$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/5675AA245CEF919DAFAE165474D97FEABD97EF27.mft File: 5675AA245CEF919DAFAE165474D97FEABD97EF27.mft (raw, json) Hash identifier: d60ptBzXFU6Yg/it2sGH+LejhuaIcDjK8PMkgNMRS8w= Subject key identifier: 69:2B:90:5D:A3:E3:77:73:23:07:32:1C:C2:FF:8E:F3:F2:9A:96:5A Authority key identifier: 56:75:AA:24:5C:EF:91:9D:AF:AE:16:54:74:D9:7F:EA:BD:97:EF:27 Certificate issuer: /CN=5675AA245CEF919DAFAE165474D97FEABD97EF27 Certificate serial: 325EC7930AE49DDCB108E6444C79A73D44A56889 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5675AA245CEF919DAFAE165474D97FEABD97EF27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/5675AA245CEF919DAFAE165474D97FEABD97EF27.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 01:25:19 +0000 Manifest this update: Thu 17 Sep 2026 01:20:19 +0000 Manifest next update: Fri 18 Sep 2026 01:52:19 +0000 Files and hashes: 1: 3130332e31382e3233322e302f32332d3234203d3e20313530323331.roa (hash: HxzvTIopg+934/St0RtxMZkBEPYX29d8UkuRMlyo12U=) 2: 5675AA245CEF919DAFAE165474D97FEABD97EF27.crl (hash: jDrKFcyPN2d0ifbwAfp50oD4GAYsr6fu3gjhUbZJng4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/5675AA245CEF919DAFAE165474D97FEABD97EF27.crl rsync://rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/5675AA245CEF919DAFAE165474D97FEABD97EF27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5675AA245CEF919DAFAE165474D97FEABD97EF27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:5e:c7:93:0a:e4:9d:dc:b1:08:e6:44:4c:79:a7:3d:44:a5:68:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5675AA245CEF919DAFAE165474D97FEABD97EF27 Validity Not Before: Sep 17 01:20:19 2026 GMT Not After : Sep 18 01:52:19 2026 GMT Subject: CN=692B905DA3E377732307321CC2FF8EF3F29A965A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:23:13:a6:a3:22:80:2b:20:be:f4:f5:81:6a: 97:ed:48:16:0c:74:83:03:77:bf:1c:5b:5e:00:c4: 4d:24:18:45:a4:75:f6:44:a0:78:4d:c1:a5:68:73: 5a:6f:f7:bd:24:ba:7b:fd:6c:23:d5:20:51:f2:6e: 75:a9:5b:0a:4e:40:e4:a4:5d:a8:56:5b:c7:37:0a: da:11:1c:5a:5c:73:49:80:37:b4:8d:d3:3b:c0:65: 1f:53:44:3b:7b:10:af:34:bb:74:4f:8c:cb:46:77: 8c:43:6d:4c:74:0e:a8:31:03:ac:c3:6a:45:01:21: 47:30:7c:73:f6:2f:83:a3:64:54:60:8d:24:68:97: 80:0b:9e:72:d3:00:9c:86:54:68:9d:9e:35:ef:8a: 16:15:8b:bb:ca:7a:e0:9c:1d:bd:74:d5:77:d6:a9: 06:5f:cd:16:62:92:3c:93:64:08:4c:d9:5e:cc:bc: 48:8c:9c:52:22:60:57:f3:da:ff:5a:a8:82:e0:9a: 86:b2:2d:53:6a:1b:d2:a3:f0:6a:a1:17:a4:9e:d8: 0a:7a:fe:14:9f:de:c7:f5:e5:5c:dc:29:77:0f:6b: cf:28:57:0f:01:d4:f8:88:0b:18:45:6a:e9:c1:93: 7e:bc:c7:2f:2b:f9:eb:88:9a:32:13:ad:a0:7b:fc: 0c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2B:90:5D:A3:E3:77:73:23:07:32:1C:C2:FF:8E:F3:F2:9A:96:5A X509v3 Authority Key Identifier: keyid:56:75:AA:24:5C:EF:91:9D:AF:AE:16:54:74:D9:7F:EA:BD:97:EF:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/5675AA245CEF919DAFAE165474D97FEABD97EF27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5675AA245CEF919DAFAE165474D97FEABD97EF27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/5675AA245CEF919DAFAE165474D97FEABD97EF27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:56:ee:c0:2d:02:95:cd:38:7d:4b:64:d1:22:b4:31:9e:59: f0:b7:47:78:ba:e7:97:6f:91:d0:99:31:fa:c8:7b:c3:91:f6: 47:0d:f6:88:32:2f:c7:9b:38:e3:b6:aa:18:b7:f5:cb:c2:5b: e3:98:6c:b4:23:9d:2b:0d:34:ea:ac:e0:5a:05:15:e5:a5:0a: a6:32:74:74:90:78:a8:e2:35:17:19:47:8c:1e:cd:7d:66:63: 22:97:30:b0:42:c0:ec:43:6a:24:89:27:25:3c:2e:7e:26:75: 73:4f:b0:12:69:f2:9d:a3:ad:ba:cc:be:96:b3:22:eb:5d:0b: a5:46:dc:a8:c5:66:ce:9c:6c:0c:82:17:c4:b3:bd:d9:44:71: b1:9f:8f:d2:6f:41:1b:61:d2:c3:63:70:5a:51:7b:d7:5d:40: 81:a9:2e:80:79:54:0d:39:4c:6c:42:ce:eb:aa:db:22:fb:74: 98:1a:bd:dc:50:7f:e0:ae:b9:31:fd:0f:df:02:db:46:37:70: 71:df:2e:80:a3:a3:e8:46:06:62:eb:d0:8e:3a:cd:2b:45:b4: 55:b2:6c:d5:c0:37:38:4f:cd:fa:3d:c2:bf:d8:6c:5b:66:f6: 30:ca:64:6b:71:ec:75:c5:96:d1:ee:ea:eb:6a:52:86:76:a6: 1f:db:99:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMl7HkwrkndyxCOZETHmnPUSlaIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY3NUFBMjQ1Q0VGOTE5REFGQUUxNjU0NzREOTdGRUFC RDk3RUYyNzAeFw0yNjA5MTcwMTIwMTlaFw0yNjA5MTgwMTUyMTlaMDMxMTAvBgNV BAMTKDY5MkI5MDVEQTNFMzc3NzMyMzA3MzIxQ0MyRkY4RUYzRjI5QTk2NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/IxOmoyKAKyC+9PWBapftSBYM dIMDd78cW14AxE0kGEWkdfZEoHhNwaVoc1pv970kunv9bCPVIFHybnWpWwpOQOSk XahWW8c3CtoRHFpcc0mAN7SN0zvAZR9TRDt7EK80u3RPjMtGd4xDbUx0DqgxA6zD akUBIUcwfHP2L4OjZFRgjSRol4ALnnLTAJyGVGidnjXvihYVi7vKeuCcHb101XfW qQZfzRZikjyTZAhM2V7MvEiMnFIiYFfz2v9aqILgmoayLVNqG9Kj8GqhF6Se2Ap6 /hSf3sf15VzcKXcPa88oVw8B1PiICxhFaunBk368xy8r+euImjITraB7/AxlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaSuQXaPjd3MjBzIcwv+O8/KallowHwYDVR0j BBgwFoAUVnWqJFzvkZ2vrhZUdNl/6r2X7ycwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDcyMjQxOTEtYmZmMC00ODE1LWJlMGUtYTJhYThkMzhkNWEwLzAvNTY3NUFBMjQ1 Q0VGOTE5REFGQUUxNjU0NzREOTdGRUFCRDk3RUYyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81Njc1QUEyNDVDRUY5MTlEQUZBRTE2NTQ3NEQ5N0ZFQUJEOTdF RjI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDcyMjQxOTEtYmZmMC00ODE1LWJl MGUtYTJhYThkMzhkNWEwLzAvNTY3NUFBMjQ1Q0VGOTE5REFGQUUxNjU0NzREOTdG RUFCRDk3RUYyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlW7sAtApXNOH1LZNEitDGeWfC3R3i655dv kdCZMfrIe8OR9kcN9ogyL8ebOOO2qhi39cvCW+OYbLQjnSsNNOqs4FoFFeWlCqYy dHSQeKjiNRcZR4wezX1mYyKXMLBCwOxDaiSJJyU8Ln4mdXNPsBJp8p2jrbrMvpaz IutdC6VG3KjFZs6cbAyCF8SzvdlEcbGfj9JvQRth0sNjcFpRe9ddQIGpLoB5VA05 TGxCzuuq2yL7dJgavdxQf+CuuTH9D98C20Y3cHHfLoCjo+hGBmLr0I46zStFtFWy bNXANzhPzfo9wr/YbFtm9jDKZGtx7HXFltHu6utqUoZ2ph/bmf4= -----END CERTIFICATE-----Generated at Thu Sep 17 13:56:19 2026 by rpki-client