cf:1f:03:95: 87:60:70:a3:0d:43:54:57:f0:7a:2a:74:1d:c2:7a: f6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F2:37:CC:AC:4D:68:D3:EA:4F:80:F1:FB:F5:E4:9B:0F:26:5B:17 X509v3 Authority Key Identifier: keyid:5E:D0:FC:9D:E3:C5:BF:0F:26:41:FB:C8:2E:03:53:3A:D5:A6:C5:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:87:7a:e7:f8:07:f7:84:78:75:93:8c:be:96:57:db:3b:40: ba:ce:dd:7b:d3:ee:6d:86:4c:6d:e5:dc:fb:f0:e7:9c:fc:9f: 69:9e:0a:d4:5c:ea:2b:ae:48:92:4b:f8:04:1c:11:9c:84:47: 9b:70:8b:f7:b9:07:15:39:5c:c3:f2:80:8d:97:87:bb:b0:c3: 13:c5:75:05:9a:1f:49:0f:9a:a1:85:56:91:44:85:ad:f3:3e: 38:d6:f4:46:7a:b5:e0:c1:b5:7d:53:92:60:db:f2:c2:c3:6a: ab:b9:79:86:0c:3e:23:38:51:df:8d:61:20:2f:df:f4:71:14: 5b:93:3e:1f:64:73:e7:dd:9b:22:12:fb:2c:12:77:4f:d0:3f: 57:c3:34:e5:a9:12:77:ab:44:94:51:ef:7f:7d:a4:0f:3f:8f: 87:af:62:9d:c0:56:e2:61:02:c7:46:84:f0:5b:44:7b:ea:e6: cf:03:a8:58:32:e5:46:80:9c:33:e0:3b:91:d5:bf:30:6e:bc: 9a:1b:d7:ab:c6:ca:0c:8e:8c:37:77:0d:8c:8a:2d:bb:64:5a: 08:d3:69:00:cd:e2:4f:d7:37:39:b6:56:a4:58:18:13:ff:c5: 09:dc:fc:ae:21:8d:17:84:6c:b8:2d:b4:0f:92:95:a1:65:4b: 9f:92:49:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP2a8f23jVGyGGOeRGOxO6g2fNEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVEMEZDOURFM0M1QkYwRjI2NDFGQkM4MkUwMzUzM0FE NUE2QzVDMTAeFw0yNjA5MjEyMzA1MjNaFw0yNjA5MjMwMTIzMjNaMDMxMTAvBgNV BAMTKDkzRjIzN0NDQUM0RDY4RDNFQTRGODBGMUZCRjVFNDlCMEYyNjVCMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpu3e8ngLjRz8yYZDNtzB9NFyh sK5DmnQlQpiW3U+jwrNdkk7DyOrIv2JGxVKNr7maSjte6zLemAmOjskXHuzee4OT a3HzAa3BpLUdJ79STZUlSDdKSJQ0Yt1tnVK4b9ei2nV94uisAzY4Lix7rOTJusb5 R2+6WEJRW8qBokKz/YSrnhoWTJag3T/2pEmCTz6oK7JTxzb2eyzR9r2/+riT4UAJ AUUfUs1Zi5lzwPmtWco8ChOSq50YC0U93ZHrVsyab7TsT9EhHEMNgnZcSujdTHXd hQCjgfUYO0DwvuisZrEt5SE52G8Tzs7rzx8DlYdgcKMNQ1RX8HoqdB3CevZ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk/I3zKxNaNPqT4Dx+/Xkmw8mWxcwHwYDVR0j BBgwFoAUXtD8nePFvw8mQfvILgNTOtWmxcEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjJkNjZkMTAtYjg1Ny00YmVmLTkzOTUtNDVkNWFiMmM0NGY5LzAvNUVEMEZDOURF M0M1QkYwRjI2NDFGQkM4MkUwMzUzM0FENUE2QzVDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RUQwRkM5REUzQzVCRjBGMjY0MUZCQzgyRTAzNTMzQUQ1QTZD NUMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjJkNjZkMTAtYjg1Ny00YmVmLTkz OTUtNDVkNWFiMmM0NGY5LzAvNUVEMEZDOURFM0M1QkYwRjI2NDFGQkM4MkUwMzUz M0FENUE2QzVDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALuHeuf4B/eEeHWTjL6WV9s7QLrO3XvT7m2G TG3l3Pvw55z8n2meCtRc6iuuSJJL+AQcEZyER5twi/e5BxU5XMPygI2Xh7uwwxPF dQWaH0kPmqGFVpFEha3zPjjW9EZ6teDBtX1TkmDb8sLDaqu5eYYMPiM4Ud+NYSAv 3/RxFFuTPh9kc+fdmyIS+ywSd0/QP1fDNOWpEnerRJRR7399pA8/j4evYp3AVuJh AsdGhPBbRHvq5s8DqFgy5UaAnDPgO5HVvzBuvJob16vGygyOjDd3DYyKLbtkWgjT aQDN4k/XNzm2VqRYGBP/xQnc/K4hjReEbLgttA+SlaFlS5+SSVU= -----END CERTIFICATE-----Generated at Tue Sep 22 05:42:11 2026 by rpki-client