$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.mft File: D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.mft (raw, json) Hash identifier: tQFNJR2L6ttBwIt7S9A2romhXd65PNJQbwko71k1dcI= Subject key identifier: 08:50:77:5F:E9:1B:82:A9:29:FD:12:A3:01:09:A3:6F:14:15:97:96 Authority key identifier: D5:CE:8C:4E:21:EC:81:F4:95:8C:F6:07:42:0F:1E:EB:48:B2:E5:EC Certificate issuer: /CN=D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC Certificate serial: 58538E6AA887954354EECD85B059750F6A81B03D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 02:16:18 +0000 Manifest this update: Thu 17 Sep 2026 02:11:18 +0000 Manifest next update: Fri 18 Sep 2026 02:22:18 +0000 Files and hashes: 1: 3130332e37392e3132382e302f32342d3234203d3e20313339393531.roa (hash: c5ycRdkZmzicMcHlVxH8DNqWq6vMY1pMgkNwLRJ1u08=) 2: 3130332e37392e3132382e302f32332d3234203d3e20313339393531.roa (hash: Zd8dKndrIl4VSQfqixAyA/TOWCY5DaeyRMvOby+h3uw=) 3: D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.crl (hash: 5Ys2Pk18f2l9TXCx/BMDIVdcNaWro6lzY/De1eXwbqo=) 4: 3130332e37392e3132392e302f32342d3234203d3e20313339393531.roa (hash: RqUjB86YVPgt7tRWRmn7/EkRMj2UXiSSsOWSw1LcnVs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.crl rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:22:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:53:8e:6a:a8:87:95:43:54:ee:cd:85:b0:59:75:0f:6a:81:b0:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC Validity Not Before: Sep 17 02:11:18 2026 GMT Not After : Sep 18 02:22:18 2026 GMT Subject: CN=0850775FE91B82A929FD12A30109A36F14159796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6d:2a:f4:1a:52:18:81:08:71:f8:8b:a3:ea: cf:e8:d2:a6:c6:b6:75:81:89:d7:6d:e4:cc:da:79: bd:14:dd:25:94:25:09:22:ba:f7:f2:8d:35:d5:cb: ed:a1:e9:a8:07:c7:08:fe:98:6a:9c:33:5e:6a:53: e6:03:48:83:5f:a1:07:e4:d6:d1:5c:96:72:10:49: e3:a9:10:50:1b:a9:cc:bb:6c:8d:65:6e:84:17:03: 61:41:b5:09:a0:a2:e6:69:47:17:94:61:58:63:56: e4:80:cf:93:77:1b:35:d3:e8:37:a5:8a:89:5f:29: c1:3f:fb:e2:d9:07:9a:9d:44:f8:e6:7c:85:ef:12: 49:20:b9:3a:be:e8:23:bb:c2:2e:1b:a6:12:ba:76: 1a:77:f8:07:e7:7e:7c:17:3c:57:14:1b:5f:d1:3f: 64:b1:e7:32:8c:6e:ff:1d:9c:8f:55:d7:de:83:67: c2:27:93:25:53:bc:85:57:b9:db:4a:18:2c:05:91: 32:f7:1b:d9:05:ee:0d:d1:3a:dd:d1:c1:6f:c7:3d: 57:fe:dd:e7:8b:29:d0:e4:c9:a6:87:50:4b:49:2b: 9b:24:c5:c4:9f:36:ef:38:f5:51:7b:b4:fe:52:54: bd:4b:6b:a6:49:ab:6e:e1:0c:39:b4:a6:3b:5e:9d: 7e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:50:77:5F:E9:1B:82:A9:29:FD:12:A3:01:09:A3:6F:14:15:97:96 X509v3 Authority Key Identifier: keyid:D5:CE:8C:4E:21:EC:81:F4:95:8C:F6:07:42:0F:1E:EB:48:B2:E5:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:25:17:39:3a:32:30:54:88:0b:18:11:37:30:0e:1a:9f:fc: 0a:52:49:5d:6d:77:31:dc:2c:25:39:27:61:70:9d:1a:c9:b6: c9:98:57:47:0e:33:89:70:52:14:6d:c0:fc:09:70:55:f9:97: ec:d0:a3:e7:5c:60:52:a9:2e:56:f1:9a:2f:c3:68:f4:53:f5: d8:25:e2:6d:5f:29:ca:31:f8:14:f0:46:75:3d:f0:b7:6c:87: 81:83:c8:4b:fb:8d:bc:cd:e5:2d:c3:f1:f1:98:b9:51:63:bc: 60:c8:ad:52:e1:8f:4e:4f:f7:4c:99:b7:de:b9:b7:bb:49:2a: 7b:8f:03:eb:36:df:00:d5:07:c4:a9:6e:85:b3:f8:9b:e9:dc: 10:b0:73:fa:7f:9e:37:0f:90:c8:f1:9c:9e:3e:1e:fc:d9:1a: 41:6e:16:63:7e:96:3e:59:37:42:ae:21:ca:8e:e9:b2:d9:0f: 62:2c:7b:a7:60:6f:87:cd:ea:9b:6b:ce:87:16:76:23:46:d6: e7:4c:26:2d:1f:81:c9:22:b2:4f:39:58:8e:9b:4d:c1:dd:02: 60:c8:25:4c:b4:02:75:ba:6a:0b:b1:dc:5c:6a:f2:39:a4:9c: a0:b6:9a:6f:3e:83:18:bb:da:8e:6c:2e:99:ed:b1:32:e9:1d: f9:d0:67:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWFOOaqiHlUNU7s2FsFl1D2qBsD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVDRThDNEUyMUVDODFGNDk1OENGNjA3NDIwRjFFRUI0 OEIyRTVFQzAeFw0yNjA5MTcwMjExMThaFw0yNjA5MTgwMjIyMThaMDMxMTAvBgNV BAMTKDA4NTA3NzVGRTkxQjgyQTkyOUZEMTJBMzAxMDlBMzZGMTQxNTk3OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPbSr0GlIYgQhx+Iuj6s/o0qbG tnWBiddt5Mzaeb0U3SWUJQkiuvfyjTXVy+2h6agHxwj+mGqcM15qU+YDSINfoQfk 1tFclnIQSeOpEFAbqcy7bI1lboQXA2FBtQmgouZpRxeUYVhjVuSAz5N3GzXT6Del iolfKcE/++LZB5qdRPjmfIXvEkkguTq+6CO7wi4bphK6dhp3+AfnfnwXPFcUG1/R P2Sx5zKMbv8dnI9V196DZ8InkyVTvIVXudtKGCwFkTL3G9kF7g3ROt3RwW/HPVf+ 3eeLKdDkyaaHUEtJK5skxcSfNu849VF7tP5SVL1La6ZJq27hDDm0pjtenX4bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCFB3X+kbgqkp/RKjAQmjbxQVl5YwHwYDVR0j BBgwFoAU1c6MTiHsgfSVjPYHQg8e60iy5ewwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTVjOGI5ZTMtYjQ0Zi00OTBiLWJmNTEtOTlmMmRkMmExMzY0LzAvRDVDRThDNEUy MUVDODFGNDk1OENGNjA3NDIwRjFFRUI0OEIyRTVFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENUNFOEM0RTIxRUM4MUY0OTU4Q0Y2MDc0MjBGMUVFQjQ4QjJF NUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTVjOGI5ZTMtYjQ0Zi00OTBiLWJm NTEtOTlmMmRkMmExMzY0LzAvRDVDRThDNEUyMUVDODFGNDk1OENGNjA3NDIwRjFF RUI0OEIyRTVFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACElFzk6MjBUiAsYETcwDhqf/ApSSV1tdzHc LCU5J2FwnRrJtsmYV0cOM4lwUhRtwPwJcFX5l+zQo+dcYFKpLlbxmi/DaPRT9dgl 4m1fKcox+BTwRnU98Ldsh4GDyEv7jbzN5S3D8fGYuVFjvGDIrVLhj05P90yZt965 t7tJKnuPA+s23wDVB8SpboWz+Jvp3BCwc/p/njcPkMjxnJ4+HvzZGkFuFmN+lj5Z N0KuIcqO6bLZD2Ise6dgb4fN6ptrzocWdiNG1udMJi0fgckisk85WI6bTcHdAmDI JUy0AnW6agux3Fxq8jmknKC2mm8+gxi72o5sLpntsTLpHfnQZyo= -----END CERTIFICATE-----Generated at Thu Sep 17 09:15:38 2026 by rpki-client