$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft File: 5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft (raw, json) Hash identifier: 4/agcySMUlFYkMYFwHl328ux4yU4EBMdpjRkWgxTwwI= Subject key identifier: 5C:99:76:33:D9:17:E1:55:F4:E5:5E:03:AE:20:FC:A7:75:9B:2B:56 Authority key identifier: 5E:D0:FC:9D:E3:C5:BF:0F:26:41:FB:C8:2E:03:53:3A:D5:A6:C5:C1 Certificate issuer: /CN=5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1 Certificate serial: 5950A5B6C2736BB0DEE3F68103E619A443CCDC79 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 19:23:04 +0000 Manifest this update: Wed 16 Sep 2026 19:18:04 +0000 Manifest next update: Thu 17 Sep 2026 19:44:04 +0000 Files and hashes: 1: 5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.crl (hash: MLNxVpxKSZxhYFooQCQ2EcgrW7UROxVJ+VK0xZR9CVQ=) 2: 323430353a636534303a3a2f33322d3438203d3e20313339393838.roa (hash: CgpRUUxgJdvC2DaauFEj0ljqW/Af8HR5RmTcf5er/Ag=) 3: 3130332e3134382e3130302e302f32332d3234203d3e20313339393838.roa (hash: yFzJDaOR3ALC9R9lcLlFWOcSjWJQYhCD//08bWWKhcU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.crl rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:44:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:50:a5:b6:c2:73:6b:b0:de:e3:f6:81:03:e6:19:a4:43:cc:dc:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1 Validity Not Before: Sep 16 19:18:04 2026 GMT Not After : Sep 17 19:44:04 2026 GMT Subject: CN=5C997633D917E155F4E55E03AE20FCA7759B2B56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1a:c1:42:dd:d6:60:06:34:ad:f3:bf:83:de: 85:c7:24:96:f5:0f:53:af:77:72:5a:30:5e:8a:6b: 50:12:cd:91:9a:7f:38:b9:d6:83:83:c1:41:11:e7: 78:7f:14:b6:62:ec:7b:53:89:f5:1c:ea:f4:1e:d4: 81:cf:d0:f3:50:4c:ac:1b:45:86:9f:3c:9d:3d:ff: 4e:b6:09:a9:64:22:7b:f3:07:19:e6:e0:bc:72:c0: 11:f6:51:7b:8b:dc:d5:3c:66:2a:c3:d6:d3:3d:17: 34:99:68:41:fb:b1:52:e8:af:4c:3b:b1:d2:96:33: 5e:84:d6:f0:0b:56:ed:03:0c:db:45:e9:c8:08:5b: bb:82:94:bf:4a:47:fd:ef:09:a9:ac:69:42:61:8b: 27:cf:f3:11:45:7b:9a:8d:9f:be:79:4d:26:2a:a8: 0e:17:fd:c9:da:7e:2b:bc:6a:37:34:ac:7c:10:f8: 41:31:e7:2b:c2:2b:dd:2c:a2:ec:61:77:a3:dc:bf: 8f:d2:1a:7f:7f:c3:64:41:37:29:64:77:20:3c:5a: e8:c9:4f:cb:26:33:ca:8b:75:34:a1:93:f9:f3:a1: 6e:ad:16:ce:83:73:12:f8:f1:c2:54:c7:17:17:0a: 67:9e:16:b8:5a:63:c9:10:12:7c:6b:a5:36:9b:1b: 2c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:99:76:33:D9:17:E1:55:F4:E5:5E:03:AE:20:FC:A7:75:9B:2B:56 X509v3 Authority Key Identifier: keyid:5E:D0:FC:9D:E3:C5:BF:0F:26:41:FB:C8:2E:03:53:3A:D5:A6:C5:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:9b:c3:a0:22:91:db:93:3f:c6:f9:f5:3d:01:a0:94:13:02: 7b:b4:02:1e:da:32:f0:ab:51:ca:18:bb:c8:93:0f:ae:3a:51: 20:4b:51:7a:51:5f:62:ce:74:75:a3:2c:89:40:21:76:bd:df: 34:8f:fe:13:63:23:ef:d8:50:5a:5f:fd:e2:f1:b5:ac:29:26: 50:b8:76:9f:e1:79:a8:6f:a6:6a:16:24:77:1f:d9:fe:b9:cf: a6:c2:1f:c0:9f:6e:03:42:41:e9:5a:dc:c1:5b:86:07:92:1d: 9f:54:87:9f:19:70:d9:5f:ab:d0:d9:66:37:c3:ab:9e:30:79: 91:77:17:34:0a:1f:c9:e5:f8:f8:88:db:39:86:3a:a4:06:83: 30:7d:d6:28:0d:f9:64:28:fb:1d:b7:84:f4:4a:2d:f9:c6:23: 39:02:e8:ff:35:26:4f:1d:60:03:0f:7f:e7:fa:43:1f:c4:4e: dc:14:64:49:4b:35:9f:52:af:29:51:4f:1b:43:be:23:f5:fd: a1:fd:ff:87:cb:fc:7a:48:88:9f:c4:b4:c3:ca:78:37:cf:fe: 68:f5:d2:0b:7e:09:8d:90:69:5d:71:c1:7d:07:68:36:cd:7d: 84:af:27:1a:13:88:24:95:c7:2a:3e:bb:37:ec:55:b5:5f:81: 0b:d5:2e:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWVCltsJza7De4/aBA+YZpEPM3HkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVEMEZDOURFM0M1QkYwRjI2NDFGQkM4MkUwMzUzM0FE NUE2QzVDMTAeFw0yNjA5MTYxOTE4MDRaFw0yNjA5MTcxOTQ0MDRaMDMxMTAvBgNV BAMTKDVDOTk3NjMzRDkxN0UxNTVGNEU1NUUwM0FFMjBGQ0E3NzU5QjJCNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCBGsFC3dZgBjSt87+D3oXHJJb1 D1Ovd3JaMF6Ka1ASzZGafzi51oODwUER53h/FLZi7HtTifUc6vQe1IHP0PNQTKwb RYafPJ09/062CalkInvzBxnm4LxywBH2UXuL3NU8ZirD1tM9FzSZaEH7sVLor0w7 sdKWM16E1vALVu0DDNtF6cgIW7uClL9KR/3vCamsaUJhiyfP8xFFe5qNn755TSYq qA4X/cnafiu8ajc0rHwQ+EEx5yvCK90souxhd6Pcv4/SGn9/w2RBNylkdyA8WujJ T8smM8qLdTShk/nzoW6tFs6DcxL48cJUxxcXCmeeFrhaY8kQEnxrpTabGyy9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXJl2M9kX4VX05V4DriD8p3WbK1YwHwYDVR0j BBgwFoAUXtD8nePFvw8mQfvILgNTOtWmxcEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjJkNjZkMTAtYjg1Ny00YmVmLTkzOTUtNDVkNWFiMmM0NGY5LzAvNUVEMEZDOURF M0M1QkYwRjI2NDFGQkM4MkUwMzUzM0FENUE2QzVDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RUQwRkM5REUzQzVCRjBGMjY0MUZCQzgyRTAzNTMzQUQ1QTZD NUMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjJkNjZkMTAtYjg1Ny00YmVmLTkz OTUtNDVkNWFiMmM0NGY5LzAvNUVEMEZDOURFM0M1QkYwRjI2NDFGQkM4MkUwMzUz M0FENUE2QzVDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIebw6AikduTP8b59T0BoJQTAnu0Ah7aMvCr UcoYu8iTD646USBLUXpRX2LOdHWjLIlAIXa93zSP/hNjI+/YUFpf/eLxtawpJlC4 dp/heahvpmoWJHcf2f65z6bCH8CfbgNCQela3MFbhgeSHZ9Uh58ZcNlfq9DZZjfD q54weZF3FzQKH8nl+PiI2zmGOqQGgzB91igN+WQo+x23hPRKLfnGIzkC6P81Jk8d YAMPf+f6Qx/ETtwUZElLNZ9SrylRTxtDviP1/aH9/4fL/HpIiJ/EtMPKeDfP/mj1 0gt+CY2QaV1xwX0HaDbNfYSvJxoTiCSVxyo+uzfsVbVfgQvVLjY= -----END CERTIFICATE-----Generated at Thu Sep 17 11:03:40 2026 by rpki-client