$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft File: 5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft (raw, json) Hash identifier: 55b2IY5Kl1FXSUFTLtgS71I1Tdco4eeJwhgK0K0fOE0= Subject key identifier: 20:EB:62:69:B5:AC:8C:E8:95:F1:17:38:3E:B3:9D:F3:DF:AF:CA:D5 Authority key identifier: 5D:7B:B6:DB:EA:00:E7:01:77:98:92:AA:68:6C:CB:F1:95:A3:D2:0D Certificate issuer: /CN=5D7BB6DBEA00E701779892AA686CCBF195A3D20D Certificate serial: 7B869AC28B2BEA841A8FDA7DD9375759421F70A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 10:57:09 +0000 Manifest this update: Thu 17 Sep 2026 10:52:09 +0000 Manifest next update: Fri 18 Sep 2026 11:43:09 +0000 Files and hashes: 1: 3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa (hash: efvSat7dwZI7/h9HiVLzn4AEIjGPLWmD8NmsCl2Z3eg=) 2: 3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa (hash: GD5PKDcWrMo+jB6m0zjy8Pss+9lo2DQ/VB/jtC+zOzo=) 3: 5D7BB6DBEA00E701779892AA686CCBF195A3D20D.crl (hash: N3VHDD/y8Puw+8KkPxHcB+EX1JuwdUKL5VVqE1Dmgso=) 4: 3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa (hash: 03GjbFQLnGl1ayimN4oj+A3/RatUprwYfoHZREcuOgQ=) 5: 323430333a653863303a3a2f33322d3332203d3e20313338303930.roa (hash: qU+T/ppZu7pLksCA/CM9lZkM5mfpYBVP5R9hFRPxoSA=) 6: 3130332e3132342e3234342e302f32342d3234203d3e20313338303930.roa (hash: SLYwMEBT661dkmjDpYSCi8eFhdF8+h1KCwjAiRVXBbM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.crl rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:86:9a:c2:8b:2b:ea:84:1a:8f:da:7d:d9:37:57:59:42:1f:70:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D7BB6DBEA00E701779892AA686CCBF195A3D20D Validity Not Before: Sep 17 10:52:09 2026 GMT Not After : Sep 18 11:43:09 2026 GMT Subject: CN=20EB6269B5AC8CE895F117383EB39DF3DFAFCAD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:56:54:c3:3b:dc:a5:17:a9:7c:d1:9c:fd:c2: 53:b7:98:03:d6:3f:08:47:59:33:be:25:ee:37:1d: f2:74:b8:5e:42:bb:94:fd:5d:71:77:a7:7e:a5:58: 65:95:3e:9d:eb:50:b0:64:c5:37:c2:f3:f8:28:e7: e8:d2:53:d8:fa:26:12:1c:32:3a:51:d4:53:c4:61: c2:ac:e4:80:2a:f2:b6:9f:c3:9c:e0:90:cd:5a:56: a5:fe:c6:70:d2:79:4f:72:d0:a5:6a:9f:9e:b6:a2: 35:73:ca:92:39:d7:ae:de:4b:8f:94:d5:68:48:9b: 58:56:51:e7:c6:3e:39:51:e8:a8:75:81:83:db:4a: 67:09:99:98:91:73:71:0c:6c:e5:a6:8f:f4:31:d6: 88:2d:36:1c:ea:14:cb:5c:e0:1b:6a:1a:28:f1:75: ba:f8:f3:00:d5:6d:c6:4d:ce:ef:ad:90:02:6a:fd: 07:19:0f:af:59:5e:00:fc:b1:8f:52:fb:11:74:86: 78:56:1d:77:2f:2d:28:d5:d8:1d:d8:d0:4f:af:be: 24:00:07:7a:90:f9:6c:db:07:10:ea:82:75:31:61: 16:1a:3a:64:0d:32:40:04:21:bb:d3:3a:92:08:8d: be:1a:f0:56:22:85:16:75:05:62:c0:71:85:2c:24: b9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:EB:62:69:B5:AC:8C:E8:95:F1:17:38:3E:B3:9D:F3:DF:AF:CA:D5 X509v3 Authority Key Identifier: keyid:5D:7B:B6:DB:EA:00:E7:01:77:98:92:AA:68:6C:CB:F1:95:A3:D2:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:2a:e4:b4:28:1d:6e:2d:b2:da:f1:29:75:48:a2:15:ba:89: 76:54:e5:9e:ed:d7:5a:9e:ca:e1:d9:5c:2a:e0:5c:da:99:09: 94:aa:26:29:99:c8:0f:e9:69:68:35:7f:06:bc:05:5d:49:5a: b3:47:ed:0a:42:14:5f:5b:73:04:7e:98:8d:a7:25:8b:d4:8f: 58:f9:94:f6:1d:fe:f5:b1:8c:ad:35:e1:d2:81:74:94:8f:88: e9:f6:d4:0b:b3:e8:b7:b7:50:20:71:1c:b6:65:d3:4d:58:1f: 27:2b:09:76:ab:84:96:e1:bb:5e:dd:ed:df:cf:4b:cc:38:e7: bf:3a:e7:bc:95:18:c6:3a:f5:ff:44:6d:8a:74:3a:fd:8b:55: ff:ab:e0:c7:e8:d5:ed:37:e0:0f:f4:e2:fc:50:4b:83:66:4d: 5a:b4:fe:eb:be:58:ad:67:0c:3b:89:86:22:19:ed:22:79:48: f3:cc:2f:79:aa:03:ed:d9:09:50:bd:47:ac:3e:31:1b:87:a0: ca:58:c5:ab:11:9d:0f:76:8f:8d:24:85:35:4f:c7:8e:a4:08: d6:80:6f:61:e3:90:c7:1f:88:68:6a:63:04:1d:48:18:ea:5d: a0:35:5d:18:1e:1f:e3:79:1c:30:a8:39:50:ee:95:f9:f5:73: 1b:52:e4:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe4aawosr6oQaj9p92TdXWUIfcKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ3QkI2REJFQTAwRTcwMTc3OTg5MkFBNjg2Q0NCRjE5 NUEzRDIwRDAeFw0yNjA5MTcxMDUyMDlaFw0yNjA5MTgxMTQzMDlaMDMxMTAvBgNV BAMTKDIwRUI2MjY5QjVBQzhDRTg5NUYxMTczODNFQjM5REYzREZBRkNBRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrVlTDO9ylF6l80Zz9wlO3mAPW PwhHWTO+Je43HfJ0uF5Cu5T9XXF3p36lWGWVPp3rULBkxTfC8/go5+jSU9j6JhIc MjpR1FPEYcKs5IAq8rafw5zgkM1aVqX+xnDSeU9y0KVqn562ojVzypI5167eS4+U 1WhIm1hWUefGPjlR6Kh1gYPbSmcJmZiRc3EMbOWmj/Qx1ogtNhzqFMtc4BtqGijx dbr48wDVbcZNzu+tkAJq/QcZD69ZXgD8sY9S+xF0hnhWHXcvLSjV2B3Y0E+vviQA B3qQ+WzbBxDqgnUxYRYaOmQNMkAEIbvTOpIIjb4a8FYihRZ1BWLAcYUsJLndAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIOtiabWsjOiV8Rc4PrOd89+vytUwHwYDVR0j BBgwFoAUXXu22+oA5wF3mJKqaGzL8ZWj0g0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmUyYzkyODUtYzA5YS00NTA2LWEzMjAtZmRhMWEwN2ZkOWVjLzAvNUQ3QkI2REJF QTAwRTcwMTc3OTg5MkFBNjg2Q0NCRjE5NUEzRDIwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDdCQjZEQkVBMDBFNzAxNzc5ODkyQUE2ODZDQ0JGMTk1QTNE MjBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmUyYzkyODUtYzA5YS00NTA2LWEz MjAtZmRhMWEwN2ZkOWVjLzAvNUQ3QkI2REJFQTAwRTcwMTc3OTg5MkFBNjg2Q0NC RjE5NUEzRDIwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQq5LQoHW4tstrxKXVIohW6iXZU5Z7t11qe yuHZXCrgXNqZCZSqJimZyA/paWg1fwa8BV1JWrNH7QpCFF9bcwR+mI2nJYvUj1j5 lPYd/vWxjK014dKBdJSPiOn21Auz6Le3UCBxHLZl001YHycrCXarhJbhu17d7d/P S8w4578657yVGMY69f9EbYp0Ov2LVf+r4Mfo1e034A/04vxQS4NmTVq0/uu+WK1n DDuJhiIZ7SJ5SPPML3mqA+3ZCVC9R6w+MRuHoMpYxasRnQ92j40khTVPx46kCNaA b2HjkMcfiGhqYwQdSBjqXaA1XRgeH+N5HDCoOVDulfn1cxtS5As= -----END CERTIFICATE-----Generated at Thu Sep 17 14:14:27 2026 by rpki-client