$ rpki-client -vvvf rpki-rsync.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.mft File: 5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.mft (raw, json) Hash identifier: Z2g95mDo+sCjOd2Ubhw62go500kDjtEs9a+ZF9gCZ9M= Subject key identifier: 46:AF:FC:22:50:34:12:3E:50:55:FA:D6:1E:FA:DC:62:19:97:11:8D Authority key identifier: 5A:FE:24:D2:3E:36:25:48:4D:7D:9B:3E:BA:00:25:AA:9C:0E:EE:A2 Certificate issuer: /CN=5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2 Certificate serial: 6EE3C3B3FFD0C667322BDBA37572AC071BD6AAB3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.mft Manifest number: BA Signing time: Thu 17 Sep 2026 04:08:38 +0000 Manifest this update: Thu 17 Sep 2026 04:03:38 +0000 Manifest next update: Fri 18 Sep 2026 07:09:38 +0000 Files and hashes: 1: 5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.crl (hash: kgyfuWZEY8RIG3PNRs54OVj+Qs27s/V4Zqsghdt8EnU=) 2: 3135372e32302e3233382e302f32332d3233203d3e20313532343239.roa (hash: j3/lM2rV4nx+Cn6dsqDo2ERknLnpkGf86BWvcy+vYVs=) 3: 3135372e32302e3233382e302f32342d3234203d3e20313532343239.roa (hash: Fy9HvcnOOuartl2MyrCM5SQFmtu1CV6p6EtA15KIkk0=) 4: 3135372e32302e3233392e302f32342d3234203d3e20313532343239.roa (hash: lTUq2TXc5o2FAnT0cBjbniSYESMJX3Ig96J0JouvM0I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.crl rsync://rpki-rsync.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:09:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:e3:c3:b3:ff:d0:c6:67:32:2b:db:a3:75:72:ac:07:1b:d6:aa:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2 Validity Not Before: Sep 17 04:03:38 2026 GMT Not After : Sep 18 07:09:38 2026 GMT Subject: CN=46AFFC225034123E5055FAD61EFADC621997118D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:81:7c:86:43:05:2a:a2:d2:df:67:7f:76:f3: d1:1b:8e:a2:fe:9c:d2:c5:0c:3b:c2:69:39:d5:16: cf:c7:8f:fa:bc:d1:40:f8:30:d5:88:4b:2e:b8:bd: 19:8b:3f:8a:d6:62:8d:eb:e2:20:ea:95:7f:58:3d: 8b:ef:cf:03:e5:69:15:ea:d4:dc:90:c7:42:74:ba: 76:a7:56:79:dc:a7:ab:1d:1a:ed:bf:ed:5d:d2:ba: 58:0f:b7:1d:0d:6f:d6:98:33:d3:a2:04:81:bf:cd: 51:5f:2b:87:db:42:ae:be:a9:cd:dd:c7:84:5e:2c: c8:0f:19:b0:e7:d0:38:3d:c4:53:c2:eb:9b:85:7e: 26:df:41:ef:92:5e:d8:4a:9e:10:97:1b:6a:75:3c: a5:71:f9:37:af:f1:be:4b:c1:9e:8f:90:e2:86:01: 4f:5d:6a:4d:fa:53:79:41:b3:16:f5:bd:e7:4c:46: 52:0b:ba:9f:d8:a8:85:73:4a:d3:34:58:33:3b:6b: 12:f8:aa:63:64:fa:e2:23:83:60:63:ff:3b:ac:3c: a9:7c:f5:74:d7:49:ba:96:e4:62:3c:c6:23:91:4f: d6:c3:ff:02:1c:29:6b:68:fb:e5:77:1d:51:26:5d: 47:9b:40:05:d8:36:4c:be:ea:7a:5f:03:66:a7:09: 9f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AF:FC:22:50:34:12:3E:50:55:FA:D6:1E:FA:DC:62:19:97:11:8D X509v3 Authority Key Identifier: keyid:5A:FE:24:D2:3E:36:25:48:4D:7D:9B:3E:BA:00:25:AA:9C:0E:EE:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/5AFE24D23E3625484D7D9B3EBA0025AA9C0EEEA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:9e:b6:03:df:75:54:e2:d8:3d:e3:e3:9f:c8:ad:cb:09:c3: 22:27:2f:d0:88:e1:69:da:83:00:c0:d4:08:40:9d:0c:1e:cc: c9:80:8b:ae:9d:0c:41:7a:5d:44:52:47:95:7e:42:ae:ac:d0: c1:71:db:f2:86:c1:27:11:60:5b:53:f4:d1:79:70:b6:2f:37: ca:97:c9:07:6d:f2:9b:8d:4d:e8:9d:b7:77:ad:87:d2:53:81: ec:b5:78:66:f4:ae:ce:d0:3d:c4:2e:e1:8f:6b:ee:e0:00:59: eb:52:7a:31:b2:7b:7b:45:44:b3:f4:f9:bb:55:28:28:d8:15: 9b:fb:60:5b:83:c7:72:9d:81:89:d9:60:f5:78:aa:1e:d9:40: 81:e1:bb:ef:5f:b2:ac:63:00:b6:0c:60:84:b2:d7:85:ba:e1: 32:ca:1b:7c:6b:7e:6b:05:96:b8:03:40:f4:57:2f:dd:15:d0: 88:b5:a9:aa:c2:6b:45:4e:c1:4b:0c:f2:90:ee:ad:07:99:86: b7:3a:71:7b:24:82:81:a0:6d:66:ba:f8:9a:fd:d0:f6:70:8f: 8c:3c:81:e5:8a:08:8a:79:6f:85:cc:cd:f2:fd:39:97:3a:0b: 1b:45:ea:99:6e:4c:0a:ba:dc:0b:dc:9b:58:b2:24:30:c1:8f: 9f:83:33:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbuPDs//QxmcyK9ujdXKsBxvWqrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFGRTI0RDIzRTM2MjU0ODREN0Q5QjNFQkEwMDI1QUE5 QzBFRUVBMjAeFw0yNjA5MTcwNDAzMzhaFw0yNjA5MTgwNzA5MzhaMDMxMTAvBgNV BAMTKDQ2QUZGQzIyNTAzNDEyM0U1MDU1RkFENjFFRkFEQzYyMTk5NzExOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1gXyGQwUqotLfZ39289EbjqL+ nNLFDDvCaTnVFs/Hj/q80UD4MNWISy64vRmLP4rWYo3r4iDqlX9YPYvvzwPlaRXq 1NyQx0J0unanVnncp6sdGu2/7V3SulgPtx0Nb9aYM9OiBIG/zVFfK4fbQq6+qc3d x4ReLMgPGbDn0Dg9xFPC65uFfibfQe+SXthKnhCXG2p1PKVx+Tev8b5LwZ6PkOKG AU9dak36U3lBsxb1vedMRlILup/YqIVzStM0WDM7axL4qmNk+uIjg2Bj/zusPKl8 9XTXSbqW5GI8xiORT9bD/wIcKWto++V3HVEmXUebQAXYNky+6npfA2anCZ97AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURq/8IlA0Ej5QVfrWHvrcYhmXEY0wHwYDVR0j BBgwFoAUWv4k0j42JUhNfZs+ugAlqpwO7qIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MThkMWM0NDktOTc4Yy00ODQ1LWI4MjMtYjU5MjVhOTA1NDI3LzAvNUFGRTI0RDIz RTM2MjU0ODREN0Q5QjNFQkEwMDI1QUE5QzBFRUVBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81QUZFMjREMjNFMzYyNTQ4NEQ3RDlCM0VCQTAwMjVBQTlDMEVF RUEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMThkMWM0NDktOTc4Yy00ODQ1LWI4 MjMtYjU5MjVhOTA1NDI3LzAvNUFGRTI0RDIzRTM2MjU0ODREN0Q5QjNFQkEwMDI1 QUE5QzBFRUVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICetgPfdVTi2D3j45/IrcsJwyInL9CI4Wna gwDA1AhAnQwezMmAi66dDEF6XURSR5V+Qq6s0MFx2/KGwScRYFtT9NF5cLYvN8qX yQdt8puNTeidt3eth9JTgey1eGb0rs7QPcQu4Y9r7uAAWetSejGye3tFRLP0+btV KCjYFZv7YFuDx3KdgYnZYPV4qh7ZQIHhu+9fsqxjALYMYISy14W64TLKG3xrfmsF lrgDQPRXL90V0Ii1qarCa0VOwUsM8pDurQeZhrc6cXskgoGgbWa6+Jr90PZwj4w8 geWKCIp5b4XMzfL9OZc6CxtF6pluTAq63Avcm1iyJDDBj5+DM3M= -----END CERTIFICATE-----Generated at Thu Sep 17 16:25:16 2026 by rpki-client