$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft File: 5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft (raw, json) Hash identifier: /onRzQ0PRyQ6hw6/sUz2AJKBIT4yrxYRv+fdkIC8b9g= Subject key identifier: 1A:3A:D5:33:15:2F:DD:D4:A3:73:86:DB:B4:11:85:08:18:45:9E:A5 Authority key identifier: 5A:1C:1A:CE:C0:B6:74:01:7F:FB:89:F2:18:65:BA:63:FE:AA:B9:09 Certificate issuer: /CN=5A1C1ACEC0B674017FFB89F21865BA63FEAAB909 Certificate serial: 7AD911690B25F92EF01801F6CF533F7AA20AF91A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 08:31:17 +0000 Manifest this update: Fri 25 Sep 2026 08:26:17 +0000 Manifest next update: Sat 26 Sep 2026 10:36:17 +0000 Files and hashes: 1: 5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl (hash: A7ukqGnTwZjLicGdjbz17k2MalQ0a0L99m8sYmvSz5Y=) 2: 3135372e32302e34352e302f32342d3234203d3e20313532333932.roa (hash: PIubzi7VZ2N4uYX3mam6XOmZc4gw31pwt2ndjjqEeIM=) 3: 3135372e32302e34342e302f32342d3234203d3e20313532333932.roa (hash: P5BEjOqlnRhd5dHiMK0aXJooM/BcbKofscPw2JJ5bRQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 10:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d9:11:69:0b:25:f9:2e:f0:18:01:f6:cf:53:3f:7a:a2:0a:f9:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A1C1ACEC0B674017FFB89F21865BA63FEAAB909 Validity Not Before: Sep 25 08:26:17 2026 GMT Not After : Sep 26 10:36:17 2026 GMT Subject: CN=1A3AD533152FDDD4A37386DBB411850818459EA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:91:d9:7a:c3:c6:eb:f2:ea:96:52:17:5d:e7: b1:ed:4e:6b:79:1e:7e:74:57:84:55:a9:15:ca:96: fd:bf:85:0c:c0:13:29:16:4a:c4:c2:e5:a2:18:bb: d0:65:d7:b9:7b:5c:3a:fd:c6:2a:db:b2:5a:1e:42: 42:5a:7d:69:a8:27:a7:45:a1:44:b6:59:53:4b:33: 3d:d1:fc:00:27:8c:82:b2:d6:d8:96:f4:74:2d:cf: 42:02:32:73:d7:d2:4c:4c:5a:e3:72:b5:d2:2f:ff: a4:b8:cf:68:35:7a:43:4a:d3:fc:2b:eb:6b:fb:cc: cf:22:7d:a2:82:64:33:5a:ef:c1:da:08:fe:0d:35: 12:42:9b:4f:7f:ad:7d:7c:d2:6a:cd:98:ab:3c:ca: 07:14:d4:a1:6b:d3:68:10:70:63:d2:56:1c:7a:99: 35:63:a4:6d:cd:99:45:e2:bc:c7:2e:0c:fd:0e:16: 01:12:74:b2:0d:cd:e5:f6:7f:06:5d:db:7e:00:54: 32:7d:de:5f:84:a5:19:5a:97:45:47:77:2c:df:a5: 13:00:7a:d9:85:e5:bc:b0:d4:a8:bd:30:36:53:c5: 44:d1:96:16:da:09:89:f4:19:4d:ed:6a:9a:37:fb: ee:31:9a:ac:75:ce:d7:e8:c9:68:9e:69:48:b7:e5: af:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3A:D5:33:15:2F:DD:D4:A3:73:86:DB:B4:11:85:08:18:45:9E:A5 X509v3 Authority Key Identifier: keyid:5A:1C:1A:CE:C0:B6:74:01:7F:FB:89:F2:18:65:BA:63:FE:AA:B9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:b9:29:b7:65:12:61:6e:8e:f1:01:09:c2:d3:e1:56:a1:09: 90:06:dc:60:d9:86:16:ca:ff:93:b4:60:ee:43:a6:07:bb:4d: 79:b0:ae:36:93:5d:c3:e9:64:f7:92:a9:32:6c:4d:8a:ab:48: b9:1e:5a:a2:d1:76:60:99:ef:aa:c6:53:ed:8a:40:1f:3c:3e: a2:09:08:bb:85:88:a4:8f:0f:1c:23:28:d4:1e:81:44:ea:0b: ab:d9:2d:8e:3e:ae:e1:ba:73:98:b4:23:00:d4:38:16:18:2c: 09:e3:98:31:c8:d0:51:d7:a7:04:62:ba:99:38:b1:70:53:87: 59:b7:21:bd:43:a6:72:ea:23:46:82:4f:7c:b9:81:bc:ee:40: c0:47:7d:44:75:89:96:fe:a1:3c:a7:af:21:74:7d:c8:6f:08: 2d:8e:c4:ea:44:19:43:11:b5:6a:1f:b8:ec:9c:4a:0f:45:dd: 33:a0:85:94:8c:b2:2b:41:4b:38:f2:f4:51:56:5e:5e:73:20: f2:55:38:ae:e1:96:f4:36:dd:9c:73:1b:ac:cb:98:5c:7c:6f: 0f:5a:2a:dd:7e:4e:5b:fb:f4:b8:c9:4a:b5:50:aa:35:b3:3e: 7a:7d:20:7b:d9:1d:56:bf:f2:6e:1c:91:89:4b:fe:72:fa:87: 0a:df:0b:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUetkRaQsl+S7wGAH2z1M/eqIK+RowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUExQzFBQ0VDMEI2NzQwMTdGRkI4OUYyMTg2NUJBNjNG RUFBQjkwOTAeFw0yNjA5MjUwODI2MTdaFw0yNjA5MjYxMDM2MTdaMDMxMTAvBgNV BAMTKDFBM0FENTMzMTUyRkRERDRBMzczODZEQkI0MTE4NTA4MTg0NTlFQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTkdl6w8br8uqWUhdd57HtTmt5 Hn50V4RVqRXKlv2/hQzAEykWSsTC5aIYu9Bl17l7XDr9xirbsloeQkJafWmoJ6dF oUS2WVNLMz3R/AAnjIKy1tiW9HQtz0ICMnPX0kxMWuNytdIv/6S4z2g1ekNK0/wr 62v7zM8ifaKCZDNa78HaCP4NNRJCm09/rX180mrNmKs8ygcU1KFr02gQcGPSVhx6 mTVjpG3NmUXivMcuDP0OFgESdLINzeX2fwZd234AVDJ93l+EpRlal0VHdyzfpRMA etmF5byw1Ki9MDZTxUTRlhbaCYn0GU3tapo3++4xmqx1ztfoyWieaUi35a+nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGjrVMxUv3dSjc4bbtBGFCBhFnqUwHwYDVR0j BBgwFoAUWhwazsC2dAF/+4nyGGW6Y/6quQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU4OGRmZjctNmE5Mi00MjkzLTg4MDAtYjUzZTJhOTE4YWNhLzAvNUExQzFBQ0VD MEI2NzQwMTdGRkI4OUYyMTg2NUJBNjNGRUFBQjkwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81QTFDMUFDRUMwQjY3NDAxN0ZGQjg5RjIxODY1QkE2M0ZFQUFC OTA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU4OGRmZjctNmE5Mi00MjkzLTg4 MDAtYjUzZTJhOTE4YWNhLzAvNUExQzFBQ0VDMEI2NzQwMTdGRkI4OUYyMTg2NUJB NjNGRUFBQjkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKm5KbdlEmFujvEBCcLT4VahCZAG3GDZhhbK /5O0YO5Dpge7TXmwrjaTXcPpZPeSqTJsTYqrSLkeWqLRdmCZ76rGU+2KQB88PqIJ CLuFiKSPDxwjKNQegUTqC6vZLY4+ruG6c5i0IwDUOBYYLAnjmDHI0FHXpwRiupk4 sXBTh1m3Ib1DpnLqI0aCT3y5gbzuQMBHfUR1iZb+oTynryF0fchvCC2OxOpEGUMR tWofuOycSg9F3TOghZSMsitBSzjy9FFWXl5zIPJVOK7hlvQ23ZxzG6zLmFx8bw9a Kt1+Tlv79LjJSrVQqjWzPnp9IHvZHVa/8m4ckYlL/nL6hwrfC2g= -----END CERTIFICATE-----Generated at Sat Sep 26 00:20:43 2026 by rpki-client