$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft File: 5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft (raw, json) Hash identifier: 5kpEcYHJqQ8bYAGI+6vqAXFN+cEpYjYdmkFCwg2S9Tk= Subject key identifier: 59:72:36:4B:E8:EA:1B:FD:7D:AD:B7:4B:C4:89:A7:E0:00:89:6A:F6 Authority key identifier: 5A:1C:1A:CE:C0:B6:74:01:7F:FB:89:F2:18:65:BA:63:FE:AA:B9:09 Certificate issuer: /CN=5A1C1ACEC0B674017FFB89F21865BA63FEAAB909 Certificate serial: 3CC5DA5C225B31A1DC91D2A6D76EF81C8399C517 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 20:24:19 +0000 Manifest this update: Wed 16 Sep 2026 20:19:19 +0000 Manifest next update: Thu 17 Sep 2026 21:29:19 +0000 Files and hashes: 1: 5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl (hash: zw8NydCvCMxr16vEEKkaqse0rMN723RNlf/I1Duafm8=) 2: 3135372e32302e34342e302f32342d3234203d3e20313532333932.roa (hash: P5BEjOqlnRhd5dHiMK0aXJooM/BcbKofscPw2JJ5bRQ=) 3: 3135372e32302e34352e302f32342d3234203d3e20313532333932.roa (hash: PIubzi7VZ2N4uYX3mam6XOmZc4gw31pwt2ndjjqEeIM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:c5:da:5c:22:5b:31:a1:dc:91:d2:a6:d7:6e:f8:1c:83:99:c5:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A1C1ACEC0B674017FFB89F21865BA63FEAAB909 Validity Not Before: Sep 16 20:19:19 2026 GMT Not After : Sep 17 21:29:19 2026 GMT Subject: CN=5972364BE8EA1BFD7DADB74BC489A7E000896AF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:db:e6:3e:ef:2e:3a:52:f1:b7:1c:5e:3c:86: 2a:34:18:70:2d:83:1e:72:69:13:e6:2b:43:d2:54: 91:61:0d:c1:6c:67:ac:5e:35:fb:23:52:00:98:12: 7c:8e:d0:e1:bf:40:de:dd:56:4d:64:93:2a:9b:7b: f0:8e:82:62:83:e9:41:5a:ce:b7:93:f0:fc:1a:d9: ac:db:a9:ff:0d:75:22:d6:b2:a1:ca:d1:9c:02:3e: e9:4a:06:72:bb:09:37:a2:ee:92:e2:04:df:f7:35: 06:0e:5b:ab:ed:f8:da:54:f4:9c:3c:4c:9f:97:fb: 6f:7a:87:94:a0:90:24:c0:aa:c7:a0:56:2c:bb:62: 80:59:ff:ac:3d:ce:b0:d9:e5:d4:0d:ec:08:47:9f: d0:f9:0b:75:31:e7:3a:88:3a:3f:40:b7:1d:01:b6: 2e:6f:67:42:e1:b0:f2:9c:81:22:5e:4b:f1:8f:8f: 44:b8:c4:10:bf:cb:6f:c5:22:27:1c:7d:e6:c9:cb: b0:12:a6:02:46:6d:92:4f:56:04:e8:90:2c:db:e7: f8:d3:2a:9b:35:94:f7:be:eb:cb:8a:8b:93:ff:e0: e3:2f:41:15:0a:47:c8:13:5a:a8:28:5b:77:c3:26: 05:43:83:7c:ca:40:4f:18:48:89:78:97:29:fc:db: 88:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:72:36:4B:E8:EA:1B:FD:7D:AD:B7:4B:C4:89:A7:E0:00:89:6A:F6 X509v3 Authority Key Identifier: keyid:5A:1C:1A:CE:C0:B6:74:01:7F:FB:89:F2:18:65:BA:63:FE:AA:B9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:f5:78:e6:e0:b8:52:7f:94:a0:3d:b5:98:78:8d:a2:52:74: 52:73:17:e2:d1:9d:2d:a4:34:27:42:72:34:4b:93:20:26:8d: c7:08:95:9a:67:3e:b3:3a:5e:50:e1:3e:97:33:d2:67:a3:99: c0:2e:6d:78:45:38:13:50:a5:c6:23:5b:3a:f8:c6:45:c7:f7: 5f:a8:1b:a8:0e:a5:d1:c1:73:f7:61:a2:01:e6:e3:7a:98:f8: dc:01:ad:8f:1e:1b:ef:4d:ee:35:97:c2:bd:48:d4:7a:42:31: 0d:f2:5a:bc:fd:5c:75:ff:71:4c:c9:fb:dc:ce:f3:f9:11:41: 66:a5:33:bd:7a:e6:7f:ed:58:5b:3a:bb:a0:4d:f9:ae:63:2c: 86:dd:fe:d7:e4:94:0e:71:f6:26:84:68:ec:5f:db:d7:11:c0: a5:29:a9:1c:fc:f6:4d:7c:f8:3a:f2:5a:3f:96:bf:ee:3f:0b: 44:c2:a7:63:4f:37:2f:12:be:9b:2e:79:f9:77:b6:78:08:89: e6:3a:45:19:f6:16:a2:39:b5:1b:9e:eb:1d:6c:cb:d2:55:9c: 5c:2d:16:bf:72:6d:aa:cf:8f:87:2b:b9:b5:0b:62:eb:21:f0: 35:e8:ea:32:3f:37:51:50:96:31:72:39:3f:3f:88:f9:35:c4: 13:eb:8f:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPMXaXCJbMaHckdKm1274HIOZxRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUExQzFBQ0VDMEI2NzQwMTdGRkI4OUYyMTg2NUJBNjNG RUFBQjkwOTAeFw0yNjA5MTYyMDE5MTlaFw0yNjA5MTcyMTI5MTlaMDMxMTAvBgNV BAMTKDU5NzIzNjRCRThFQTFCRkQ3REFEQjc0QkM0ODlBN0UwMDA4OTZBRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk2+Y+7y46UvG3HF48hio0GHAt gx5yaRPmK0PSVJFhDcFsZ6xeNfsjUgCYEnyO0OG/QN7dVk1kkyqbe/COgmKD6UFa zreT8Pwa2azbqf8NdSLWsqHK0ZwCPulKBnK7CTei7pLiBN/3NQYOW6vt+NpU9Jw8 TJ+X+296h5SgkCTAqsegViy7YoBZ/6w9zrDZ5dQN7AhHn9D5C3Ux5zqIOj9Atx0B ti5vZ0LhsPKcgSJeS/GPj0S4xBC/y2/FIiccfebJy7ASpgJGbZJPVgTokCzb5/jT Kps1lPe+68uKi5P/4OMvQRUKR8gTWqgoW3fDJgVDg3zKQE8YSIl4lyn824iVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWXI2S+jqG/19rbdLxImn4ACJavYwHwYDVR0j BBgwFoAUWhwazsC2dAF/+4nyGGW6Y/6quQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU4OGRmZjctNmE5Mi00MjkzLTg4MDAtYjUzZTJhOTE4YWNhLzAvNUExQzFBQ0VD MEI2NzQwMTdGRkI4OUYyMTg2NUJBNjNGRUFBQjkwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81QTFDMUFDRUMwQjY3NDAxN0ZGQjg5RjIxODY1QkE2M0ZFQUFC OTA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU4OGRmZjctNmE5Mi00MjkzLTg4 MDAtYjUzZTJhOTE4YWNhLzAvNUExQzFBQ0VDMEI2NzQwMTdGRkI4OUYyMTg2NUJB NjNGRUFBQjkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFH1eObguFJ/lKA9tZh4jaJSdFJzF+LRnS2k NCdCcjRLkyAmjccIlZpnPrM6XlDhPpcz0mejmcAubXhFOBNQpcYjWzr4xkXH91+o G6gOpdHBc/dhogHm43qY+NwBrY8eG+9N7jWXwr1I1HpCMQ3yWrz9XHX/cUzJ+9zO 8/kRQWalM7165n/tWFs6u6BN+a5jLIbd/tfklA5x9iaEaOxf29cRwKUpqRz89k18 +DryWj+Wv+4/C0TCp2NPNy8Svpsuefl3tngIieY6RRn2FqI5tRue6x1sy9JVnFwt Fr9ybarPj4crubULYush8DXo6jI/N1FQljFyOT8/iPk1xBPrj7Y= -----END CERTIFICATE-----Generated at Thu Sep 17 14:23:47 2026 by rpki-client