$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft File: 5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft (raw, json) Hash identifier: RkL7USHI5GrezPhdnZnRDll3ga0cuq8goBKtgFvKMSc= Subject key identifier: 1B:12:19:28:F7:C5:73:CC:CB:59:98:D4:E0:3A:92:DF:CF:03:88:6C Authority key identifier: 52:97:FC:0B:52:CD:4F:C7:F0:6C:16:53:10:D1:13:C8:1A:16:F8:DF Certificate issuer: /CN=5297FC0B52CD4FC7F06C165310D113C81A16F8DF Certificate serial: 18B9C47B4E2B394EF90D2537203745AEDF5E249F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 03:12:29 +0000 Manifest this update: Thu 17 Sep 2026 03:07:29 +0000 Manifest next update: Fri 18 Sep 2026 03:23:29 +0000 Files and hashes: 1: 5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl (hash: YysD33snDCwVPcYJ14fymxJ4hu86hPB2LEyzCebScCA=) 2: 3135372e36362e36332e302f32342d3234203d3e20313431363039.roa (hash: Xm5n/XLcKtlX7vaWLbK2D/7cXu3TQ6c3pSXsVlfA9/0=) 3: 3135372e36362e36322e302f32332d3233203d3e20313431363039.roa (hash: s0qL2weEhTe4sBj4h3x5XjkUykXaQaRd3WPD4VdRPq0=) 4: 3135372e36362e36322e302f32342d3234203d3e20313431363039.roa (hash: NHw4QH7kx6gwhf24chR9MVQWVvSl6RuQvk3rMGt5qyQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:b9:c4:7b:4e:2b:39:4e:f9:0d:25:37:20:37:45:ae:df:5e:24:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5297FC0B52CD4FC7F06C165310D113C81A16F8DF Validity Not Before: Sep 17 03:07:29 2026 GMT Not After : Sep 18 03:23:29 2026 GMT Subject: CN=1B121928F7C573CCCB5998D4E03A92DFCF03886C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fe:90:8f:71:12:c1:af:36:c9:df:78:4b:63: 83:b5:c7:a0:44:d9:fd:9f:60:8c:47:28:02:90:08: 52:74:5b:5e:93:01:fd:75:fc:af:3a:d1:1f:ff:e4: 04:2c:a7:d5:b5:6b:8b:f0:eb:7b:85:29:1d:00:f0: 39:08:eb:ad:9f:39:27:15:2b:46:95:68:aa:e0:d9: 43:ac:05:e2:8c:34:1c:6f:b4:fc:7a:a1:d3:d2:1c: 6c:11:33:b1:a4:cc:1b:29:03:d5:2e:a2:c1:22:42: b8:ba:d5:56:f5:36:d6:e9:68:dd:c7:c5:d8:08:de: a8:87:d6:77:23:a6:84:c6:d7:d8:3c:31:e6:13:94: 13:f6:ff:e0:f2:df:5e:80:b2:75:b2:b7:2e:eb:90: e7:9f:11:bf:78:95:0b:32:4b:9f:5b:ed:02:ef:fd: 9a:9e:8b:7e:b4:91:54:d3:10:4b:c5:1d:fa:3b:90: 0b:fd:36:19:65:2c:ff:e5:dd:27:aa:9a:6e:b9:30: 38:9a:08:89:6f:1e:89:b5:92:3c:a0:01:d5:a9:28: f7:71:41:3f:91:d5:cf:70:05:23:bf:b3:2d:6a:6e: 1f:4c:d2:b5:31:15:af:b4:3c:c1:2e:4d:77:d8:da: 17:d0:56:e4:a0:4f:b3:af:ae:80:13:5d:cd:95:59: 0f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:12:19:28:F7:C5:73:CC:CB:59:98:D4:E0:3A:92:DF:CF:03:88:6C X509v3 Authority Key Identifier: keyid:52:97:FC:0B:52:CD:4F:C7:F0:6C:16:53:10:D1:13:C8:1A:16:F8:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:59:dc:c2:ac:7b:aa:a7:8f:2a:86:f8:38:c3:2d:fa:15:ba: 6e:29:de:68:61:5c:d4:c4:3f:8f:3d:49:19:8e:22:7f:75:ba: ab:97:94:18:5a:df:71:39:0a:2c:24:1e:2f:7b:1e:8d:d9:7b: 4f:09:bc:6c:f2:5a:f7:17:35:ad:92:97:ad:66:2a:39:f5:3d: 4a:fa:58:60:a5:29:8a:b3:46:0a:f4:35:09:3e:ac:80:97:8c: d7:ba:d8:d0:c6:f1:15:5f:15:21:cd:fb:43:53:b9:ba:c6:dd: 8f:af:87:5c:50:0f:8b:6e:a6:f5:ee:5e:a1:01:95:d3:54:d8: 46:43:32:47:fd:5f:ca:c2:88:c6:98:41:88:86:37:5a:44:df: 0e:88:26:f2:13:96:50:8f:cf:27:6b:4c:55:ad:e5:b7:fb:05: cf:13:43:d0:e0:da:11:91:74:ec:11:58:a0:22:e5:cd:24:d9: dd:c7:5f:b0:48:c8:97:34:66:1f:ee:e3:7c:95:db:e4:1c:d7: 0b:76:ee:2a:06:e9:88:25:de:aa:f1:09:b0:74:44:c9:4e:ef: a1:ec:2c:3a:d2:16:5f:ad:cf:06:9f:aa:63:e1:4f:60:33:6b: d6:e9:57:7f:07:fd:01:46:9a:dd:30:08:4c:08:a0:0d:1e:fb: 83:c5:91:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGLnEe04rOU75DSU3IDdFrt9eJJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5N0ZDMEI1MkNENEZDN0YwNkMxNjUzMTBEMTEzQzgx QTE2RjhERjAeFw0yNjA5MTcwMzA3MjlaFw0yNjA5MTgwMzIzMjlaMDMxMTAvBgNV BAMTKDFCMTIxOTI4RjdDNTczQ0NDQjU5OThENEUwM0E5MkRGQ0YwMzg4NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ/pCPcRLBrzbJ33hLY4O1x6BE 2f2fYIxHKAKQCFJ0W16TAf11/K860R//5AQsp9W1a4vw63uFKR0A8DkI662fOScV K0aVaKrg2UOsBeKMNBxvtPx6odPSHGwRM7GkzBspA9UuosEiQri61Vb1NtbpaN3H xdgI3qiH1ncjpoTG19g8MeYTlBP2/+Dy316AsnWyty7rkOefEb94lQsyS59b7QLv /Zqei360kVTTEEvFHfo7kAv9NhllLP/l3Seqmm65MDiaCIlvHom1kjygAdWpKPdx QT+R1c9wBSO/sy1qbh9M0rUxFa+0PMEuTXfY2hfQVuSgT7OvroATXc2VWQ/JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGxIZKPfFc8zLWZjU4DqS388DiGwwHwYDVR0j BBgwFoAUUpf8C1LNT8fwbBZTENETyBoW+N8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2RkYmI3OWMtOWVhMi00N2YwLWI0NWYtMTgxNjY1MGJhMjNmLzAvNTI5N0ZDMEI1 MkNENEZDN0YwNkMxNjUzMTBEMTEzQzgxQTE2RjhERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81Mjk3RkMwQjUyQ0Q0RkM3RjA2QzE2NTMxMEQxMTNDODFBMTZG OERGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2RkYmI3OWMtOWVhMi00N2YwLWI0 NWYtMTgxNjY1MGJhMjNmLzAvNTI5N0ZDMEI1MkNENEZDN0YwNkMxNjUzMTBEMTEz QzgxQTE2RjhERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAlZ3MKse6qnjyqG+DjDLfoVum4p3mhhXNTE P489SRmOIn91uquXlBha33E5CiwkHi97Ho3Ze08JvGzyWvcXNa2Sl61mKjn1PUr6 WGClKYqzRgr0NQk+rICXjNe62NDG8RVfFSHN+0NTubrG3Y+vh1xQD4tupvXuXqEB ldNU2EZDMkf9X8rCiMaYQYiGN1pE3w6IJvITllCPzydrTFWt5bf7Bc8TQ9Dg2hGR dOwRWKAi5c0k2d3HX7BIyJc0Zh/u43yV2+Qc1wt27ioG6Ygl3qrxCbB0RMlO76Hs LDrSFl+tzwafqmPhT2Aza9bpV38H/QFGmt0wCEwIoA0e+4PFkR8= -----END CERTIFICATE-----Generated at Thu Sep 17 10:02:35 2026 by rpki-client