$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft File: 5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft (raw, json) Hash identifier: 9rJGvAyGuAjIghRDauG4T7bTnfcP6c6xYSuXCz6d3y4= Subject key identifier: 39:B1:58:F8:13:10:6A:75:E9:16:30:33:66:99:7B:49:4F:89:71:5A Authority key identifier: 5B:E4:C2:9E:EA:3D:D9:3B:A1:C2:71:DC:BA:88:BA:B8:BC:D9:DA:6A Certificate issuer: /CN=5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A Certificate serial: 4F5C8C59D72B9B50A2F2FF72B5244663F534AFB5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 06:06:04 +0000 Manifest this update: Thu 17 Sep 2026 06:01:04 +0000 Manifest next update: Fri 18 Sep 2026 07:14:04 +0000 Files and hashes: 1: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: FPQ2j3eI8yNWuffWW/KivobaVVZM8ZwQRSH4Q+fMF+8=) 2: 3130332e31372e37372e302f32342d3234203d3e20313331373831.roa (hash: CZzWnarJZGz+1ihXkwXcLlHMFIQJITOjnmvNdl7iuE0=) 3: 3130332e31372e37362e302f32342d3234203d3e20313331373831.roa (hash: 0nfe7ULTCbnllmGpbf8D6GJGB5XbaGw6kKl4Vys0voA=) 4: 5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.crl (hash: H+SUwMNgya905At0ZOEdLGrNOqOoycsZrjjLI6AMPz0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.crl rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:5c:8c:59:d7:2b:9b:50:a2:f2:ff:72:b5:24:46:63:f5:34:af:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A Validity Not Before: Sep 17 06:01:04 2026 GMT Not After : Sep 18 07:14:04 2026 GMT Subject: CN=39B158F813106A75E916303366997B494F89715A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:75:33:ef:c0:55:1c:98:a5:07:43:ac:d4:2b: 28:33:42:32:c2:c4:f2:44:53:61:4b:62:ce:e0:5a: 65:92:1b:d5:63:9c:8f:62:1e:e6:cb:a6:b5:c8:76: 63:4a:45:cf:6f:25:e1:38:0f:0d:f6:b5:8a:0b:0a: 07:ab:e1:dd:f0:26:1c:95:9f:0a:3c:e0:0f:85:03: 2c:1f:e3:8f:37:78:9f:50:34:fa:94:19:5f:75:7d: 59:94:9c:c7:d8:3c:fa:e7:2b:77:5e:9b:6d:77:49: 83:49:5c:bf:bd:aa:39:38:2e:9c:6c:c9:77:39:9e: 9f:c7:10:1a:43:fe:ea:b6:c4:2d:7d:1d:b8:38:f4: 70:49:34:02:3c:af:d2:07:16:92:cb:9e:6d:27:5b: 88:6e:fa:32:f3:c2:38:5b:fe:46:05:65:f7:d8:d4: d8:c2:89:4d:46:ad:80:5e:62:34:33:30:50:7f:f3: 5d:7d:2e:76:fe:19:5d:d8:77:1a:c7:a3:a1:6b:ae: 54:a1:95:af:65:2a:d9:52:dd:0a:23:88:57:e3:35: 3c:01:91:9f:e7:95:4d:7f:81:28:d5:57:94:41:2d: 68:52:f3:45:d8:2a:c6:19:96:23:16:d5:02:63:c2: 71:4d:cb:e5:ea:ab:e7:ad:aa:9c:8c:e2:17:5b:36: 8d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B1:58:F8:13:10:6A:75:E9:16:30:33:66:99:7B:49:4F:89:71:5A X509v3 Authority Key Identifier: keyid:5B:E4:C2:9E:EA:3D:D9:3B:A1:C2:71:DC:BA:88:BA:B8:BC:D9:DA:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:8f:93:ba:1e:a9:a4:b2:5f:79:77:f5:21:db:22:42:00:36: 7d:47:21:ea:96:68:e0:e9:70:18:e5:60:d5:48:af:c9:df:ab: 6b:c2:c6:8e:53:1c:2b:10:6a:dd:60:e7:c8:2e:3b:e6:b3:8d: b7:45:c2:10:e5:94:6d:38:07:26:da:78:47:0e:9d:1b:57:b9: 05:c5:c8:29:be:13:53:e4:25:99:a3:c7:1e:65:e9:4c:34:75: c5:5e:4a:07:d2:2e:0e:72:47:4c:f7:24:82:b9:59:e5:5e:ab: 5d:b1:ab:ee:d4:92:19:d0:e6:af:f1:9d:ef:2c:76:a1:71:5b: 91:97:3b:7b:a4:45:58:22:f9:35:ce:bd:a8:5b:cc:6b:50:99: 11:2b:00:5e:f5:e7:6b:b3:15:98:91:60:1d:bb:c2:1a:1d:ba: b1:31:a0:0a:91:ee:af:6c:fe:f3:6e:1b:a0:ed:03:ab:1a:d3: 32:94:bf:33:3f:7b:73:b8:31:6d:2b:af:93:cc:52:e8:e2:f2: da:11:ac:a6:10:2b:6f:60:6a:40:70:6a:44:76:ce:0f:d7:65: 03:51:c6:22:ba:01:c8:40:f0:39:07:5a:32:38:0b:d5:48:5f: dd:d4:b8:9b:37:3b:42:fa:5f:06:ec:95:8e:c4:aa:d9:01:43: 04:10:f6:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT1yMWdcrm1Ci8v9ytSRGY/U0r7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJFNEMyOUVFQTNERDkzQkExQzI3MURDQkE4OEJBQjhC Q0Q5REE2QTAeFw0yNjA5MTcwNjAxMDRaFw0yNjA5MTgwNzE0MDRaMDMxMTAvBgNV BAMTKDM5QjE1OEY4MTMxMDZBNzVFOTE2MzAzMzY2OTk3QjQ5NEY4OTcxNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUdTPvwFUcmKUHQ6zUKygzQjLC xPJEU2FLYs7gWmWSG9VjnI9iHubLprXIdmNKRc9vJeE4Dw32tYoLCger4d3wJhyV nwo84A+FAywf4483eJ9QNPqUGV91fVmUnMfYPPrnK3dem213SYNJXL+9qjk4Lpxs yXc5np/HEBpD/uq2xC19Hbg49HBJNAI8r9IHFpLLnm0nW4hu+jLzwjhb/kYFZffY 1NjCiU1GrYBeYjQzMFB/8119Lnb+GV3YdxrHo6FrrlShla9lKtlS3QojiFfjNTwB kZ/nlU1/gSjVV5RBLWhS80XYKsYZliMW1QJjwnFNy+Xqq+etqpyM4hdbNo2fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUObFY+BMQanXpFjAzZpl7SU+JcVowHwYDVR0j BBgwFoAUW+TCnuo92TuhwnHcuoi6uLzZ2mowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmEwNzE1MTQtZTRkZS00YWNlLWEwZGYtZjdjNGFiODA3NGE1LzAvNUJFNEMyOUVF QTNERDkzQkExQzI3MURDQkE4OEJBQjhCQ0Q5REE2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QkU0QzI5RUVBM0REOTNCQTFDMjcxRENCQTg4QkFCOEJDRDlE QTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmEwNzE1MTQtZTRkZS00YWNlLWEw ZGYtZjdjNGFiODA3NGE1LzAvNUJFNEMyOUVFQTNERDkzQkExQzI3MURDQkE4OEJB QjhCQ0Q5REE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABSPk7oeqaSyX3l39SHbIkIANn1HIeqWaODp cBjlYNVIr8nfq2vCxo5THCsQat1g58guO+azjbdFwhDllG04BybaeEcOnRtXuQXF yCm+E1PkJZmjxx5l6Uw0dcVeSgfSLg5yR0z3JIK5WeVeq12xq+7UkhnQ5q/xne8s dqFxW5GXO3ukRVgi+TXOvahbzGtQmRErAF7152uzFZiRYB27whodurExoAqR7q9s /vNuG6DtA6sa0zKUvzM/e3O4MW0rr5PMUuji8toRrKYQK29gakBwakR2zg/XZQNR xiK6AchA8DkHWjI4C9VIX93UuJs3O0L6XwbslY7EqtkBQwQQ9j4= -----END CERTIFICATE-----Generated at Thu Sep 17 09:15:36 2026 by rpki-client