$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft File: 5109EC0B3BA28731E9E261F3B59F3600B563E644.mft (raw, json) Hash identifier: 2ALnS7N+xSHLqY2T00yO+Ntc4LKabzg4u7Edi02q30Y= Subject key identifier: AA:1A:EF:F5:8D:21:5A:8C:55:85:B0:7C:2F:80:30:79:5A:E3:5C:07 Authority key identifier: 51:09:EC:0B:3B:A2:87:31:E9:E2:61:F3:B5:9F:36:00:B5:63:E6:44 Certificate issuer: /CN=5109EC0B3BA28731E9E261F3B59F3600B563E644 Certificate serial: 16A765CE45AF5FCF4183A245AFA9DC9F827B1CB3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5109EC0B3BA28731E9E261F3B59F3600B563E644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft Manifest number: DF Signing time: Thu 15 Oct 2026 01:31:51 +0000 Manifest this update: Thu 15 Oct 2026 01:26:51 +0000 Manifest next update: Fri 16 Oct 2026 04:49:51 +0000 Files and hashes: 1: 3130332e3131372e33302e302f32332d3233203d3e2039333431.roa (hash: WbqdW7MhiN2iDSZWaMRymz0suZjkKuhQk8kC3475/Ds=) 2: 3130332e3131372e33312e302f32342d3234203d3e2039333431.roa (hash: MF1opaQfJw+Iei/Le09BzIXkrXsDLiX2XTUMp350q1Q=) 3: 3130332e3131372e33302e302f32342d3234203d3e2039333431.roa (hash: Sxg6YyOUpBblg3g3D4oNcKxKaQWWwQAvP3gO95G7uko=) 4: 5109EC0B3BA28731E9E261F3B59F3600B563E644.crl (hash: ogPcuq+ybe5jAI+7krQYqP5knjq0vsJwhv7gJ8wRhYI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.crl rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5109EC0B3BA28731E9E261F3B59F3600B563E644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 04:49:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a7:65:ce:45:af:5f:cf:41:83:a2:45:af:a9:dc:9f:82:7b:1c:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5109EC0B3BA28731E9E261F3B59F3600B563E644 Validity Not Before: Oct 15 01:26:51 2026 GMT Not After : Oct 16 04:49:51 2026 GMT Subject: CN=AA1AEFF58D215A8C5585B07C2F8030795AE35C07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:91:5e:15:96:65:44:59:2e:6d:bb:44:12:ab: 2a:be:38:1f:fb:87:c8:44:f7:73:51:3e:9f:9b:ae: 9a:81:99:2a:0c:f4:f4:b2:08:c6:4f:6f:43:e7:bd: 16:ca:2b:64:f5:9e:a1:a6:c5:b0:c0:55:bb:86:9a: e3:fe:61:76:d7:7f:4a:bb:f5:ff:74:78:f5:a9:b4: 98:36:09:9e:a9:a9:87:43:dc:ee:e6:3d:9f:5c:ff: d0:06:7c:8d:4c:13:e8:73:8c:04:46:e2:d6:93:e4: d0:94:f1:21:44:5c:90:5c:ac:5d:e4:b8:33:2e:d3: 49:70:50:7c:3e:61:26:c0:90:6c:9d:3a:b5:0d:75: 37:42:6d:90:38:fc:6e:e2:7a:69:05:21:70:f9:aa: 61:31:07:1c:88:83:b1:dd:52:45:f8:ee:b2:af:eb: d5:00:d0:e2:a2:89:d2:aa:cf:bb:4a:04:88:2f:a8: 0e:8c:99:c4:d6:cc:8e:c3:b1:d2:a7:99:23:7e:6f: 05:3d:4d:a5:4b:4e:9b:af:e4:47:6e:eb:dc:db:3c: 50:eb:fa:b7:7e:a9:af:73:1e:70:e3:fa:33:52:82: 4d:5d:98:97:a6:db:47:e7:f3:eb:f2:d9:39:a1:0b: 03:14:01:a4:d4:1d:53:86:90:88:1f:57:9e:ef:88: 56:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:1A:EF:F5:8D:21:5A:8C:55:85:B0:7C:2F:80:30:79:5A:E3:5C:07 X509v3 Authority Key Identifier: keyid:51:09:EC:0B:3B:A2:87:31:E9:E2:61:F3:B5:9F:36:00:B5:63:E6:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5109EC0B3BA28731E9E261F3B59F3600B563E644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:2f:cd:7d:de:43:d6:11:27:84:fd:34:ac:b4:e2:bb:d7:dd: 03:52:61:be:ec:04:47:c2:3d:30:34:e1:94:e2:05:6b:14:31: 61:6b:1e:6c:7d:55:9d:eb:9d:f5:df:ee:c4:67:e5:5d:d4:bc: 31:f6:37:a0:4e:d4:34:3c:dd:72:5a:79:a8:2b:48:de:32:9d: f8:a0:73:a3:43:11:40:6b:fa:26:88:34:e4:64:ae:23:69:07: 65:e4:b3:34:ae:ce:56:6d:09:3e:33:9a:8b:33:ff:b4:0f:f3: c3:54:76:58:f8:54:7a:50:a5:ec:d5:d4:92:ad:d0:37:cd:c5: 73:06:68:2d:d5:70:2d:c0:d1:1e:d9:9b:d4:7c:f9:b2:95:50: 72:0e:99:a1:c7:aa:54:b3:0c:2a:b1:c4:c6:55:42:40:f5:b4: 98:da:a2:d5:e8:71:b7:19:de:64:de:09:6b:fd:51:4d:7e:80: 7e:9b:ab:e6:61:9f:e1:6a:ff:0c:5c:a1:9b:b5:fb:33:08:33: e8:2f:ed:5d:ed:d1:18:7c:0e:c5:c3:09:75:fe:65:b4:58:c9: 11:aa:37:04:16:c8:af:7a:a3:81:c2:0f:9c:ed:92:4d:04:f9: 08:33:54:ce:93:2a:43:9d:89:c4:7b:f6:9f:8a:d9:be:a6:72: 8a:1b:95:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFqdlzkWvX89Bg6JFr6ncn4J7HLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEwOUVDMEIzQkEyODczMUU5RTI2MUYzQjU5RjM2MDBC NTYzRTY0NDAeFw0yNjEwMTUwMTI2NTFaFw0yNjEwMTYwNDQ5NTFaMDMxMTAvBgNV BAMTKEFBMUFFRkY1OEQyMTVBOEM1NTg1QjA3QzJGODAzMDc5NUFFMzVDMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkkV4VlmVEWS5tu0QSqyq+OB/7 h8hE93NRPp+brpqBmSoM9PSyCMZPb0PnvRbKK2T1nqGmxbDAVbuGmuP+YXbXf0q7 9f90ePWptJg2CZ6pqYdD3O7mPZ9c/9AGfI1ME+hzjARG4taT5NCU8SFEXJBcrF3k uDMu00lwUHw+YSbAkGydOrUNdTdCbZA4/G7iemkFIXD5qmExBxyIg7HdUkX47rKv 69UA0OKiidKqz7tKBIgvqA6MmcTWzI7DsdKnmSN+bwU9TaVLTpuv5Edu69zbPFDr +rd+qa9zHnDj+jNSgk1dmJem20fn8+vy2TmhCwMUAaTUHVOGkIgfV57viFaTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqhrv9Y0hWoxVhbB8L4AweVrjXAcwHwYDVR0j BBgwFoAUUQnsCzuihzHp4mHztZ82ALVj5kQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzliM2JiMzQtMTVlMi00NDg3LWI1MjctNmU3NTEyODZjZTdkLzAvNTEwOUVDMEIz QkEyODczMUU5RTI2MUYzQjU5RjM2MDBCNTYzRTY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MTA5RUMwQjNCQTI4NzMxRTlFMjYxRjNCNTlGMzYwMEI1NjNF NjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzliM2JiMzQtMTVlMi00NDg3LWI1 MjctNmU3NTEyODZjZTdkLzAvNTEwOUVDMEIzQkEyODczMUU5RTI2MUYzQjU5RjM2 MDBCNTYzRTY0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABEvzX3eQ9YRJ4T9NKy04rvX3QNSYb7sBEfC PTA04ZTiBWsUMWFrHmx9VZ3rnfXf7sRn5V3UvDH2N6BO1DQ83XJaeagrSN4ynfig c6NDEUBr+iaINORkriNpB2XkszSuzlZtCT4zmosz/7QP88NUdlj4VHpQpezV1JKt 0DfNxXMGaC3VcC3A0R7Zm9R8+bKVUHIOmaHHqlSzDCqxxMZVQkD1tJjaotXocbcZ 3mTeCWv9UU1+gH6bq+Zhn+Fq/wxcoZu1+zMIM+gv7V3t0Rh8DsXDCXX+ZbRYyRGq NwQWyK96o4HCD5ztkk0E+QgzVM6TKkOdicR79p+K2b6mcooblS4= -----END CERTIFICATE-----Generated at Thu Oct 15 10:29:58 2026 by rpki-client