$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft File: 5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft (raw, json) Hash identifier: qrc9LbiDXQhxC6Ma5q8MiA8zLTtPNsUrX/JueRkrTD4= Subject key identifier: 06:EF:AB:73:2B:32:3B:68:22:C9:4B:33:D7:6C:B4:21:4E:F4:3F:89 Authority key identifier: 5F:C6:89:EA:B9:41:D2:E0:F4:03:F4:D8:FE:7B:88:64:9C:CD:7D:C4 Certificate issuer: /CN=5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4 Certificate serial: 209200A020B267537F2701EA4E0F71CCE0FF070E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 02:06:06 +0000 Manifest this update: Thu 17 Sep 2026 02:01:06 +0000 Manifest next update: Fri 18 Sep 2026 05:44:06 +0000 Files and hashes: 1: 3130332e31362e3131362e302f32332d3234203d3e203535363838.roa (hash: YzbPSpHu4Y/3sNkzMjgGkQaP8RKL2rlB1MRk9WcO/JU=) 2: 5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl (hash: 9ONZQHdKavidEGnwkvYvA7RQaVFsgD7t+ecjefNh4Fs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:92:00:a0:20:b2:67:53:7f:27:01:ea:4e:0f:71:cc:e0:ff:07:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4 Validity Not Before: Sep 17 02:01:06 2026 GMT Not After : Sep 18 05:44:06 2026 GMT Subject: CN=06EFAB732B323B6822C94B33D76CB4214EF43F89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d8:36:60:2a:09:96:aa:84:f4:36:15:d3:c2: 67:03:25:10:8e:26:72:87:22:b5:2b:22:8f:15:f9: df:ea:31:51:0a:fc:c9:65:75:e3:82:67:5a:e8:56: c9:23:0c:01:c3:2d:eb:e3:e9:04:7b:5a:ad:ab:50: af:9b:e0:d2:3e:81:96:cb:0e:43:88:6a:b9:3e:5e: cf:6c:a6:d3:da:75:c1:3c:fa:e8:0b:fd:78:cd:5a: 0d:94:09:ac:5e:bd:27:53:54:97:8f:cf:87:70:d8: 5b:6e:e9:5b:8a:a5:a7:bc:bd:b1:3e:18:84:20:d2: 29:f9:5d:a2:a3:5d:01:81:f3:67:81:c4:17:87:de: 6a:fc:62:21:1e:6e:37:34:1f:94:ac:93:6a:5d:b3: 8e:f5:ae:d7:18:5c:0a:a8:3c:07:74:c4:d3:2b:1f: 95:bb:8e:0d:24:b9:49:a1:c7:2d:8c:02:a7:45:fb: 42:3e:6e:b7:44:88:00:41:db:ea:03:16:c2:e1:39: 6e:fa:78:97:2b:01:5c:c3:0e:76:8d:d2:b0:5b:f4: 36:0f:71:62:a0:8d:de:b9:30:59:91:bb:52:98:99: cc:73:eb:2e:69:c3:70:c6:5b:08:73:d6:f3:f3:08: 85:4c:d1:b5:47:a9:85:17:7a:2a:29:c7:21:f2:35: 3c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:EF:AB:73:2B:32:3B:68:22:C9:4B:33:D7:6C:B4:21:4E:F4:3F:89 X509v3 Authority Key Identifier: keyid:5F:C6:89:EA:B9:41:D2:E0:F4:03:F4:D8:FE:7B:88:64:9C:CD:7D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ae:cb:cc:de:c1:d5:15:86:cd:63:ed:51:94:44:6c:8d:42: bc:bc:a7:9d:73:21:cd:76:cd:3a:0c:7e:ea:dd:f6:c4:7f:e5: 5a:38:db:6e:5e:04:4f:b7:16:6c:13:cd:10:16:c8:64:eb:ef: c1:4a:f5:1b:cb:04:a8:a1:78:80:dc:72:98:d5:98:1a:75:e2: f1:cd:d7:0e:99:c6:99:2e:22:69:e3:f8:83:3a:e4:b7:69:6d: 39:9a:8a:b3:32:fc:1d:d2:ff:a6:b2:f9:3a:2a:a1:11:48:3a: a0:19:40:00:98:29:36:de:f6:cb:f3:b6:32:e0:78:5d:58:03: 68:f8:64:29:96:3b:35:d7:b5:57:09:64:6f:24:13:5a:cf:f6: 30:8e:99:a5:7f:6e:8d:e9:65:8b:43:22:7c:5d:a8:65:49:19: 89:5b:4c:19:e8:9b:36:5b:6e:02:4d:4d:48:e8:79:d8:74:48: 45:ae:0e:f1:89:b0:ff:69:81:65:4f:e6:e2:c4:d9:dd:b4:4c: ca:b5:82:bf:a1:ff:79:2e:2e:13:c6:e1:aa:e1:ca:25:e1:9a: 4f:39:15:dc:81:02:32:19:90:96:39:d9:59:ad:9b:dd:03:8f: e1:9f:cd:24:9e:98:cd:b5:cd:ef:d7:6c:ab:fb:f9:4b:32:14: 8a:de:49:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIJIAoCCyZ1N/JwHqTg9xzOD/Bw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDNjg5RUFCOTQxRDJFMEY0MDNGNEQ4RkU3Qjg4NjQ5 Q0NEN0RDNDAeFw0yNjA5MTcwMjAxMDZaFw0yNjA5MTgwNTQ0MDZaMDMxMTAvBgNV BAMTKDA2RUZBQjczMkIzMjNCNjgyMkM5NEIzM0Q3NkNCNDIxNEVGNDNGODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC2DZgKgmWqoT0NhXTwmcDJRCO JnKHIrUrIo8V+d/qMVEK/MlldeOCZ1roVskjDAHDLevj6QR7Wq2rUK+b4NI+gZbL DkOIark+Xs9sptPadcE8+ugL/XjNWg2UCaxevSdTVJePz4dw2Ftu6VuKpae8vbE+ GIQg0in5XaKjXQGB82eBxBeH3mr8YiEebjc0H5Ssk2pds471rtcYXAqoPAd0xNMr H5W7jg0kuUmhxy2MAqdF+0I+brdEiABB2+oDFsLhOW76eJcrAVzDDnaN0rBb9DYP cWKgjd65MFmRu1KYmcxz6y5pw3DGWwhz1vPzCIVM0bVHqYUXeiopxyHyNTxpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBu+rcysyO2giyUsz12y0IU70P4kwHwYDVR0j BBgwFoAUX8aJ6rlB0uD0A/TY/nuIZJzNfcQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFlOGJjYzktNDNhMS00YmFiLWI2ZDgtMWE5N2QwZDNjMjFkLzAvNUZDNjg5RUFC OTQxRDJFMEY0MDNGNEQ4RkU3Qjg4NjQ5Q0NEN0RDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkM2ODlFQUI5NDFEMkUwRjQwM0Y0RDhGRTdCODg2NDlDQ0Q3 REM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFlOGJjYzktNDNhMS00YmFiLWI2 ZDgtMWE5N2QwZDNjMjFkLzAvNUZDNjg5RUFCOTQxRDJFMEY0MDNGNEQ4RkU3Qjg4 NjQ5Q0NEN0RDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGyuy8zewdUVhs1j7VGURGyNQry8p51zIc12 zToMfurd9sR/5Vo4225eBE+3FmwTzRAWyGTr78FK9RvLBKiheIDccpjVmBp14vHN 1w6ZxpkuImnj+IM65LdpbTmairMy/B3S/6ay+ToqoRFIOqAZQACYKTbe9svztjLg eF1YA2j4ZCmWOzXXtVcJZG8kE1rP9jCOmaV/bo3pZYtDInxdqGVJGYlbTBnomzZb bgJNTUjoedh0SEWuDvGJsP9pgWVP5uLE2d20TMq1gr+h/3kuLhPG4arhyiXhmk85 FdyBAjIZkJY52Vmtm90Dj+GfzSSemM21ze/XbKv7+UsyFIreSTo= -----END CERTIFICATE-----Generated at Thu Sep 17 10:03:17 2026 by rpki-client