$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft File: 5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft (raw, json) Hash identifier: 9705kGYaOkOvAZ4dW/dS37psc6G2aKVkVrb59SvzDb0= Subject key identifier: 6D:E1:78:6E:3B:23:F3:E7:CE:A7:E0:8A:6E:29:E6:E4:88:64:FB:DC Authority key identifier: 5A:7D:37:40:96:A7:3D:44:72:AE:1F:FE:EE:E2:44:73:C1:EC:70:9C Certificate issuer: /CN=5A7D374096A73D4472AE1FFEEEE24473C1EC709C Certificate serial: 5A7E091CCD7BFDF4E6D197935D80444B1FA24427 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft Manifest number: B0 Signing time: Thu 10 Sep 2026 06:09:23 +0000 Manifest this update: Thu 10 Sep 2026 06:04:23 +0000 Manifest next update: Fri 11 Sep 2026 09:23:23 +0000 Files and hashes: 1: 3130332e3132372e3136382e302f32332d3234203d3e203435323837.roa (hash: gVVcFzT/K9Q9nDNA6t6fupz9aVwPxkvvDdd7B2c399E=) 2: 5A7D374096A73D4472AE1FFEEEE24473C1EC709C.crl (hash: 2zs23GIJCEd3q1VGC7saub1w6aOUSbLUrHCjxK/9BDc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.crl rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 09:23:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:7e:09:1c:cd:7b:fd:f4:e6:d1:97:93:5d:80:44:4b:1f:a2:44:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A7D374096A73D4472AE1FFEEEE24473C1EC709C Validity Not Before: Sep 10 06:04:23 2026 GMT Not After : Sep 11 09:23:23 2026 GMT Subject: CN=6DE1786E3B23F3E7CEA7E08A6E29E6E48864FBDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0b:1d:3c:4f:c0:c2:70:b0:ff:2b:0d:f9:31: 93:f1:46:45:b1:2d:5f:f5:f3:cc:91:72:40:81:c0: 33:df:b1:be:ab:e8:05:e2:9a:af:42:85:2c:f7:4b: 05:f8:48:77:5d:73:c7:ee:d5:fb:73:62:36:78:d4: c6:af:c0:97:69:6f:21:c6:ba:fe:e4:14:08:f2:5a: a9:40:4a:f7:de:65:c6:f4:ea:ca:a5:56:ef:b8:2b: e1:32:1a:2f:e7:a5:be:cb:9c:cc:54:f3:58:49:f1: 59:3a:79:16:ee:5c:c4:74:c7:e9:92:2b:58:ca:34: 75:dc:92:85:ed:dd:6c:bb:2c:fa:a5:b0:29:c1:30: 90:01:c8:a4:f2:fc:c7:8f:8f:cf:92:50:21:e1:a7: 9c:1a:11:38:7a:63:36:10:3f:65:a9:22:88:9d:c8: 61:a5:e0:1e:15:de:9a:58:d5:6e:be:51:58:9f:09: b8:41:62:86:0b:5a:79:fb:e0:cf:34:f3:6b:cf:67: 62:3a:47:0d:f0:72:8c:db:1f:c1:71:ca:4a:03:e2: c1:a2:b8:67:22:03:38:15:a9:c0:11:ac:4a:a8:0c: c1:ee:4e:e2:c4:fb:aa:c2:49:13:c7:1b:8b:9d:e7: 17:61:76:e4:dd:10:6e:b7:ba:9c:6c:fa:ab:31:d5: f4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E1:78:6E:3B:23:F3:E7:CE:A7:E0:8A:6E:29:E6:E4:88:64:FB:DC X509v3 Authority Key Identifier: keyid:5A:7D:37:40:96:A7:3D:44:72:AE:1F:FE:EE:E2:44:73:C1:EC:70:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:03:41:75:37:09:fe:29:e9:84:49:3c:4f:5c:f5:db:cf:57: fa:c6:c9:09:3b:fc:ab:6e:5e:4a:42:ca:86:1a:15:ad:5e:e1: 4b:6b:56:9a:4c:5b:29:ab:5b:be:1e:3a:e2:50:b1:13:d2:69: 6c:3b:fb:ec:54:63:91:0d:eb:ff:72:5e:0b:c6:4a:17:c7:29: 74:a6:fe:9e:96:56:03:e0:d0:e0:d6:09:53:77:a0:de:16:16: f7:98:42:ac:66:c4:92:30:7c:28:7a:d3:33:a4:94:46:08:8f: 09:64:68:cd:e5:00:58:08:19:55:b5:19:10:9e:21:91:d4:8d: 0c:d5:da:73:9f:86:a1:dc:2d:36:74:e6:ef:5a:c5:4f:f0:06: 86:58:59:2c:0b:ff:4d:a8:07:af:1b:bd:87:0c:0c:fa:e4:29: 9c:13:69:f2:51:ed:f6:4f:00:15:f9:f4:f6:3b:e8:a2:7a:49: 61:46:be:6b:f2:d0:d4:79:62:a3:f9:f0:c9:b7:e9:ed:fa:d7: 42:dc:6d:cb:14:51:6a:df:de:57:25:29:34:e7:a3:62:61:2f: ca:e3:e5:f1:76:ec:03:ef:69:60:54:c5:be:27:83:8a:f0:68: c3:6c:ab:38:e8:7a:88:3b:46:ba:62:e1:72:87:87:32:56:66: cb:56:b8:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWn4JHM17/fTm0ZeTXYBESx+iRCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE3RDM3NDA5NkE3M0Q0NDcyQUUxRkZFRUVFMjQ0NzND MUVDNzA5QzAeFw0yNjA5MTAwNjA0MjNaFw0yNjA5MTEwOTIzMjNaMDMxMTAvBgNV BAMTKDZERTE3ODZFM0IyM0YzRTdDRUE3RTA4QTZFMjlFNkU0ODg2NEZCREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzCx08T8DCcLD/Kw35MZPxRkWx LV/188yRckCBwDPfsb6r6AXimq9ChSz3SwX4SHddc8fu1ftzYjZ41MavwJdpbyHG uv7kFAjyWqlASvfeZcb06sqlVu+4K+EyGi/npb7LnMxU81hJ8Vk6eRbuXMR0x+mS K1jKNHXckoXt3Wy7LPqlsCnBMJAByKTy/MePj8+SUCHhp5waETh6YzYQP2WpIoid yGGl4B4V3ppY1W6+UVifCbhBYoYLWnn74M8082vPZ2I6Rw3wcozbH8FxykoD4sGi uGciAzgVqcARrEqoDMHuTuLE+6rCSRPHG4ud5xdhduTdEG63upxs+qsx1fQ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbeF4bjsj8+fOp+CKbinm5Ihk+9wwHwYDVR0j BBgwFoAUWn03QJanPURyrh/+7uJEc8HscJwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmU3Y2M5NzYtNjlmNi00ZGI4LWE3YWItODU2YTJiYjhlYWZlLzAvNUE3RDM3NDA5 NkE3M0Q0NDcyQUUxRkZFRUVFMjQ0NzNDMUVDNzA5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QTdEMzc0MDk2QTczRDQ0NzJBRTFGRkVFRUUyNDQ3M0MxRUM3 MDlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmU3Y2M5NzYtNjlmNi00ZGI4LWE3 YWItODU2YTJiYjhlYWZlLzAvNUE3RDM3NDA5NkE3M0Q0NDcyQUUxRkZFRUVFMjQ0 NzNDMUVDNzA5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0DQXU3Cf4p6YRJPE9c9dvPV/rGyQk7/Ktu XkpCyoYaFa1e4UtrVppMWymrW74eOuJQsRPSaWw7++xUY5EN6/9yXgvGShfHKXSm /p6WVgPg0ODWCVN3oN4WFveYQqxmxJIwfCh60zOklEYIjwlkaM3lAFgIGVW1GRCe IZHUjQzV2nOfhqHcLTZ05u9axU/wBoZYWSwL/02oB68bvYcMDPrkKZwTafJR7fZP ABX59PY76KJ6SWFGvmvy0NR5YqP58Mm36e3610LcbcsUUWrf3lclKTTno2JhL8rj 5fF27APvaWBUxb4ng4rwaMNsqzjoeog7Rrpi4XKHhzJWZstWuAI= -----END CERTIFICATE-----Generated at Thu Sep 10 23:36:36 2026 by rpki-client