$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft File: 5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft (raw, json) Hash identifier: PekQHkh6CHqSvERBl3HX4rOpceu2cOBwUk/55ON4c30= Subject key identifier: C4:C2:20:F5:AB:FD:7E:5A:FA:D5:AE:C1:F4:0D:73:AC:22:42:F6:77 Authority key identifier: 5D:F5:DB:B1:48:D0:F4:EA:BB:1A:70:87:D8:CA:D8:7F:B2:A9:15:64 Certificate issuer: /CN=5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564 Certificate serial: 5C2184C78F4BA312D71153A460A7150F6BFB991E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 03:17:36 +0000 Manifest this update: Thu 17 Sep 2026 03:12:36 +0000 Manifest next update: Fri 18 Sep 2026 06:32:36 +0000 Files and hashes: 1: 3130332e3134322e38382e302f32332d3233203d3e20313339333638.roa (hash: 85nzKNKm1prDMlKjYCs/G3skXgXdFpd3BSx7AhsXh80=) 2: 3130332e3134322e38382e302f32342d3234203d3e20313339333638.roa (hash: tQktaum4KycUd3NVfEb+S8gEbr6uIhyBlDiFsL9oiH8=) 3: 5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.crl (hash: Den/j1JGX3dn8KADSpr/lx4GvbkAc9zPfzCQL8YByOs=) 4: 3130332e3134322e38392e302f32342d3234203d3e20313339333638.roa (hash: 4JRcCjrbt6UQy9keTGtyxuVyA16nB/RDNc0x3IcBoFU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.crl rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:21:84:c7:8f:4b:a3:12:d7:11:53:a4:60:a7:15:0f:6b:fb:99:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564 Validity Not Before: Sep 17 03:12:36 2026 GMT Not After : Sep 18 06:32:36 2026 GMT Subject: CN=C4C220F5ABFD7E5AFAD5AEC1F40D73AC2242F677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0c:1a:53:b7:92:44:3d:e0:a3:a1:b0:a6:de: 2f:6d:15:16:61:03:36:8c:41:a8:e9:82:5d:dd:03: 71:a3:ec:d1:7e:d8:81:f6:72:ba:3e:d3:b5:c4:6b: f7:a2:eb:20:de:e9:e3:33:af:4f:b1:77:38:62:c8: cc:15:2e:8a:c3:a4:c4:dd:e6:03:06:d0:10:e0:5f: 9f:f6:da:82:8a:ba:15:b4:a3:c1:45:3f:5b:4e:c8: 7f:a2:ba:bf:58:68:99:23:a5:2b:18:04:ac:0f:8a: 54:09:b2:49:3c:f5:be:59:17:c1:ce:b3:87:95:b2: a9:c6:37:ac:41:bd:d9:66:99:09:d4:f0:7c:a8:eb: 57:c1:7d:51:50:76:a2:43:27:69:00:37:61:17:d4: 7b:26:df:2b:8c:37:62:92:64:01:fc:fe:e6:0c:49: f7:f6:d2:17:3d:b7:c2:cb:22:3a:f9:13:87:92:44: e0:6c:87:92:e4:55:45:bd:f1:5f:18:44:5f:48:f1: 75:a0:08:d8:6a:e0:fe:b9:ec:59:98:7a:15:7c:17: d5:7c:19:79:97:a3:fb:50:62:5f:4c:4f:69:e0:be: 7e:34:0c:49:9c:1d:54:82:1e:89:9f:74:0c:e7:b2: b7:0b:a5:50:af:30:77:e7:ca:95:8e:27:b2:4e:f3: ed:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C2:20:F5:AB:FD:7E:5A:FA:D5:AE:C1:F4:0D:73:AC:22:42:F6:77 X509v3 Authority Key Identifier: keyid:5D:F5:DB:B1:48:D0:F4:EA:BB:1A:70:87:D8:CA:D8:7F:B2:A9:15:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:78:30:fe:e3:2f:9d:8d:07:e7:de:82:35:9a:43:37:41:98: 85:b5:41:63:59:b0:d2:ff:a8:0a:51:dc:1e:c8:48:25:80:f1: 37:86:07:fb:3f:be:bd:15:2a:47:74:28:fd:fb:2f:bf:74:0f: 5d:d7:be:0f:75:92:6a:15:b3:a7:61:26:12:b3:83:1f:7f:14: fa:c7:02:6a:bf:ce:ec:35:97:64:81:9a:f4:f2:9a:70:45:24: 59:19:19:51:8b:f8:e9:c9:f2:77:ad:dc:1c:24:65:fb:cc:28: 26:b6:05:df:04:d0:f6:62:d5:44:dd:15:52:40:2d:eb:53:b3: 43:9d:c9:21:8e:06:40:94:c2:79:09:96:90:34:c7:31:a2:a3: 6c:0e:2e:39:2a:b2:b0:69:32:46:65:e4:2c:bb:3d:07:8b:0a: 54:22:68:d6:67:b3:c9:31:82:d2:35:68:2f:d1:6f:68:84:f0: 49:af:c0:9a:4f:2d:b8:cd:e4:16:2b:f9:c2:b0:bc:a8:b4:ec: 31:1d:27:5a:c4:9f:0f:56:cd:09:ad:b5:91:d8:0b:27:13:d6: 8a:50:b9:81:23:8b:4b:0e:bc:bd:c1:67:a4:ab:fc:85:3f:3a: cb:67:88:ec:10:42:07:97:49:c1:d4:2b:37:d0:0d:9e:5d:bb: cc:98:30:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXCGEx49LoxLXEVOkYKcVD2v7mR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGNURCQjE0OEQwRjRFQUJCMUE3MDg3RDhDQUQ4N0ZC MkE5MTU2NDAeFw0yNjA5MTcwMzEyMzZaFw0yNjA5MTgwNjMyMzZaMDMxMTAvBgNV BAMTKEM0QzIyMEY1QUJGRDdFNUFGQUQ1QUVDMUY0MEQ3M0FDMjI0MkY2NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjDBpTt5JEPeCjobCm3i9tFRZh AzaMQajpgl3dA3Gj7NF+2IH2cro+07XEa/ei6yDe6eMzr0+xdzhiyMwVLorDpMTd 5gMG0BDgX5/22oKKuhW0o8FFP1tOyH+iur9YaJkjpSsYBKwPilQJskk89b5ZF8HO s4eVsqnGN6xBvdlmmQnU8Hyo61fBfVFQdqJDJ2kAN2EX1Hsm3yuMN2KSZAH8/uYM Sff20hc9t8LLIjr5E4eSROBsh5LkVUW98V8YRF9I8XWgCNhq4P657FmYehV8F9V8 GXmXo/tQYl9MT2ngvn40DEmcHVSCHomfdAznsrcLpVCvMHfnypWOJ7JO8+3TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxMIg9av9flr61a7B9A1zrCJC9ncwHwYDVR0j BBgwFoAUXfXbsUjQ9Oq7GnCH2MrYf7KpFWQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWQ0OWQ0OWItZGFlYS00OGMwLThkNzctMTM3MzhiNzQ1NzcyLzAvNURGNURCQjE0 OEQwRjRFQUJCMUE3MDg3RDhDQUQ4N0ZCMkE5MTU2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81REY1REJCMTQ4RDBGNEVBQkIxQTcwODdEOENBRDg3RkIyQTkx NTY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWQ0OWQ0OWItZGFlYS00OGMwLThk NzctMTM3MzhiNzQ1NzcyLzAvNURGNURCQjE0OEQwRjRFQUJCMUE3MDg3RDhDQUQ4 N0ZCMkE5MTU2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAp4MP7jL52NB+fegjWaQzdBmIW1QWNZsNL/ qApR3B7ISCWA8TeGB/s/vr0VKkd0KP37L790D13Xvg91kmoVs6dhJhKzgx9/FPrH Amq/zuw1l2SBmvTymnBFJFkZGVGL+OnJ8net3BwkZfvMKCa2Bd8E0PZi1UTdFVJA LetTs0OdySGOBkCUwnkJlpA0xzGio2wOLjkqsrBpMkZl5Cy7PQeLClQiaNZns8kx gtI1aC/Rb2iE8EmvwJpPLbjN5BYr+cKwvKi07DEdJ1rEnw9WzQmttZHYCycT1opQ uYEji0sOvL3BZ6Sr/IU/OstniOwQQgeXScHUKzfQDZ5du8yYMKc= -----END CERTIFICATE-----Generated at Thu Sep 17 09:16:24 2026 by rpki-client