$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft File: 5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft (raw, json) Hash identifier: hbrroWAnfjHx6cBKgWJOUCnqz8jnaspIiCLb+iDjRk0= Subject key identifier: A6:E9:F2:F6:A7:87:30:0C:BC:58:31:98:7F:FB:3F:25:E6:19:12:BA Authority key identifier: 5C:74:45:C1:E1:37:6E:4A:7B:40:4B:C5:3A:71:AC:92:7D:2C:22:04 Certificate issuer: /CN=5C7445C1E1376E4A7B404BC53A71AC927D2C2204 Certificate serial: 175B7A152D091C04EFC556554B70E581BF5D29A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 21:05:02 +0000 Manifest this update: Wed 16 Sep 2026 21:00:02 +0000 Manifest next update: Fri 18 Sep 2026 00:38:02 +0000 Files and hashes: 1: 3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa (hash: YDSkpFGq8xybThgooh1RThJN9W0fBsfNyr37Omd1f4w=) 2: 3136302e32352e3137342e302f32342d3234203d3e20313533303733.roa (hash: FXO9CsmctV8fdA5KiII/rw/3Y+5l9AlF4P2ED3TDR8A=) 3: 5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl (hash: 8SW6cSyzZQYBvGM5HbiLK2AmeAK8fkNif9ySUr1TUeM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:5b:7a:15:2d:09:1c:04:ef:c5:56:55:4b:70:e5:81:bf:5d:29:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7445C1E1376E4A7B404BC53A71AC927D2C2204 Validity Not Before: Sep 16 21:00:02 2026 GMT Not After : Sep 18 00:38:02 2026 GMT Subject: CN=A6E9F2F6A787300CBC5831987FFB3F25E61912BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:34:3a:05:d7:80:7b:9f:42:fc:a1:eb:29:12: 01:4c:1f:6a:30:67:0f:53:e3:59:2c:ec:17:b0:5c: ba:8f:fe:2f:be:12:e5:3f:a6:b2:bd:7b:b7:da:ec: 01:2f:e7:87:63:4a:ac:7b:02:eb:9e:cb:7d:61:56: 85:8d:1f:3b:6a:11:72:47:93:8c:db:61:90:43:e6: 84:0d:30:4a:0b:74:c9:1e:c6:59:ab:75:ba:3a:aa: 1f:9f:c1:85:bd:bb:0b:8d:10:d7:80:76:37:cc:22: 26:d3:fe:e4:53:17:f8:46:20:6a:15:d8:03:43:2b: aa:5d:7e:5a:ee:8e:27:da:1a:f8:f3:b5:27:9d:bb: 28:a5:30:ed:3c:0d:f8:6c:27:c5:28:d9:c1:d8:70: d6:f3:d4:ca:a9:ab:45:a4:ad:dd:80:46:75:b0:ed: 6d:ba:fb:d5:9c:11:01:17:b6:16:79:82:6c:25:34: df:c8:23:c3:16:2b:83:f9:f0:63:97:0e:45:f5:25: 63:19:d8:b5:93:09:27:5e:bb:61:ac:85:7d:4f:72: ae:38:f6:a8:b7:44:ce:7d:eb:3d:94:52:fa:9f:2a: 31:16:d2:0d:53:9c:2c:7b:e1:66:3b:86:38:7b:f2: 50:b4:0d:2e:a6:2a:c9:c1:9c:62:83:98:21:b9:e5: 66:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E9:F2:F6:A7:87:30:0C:BC:58:31:98:7F:FB:3F:25:E6:19:12:BA X509v3 Authority Key Identifier: keyid:5C:74:45:C1:E1:37:6E:4A:7B:40:4B:C5:3A:71:AC:92:7D:2C:22:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:51:7e:1a:5c:d6:db:cb:d4:94:23:80:a2:9c:41:97:18:57: 66:e1:d0:42:d2:e8:01:06:f1:90:ab:6c:b4:da:e4:a8:f2:c6: b9:c7:5a:dd:56:a7:56:f2:d9:fe:73:53:42:65:26:ba:ad:f7: 06:1c:34:8d:24:13:d6:46:82:2c:5a:b8:d7:0a:53:04:47:25: d2:a0:1d:14:ea:05:fe:39:a6:14:f6:55:05:c8:b9:f3:ad:bc: fe:9f:d0:04:c9:1c:8d:19:82:96:16:36:74:32:b8:fe:25:aa: d3:fc:d2:1a:d8:f0:94:a5:85:36:e3:fe:1a:96:2d:ca:a2:a3: 90:f3:f0:82:6d:22:cb:45:8d:36:d6:cb:8e:70:bb:fa:80:de: 61:dc:71:d6:1c:fb:14:6a:a2:e0:65:51:84:87:c2:ff:20:9b: f5:6a:71:13:d2:ef:bf:7f:fc:82:a0:9c:e9:50:6c:24:7e:a5: 74:e5:60:73:b0:17:e5:0c:e2:2c:78:94:b2:3f:e9:e9:6f:22: 42:4c:9b:15:d8:a1:d3:51:82:c5:1e:97:34:35:40:cc:de:f2: c8:d5:b5:39:2f:81:35:14:3f:54:18:a1:d7:2c:5b:89:44:38: ba:c5:a7:de:1c:3b:65:18:98:8c:fb:78:7a:ba:1e:24:37:99: c1:7e:94:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF1t6FS0JHATvxVZVS3Dlgb9dKaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3NDQ1QzFFMTM3NkU0QTdCNDA0QkM1M0E3MUFDOTI3 RDJDMjIwNDAeFw0yNjA5MTYyMTAwMDJaFw0yNjA5MTgwMDM4MDJaMDMxMTAvBgNV BAMTKEE2RTlGMkY2QTc4NzMwMENCQzU4MzE5ODdGRkIzRjI1RTYxOTEyQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDENDoF14B7n0L8oespEgFMH2ow Zw9T41ks7BewXLqP/i++EuU/prK9e7fa7AEv54djSqx7Auuey31hVoWNHztqEXJH k4zbYZBD5oQNMEoLdMkexlmrdbo6qh+fwYW9uwuNENeAdjfMIibT/uRTF/hGIGoV 2ANDK6pdflrujifaGvjztSeduyilMO08DfhsJ8Uo2cHYcNbz1Mqpq0Wkrd2ARnWw 7W26+9WcEQEXthZ5gmwlNN/II8MWK4P58GOXDkX1JWMZ2LWTCSdeu2GshX1Pcq44 9qi3RM596z2UUvqfKjEW0g1TnCx74WY7hjh78lC0DS6mKsnBnGKDmCG55WbDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpuny9qeHMAy8WDGYf/s/JeYZErowHwYDVR0j BBgwFoAUXHRFweE3bkp7QEvFOnGskn0sIgQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWM3MmVlM2MtZTE4MC00Mjk2LTlkYWQtOTUwMGVmZDk0ODkwLzAvNUM3NDQ1QzFF MTM3NkU0QTdCNDA0QkM1M0E3MUFDOTI3RDJDMjIwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81Qzc0NDVDMUUxMzc2RTRBN0I0MDRCQzUzQTcxQUM5MjdEMkMy MjA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM3MmVlM2MtZTE4MC00Mjk2LTlk YWQtOTUwMGVmZDk0ODkwLzAvNUM3NDQ1QzFFMTM3NkU0QTdCNDA0QkM1M0E3MUFD OTI3RDJDMjIwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdRfhpc1tvL1JQjgKKcQZcYV2bh0ELS6AEG 8ZCrbLTa5KjyxrnHWt1Wp1by2f5zU0JlJrqt9wYcNI0kE9ZGgixauNcKUwRHJdKg HRTqBf45phT2VQXIufOtvP6f0ATJHI0ZgpYWNnQyuP4lqtP80hrY8JSlhTbj/hqW Lcqio5Dz8IJtIstFjTbWy45wu/qA3mHccdYc+xRqouBlUYSHwv8gm/VqcRPS779/ /IKgnOlQbCR+pXTlYHOwF+UM4ix4lLI/6elvIkJMmxXYodNRgsUelzQ1QMze8sjV tTkvgTUUP1QYodcsW4lEOLrFp94cO2UYmIz7eHq6HiQ3mcF+lGo= -----END CERTIFICATE-----Generated at Thu Sep 17 14:30:14 2026 by rpki-client