$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft File: 5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft (raw, json) Hash identifier: SchoYozDZGRXe4AdMuFrNCTNT8IZwgcIv5AIOQoSE1o= Subject key identifier: 85:4F:91:E8:AC:6D:E4:D7:30:77:6F:54:93:0F:07:10:9C:92:18:8A Authority key identifier: 5F:C6:89:EA:B9:41:D2:E0:F4:03:F4:D8:FE:7B:88:64:9C:CD:7D:C4 Certificate issuer: /CN=5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4 Certificate serial: 7E7C297D7F8247B3C26320318C5F435FC8B1A869 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft Manifest number: BC Signing time: Sun 20 Sep 2026 07:00:47 +0000 Manifest this update: Sun 20 Sep 2026 06:55:47 +0000 Manifest next update: Mon 21 Sep 2026 08:45:47 +0000 Files and hashes: 1: 3130332e31362e3131362e302f32332d3234203d3e203535363838.roa (hash: YzbPSpHu4Y/3sNkzMjgGkQaP8RKL2rlB1MRk9WcO/JU=) 2: 5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl (hash: qeUzu1X8WQxT4iwxDLo/cw7Wfiu4MpCpzylE1IzRenc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 08:45:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:7c:29:7d:7f:82:47:b3:c2:63:20:31:8c:5f:43:5f:c8:b1:a8:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4 Validity Not Before: Sep 20 06:55:47 2026 GMT Not After : Sep 21 08:45:47 2026 GMT Subject: CN=854F91E8AC6DE4D730776F54930F07109C92188A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:53:d6:70:19:a7:20:6f:9a:11:0c:27:7e:5d: fe:64:c9:6c:86:44:54:39:21:84:17:f4:35:3f:b1: 40:f6:14:4d:0b:4e:c7:57:00:7f:90:24:5e:77:24: 22:d4:bc:c4:cf:14:af:be:d5:61:f3:f8:ee:75:22: a1:6c:13:56:a4:69:3e:24:0c:82:37:e0:70:f7:f1: 8f:f1:3d:ba:91:6b:7b:53:99:93:09:c6:40:da:1f: 4a:79:2d:95:a9:a3:bd:3b:ae:fc:ca:4f:61:c4:dc: 74:aa:fc:a4:91:c0:fe:48:66:d6:ac:75:7c:cf:91: a3:79:3b:6d:23:53:37:01:be:80:37:d9:fe:19:e1: 3c:0a:83:bf:24:fd:00:79:9e:1e:f6:e2:c3:67:19: c0:c7:b2:2a:72:26:09:f4:c1:da:25:07:97:5c:83: d4:37:1c:94:14:ca:df:d1:2a:76:02:9a:cf:62:85: d9:32:28:74:96:89:0d:cd:20:0f:63:31:17:f7:8c: 84:a3:17:83:1b:25:39:c0:85:74:60:bb:50:80:e0: e4:8f:5b:ed:0c:36:ac:f5:97:57:f8:88:d0:e3:de: 15:91:83:9d:62:1d:c8:75:d1:86:58:71:99:b7:1e: fc:4f:ce:0a:fd:60:33:16:60:36:44:ce:90:c9:2d: 53:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4F:91:E8:AC:6D:E4:D7:30:77:6F:54:93:0F:07:10:9C:92:18:8A X509v3 Authority Key Identifier: keyid:5F:C6:89:EA:B9:41:D2:E0:F4:03:F4:D8:FE:7B:88:64:9C:CD:7D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:42:a0:27:cd:d4:15:6b:fa:eb:2b:87:7f:2f:42:8d:09:b1: 91:df:9c:d4:98:72:e5:80:cd:c6:47:c2:d2:69:2f:d3:73:92: fc:ad:d1:77:cb:96:78:9d:22:43:f7:13:46:35:3a:82:60:6e: b5:95:d2:a5:d9:85:0d:53:ff:f3:91:4b:b7:91:2c:9d:26:f1: c3:50:18:aa:62:53:17:29:1f:dd:f0:6e:63:98:c4:d3:8e:02: 4f:0b:39:d5:df:c0:4b:4c:6b:21:bb:59:a9:54:7d:db:81:5b: 5f:43:30:c1:77:28:ae:31:bc:c6:db:aa:ba:a7:a2:f8:45:6a: ac:98:5d:89:7f:3f:30:d9:dc:29:0a:bc:5a:91:c5:08:e0:12: 94:f4:d1:1e:1e:80:e3:aa:7f:af:40:18:ad:4a:80:be:f4:5c: e9:a8:a2:34:d6:1b:47:61:fa:e8:93:82:d6:83:7a:14:00:dd: a9:bb:c8:a4:c6:cd:1f:29:0b:03:8e:8e:e5:fd:37:3c:27:8a: 4b:6d:bb:f7:9f:9e:84:33:e7:ed:63:91:76:c7:6c:db:92:dd: ae:d9:0b:69:ec:eb:e4:33:73:37:cd:1c:04:fb:cf:e0:85:70: c2:9c:61:24:d5:92:a8:e3:e9:ab:87:c3:58:ef:ae:fe:f8:8b: 9a:bc:c1:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfnwpfX+CR7PCYyAxjF9DX8ixqGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDNjg5RUFCOTQxRDJFMEY0MDNGNEQ4RkU3Qjg4NjQ5 Q0NEN0RDNDAeFw0yNjA5MjAwNjU1NDdaFw0yNjA5MjEwODQ1NDdaMDMxMTAvBgNV BAMTKDg1NEY5MUU4QUM2REU0RDczMDc3NkY1NDkzMEYwNzEwOUM5MjE4OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSU9ZwGacgb5oRDCd+Xf5kyWyG RFQ5IYQX9DU/sUD2FE0LTsdXAH+QJF53JCLUvMTPFK++1WHz+O51IqFsE1akaT4k DII34HD38Y/xPbqRa3tTmZMJxkDaH0p5LZWpo707rvzKT2HE3HSq/KSRwP5IZtas dXzPkaN5O20jUzcBvoA32f4Z4TwKg78k/QB5nh724sNnGcDHsipyJgn0wdolB5dc g9Q3HJQUyt/RKnYCms9ihdkyKHSWiQ3NIA9jMRf3jISjF4MbJTnAhXRgu1CA4OSP W+0MNqz1l1f4iNDj3hWRg51iHch10YZYcZm3HvxPzgr9YDMWYDZEzpDJLVNFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhU+R6Kxt5Ncwd29Ukw8HEJySGIowHwYDVR0j BBgwFoAUX8aJ6rlB0uD0A/TY/nuIZJzNfcQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFlOGJjYzktNDNhMS00YmFiLWI2ZDgtMWE5N2QwZDNjMjFkLzAvNUZDNjg5RUFC OTQxRDJFMEY0MDNGNEQ4RkU3Qjg4NjQ5Q0NEN0RDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkM2ODlFQUI5NDFEMkUwRjQwM0Y0RDhGRTdCODg2NDlDQ0Q3 REM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFlOGJjYzktNDNhMS00YmFiLWI2 ZDgtMWE5N2QwZDNjMjFkLzAvNUZDNjg5RUFCOTQxRDJFMEY0MDNGNEQ4RkU3Qjg4 NjQ5Q0NEN0RDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHNCoCfN1BVr+usrh38vQo0JsZHfnNSYcuWA zcZHwtJpL9Nzkvyt0XfLlnidIkP3E0Y1OoJgbrWV0qXZhQ1T//ORS7eRLJ0m8cNQ GKpiUxcpH93wbmOYxNOOAk8LOdXfwEtMayG7WalUfduBW19DMMF3KK4xvMbbqrqn ovhFaqyYXYl/PzDZ3CkKvFqRxQjgEpT00R4egOOqf69AGK1KgL70XOmoojTWG0dh +uiTgtaDehQA3am7yKTGzR8pCwOOjuX9Nzwnikttu/efnoQz5+1jkXbHbNuS3a7Z C2ns6+QzczfNHAT7z+CFcMKcYSTVkqjj6auHw1jvrv74i5q8wS4= -----END CERTIFICATE-----Generated at Mon Sep 21 03:01:29 2026 by rpki-client