$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.mft File: 5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.mft (raw, json) Hash identifier: A2feLhPd1DhY4ExDlEgEv5rB+GUwqOP08LyFSq9oP5o= Subject key identifier: 77:2B:17:A0:DD:2D:41:EE:9C:F5:E3:28:85:8A:FB:FA:BB:B3:95:F6 Authority key identifier: 5C:19:EF:2B:99:AC:6F:39:EA:FD:3C:90:A5:1C:FF:2D:8B:90:14:96 Certificate issuer: /CN=5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496 Certificate serial: 5418DB55733CC6384B0D12182E9D36236C352E43 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 22:26:37 +0000 Manifest this update: Wed 16 Sep 2026 22:21:37 +0000 Manifest next update: Thu 17 Sep 2026 22:31:37 +0000 Files and hashes: 1: 5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.crl (hash: 8eqFJh12ghzT8+7d+RQF/Es9AF2G1xNDt3pzLgdjKLI=) 2: 3130332e38322e39322e302f32332d3234203d3e20313336303532.roa (hash: oCDO+C8a0RrEJ6lxOXaK0sUnJXysyt3W9yTdznU1D4w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.crl rsync://rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:18:db:55:73:3c:c6:38:4b:0d:12:18:2e:9d:36:23:6c:35:2e:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496 Validity Not Before: Sep 16 22:21:37 2026 GMT Not After : Sep 17 22:31:37 2026 GMT Subject: CN=772B17A0DD2D41EE9CF5E328858AFBFABBB395F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:aa:b1:0b:67:0b:dd:7f:f4:34:2b:8d:8f:62: 37:71:e0:97:09:27:f6:4a:4b:24:74:fa:61:57:db: 1a:5e:1f:04:e1:9a:6d:45:bc:4f:d7:c2:5a:da:5d: 48:de:b5:a8:67:1a:10:81:13:ad:48:fa:f1:ce:3f: 2e:b0:fc:55:44:93:89:71:21:09:bb:e2:07:8f:53: 59:48:e1:29:b2:33:e7:cd:e4:64:92:32:3e:87:51: 27:2c:9c:39:1e:52:cf:df:7b:c2:5b:f0:de:d5:f1: 31:62:d9:4f:3b:28:2c:61:fa:1b:27:0b:f3:7d:0c: 63:fc:02:75:a4:69:ba:6c:a9:1f:76:8b:9a:f1:4d: 63:d6:86:0c:d8:38:9b:44:a2:6e:89:01:f7:a8:ae: 09:dd:99:8b:91:cc:e7:bd:6c:46:71:90:d5:62:b1: 2c:06:40:05:7c:93:55:73:41:a5:d3:a4:88:c7:e6: 8c:9c:c3:7c:33:10:93:22:de:4d:f3:27:c9:31:5b: b6:b4:f7:f9:39:32:f0:bf:ed:75:51:87:45:ee:be: 05:40:9e:86:6b:8e:96:6b:99:76:87:b9:8d:44:1a: 06:db:b4:e7:f9:5d:90:3f:a4:00:b9:32:3f:8e:0b: 10:be:e7:b4:ba:23:7b:07:5f:14:8c:ee:bb:1e:91: 63:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2B:17:A0:DD:2D:41:EE:9C:F5:E3:28:85:8A:FB:FA:BB:B3:95:F6 X509v3 Authority Key Identifier: keyid:5C:19:EF:2B:99:AC:6F:39:EA:FD:3C:90:A5:1C:FF:2D:8B:90:14:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:73:b0:90:74:3a:10:9a:af:84:e8:4c:47:d0:2f:78:af:ce: 4c:35:7c:8f:a5:1a:ad:06:04:07:96:24:59:81:1c:3a:cc:1c: 6b:5a:94:80:f9:1a:4d:12:3e:75:dd:71:fe:c2:f7:de:3d:e4: bd:92:ed:ef:49:b9:43:1a:a5:3c:b9:dd:d1:62:9d:ac:71:15: 3a:1c:47:ed:f0:ff:73:a7:d6:a3:c0:e5:82:0e:3a:70:24:f8: 65:ce:5c:8c:7e:77:4d:a7:e9:8a:24:9b:3d:2d:a6:0f:a7:05: 33:e1:4d:da:2d:2f:68:98:8b:82:3f:a7:27:5e:a1:c3:e2:f4: a1:47:d9:df:44:79:7e:1a:60:83:b0:6a:b2:ad:94:d6:cb:3d: f5:28:5e:a5:e0:18:6a:a3:4b:b1:2d:39:89:4b:55:b4:ce:fd: 7d:36:fb:ca:6f:67:7c:8b:ee:0f:4d:25:22:13:a9:11:e1:98: bd:23:df:22:f0:48:a7:d7:e6:a6:9d:b1:de:ac:9e:81:2d:3a: d3:67:1a:81:9e:d8:4a:36:65:ff:39:9b:00:90:b1:91:bc:ac: e6:91:36:b3:58:fe:89:ef:ee:14:44:77:c7:f0:c4:dd:6f:1e: 50:6d:cd:47:34:ee:a4:13:b2:ab:9e:c5:b7:6f:92:29:d6:5a: b3:5a:5b:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVBjbVXM8xjhLDRIYLp02I2w1LkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMxOUVGMkI5OUFDNkYzOUVBRkQzQzkwQTUxQ0ZGMkQ4 QjkwMTQ5NjAeFw0yNjA5MTYyMjIxMzdaFw0yNjA5MTcyMjMxMzdaMDMxMTAvBgNV BAMTKDc3MkIxN0EwREQyRDQxRUU5Q0Y1RTMyODg1OEFGQkZBQkJCMzk1RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxqrELZwvdf/Q0K42PYjdx4JcJ J/ZKSyR0+mFX2xpeHwThmm1FvE/XwlraXUjetahnGhCBE61I+vHOPy6w/FVEk4lx IQm74gePU1lI4SmyM+fN5GSSMj6HUScsnDkeUs/fe8Jb8N7V8TFi2U87KCxh+hsn C/N9DGP8AnWkabpsqR92i5rxTWPWhgzYOJtEom6JAfeorgndmYuRzOe9bEZxkNVi sSwGQAV8k1VzQaXTpIjH5oycw3wzEJMi3k3zJ8kxW7a09/k5MvC/7XVRh0XuvgVA noZrjpZrmXaHuY1EGgbbtOf5XZA/pAC5Mj+OCxC+57S6I3sHXxSM7rsekWMjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdysXoN0tQe6c9eMohYr7+ruzlfYwHwYDVR0j BBgwFoAUXBnvK5msbznq/TyQpRz/LYuQFJYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjc3ZWNjZmYtY2U5Yi00MWRhLWI5OGEtYWJjZmU0OTI1M2FmLzAvNUMxOUVGMkI5 OUFDNkYzOUVBRkQzQzkwQTUxQ0ZGMkQ4QjkwMTQ5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QzE5RUYyQjk5QUM2RjM5RUFGRDNDOTBBNTFDRkYyRDhCOTAx NDk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjc3ZWNjZmYtY2U5Yi00MWRhLWI5 OGEtYWJjZmU0OTI1M2FmLzAvNUMxOUVGMkI5OUFDNkYzOUVBRkQzQzkwQTUxQ0ZG MkQ4QjkwMTQ5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJzsJB0OhCar4ToTEfQL3ivzkw1fI+lGq0G BAeWJFmBHDrMHGtalID5Gk0SPnXdcf7C99495L2S7e9JuUMapTy53dFinaxxFToc R+3w/3On1qPA5YIOOnAk+GXOXIx+d02n6Yokmz0tpg+nBTPhTdotL2iYi4I/pyde ocPi9KFH2d9EeX4aYIOwarKtlNbLPfUoXqXgGGqjS7EtOYlLVbTO/X02+8pvZ3yL 7g9NJSITqRHhmL0j3yLwSKfX5qadsd6snoEtOtNnGoGe2Eo2Zf85mwCQsZG8rOaR NrNY/onv7hREd8fwxN1vHlBtzUc07qQTsquexbdvkinWWrNaWy0= -----END CERTIFICATE-----Generated at Thu Sep 17 11:27:34 2026 by rpki-client