$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft File: 5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft (raw, json) Hash identifier: w3B00Pp62/T1H4hq6reujg8xL+ynrW8oOUoClG22fVI= Subject key identifier: 1F:81:3F:67:EC:E4:8A:8B:B2:66:D2:BB:68:F2:9D:DD:51:53:09:E1 Authority key identifier: 58:63:EF:CF:8C:E7:06:1C:DF:F1:BA:CE:EA:FC:FD:B1:85:61:32:14 Certificate issuer: /CN=5863EFCF8CE7061CDFF1BACEEAFCFDB185613214 Certificate serial: 331296AA1E787071D2E2169392F6E1CACC22C44B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft Manifest number: BE Signing time: Sun 20 Sep 2026 22:45:03 +0000 Manifest this update: Sun 20 Sep 2026 22:40:03 +0000 Manifest next update: Mon 21 Sep 2026 22:56:03 +0000 Files and hashes: 1: 3135372e36362e38362e302f32332d3234203d3e20313532343432.roa (hash: DqsdEihr1ttmWqRVkhtn/IKvZWR3wypbn1l1kKvrrac=) 2: 5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.crl (hash: e5IPxZe8CIo6rmN4Je04ExtNSWAuINzhL1UCAdsfSLE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.crl rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 22:56:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:12:96:aa:1e:78:70:71:d2:e2:16:93:92:f6:e1:ca:cc:22:c4:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5863EFCF8CE7061CDFF1BACEEAFCFDB185613214 Validity Not Before: Sep 20 22:40:03 2026 GMT Not After : Sep 21 22:56:03 2026 GMT Subject: CN=1F813F67ECE48A8BB266D2BB68F29DDD515309E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:20:73:70:5b:be:17:b0:99:58:c7:c7:43:e2: 7f:7a:95:0a:25:7a:90:e2:aa:2c:90:74:20:62:65: f3:0c:eb:32:e2:81:bb:7c:0a:97:07:c3:f5:a1:91: f6:96:57:d7:aa:74:99:c7:a0:70:39:76:35:8a:f9: 59:2f:f3:41:18:48:e6:26:aa:73:58:77:49:ba:60: 3a:30:e4:06:f5:79:5e:d2:b7:75:aa:7b:6c:d0:aa: 9e:ac:51:52:56:f1:51:98:e5:8c:12:bc:12:b8:90: 43:37:28:3e:c2:65:99:11:95:49:01:4f:86:09:35: 42:35:75:1a:e2:78:06:1a:cc:f4:9b:7c:33:04:8e: 23:70:b5:71:ef:8e:8d:7a:8f:ae:23:c3:f9:f5:c0: 28:cf:fe:aa:d7:77:9b:08:5a:56:6e:02:36:70:96: c1:f2:3a:66:e9:36:b1:2d:49:82:25:53:d0:57:27: 0f:e4:c8:88:ad:9d:13:9d:53:79:1c:c8:fe:25:07: 90:f5:ad:8b:65:3c:74:7a:31:55:f9:47:21:e9:4d: 52:eb:a7:c8:d7:5c:78:00:5e:e5:ed:2f:a3:ea:7e: 42:d8:20:fe:39:d6:c1:7d:c2:a9:9a:11:71:63:0e: 74:2a:60:d0:e9:b0:0c:1f:81:36:11:db:d9:37:eb: 2a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:81:3F:67:EC:E4:8A:8B:B2:66:D2:BB:68:F2:9D:DD:51:53:09:E1 X509v3 Authority Key Identifier: keyid:58:63:EF:CF:8C:E7:06:1C:DF:F1:BA:CE:EA:FC:FD:B1:85:61:32:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:3c:e4:65:54:5b:5a:c7:14:12:e3:17:b7:08:5e:de:0e:61: f5:4f:ad:60:c6:e2:35:f1:8a:c4:48:1b:2a:c4:21:b4:dd:60: c5:e1:66:4a:b4:12:84:41:5f:6b:bf:d1:39:c6:f8:1f:43:18: ce:fa:1b:8f:7a:ac:65:6a:84:9e:43:9a:68:86:61:ba:31:32: 85:2b:01:82:a1:04:6c:94:5b:8a:ae:c6:5d:7d:c4:0a:47:f9: db:b4:3e:05:81:b8:d4:80:cd:2d:75:c3:dc:25:d3:6b:f1:93: 9a:04:2b:a2:ef:2f:7c:5b:43:a6:9b:3b:3b:9f:31:23:23:94: 4e:7d:bd:56:91:11:07:1a:25:50:08:b5:af:3d:3f:a1:e2:16: 9b:c6:27:10:bc:a5:ee:9a:e5:69:39:20:0e:44:84:e3:12:5c: 88:72:77:5c:00:8c:8f:a1:8b:0d:01:2b:2e:a2:8b:9f:6a:54: a5:5a:57:80:97:a2:13:34:60:ff:ff:6a:80:63:5c:91:08:ce: 92:e5:92:c4:0b:fa:22:79:c1:90:38:0c:6a:ad:18:3b:e2:a7: 1e:16:79:0d:b6:a6:6f:1d:36:cc:86:f3:49:b7:52:ad:10:d9: d1:08:5d:1a:50:cf:64:9f:b1:78:5d:48:0c:9d:ff:06:df:c0: c8:7c:b3:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMxKWqh54cHHS4haTkvbhyswixEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg2M0VGQ0Y4Q0U3MDYxQ0RGRjFCQUNFRUFGQ0ZEQjE4 NTYxMzIxNDAeFw0yNjA5MjAyMjQwMDNaFw0yNjA5MjEyMjU2MDNaMDMxMTAvBgNV BAMTKDFGODEzRjY3RUNFNDhBOEJCMjY2RDJCQjY4RjI5RERENTE1MzA5RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEIHNwW74XsJlYx8dD4n96lQol epDiqiyQdCBiZfMM6zLigbt8CpcHw/WhkfaWV9eqdJnHoHA5djWK+Vkv80EYSOYm qnNYd0m6YDow5Ab1eV7St3Wqe2zQqp6sUVJW8VGY5YwSvBK4kEM3KD7CZZkRlUkB T4YJNUI1dRrieAYazPSbfDMEjiNwtXHvjo16j64jw/n1wCjP/qrXd5sIWlZuAjZw lsHyOmbpNrEtSYIlU9BXJw/kyIitnROdU3kcyP4lB5D1rYtlPHR6MVX5RyHpTVLr p8jXXHgAXuXtL6PqfkLYIP451sF9wqmaEXFjDnQqYNDpsAwfgTYR29k36yobAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH4E/Z+zkiouyZtK7aPKd3VFTCeEwHwYDVR0j BBgwFoAUWGPvz4znBhzf8brO6vz9sYVhMhQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjg3ZGQ1OTctNDBjZC00MDliLWIzYzUtMjg1MmNlMDE0ODg5LzAvNTg2M0VGQ0Y4 Q0U3MDYxQ0RGRjFCQUNFRUFGQ0ZEQjE4NTYxMzIxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81ODYzRUZDRjhDRTcwNjFDREZGMUJBQ0VFQUZDRkRCMTg1NjEz MjE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjg3ZGQ1OTctNDBjZC00MDliLWIz YzUtMjg1MmNlMDE0ODg5LzAvNTg2M0VGQ0Y4Q0U3MDYxQ0RGRjFCQUNFRUFGQ0ZE QjE4NTYxMzIxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKY85GVUW1rHFBLjF7cIXt4OYfVPrWDG4jXx isRIGyrEIbTdYMXhZkq0EoRBX2u/0TnG+B9DGM76G496rGVqhJ5DmmiGYboxMoUr AYKhBGyUW4quxl19xApH+du0PgWBuNSAzS11w9wl02vxk5oEK6LvL3xbQ6abOzuf MSMjlE59vVaREQcaJVAIta89P6HiFpvGJxC8pe6a5Wk5IA5EhOMSXIhyd1wAjI+h iw0BKy6ii59qVKVaV4CXohM0YP//aoBjXJEIzpLlksQL+iJ5wZA4DGqtGDvipx4W eQ22pm8dNsyG80m3Uq0Q2dEIXRpQz2SfsXhdSAyd/wbfwMh8sxw= -----END CERTIFICATE-----Generated at Mon Sep 21 13:47:27 2026 by rpki-client