$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft File: 5109EC0B3BA28731E9E261F3B59F3600B563E644.mft (raw, json) Hash identifier: Vi4xZQ3h8NOvUMVYFd/a52SMnltik1KVW2n0UZ3hHK8= Subject key identifier: 3B:E0:D8:58:3C:F2:A8:44:5C:AE:69:37:32:77:0A:1B:52:A7:9C:7C Authority key identifier: 51:09:EC:0B:3B:A2:87:31:E9:E2:61:F3:B5:9F:36:00:B5:63:E6:44 Certificate issuer: /CN=5109EC0B3BA28731E9E261F3B59F3600B563E644 Certificate serial: 78BE47682DEEE735BBD4D763B44D8391CCFE1731 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5109EC0B3BA28731E9E261F3B59F3600B563E644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft Manifest number: 94 Signing time: Wed 19 Aug 2026 17:45:29 +0000 Manifest this update: Wed 19 Aug 2026 17:40:29 +0000 Manifest next update: Thu 20 Aug 2026 20:05:29 +0000 Files and hashes: 1: 3130332e3131372e33302e302f32342d3234203d3e2039333431.roa (hash: Sxg6YyOUpBblg3g3D4oNcKxKaQWWwQAvP3gO95G7uko=) 2: 3130332e3131372e33312e302f32342d3234203d3e2039333431.roa (hash: MF1opaQfJw+Iei/Le09BzIXkrXsDLiX2XTUMp350q1Q=) 3: 5109EC0B3BA28731E9E261F3B59F3600B563E644.crl (hash: ouhUgvYSs3oDfjRQ7WlZV0d1CuWDyx8Z2QcLC9DHwDU=) 4: 3130332e3131372e33302e302f32332d3233203d3e2039333431.roa (hash: WbqdW7MhiN2iDSZWaMRymz0suZjkKuhQk8kC3475/Ds=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.crl rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5109EC0B3BA28731E9E261F3B59F3600B563E644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Aug 2026 20:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:be:47:68:2d:ee:e7:35:bb:d4:d7:63:b4:4d:83:91:cc:fe:17:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5109EC0B3BA28731E9E261F3B59F3600B563E644 Validity Not Before: Aug 19 17:40:29 2026 GMT Not After : Aug 20 20:05:29 2026 GMT Subject: CN=3BE0D8583CF2A8445CAE693732770A1B52A79C7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:75:d4:dd:7e:d4:b6:0a:0a:e8:d5:5f:99:25: 1c:f9:36:08:9e:c8:a6:be:e3:9c:21:57:b6:96:41: d7:3e:72:b5:0a:57:8c:c0:a3:03:d2:9f:0b:1c:a3: 1a:c6:0e:31:81:e2:b2:9f:1f:87:95:d9:91:8a:ae: 7a:b0:6e:8b:9c:91:87:ef:c7:e2:17:93:10:c5:b4: f0:9e:55:fb:48:f5:b9:4f:2b:98:3c:6c:59:13:e3: b3:9b:a6:4e:b5:ce:88:9e:b9:dd:70:88:88:8f:c0: 01:cd:aa:04:29:6d:a9:93:09:f8:d3:da:0f:2e:cd: 17:1c:5a:a0:44:36:4c:cc:58:42:52:77:b1:92:72: de:42:ac:e9:f6:93:9b:23:d4:6a:02:82:af:ff:20: be:83:bd:8e:4d:ef:51:36:b8:34:ba:a0:a4:7f:0f: 65:bc:2c:49:a1:65:61:f0:ac:f4:03:0a:21:10:39: b7:0d:bb:52:c0:3a:d1:50:81:72:90:65:ed:e0:ea: e3:88:46:73:d8:bb:ca:10:1c:61:89:15:07:5e:94: 50:07:ba:76:16:58:3b:77:0c:a9:42:c0:5e:41:e7: d0:06:8c:6d:49:ea:d9:d2:68:22:45:72:c9:6c:9f: b9:f3:96:7f:f8:d7:a3:61:40:be:1e:a6:68:c0:59: a5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E0:D8:58:3C:F2:A8:44:5C:AE:69:37:32:77:0A:1B:52:A7:9C:7C X509v3 Authority Key Identifier: keyid:51:09:EC:0B:3B:A2:87:31:E9:E2:61:F3:B5:9F:36:00:B5:63:E6:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5109EC0B3BA28731E9E261F3B59F3600B563E644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:f8:95:33:a0:80:87:eb:22:a1:c7:62:b7:44:fe:13:37:78: 96:a2:5b:06:9b:aa:66:02:4d:04:c8:f6:2d:cd:d0:bc:de:4b: 97:ad:15:05:be:ed:f2:cf:73:67:eb:22:19:85:98:31:d7:f0: 97:cf:29:26:e3:40:ea:cd:c5:6b:4c:b2:31:8f:95:98:02:c0: f5:27:04:fa:0d:73:a5:51:12:99:b8:47:ac:1e:f7:9f:dc:54: 55:60:0b:2a:de:42:e0:7c:0b:e6:8d:66:5b:78:95:f0:6d:3f: 8d:51:82:f2:08:b4:c2:0f:9f:c5:ea:59:44:c2:44:05:0b:f1: 53:cc:94:9f:3d:3a:63:37:4c:d2:4d:88:36:6d:3b:6c:04:dc: c9:8e:f7:b6:4f:7e:a8:8e:ac:65:ef:7f:4a:e9:48:fa:57:a3: c4:99:c3:6d:8e:dd:30:7c:10:d6:a9:a0:c9:3e:c9:b0:76:eb: 02:e8:5d:44:c6:4a:e7:4b:24:df:47:3e:39:fa:b5:4b:a7:49: 69:3d:c3:ed:b6:9c:9b:f7:68:0e:d4:bf:cd:ff:bd:c4:45:ec: 4e:91:f7:38:99:1e:bb:90:34:9a:3f:d7:86:c8:f8:e8:61:22: dd:3d:88:f4:f2:56:78:08:b6:99:ff:a2:15:2a:69:63:eb:88: 26:7f:f5:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeL5HaC3u5zW71NdjtE2Dkcz+FzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEwOUVDMEIzQkEyODczMUU5RTI2MUYzQjU5RjM2MDBC NTYzRTY0NDAeFw0yNjA4MTkxNzQwMjlaFw0yNjA4MjAyMDA1MjlaMDMxMTAvBgNV BAMTKDNCRTBEODU4M0NGMkE4NDQ1Q0FFNjkzNzMyNzcwQTFCNTJBNzlDN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIddTdftS2Cgro1V+ZJRz5Ngie yKa+45whV7aWQdc+crUKV4zAowPSnwscoxrGDjGB4rKfH4eV2ZGKrnqwbouckYfv x+IXkxDFtPCeVftI9blPK5g8bFkT47Obpk61zoieud1wiIiPwAHNqgQpbamTCfjT 2g8uzRccWqBENkzMWEJSd7GSct5CrOn2k5sj1GoCgq//IL6DvY5N71E2uDS6oKR/ D2W8LEmhZWHwrPQDCiEQObcNu1LAOtFQgXKQZe3g6uOIRnPYu8oQHGGJFQdelFAH unYWWDt3DKlCwF5B59AGjG1J6tnSaCJFcslsn7nzln/416NhQL4epmjAWaUdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO+DYWDzyqERcrmk3MncKG1KnnHwwHwYDVR0j BBgwFoAUUQnsCzuihzHp4mHztZ82ALVj5kQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzliM2JiMzQtMTVlMi00NDg3LWI1MjctNmU3NTEyODZjZTdkLzAvNTEwOUVDMEIz QkEyODczMUU5RTI2MUYzQjU5RjM2MDBCNTYzRTY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MTA5RUMwQjNCQTI4NzMxRTlFMjYxRjNCNTlGMzYwMEI1NjNF NjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzliM2JiMzQtMTVlMi00NDg3LWI1 MjctNmU3NTEyODZjZTdkLzAvNTEwOUVDMEIzQkEyODczMUU5RTI2MUYzQjU5RjM2 MDBCNTYzRTY0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFH4lTOggIfrIqHHYrdE/hM3eJaiWwabqmYC TQTI9i3N0LzeS5etFQW+7fLPc2frIhmFmDHX8JfPKSbjQOrNxWtMsjGPlZgCwPUn BPoNc6VREpm4R6we95/cVFVgCyreQuB8C+aNZlt4lfBtP41RgvIItMIPn8XqWUTC RAUL8VPMlJ89OmM3TNJNiDZtO2wE3MmO97ZPfqiOrGXvf0rpSPpXo8SZw22O3TB8 ENapoMk+ybB26wLoXUTGSudLJN9HPjn6tUunSWk9w+22nJv3aA7Uv83/vcRF7E6R 9ziZHruQNJo/14bI+OhhIt09iPTyVngItpn/ohUqaWPriCZ/9aw= -----END CERTIFICATE-----Generated at Thu Aug 20 07:05:31 2026 by rpki-client