$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft File: 5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft (raw, json) Hash identifier: 2/64yitGnExfPxOgeH3B/icd938Xwdfj6+HyMyDiplw= Subject key identifier: 5D:8A:E6:DC:31:9F:B5:56:25:34:22:A9:CF:9B:9D:D1:58:42:92:6D Authority key identifier: 5D:10:A7:2C:87:21:CE:50:C0:93:BD:9B:5D:1A:C9:BB:6F:E9:34:95 Certificate issuer: /CN=5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495 Certificate serial: 6D0D8510DADFA07FE7E7BC9905DB0E1EFAC12FFC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 07:07:19 +0000 Manifest this update: Thu 17 Sep 2026 07:02:18 +0000 Manifest next update: Fri 18 Sep 2026 09:51:18 +0000 Files and hashes: 1: 3136302e31392e38392e302f32342d3234203d3e20313532373839.roa (hash: JniyB+kykIY2ndXJuy/YxGMo3Dbdi9UVhfqGmbiBAvY=) 2: 5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.crl (hash: +X5396EbHsPqEkwciC13+ty9jnc4bWF5gq3GkwZS9Aw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.crl rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:0d:85:10:da:df:a0:7f:e7:e7:bc:99:05:db:0e:1e:fa:c1:2f:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495 Validity Not Before: Sep 17 07:02:18 2026 GMT Not After : Sep 18 09:51:18 2026 GMT Subject: CN=5D8AE6DC319FB556253422A9CF9B9DD15842926D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:63:b1:50:93:86:09:c5:92:24:93:38:e7:05: 83:4d:f2:84:92:5c:c5:02:72:65:ca:9e:5d:0d:ad: 81:3d:80:70:df:e8:a0:fc:4d:c1:fb:5b:75:8b:6c: 45:4c:c3:f0:00:25:b9:6d:3d:3e:b3:95:06:21:7f: 8a:54:fb:d1:71:1e:f7:76:00:c1:a9:38:d7:c4:7e: 16:25:63:df:88:25:6c:00:c9:9c:16:06:75:b5:2a: b1:30:a9:03:0f:9b:fe:48:29:98:34:e8:13:61:43: 13:d0:67:9a:ce:eb:c4:81:27:cc:b9:ba:19:67:bf: b7:4c:3e:9a:03:c9:1f:01:c7:35:9d:c7:70:be:ca: dd:1d:c9:49:28:95:92:77:81:64:e6:71:39:99:d8: 35:31:0c:2f:2f:b2:aa:38:6a:b0:7b:55:21:0b:c2: da:97:89:0d:c7:24:12:28:e5:99:b2:35:83:95:7d: db:b3:81:1e:81:7b:2d:0a:b4:bb:13:b2:cc:81:5b: 33:f4:31:a1:0c:e6:49:2e:c6:34:1a:b5:ee:f7:56: b2:8c:42:f9:a0:d2:3f:64:0b:06:74:47:c4:24:f4: 36:ce:8b:e6:21:c9:e8:d2:db:72:a8:65:7d:7b:f9: 88:36:5d:4b:9d:94:73:d1:b0:70:9d:5f:dc:5e:b3: c5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:8A:E6:DC:31:9F:B5:56:25:34:22:A9:CF:9B:9D:D1:58:42:92:6D X509v3 Authority Key Identifier: keyid:5D:10:A7:2C:87:21:CE:50:C0:93:BD:9B:5D:1A:C9:BB:6F:E9:34:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:5c:c3:25:de:b8:4d:ff:20:76:c5:3b:87:39:3f:aa:2c:6d: d9:82:8c:d9:b1:c5:4b:b5:e1:78:a4:3b:0c:44:f0:ee:b7:f9: 4e:4c:5c:83:06:64:77:d5:bf:4f:30:8d:24:13:58:71:17:8c: aa:85:70:b5:d3:0b:f7:42:0a:97:1a:7e:be:e7:83:93:d6:23: e1:dc:0b:11:b1:94:54:fc:9d:af:a6:4c:83:cc:1f:e4:b5:99: 7d:87:b7:3d:99:14:f8:ae:9e:0f:77:5e:21:c3:46:55:e1:cd: 12:8c:bb:3b:f3:d7:f8:1d:28:22:e7:30:c5:29:e4:ff:27:e9: d5:8c:32:ad:31:9b:cd:8d:35:64:e5:86:83:40:18:84:f9:bb: bf:2a:28:fa:25:1a:1f:34:24:1f:2a:7f:23:95:b7:e2:02:c0: be:c0:9e:a3:39:98:8e:23:a4:02:fd:c0:bc:07:00:a7:52:ad: a4:a7:66:b2:38:79:d9:d7:61:6a:4f:6b:24:b9:6c:e2:20:77: 5b:2e:0c:b9:43:2d:38:c8:2c:68:ac:eb:0b:86:d8:0e:43:94: 4d:b7:4a:fd:f1:00:2d:b6:e6:21:0f:f4:f4:29:69:ab:00:b4: 02:0a:2a:bb:1d:26:0d:88:24:01:56:12:bf:e5:28:8e:a4:3f: e0:8e:0b:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbQ2FENrfoH/n57yZBdsOHvrBL/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQxMEE3MkM4NzIxQ0U1MEMwOTNCRDlCNUQxQUM5QkI2 RkU5MzQ5NTAeFw0yNjA5MTcwNzAyMThaFw0yNjA5MTgwOTUxMThaMDMxMTAvBgNV BAMTKDVEOEFFNkRDMzE5RkI1NTYyNTM0MjJBOUNGOUI5REQxNTg0MjkyNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3Y7FQk4YJxZIkkzjnBYNN8oSS XMUCcmXKnl0NrYE9gHDf6KD8TcH7W3WLbEVMw/AAJbltPT6zlQYhf4pU+9FxHvd2 AMGpONfEfhYlY9+IJWwAyZwWBnW1KrEwqQMPm/5IKZg06BNhQxPQZ5rO68SBJ8y5 uhlnv7dMPpoDyR8BxzWdx3C+yt0dyUkolZJ3gWTmcTmZ2DUxDC8vsqo4arB7VSEL wtqXiQ3HJBIo5ZmyNYOVfduzgR6Bey0KtLsTssyBWzP0MaEM5kkuxjQate73VrKM Qvmg0j9kCwZ0R8Qk9DbOi+YhyejS23KoZX17+Yg2XUudlHPRsHCdX9xes8WTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXYrm3DGftVYlNCKpz5ud0VhCkm0wHwYDVR0j BBgwFoAUXRCnLIchzlDAk72bXRrJu2/pNJUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGRjMTAwN2QtZmQ2MS00NTQzLThmNWYtM2ZkZmZhNGIwMWU2LzAvNUQxMEE3MkM4 NzIxQ0U1MEMwOTNCRDlCNUQxQUM5QkI2RkU5MzQ5NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81RDEwQTcyQzg3MjFDRTUwQzA5M0JEOUI1RDFBQzlCQjZGRTkz NDk1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGRjMTAwN2QtZmQ2MS00NTQzLThm NWYtM2ZkZmZhNGIwMWU2LzAvNUQxMEE3MkM4NzIxQ0U1MEMwOTNCRDlCNUQxQUM5 QkI2RkU5MzQ5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGlcwyXeuE3/IHbFO4c5P6osbdmCjNmxxUu1 4XikOwxE8O63+U5MXIMGZHfVv08wjSQTWHEXjKqFcLXTC/dCCpcafr7ng5PWI+Hc CxGxlFT8na+mTIPMH+S1mX2Htz2ZFPiung93XiHDRlXhzRKMuzvz1/gdKCLnMMUp 5P8n6dWMMq0xm82NNWTlhoNAGIT5u78qKPolGh80JB8qfyOVt+ICwL7AnqM5mI4j pAL9wLwHAKdSraSnZrI4ednXYWpPayS5bOIgd1suDLlDLTjILGis6wuG2A5DlE23 Sv3xAC225iEP9PQpaasAtAIKKrsdJg2IJAFWEr/lKI6kP+COC/w= -----END CERTIFICATE-----Generated at Thu Sep 17 14:40:12 2026 by rpki-client