$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft File: 5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft (raw, json) Hash identifier: esdc5xHY05pbrGFmcFO53u0LimYhwyKGDYjdUBTjfO0= Subject key identifier: 4B:C9:51:65:F9:29:EB:A8:1A:2A:22:BD:2C:E4:C9:76:D4:5B:98:76 Authority key identifier: 5F:71:52:CE:E0:4F:DA:FB:4A:3E:4A:0F:3F:D0:AD:F8:22:C5:CD:24 Certificate issuer: /CN=5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24 Certificate serial: 3884EFACBB866430BBD243B60EDFC6BD056BBD71 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 16:39:38 +0000 Manifest this update: Wed 16 Sep 2026 16:34:38 +0000 Manifest next update: Thu 17 Sep 2026 20:33:38 +0000 Files and hashes: 1: 3130332e36382e3233322e302f32332d3233203d3e20313530353431.roa (hash: jrMRupZddQA8qjBzuVH771xwK+1/f2hSGRy4MrlXlSc=) 2: 3130332e36382e3233332e302f32342d3234203d3e20313530353431.roa (hash: hrwaL58bLcWsXLir3kxI1OkAj6GGFQmLA1ZKUXd0Ogs=) 3: 5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl (hash: Yxxg2Gjm1YiPfo77DPTxbapU5r+j7Qt/gnD1TNhZ1ug=) 4: 3130332e36382e3233322e302f32342d3234203d3e20313530353431.roa (hash: swr4aEtGPRWs62gogwkO9Y1o8MbTFhHlDaee8r9gWcE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:33:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:84:ef:ac:bb:86:64:30:bb:d2:43:b6:0e:df:c6:bd:05:6b:bd:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24 Validity Not Before: Sep 16 16:34:38 2026 GMT Not After : Sep 17 20:33:38 2026 GMT Subject: CN=4BC95165F929EBA81A2A22BD2CE4C976D45B9876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:54:df:6b:fc:ae:50:f8:4b:ac:87:03:36:37: 49:0c:6c:93:1d:c3:a1:ec:5d:aa:ab:09:b6:e5:fd: 1b:ff:38:96:ff:62:cc:54:b4:cc:12:d8:e0:7a:ca: 39:3d:db:5d:4d:73:ba:07:8f:a6:7b:bd:47:20:c6: 7f:5b:79:e5:a8:2a:13:d0:10:21:e6:c0:e0:52:67: b3:91:d0:a8:a3:d7:5c:f7:a9:87:9e:6a:92:44:e6: 49:f9:af:3a:81:e8:9c:be:07:c6:20:62:fa:32:fe: 6a:be:d8:b9:14:d6:0d:4a:df:e2:85:b1:4a:a2:45: 1a:40:28:d7:0e:58:c0:e5:1b:41:d3:21:a2:0e:99: 20:ed:e1:db:d6:69:d3:fe:b6:0e:ec:ff:2b:d7:c6: 12:40:82:2b:54:87:6d:cc:1a:1f:ce:4d:21:62:71: 20:c1:54:24:2d:33:58:ac:0e:4a:c7:e5:23:60:b4: 8e:42:79:ac:41:c0:ff:59:90:18:9b:29:f6:2c:70: 6d:ad:45:03:57:39:f8:34:e5:a9:65:18:4e:21:88: 90:a8:86:3d:91:4c:9b:67:c9:61:9e:03:10:8d:10: 00:33:b4:3e:c1:9b:49:16:9e:44:1f:e9:0e:bb:46: e9:f3:73:91:c9:f7:95:8e:36:90:a7:cc:f1:03:cb: 96:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C9:51:65:F9:29:EB:A8:1A:2A:22:BD:2C:E4:C9:76:D4:5B:98:76 X509v3 Authority Key Identifier: keyid:5F:71:52:CE:E0:4F:DA:FB:4A:3E:4A:0F:3F:D0:AD:F8:22:C5:CD:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:9c:77:45:43:ab:27:78:7a:d5:22:f5:5e:b3:ce:4d:1b:d0: 9e:ae:a4:09:b9:a5:90:40:e6:43:9f:17:7d:28:d3:0d:b7:fc: 59:80:36:23:49:e3:97:96:e5:ea:9b:ea:5a:bb:1b:8c:8e:3e: f8:4b:d8:cb:cf:bd:11:e3:ba:cb:a5:da:5d:71:0c:d1:50:a1: ad:15:9a:de:08:3c:61:1b:7b:9c:14:5a:ae:c4:b3:90:30:ce: cb:e9:8d:08:40:08:ba:93:a2:13:fe:54:95:60:97:cc:79:03: 89:8a:f2:b1:6f:6c:3f:bb:61:ce:b4:ff:f8:0c:00:a8:9d:09: f7:26:ec:26:9c:c1:33:f0:5c:4e:aa:9b:85:9b:c1:f7:9e:b4: 57:84:59:c5:1c:d4:f1:26:fa:90:fa:c7:d0:3e:72:4d:e6:f9: e1:a2:e5:6b:58:60:c4:d8:ef:bf:be:ac:2e:30:da:e9:53:4d: fd:23:0d:cb:c8:be:5c:43:8d:13:5f:61:7e:6a:ff:63:ac:fa: 99:a2:fd:c8:e7:e8:f7:2b:2e:e7:ca:1c:98:10:b0:c5:60:ff: 88:fd:e4:a5:a2:ed:65:50:db:61:93:ae:9b:ee:7a:37:3c:10: 54:fb:7e:ba:bb:06:53:9e:27:c5:f0:1c:22:93:27:8a:39:72: a8:f9:e6:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOITvrLuGZDC70kO2Dt/GvQVrvXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY3MTUyQ0VFMDRGREFGQjRBM0U0QTBGM0ZEMEFERjgy MkM1Q0QyNDAeFw0yNjA5MTYxNjM0MzhaFw0yNjA5MTcyMDMzMzhaMDMxMTAvBgNV BAMTKDRCQzk1MTY1RjkyOUVCQTgxQTJBMjJCRDJDRTRDOTc2RDQ1Qjk4NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmVN9r/K5Q+EushwM2N0kMbJMd w6HsXaqrCbbl/Rv/OJb/YsxUtMwS2OB6yjk9211Nc7oHj6Z7vUcgxn9beeWoKhPQ ECHmwOBSZ7OR0Kij11z3qYeeapJE5kn5rzqB6Jy+B8YgYvoy/mq+2LkU1g1K3+KF sUqiRRpAKNcOWMDlG0HTIaIOmSDt4dvWadP+tg7s/yvXxhJAgitUh23MGh/OTSFi cSDBVCQtM1isDkrH5SNgtI5CeaxBwP9ZkBibKfYscG2tRQNXOfg05allGE4hiJCo hj2RTJtnyWGeAxCNEAAztD7Bm0kWnkQf6Q67Runzc5HJ95WONpCnzPEDy5aNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS8lRZfkp66gaKiK9LOTJdtRbmHYwHwYDVR0j BBgwFoAUX3FSzuBP2vtKPkoPP9Ct+CLFzSQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTgxNTU0NWMtYzk5Ni00NjBmLTkyZGQtNjI5NGFlYzkyYzUyLzAvNUY3MTUyQ0VF MDRGREFGQjRBM0U0QTBGM0ZEMEFERjgyMkM1Q0QyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RjcxNTJDRUUwNEZEQUZCNEEzRTRBMEYzRkQwQURGODIyQzVD RDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTgxNTU0NWMtYzk5Ni00NjBmLTky ZGQtNjI5NGFlYzkyYzUyLzAvNUY3MTUyQ0VFMDRGREFGQjRBM0U0QTBGM0ZEMEFE RjgyMkM1Q0QyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKcd0VDqyd4etUi9V6zzk0b0J6upAm5pZBA 5kOfF30o0w23/FmANiNJ45eW5eqb6lq7G4yOPvhL2MvPvRHjusul2l1xDNFQoa0V mt4IPGEbe5wUWq7Es5AwzsvpjQhACLqTohP+VJVgl8x5A4mK8rFvbD+7Yc60//gM AKidCfcm7CacwTPwXE6qm4WbwfeetFeEWcUc1PEm+pD6x9A+ck3m+eGi5WtYYMTY 77++rC4w2ulTTf0jDcvIvlxDjRNfYX5q/2Os+pmi/cjn6PcrLufKHJgQsMVg/4j9 5KWi7WVQ22GTrpvuejc8EFT7frq7BlOeJ8XwHCKTJ4o5cqj55hM= -----END CERTIFICATE-----Generated at Thu Sep 17 10:04:28 2026 by rpki-client