$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft File: 5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft (raw, json) Hash identifier: 1XhBaBg3O/7h/rCx+zi5b9nau+WnNhjt2p//XBPxBKc= Subject key identifier: C2:F4:ED:AF:56:0C:93:3E:47:82:40:D4:2B:17:4B:FC:51:A8:68:96 Authority key identifier: 5A:7D:37:40:96:A7:3D:44:72:AE:1F:FE:EE:E2:44:73:C1:EC:70:9C Certificate issuer: /CN=5A7D374096A73D4472AE1FFEEEE24473C1EC709C Certificate serial: 6AB2EF1EBCF9FFD388FB8BCABA567E0D0F5D716F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft Manifest number: BE Signing time: Sun 20 Sep 2026 18:50:05 +0000 Manifest this update: Sun 20 Sep 2026 18:45:05 +0000 Manifest next update: Mon 21 Sep 2026 22:12:05 +0000 Files and hashes: 1: 3130332e3132372e3136382e302f32332d3234203d3e203435323837.roa (hash: gVVcFzT/K9Q9nDNA6t6fupz9aVwPxkvvDdd7B2c399E=) 2: 5A7D374096A73D4472AE1FFEEEE24473C1EC709C.crl (hash: ZriOhiVZGvenAuCWtZ01Zb/g0aaIG5w/0QH6SKERHJs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.crl rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:b2:ef:1e:bc:f9:ff:d3:88:fb:8b:ca:ba:56:7e:0d:0f:5d:71:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A7D374096A73D4472AE1FFEEEE24473C1EC709C Validity Not Before: Sep 20 18:45:05 2026 GMT Not After : Sep 21 22:12:05 2026 GMT Subject: CN=C2F4EDAF560C933E478240D42B174BFC51A86896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2b:fd:8f:30:76:65:7a:32:e9:cd:ac:16:62: 4f:17:8d:aa:32:ce:6e:14:2d:4d:1e:25:d3:c9:6b: 6d:85:cb:e5:c4:68:c4:9c:51:85:2d:2d:6b:8d:43: 60:1b:58:f7:51:d9:f6:d1:9e:7c:2a:e2:6e:c4:41: ed:fb:8e:a3:3e:6a:bd:1e:a2:0c:9a:a9:19:b6:6b: f9:0c:f5:f5:d3:48:80:e1:72:2f:a7:df:24:ae:cf: 9a:63:5a:d4:17:12:28:80:1b:cd:0a:3a:3e:e5:53: 9c:e2:d0:0b:95:15:8b:69:f3:05:fa:b6:89:7f:e9: 32:87:cd:14:62:fa:10:b9:0a:0d:f3:b7:02:05:2e: 5f:38:20:d4:64:c5:ea:fd:28:00:eb:07:5a:e6:23: fa:fc:bc:6f:e1:4f:51:c2:28:d2:10:94:ee:bb:59: 31:fb:eb:ef:90:4b:5e:00:90:31:e5:03:a6:aa:11: f3:e3:f5:16:f1:4f:30:b9:9c:2a:04:2e:03:01:bc: 92:4d:30:61:89:ce:f1:af:b2:df:16:0c:40:0e:26: 6a:3e:57:47:58:fc:fe:f2:c0:07:76:62:ff:82:0f: 84:41:80:e9:57:fa:99:db:4c:9b:2b:53:d2:3f:6c: a9:b3:ea:79:1b:0d:3f:35:ac:e8:4a:e4:e3:9a:dc: 32:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F4:ED:AF:56:0C:93:3E:47:82:40:D4:2B:17:4B:FC:51:A8:68:96 X509v3 Authority Key Identifier: keyid:5A:7D:37:40:96:A7:3D:44:72:AE:1F:FE:EE:E2:44:73:C1:EC:70:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:35:b7:2f:93:f9:4f:c9:cc:54:b9:78:d3:7b:f5:24:2b:57: 18:65:16:c7:55:a5:cb:54:d7:f2:69:12:8a:73:f9:84:45:01: e8:d4:89:48:6f:36:2f:fb:58:b8:3f:2a:ae:6e:66:6c:46:5b: 52:3d:3c:82:ef:96:c4:54:09:2f:5f:bd:04:03:e0:9f:a5:37: aa:4e:f2:f1:a0:79:61:d2:77:52:72:c9:33:0e:bd:b0:3b:ef: de:8a:10:08:84:ca:34:e5:2a:0b:93:57:98:8c:9e:d3:56:21: 3f:32:73:eb:e3:1e:26:32:fc:d9:ea:ef:d1:46:c2:e5:09:1b: be:ad:00:b2:e8:0e:6e:3c:10:10:a1:13:aa:10:e1:f2:88:01: ff:71:b8:f8:a6:00:62:af:b5:5c:b1:2f:69:7a:75:c3:25:9e: c3:0c:a5:39:74:2d:94:13:93:95:74:e5:10:0a:55:bd:45:d8: 2d:89:c4:33:93:f6:c1:d2:35:78:a9:ea:68:09:92:8f:9f:6a: af:17:ff:ff:c2:1b:14:53:83:9e:95:12:c2:8c:df:4c:82:4f: 9a:c6:8b:1c:77:aa:49:e7:ae:91:10:4b:05:2d:1d:ea:e8:7b: f6:6f:f9:81:75:59:39:61:29:65:c4:94:53:80:06:87:d9:db: 51:2c:97:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUarLvHrz5/9OI+4vKulZ+DQ9dcW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE3RDM3NDA5NkE3M0Q0NDcyQUUxRkZFRUVFMjQ0NzND MUVDNzA5QzAeFw0yNjA5MjAxODQ1MDVaFw0yNjA5MjEyMjEyMDVaMDMxMTAvBgNV BAMTKEMyRjRFREFGNTYwQzkzM0U0NzgyNDBENDJCMTc0QkZDNTFBODY4OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5K/2PMHZlejLpzawWYk8Xjaoy zm4ULU0eJdPJa22Fy+XEaMScUYUtLWuNQ2AbWPdR2fbRnnwq4m7EQe37jqM+ar0e ogyaqRm2a/kM9fXTSIDhci+n3ySuz5pjWtQXEiiAG80KOj7lU5zi0AuVFYtp8wX6 tol/6TKHzRRi+hC5Cg3ztwIFLl84INRkxer9KADrB1rmI/r8vG/hT1HCKNIQlO67 WTH76++QS14AkDHlA6aqEfPj9RbxTzC5nCoELgMBvJJNMGGJzvGvst8WDEAOJmo+ V0dY/P7ywAd2Yv+CD4RBgOlX+pnbTJsrU9I/bKmz6nkbDT81rOhK5OOa3DLlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwvTtr1YMkz5HgkDUKxdL/FGoaJYwHwYDVR0j BBgwFoAUWn03QJanPURyrh/+7uJEc8HscJwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmU3Y2M5NzYtNjlmNi00ZGI4LWE3YWItODU2YTJiYjhlYWZlLzAvNUE3RDM3NDA5 NkE3M0Q0NDcyQUUxRkZFRUVFMjQ0NzNDMUVDNzA5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QTdEMzc0MDk2QTczRDQ0NzJBRTFGRkVFRUUyNDQ3M0MxRUM3 MDlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmU3Y2M5NzYtNjlmNi00ZGI4LWE3 YWItODU2YTJiYjhlYWZlLzAvNUE3RDM3NDA5NkE3M0Q0NDcyQUUxRkZFRUVFMjQ0 NzNDMUVDNzA5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACw1ty+T+U/JzFS5eNN79SQrVxhlFsdVpctU 1/JpEopz+YRFAejUiUhvNi/7WLg/Kq5uZmxGW1I9PILvlsRUCS9fvQQD4J+lN6pO 8vGgeWHSd1JyyTMOvbA7796KEAiEyjTlKguTV5iMntNWIT8yc+vjHiYy/Nnq79FG wuUJG76tALLoDm48EBChE6oQ4fKIAf9xuPimAGKvtVyxL2l6dcMlnsMMpTl0LZQT k5V05RAKVb1F2C2JxDOT9sHSNXip6mgJko+faq8X///CGxRTg56VEsKM30yCT5rG ixx3qknnrpEQSwUtHeroe/Zv+YF1WTlhKWXElFOABofZ21Esl9k= -----END CERTIFICATE-----Generated at Mon Sep 21 05:35:34 2026 by rpki-client