$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft File: 5BD70FF0C393471CFAF795433474B327BD4832F9.mft (raw, json) Hash identifier: nF4znEzlW93tEWdaorTZvPd22uRciokSG12Y+XbDqkY= Subject key identifier: 27:CC:35:5A:46:3F:56:58:6F:FC:9B:4C:CD:C3:97:69:30:4D:E1:CB Authority key identifier: 5B:D7:0F:F0:C3:93:47:1C:FA:F7:95:43:34:74:B3:27:BD:48:32:F9 Certificate issuer: /CN=5BD70FF0C393471CFAF795433474B327BD4832F9 Certificate serial: 3B519FF0E466A0C9CDF6A92D3C0D52A639C7204B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BD70FF0C393471CFAF795433474B327BD4832F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft Manifest number: BA Signing time: Thu 17 Sep 2026 00:24:13 +0000 Manifest this update: Thu 17 Sep 2026 00:19:13 +0000 Manifest next update: Fri 18 Sep 2026 00:28:13 +0000 Files and hashes: 1: 3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa (hash: bBQLsVkx2CpNTLhQIb39ezRJZR+3VFuLJFWKGpnOARA=) 2: 5BD70FF0C393471CFAF795433474B327BD4832F9.crl (hash: 20FyMJ3ZSGQ3Z5I5TdAtgDYk5JMp0OZFbO4xIYldoC4=) 3: 3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa (hash: VRIdIq5putn/ECgQ5btezrubt1dqb54ZcZ8apLF1yIY=) 4: 3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa (hash: kDdkImc9WCIWpXnaeyzXyBkOibkDgoSjiG8qhXynUZA=) 5: 3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa (hash: tdzqlaQf0fF4d+ZUvSQhNIWl0HYGOdoxh6aHUWDnZjg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.crl rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BD70FF0C393471CFAF795433474B327BD4832F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:28:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:51:9f:f0:e4:66:a0:c9:cd:f6:a9:2d:3c:0d:52:a6:39:c7:20:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD70FF0C393471CFAF795433474B327BD4832F9 Validity Not Before: Sep 17 00:19:13 2026 GMT Not After : Sep 18 00:28:13 2026 GMT Subject: CN=27CC355A463F56586FFC9B4CCDC39769304DE1CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:33:72:d6:cc:08:b2:d9:72:08:27:38:0e:f1: ba:2d:bf:4b:ab:de:1d:f8:e7:61:e9:bc:dc:15:cb: 5e:b3:49:8f:9c:5d:ec:77:06:bc:bd:7a:d0:54:57: f6:71:43:9f:d0:97:18:81:ee:4a:0e:53:01:2c:b3: ad:91:8e:55:f3:76:54:c2:fa:53:2c:5b:33:ec:c2: 60:32:8e:ef:19:46:58:16:7d:e9:b7:5d:a3:56:f6: 00:1f:49:6b:75:cd:7e:11:46:fd:09:ab:8d:2f:8d: 26:bc:9c:2e:09:49:fe:f9:0f:ce:c9:f2:45:11:c2: 7d:2f:ab:95:0c:51:c8:62:7c:fa:36:c0:be:9b:2c: f8:c1:9d:5e:10:72:3e:c6:3f:2b:65:61:af:4c:99: 90:43:6c:cb:4c:e6:65:75:f1:08:d8:d9:e6:0a:48: a3:d0:48:c5:b3:06:06:90:8d:7a:0f:45:3e:5c:e4: 7c:86:75:02:ff:cd:f2:5a:86:ce:ac:21:75:2d:26: a0:5e:97:3a:15:b7:2d:ab:28:36:44:49:1c:69:1a: c5:5f:be:35:db:6b:18:f3:2f:0a:6d:96:86:eb:18: b2:ed:86:4d:ab:8e:a5:24:f6:3e:d7:81:89:a0:2d: d6:0c:24:ff:47:e2:43:b5:f4:1b:c4:6a:7c:63:18: d6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:CC:35:5A:46:3F:56:58:6F:FC:9B:4C:CD:C3:97:69:30:4D:E1:CB X509v3 Authority Key Identifier: keyid:5B:D7:0F:F0:C3:93:47:1C:FA:F7:95:43:34:74:B3:27:BD:48:32:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BD70FF0C393471CFAF795433474B327BD4832F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:0e:08:0f:2f:9c:18:e0:b2:7a:d0:cb:94:19:f2:31:ff:72: 88:02:55:75:b0:10:0a:ec:47:43:4b:de:30:a0:17:3a:29:45: 0c:df:f5:06:d2:d1:f3:9e:ec:51:9b:4e:be:d7:23:2a:c1:ff: bc:92:3d:0b:b2:a3:81:ac:82:3e:8b:43:34:38:3b:49:fa:d8: 8c:d1:d4:5a:15:48:09:c3:b6:81:dd:57:63:e0:2b:20:61:b2: f3:1f:d6:a4:09:aa:7c:43:65:73:86:53:96:0f:86:d8:cb:a6: bf:57:80:3c:6e:c0:09:fa:02:10:bd:4c:2a:f0:39:f0:3a:31: a8:28:03:8f:5d:2f:ce:cc:cc:bd:28:22:ae:1e:a6:3f:13:9d: 2f:a4:df:15:c1:a9:62:19:61:79:d2:92:46:de:14:5e:54:a4: 9e:fe:91:17:e1:ca:7e:84:b8:98:0f:05:c0:23:ee:1f:fa:e8: 5a:73:f0:08:d7:d0:c0:e8:b0:59:ec:a5:89:4d:a6:c2:82:ad: e0:8a:d7:5b:bb:40:7b:fb:54:34:9a:f2:b7:84:34:44:f6:5d: ef:42:62:b0:fa:29:1f:12:b8:aa:b7:ab:6f:a2:2e:b4:ac:e8: 69:e4:d5:af:84:be:04:42:c9:33:96:9d:31:ba:7c:86:ec:28: 04:e8:ad:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO1Gf8ORmoMnN9qktPA1SpjnHIEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJENzBGRjBDMzkzNDcxQ0ZBRjc5NTQzMzQ3NEIzMjdC RDQ4MzJGOTAeFw0yNjA5MTcwMDE5MTNaFw0yNjA5MTgwMDI4MTNaMDMxMTAvBgNV BAMTKDI3Q0MzNTVBNDYzRjU2NTg2RkZDOUI0Q0NEQzM5NzY5MzA0REUxQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqM3LWzAiy2XIIJzgO8botv0ur 3h3452HpvNwVy16zSY+cXex3Bry9etBUV/ZxQ5/QlxiB7koOUwEss62RjlXzdlTC +lMsWzPswmAyju8ZRlgWfem3XaNW9gAfSWt1zX4RRv0Jq40vjSa8nC4JSf75D87J 8kURwn0vq5UMUchifPo2wL6bLPjBnV4Qcj7GPytlYa9MmZBDbMtM5mV18QjY2eYK SKPQSMWzBgaQjXoPRT5c5HyGdQL/zfJahs6sIXUtJqBelzoVty2rKDZESRxpGsVf vjXbaxjzLwptlobrGLLthk2rjqUk9j7XgYmgLdYMJP9H4kO19BvEanxjGNYPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ8w1WkY/Vlhv/JtMzcOXaTBN4cswHwYDVR0j BBgwFoAUW9cP8MOTRxz695VDNHSzJ71IMvkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkyNGZhOWEtZTVmMy00MjY1LTllMWQtODRlNDUzNTk2MWQwLzAvNUJENzBGRjBD MzkzNDcxQ0ZBRjc5NTQzMzQ3NEIzMjdCRDQ4MzJGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QkQ3MEZGMEMzOTM0NzFDRkFGNzk1NDMzNDc0QjMyN0JENDgz MkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkyNGZhOWEtZTVmMy00MjY1LTll MWQtODRlNDUzNTk2MWQwLzAvNUJENzBGRjBDMzkzNDcxQ0ZBRjc5NTQzMzQ3NEIz MjdCRDQ4MzJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgOCA8vnBjgsnrQy5QZ8jH/cogCVXWwEArs R0NL3jCgFzopRQzf9QbS0fOe7FGbTr7XIyrB/7ySPQuyo4Gsgj6LQzQ4O0n62IzR 1FoVSAnDtoHdV2PgKyBhsvMf1qQJqnxDZXOGU5YPhtjLpr9XgDxuwAn6AhC9TCrw OfA6MagoA49dL87MzL0oIq4epj8TnS+k3xXBqWIZYXnSkkbeFF5UpJ7+kRfhyn6E uJgPBcAj7h/66Fpz8AjX0MDosFnspYlNpsKCreCK11u7QHv7VDSa8reENET2Xe9C YrD6KR8SuKq3q2+iLrSs6Gnk1a+EvgRCyTOWnTG6fIbsKATorak= -----END CERTIFICATE-----Generated at Thu Sep 17 12:40:56 2026 by rpki-client