$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.mft File: 5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.mft (raw, json) Hash identifier: UMwTkmdIWErAJJRUJXFLqfmKnjXHxyq/gL0vggMlj+Y= Subject key identifier: 7A:41:14:F9:92:3F:05:CF:1A:62:31:24:B7:42:4B:82:01:A8:C5:AB Authority key identifier: 5C:19:EF:2B:99:AC:6F:39:EA:FD:3C:90:A5:1C:FF:2D:8B:90:14:96 Certificate issuer: /CN=5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496 Certificate serial: 59FCE6BD6A5A74461F5B489D234B4C2BAAD30490 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.mft Manifest number: BE Signing time: Mon 21 Sep 2026 06:39:47 +0000 Manifest this update: Mon 21 Sep 2026 06:34:47 +0000 Manifest next update: Tue 22 Sep 2026 10:08:47 +0000 Files and hashes: 1: 5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.crl (hash: rEFjce2qTPk5/2LR4oohcJvQgeEVYg+TQvvNNi/oeXs=) 2: 3130332e38322e39322e302f32332d3234203d3e20313336303532.roa (hash: oCDO+C8a0RrEJ6lxOXaK0sUnJXysyt3W9yTdznU1D4w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.crl rsync://rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:fc:e6:bd:6a:5a:74:46:1f:5b:48:9d:23:4b:4c:2b:aa:d3:04:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496 Validity Not Before: Sep 21 06:34:47 2026 GMT Not After : Sep 22 10:08:47 2026 GMT Subject: CN=7A4114F9923F05CF1A623124B7424B8201A8C5AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d6:c7:49:1a:57:df:0f:a6:17:56:f8:08:86: 1f:6c:0a:32:3f:ed:70:9f:a7:3b:5f:a8:24:84:15: 68:f7:89:ef:b4:f3:66:c2:c4:6f:53:ce:d0:ea:db: 2f:34:7b:5d:cf:f5:1a:86:0d:28:f2:7a:49:60:37: f1:5a:c3:7c:3e:50:85:78:b3:50:3c:1e:a5:d6:2f: ce:8d:6e:c7:9f:ae:29:2f:d6:84:89:a6:99:e3:f1: b5:2b:e7:29:3b:2c:ac:3d:b4:bf:6b:6b:e6:83:7a: 31:82:f0:c4:08:9e:26:93:dd:8f:b5:dd:c2:f3:84: 56:5c:95:33:c6:25:9a:71:5d:6f:c8:67:6d:f9:9c: 9a:77:62:10:fc:c0:90:c6:b7:91:b1:85:0c:1c:cd: 3d:ec:05:2f:ce:2a:74:2f:23:f4:3a:e7:7a:47:fb: 99:cb:50:74:1d:34:77:b3:c3:b1:b6:d6:e6:ae:98: c0:29:1c:e3:42:74:f2:4c:ec:75:a4:1d:86:30:ee: 54:90:7b:8f:c7:f4:71:fb:b1:85:1b:87:da:ca:5a: 9c:cc:70:1c:51:80:8a:67:2b:5b:5f:c2:80:d3:e7: bd:47:6d:90:83:83:e2:51:11:1b:32:5a:c6:5d:f1: 1f:d6:44:db:1a:c2:4b:f8:e6:22:6c:68:91:e7:01: 30:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:41:14:F9:92:3F:05:CF:1A:62:31:24:B7:42:4B:82:01:A8:C5:AB X509v3 Authority Key Identifier: keyid:5C:19:EF:2B:99:AC:6F:39:EA:FD:3C:90:A5:1C:FF:2D:8B:90:14:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:f1:fa:3d:f0:2d:a2:ec:8c:a2:2f:fd:4d:0a:95:c0:5e:78: e4:a3:5e:8e:a6:00:c8:12:54:50:60:ec:f0:96:03:29:44:1c: f2:23:c0:3a:12:c9:e8:db:1a:8b:52:8e:9e:ff:90:71:d6:a3: e7:00:81:db:3f:c5:ab:76:05:01:00:f3:82:1a:5b:a2:8f:bd: f0:18:89:e1:7f:8d:c0:77:d7:4d:eb:94:76:f8:d5:fe:90:ab: ec:07:c6:d0:d1:f8:da:db:c8:2f:a3:d4:b0:29:c3:86:5d:fe: 36:12:de:d1:3d:18:e8:6d:21:2a:76:e0:46:dc:af:e3:48:42: 6d:22:8c:3b:46:f7:cf:f0:da:6f:1d:a5:cc:24:f8:3e:95:f5: ab:66:00:b8:a9:fa:27:99:ef:d3:2a:bd:91:cb:58:4f:fc:2d: 5d:de:d7:a3:34:28:90:8a:46:68:7b:bf:0b:bf:9d:eb:f6:65: b7:ec:08:14:ad:bf:4c:94:46:9c:30:0f:b1:aa:2e:48:8e:2d: 12:e6:eb:f0:c9:1c:cc:70:f4:f4:01:aa:fa:f8:19:e8:be:da: 80:87:9a:fc:1e:67:cb:7a:b1:e2:7e:7f:3d:41:b1:80:ed:11: df:7f:6e:06:99:3f:05:86:3c:0b:cb:31:bb:42:4d:e4:44:ea: 79:f8:d6:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWfzmvWpadEYfW0idI0tMK6rTBJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMxOUVGMkI5OUFDNkYzOUVBRkQzQzkwQTUxQ0ZGMkQ4 QjkwMTQ5NjAeFw0yNjA5MjEwNjM0NDdaFw0yNjA5MjIxMDA4NDdaMDMxMTAvBgNV BAMTKDdBNDExNEY5OTIzRjA1Q0YxQTYyMzEyNEI3NDI0QjgyMDFBOEM1QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA1sdJGlffD6YXVvgIhh9sCjI/ 7XCfpztfqCSEFWj3ie+082bCxG9TztDq2y80e13P9RqGDSjyeklgN/Faw3w+UIV4 s1A8HqXWL86Nbsefrikv1oSJppnj8bUr5yk7LKw9tL9ra+aDejGC8MQIniaT3Y+1 3cLzhFZclTPGJZpxXW/IZ235nJp3YhD8wJDGt5GxhQwczT3sBS/OKnQvI/Q653pH +5nLUHQdNHezw7G21uaumMApHONCdPJM7HWkHYYw7lSQe4/H9HH7sYUbh9rKWpzM cBxRgIpnK1tfwoDT571HbZCDg+JRERsyWsZd8R/WRNsawkv45iJsaJHnATDpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUekEU+ZI/Bc8aYjEkt0JLggGoxaswHwYDVR0j BBgwFoAUXBnvK5msbznq/TyQpRz/LYuQFJYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjc3ZWNjZmYtY2U5Yi00MWRhLWI5OGEtYWJjZmU0OTI1M2FmLzAvNUMxOUVGMkI5 OUFDNkYzOUVBRkQzQzkwQTUxQ0ZGMkQ4QjkwMTQ5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QzE5RUYyQjk5QUM2RjM5RUFGRDNDOTBBNTFDRkYyRDhCOTAx NDk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjc3ZWNjZmYtY2U5Yi00MWRhLWI5 OGEtYWJjZmU0OTI1M2FmLzAvNUMxOUVGMkI5OUFDNkYzOUVBRkQzQzkwQTUxQ0ZG MkQ4QjkwMTQ5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/x+j3wLaLsjKIv/U0KlcBeeOSjXo6mAMgS VFBg7PCWAylEHPIjwDoSyejbGotSjp7/kHHWo+cAgds/xat2BQEA84IaW6KPvfAY ieF/jcB3103rlHb41f6Qq+wHxtDR+NrbyC+j1LApw4Zd/jYS3tE9GOhtISp24Ebc r+NIQm0ijDtG98/w2m8dpcwk+D6V9atmALip+ieZ79MqvZHLWE/8LV3e16M0KJCK Rmh7vwu/nev2ZbfsCBStv0yURpwwD7GqLkiOLRLm6/DJHMxw9PQBqvr4Gei+2oCH mvweZ8t6seJ+fz1BsYDtEd9/bgaZPwWGPAvLMbtCTeRE6nn41mU= -----END CERTIFICATE-----Generated at Mon Sep 21 17:31:49 2026 by rpki-client