$ rpki-client -vvvf rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.mft File: 509D7A005D22B25F29771D4736A9F3273A87402B.mft (raw, json) Hash identifier: 6O8CEA3CTpqL2GdXz2V0cMWEgckj/7a5nN8CmI2dO50= Subject key identifier: C4:EA:33:A9:82:4D:B1:B7:63:76:F2:FF:DD:34:6A:2A:4F:8B:CB:AD Authority key identifier: 50:9D:7A:00:5D:22:B2:5F:29:77:1D:47:36:A9:F3:27:3A:87:40:2B Certificate issuer: /CN=509D7A005D22B25F29771D4736A9F3273A87402B Certificate serial: 4159E58DEC7655F278A25B305DCF2879A3A4A6B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/509D7A005D22B25F29771D4736A9F3273A87402B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 01:40:32 +0000 Manifest this update: Thu 17 Sep 2026 01:35:32 +0000 Manifest next update: Fri 18 Sep 2026 03:14:32 +0000 Files and hashes: 1: 3130332e39372e362e302f32342d3234203d3e20313336313237.roa (hash: RQSgO7tNppNvAC3aE8/fyIG2xxaOqC+3ztcNnXjPeng=) 2: 3130332e39372e342e302f32342d3234203d3e20313336313237.roa (hash: 3XT6Qf//u+3dqP7/6tKzMllxBOnpkDd6boyw9AssiHI=) 3: 509D7A005D22B25F29771D4736A9F3273A87402B.crl (hash: eTrTcZpoBDIIXtzFQN15p+KiEaLKWujAguR8tAnAt7k=) 4: 3130332e39372e352e302f32342d3234203d3e20313336313237.roa (hash: gia04ffSWp+0qNudeLLR7irdY7oXCN/dKfEZqry+RoQ=) 5: 323430313a383034303a3a2f33322d3332203d3e20313336313237.roa (hash: Dj85ZEdEHR8+WCo+8/1VIzd5RABBzm91ckkaaPaldnM=) 6: 3130332e39372e342e302f32322d3234203d3e20313336313237.roa (hash: JKx5cXFJ9JwbuaKvmzbMBf7ucrHYe7PUJvHjTqORfvc=) 7: 3130332e39372e372e302f32342d3234203d3e20313336313237.roa (hash: u9MbGwZTtdpRxvA0JKGeSH6mVkoh1gSizjeQTtefh6M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.crl rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/509D7A005D22B25F29771D4736A9F3273A87402B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:59:e5:8d:ec:76:55:f2:78:a2:5b:30:5d:cf:28:79:a3:a4:a6:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509D7A005D22B25F29771D4736A9F3273A87402B Validity Not Before: Sep 17 01:35:32 2026 GMT Not After : Sep 18 03:14:32 2026 GMT Subject: CN=C4EA33A9824DB1B76376F2FFDD346A2A4F8BCBAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5d:ec:89:ee:c1:1d:9d:b1:f7:bd:c9:8e:33: 9b:ec:e8:ae:b6:24:06:92:97:79:b6:6d:fc:46:32: b4:e8:f3:ec:10:1a:c8:54:a6:b9:1d:38:13:62:ac: 3a:94:de:b7:64:f6:66:dd:50:1d:47:a4:0d:34:e3: 37:c9:dc:8e:98:62:2c:b3:c7:dc:4a:a2:c5:64:d9: 4f:9e:53:7a:83:75:c7:fe:fa:78:fa:8d:60:4a:78: 47:68:18:0a:06:d2:ca:48:c8:a6:c1:4f:f5:60:e3: 0b:c8:06:a6:4e:2c:f7:1c:a7:6f:db:86:f2:46:be: 6c:51:b3:77:0b:40:56:94:79:13:32:c9:35:54:53: 5c:1d:4e:3e:09:ed:07:77:79:9e:4f:b5:ca:99:4a: 06:a8:66:d9:b8:3d:c5:3b:7d:49:2d:ef:fa:b1:5b: 4c:e0:e0:26:78:0a:73:1a:b2:40:36:ed:df:a7:eb: 04:c2:a5:e1:1c:2e:5d:e5:4f:ba:91:a2:00:f2:b0: 8d:a6:1d:c2:14:c3:25:11:4d:db:75:8a:4a:30:15: 8d:94:73:bf:4b:b3:a5:8b:b3:27:1f:33:5c:81:1b: c6:a8:20:a6:7c:06:31:8d:60:8e:aa:68:b5:b5:19: f9:f7:d6:61:da:a8:3f:94:fa:90:1f:6c:b4:c2:9a: 27:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EA:33:A9:82:4D:B1:B7:63:76:F2:FF:DD:34:6A:2A:4F:8B:CB:AD X509v3 Authority Key Identifier: keyid:50:9D:7A:00:5D:22:B2:5F:29:77:1D:47:36:A9:F3:27:3A:87:40:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/509D7A005D22B25F29771D4736A9F3273A87402B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d5:e3:f9:34:17:66:52:84:36:b3:ad:f0:f7:e6:f3:0f:59: 67:5b:57:06:62:25:22:79:40:1f:db:54:b9:37:b1:06:6d:5b: d8:2d:43:2a:ad:4a:aa:1b:af:f6:51:24:84:c2:2d:c4:9c:6d: 97:fa:aa:38:da:fb:bf:c6:9e:f3:7a:98:f3:7c:79:54:db:a4: a1:37:d5:ef:61:0b:c7:30:af:45:e9:5f:54:80:e8:6b:ff:ad: 6f:66:b1:bb:ca:93:d4:18:af:d9:c3:8f:5f:8c:80:d0:c9:40: 3a:4c:58:da:ce:5a:3e:f6:58:0f:10:f9:2c:e6:1c:53:db:2d: 02:c5:a3:2d:a7:3c:26:80:db:14:6c:27:88:3c:af:85:be:3f: 03:9d:4c:64:61:79:10:23:01:59:1e:2d:82:4f:c5:62:7d:5d: 51:81:39:7e:70:cd:ef:89:2e:c3:8e:05:7d:a4:2c:02:5a:e9: 4e:fe:b7:60:43:4d:7a:ee:e5:ba:81:7b:c5:ee:5a:a0:57:ba: c7:65:e6:22:8d:a4:8f:47:6a:54:10:b3:63:11:de:0a:7b:e4: 13:5a:4c:6f:18:d4:d4:64:e5:3f:c0:2a:df:33:46:c3:be:29: 79:41:af:39:7e:68:ca:43:c2:3f:f7:50:0c:ff:8d:32:36:7a: 75:c4:84:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQVnljex2VfJ4olswXc8oeaOkprQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA5RDdBMDA1RDIyQjI1RjI5NzcxRDQ3MzZBOUYzMjcz QTg3NDAyQjAeFw0yNjA5MTcwMTM1MzJaFw0yNjA5MTgwMzE0MzJaMDMxMTAvBgNV BAMTKEM0RUEzM0E5ODI0REIxQjc2Mzc2RjJGRkREMzQ2QTJBNEY4QkNCQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLXeyJ7sEdnbH3vcmOM5vs6K62 JAaSl3m2bfxGMrTo8+wQGshUprkdOBNirDqU3rdk9mbdUB1HpA004zfJ3I6YYiyz x9xKosVk2U+eU3qDdcf++nj6jWBKeEdoGAoG0spIyKbBT/Vg4wvIBqZOLPccp2/b hvJGvmxRs3cLQFaUeRMyyTVUU1wdTj4J7Qd3eZ5PtcqZSgaoZtm4PcU7fUkt7/qx W0zg4CZ4CnMaskA27d+n6wTCpeEcLl3lT7qRogDysI2mHcIUwyURTdt1ikowFY2U c79Ls6WLsycfM1yBG8aoIKZ8BjGNYI6qaLW1Gfn31mHaqD+U+pAfbLTCmifBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxOozqYJNsbdjdvL/3TRqKk+Ly60wHwYDVR0j BBgwFoAUUJ16AF0isl8pdx1HNqnzJzqHQCswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDRiMjczMDMtOWUzZC00ZDQyLWFmMjUtNmEwZjExODA4ZjI3LzAvNTA5RDdBMDA1 RDIyQjI1RjI5NzcxRDQ3MzZBOUYzMjczQTg3NDAyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MDlEN0EwMDVEMjJCMjVGMjk3NzFENDczNkE5RjMyNzNBODc0 MDJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDRiMjczMDMtOWUzZC00ZDQyLWFm MjUtNmEwZjExODA4ZjI3LzAvNTA5RDdBMDA1RDIyQjI1RjI5NzcxRDQ3MzZBOUYz MjczQTg3NDAyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFzV4/k0F2ZShDazrfD35vMPWWdbVwZiJSJ5 QB/bVLk3sQZtW9gtQyqtSqobr/ZRJITCLcScbZf6qjja+7/GnvN6mPN8eVTbpKE3 1e9hC8cwr0XpX1SA6Gv/rW9msbvKk9QYr9nDj1+MgNDJQDpMWNrOWj72WA8Q+Szm HFPbLQLFoy2nPCaA2xRsJ4g8r4W+PwOdTGRheRAjAVkeLYJPxWJ9XVGBOX5wze+J LsOOBX2kLAJa6U7+t2BDTXru5bqBe8XuWqBXusdl5iKNpI9HalQQs2MR3gp75BNa TG8Y1NRk5T/AKt8zRsO+KXlBrzl+aMpDwj/3UAz/jTI2enXEhNI= -----END CERTIFICATE-----Generated at Thu Sep 17 11:32:30 2026 by rpki-client