$ rpki-client -vvvf rpki-rsync.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/C717817244AB088EAD0E4D76165AD606C58B6BDE.mft File: C717817244AB088EAD0E4D76165AD606C58B6BDE.mft (raw, json) Hash identifier: o2IqH7uZSvT9SjyaQBQoxgrBexkzR0+Ga5kVTRElYpM= Subject key identifier: F9:4B:94:94:7B:65:8C:96:83:05:82:79:CA:97:8A:A3:E0:A0:8A:99 Authority key identifier: C7:17:81:72:44:AB:08:8E:AD:0E:4D:76:16:5A:D6:06:C5:8B:6B:DE Certificate issuer: /CN=C717817244AB088EAD0E4D76165AD606C58B6BDE Certificate serial: 7AF3B9FA3731709E8E7EEA62A729734602E34D33 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C717817244AB088EAD0E4D76165AD606C58B6BDE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/C717817244AB088EAD0E4D76165AD606C58B6BDE.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 11:13:34 +0000 Manifest this update: Sat 26 Sep 2026 11:08:34 +0000 Manifest next update: Sun 27 Sep 2026 11:46:34 +0000 Files and hashes: 1: C717817244AB088EAD0E4D76165AD606C58B6BDE.crl (hash: Od/Z0b+dBKpUXhH6KeOmeJHIQiLuuN4WQJJ6q/8CC4A=) 2: 3130332e3139312e3137312e302f32342d3234203d3e20313439393333.roa (hash: ibsq14pTeQS2Mg9IUw2PKfJ3Jza0sBMhcbU4/kSfoSc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/C717817244AB088EAD0E4D76165AD606C58B6BDE.crl rsync://rpki-rsync.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/C717817244AB088EAD0E4D76165AD606C58B6BDE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C717817244AB088EAD0E4D76165AD606C58B6BDE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 11:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:f3:b9:fa:37:31:70:9e:8e:7e:ea:62:a7:29:73:46:02:e3:4d:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C717817244AB088EAD0E4D76165AD606C58B6BDE Validity Not Before: Sep 26 11:08:34 2026 GMT Not After : Sep 27 11:46:34 2026 GMT Subject: CN=F94B94947B658C9683058279CA978AA3E0A08A99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9c:10:df:cc:4f:7a:bf:da:19:fd:45:53:e2: e9:ee:9d:8a:11:34:c0:23:64:db:c8:df:7d:d1:71: 65:7e:8d:b8:60:fb:07:b9:64:d4:39:06:f4:69:53: 8f:00:eb:30:23:ed:f0:29:ba:f5:34:5b:f1:83:ac: 9f:0d:61:9c:e6:93:97:2a:cb:32:36:37:8c:b9:3e: b8:09:35:95:e3:dc:3d:bc:1a:65:ba:9e:84:9d:07: 1a:6e:0e:82:1e:ea:ef:58:a0:3b:66:b8:3f:2a:4d: 2a:bd:ae:5d:7f:c1:e5:c6:32:c6:f4:f0:da:c0:46: e6:cd:1d:ea:75:54:35:8d:f7:d5:ef:86:4b:81:1a: d4:0c:32:cc:a2:8d:32:ef:f9:bf:3c:0f:8c:2f:53: 1d:65:68:be:88:19:02:4a:1d:e5:0c:97:62:52:c6: 25:cc:aa:fb:71:f1:17:b1:1a:eb:5e:02:b5:76:73: 37:c8:8c:b0:4e:25:7b:a5:e6:28:a9:8f:77:02:1f: 94:90:09:5c:a1:2e:8e:4e:66:8b:a6:d2:c5:51:37: e5:f1:a3:69:cc:a9:e5:ff:0f:8a:ca:29:18:d8:31: 28:f1:bd:93:6e:36:77:00:7f:13:6b:65:ea:42:67: f7:35:2d:df:f3:08:12:77:2f:2b:a7:8f:e2:87:b2: 3a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:4B:94:94:7B:65:8C:96:83:05:82:79:CA:97:8A:A3:E0:A0:8A:99 X509v3 Authority Key Identifier: keyid:C7:17:81:72:44:AB:08:8E:AD:0E:4D:76:16:5A:D6:06:C5:8B:6B:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/C717817244AB088EAD0E4D76165AD606C58B6BDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C717817244AB088EAD0E4D76165AD606C58B6BDE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/C717817244AB088EAD0E4D76165AD606C58B6BDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:af:9e:0a:bb:ed:47:70:8d:49:bf:ef:eb:37:b1:07:7e:ff: d4:3c:e5:d6:33:85:1e:0d:d6:e0:b4:f5:5b:d9:b2:b4:d3:02: 7c:30:99:44:9e:f2:e2:29:f6:52:ff:5b:2e:0b:4a:a3:08:98: fa:90:d4:46:eb:f4:ad:cb:78:15:6e:8f:6a:cc:fd:04:3d:c0: 35:77:0b:26:65:02:84:ff:7a:fa:a2:ac:2d:ae:7b:b0:08:72: cf:0f:3c:89:1b:2e:2b:86:c7:66:60:1d:eb:ab:42:c2:69:49: a9:84:ad:61:cf:23:69:eb:ec:80:0e:c5:34:00:99:cb:61:23: 3d:ab:0c:aa:f9:21:48:58:91:6b:28:d8:61:9c:0c:f4:4e:9d: cf:1c:89:14:fb:ce:a0:83:33:01:a0:6e:5c:ad:eb:b1:09:d1: f9:01:03:45:a6:b1:f4:60:a5:9c:36:af:5d:ee:29:43:1a:a8: 3d:87:16:32:a2:f2:b5:6a:dc:cd:e4:0d:20:44:e7:1e:60:d5: 82:65:b7:c7:6e:06:5f:a8:85:97:99:da:1e:0f:56:aa:e1:83: b2:82:33:d4:64:5a:45:15:1d:ed:ec:78:7e:6a:a2:06:92:81: 5b:d6:2d:a1:81:87:38:fd:e4:91:c1:7c:15:c8:38:92:a4:03: c4:61:01:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUevO5+jcxcJ6OfupipylzRgLjTTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcxNzgxNzI0NEFCMDg4RUFEMEU0RDc2MTY1QUQ2MDZD NThCNkJERTAeFw0yNjA5MjYxMTA4MzRaFw0yNjA5MjcxMTQ2MzRaMDMxMTAvBgNV BAMTKEY5NEI5NDk0N0I2NThDOTY4MzA1ODI3OUNBOTc4QUEzRTBBMDhBOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjnBDfzE96v9oZ/UVT4ununYoR NMAjZNvI333RcWV+jbhg+we5ZNQ5BvRpU48A6zAj7fApuvU0W/GDrJ8NYZzmk5cq yzI2N4y5PrgJNZXj3D28GmW6noSdBxpuDoIe6u9YoDtmuD8qTSq9rl1/weXGMsb0 8NrARubNHep1VDWN99XvhkuBGtQMMsyijTLv+b88D4wvUx1laL6IGQJKHeUMl2JS xiXMqvtx8RexGuteArV2czfIjLBOJXul5iipj3cCH5SQCVyhLo5OZoum0sVRN+Xx o2nMqeX/D4rKKRjYMSjxvZNuNncAfxNrZepCZ/c1Ld/zCBJ3Lyunj+KHsjr1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+UuUlHtljJaDBYJ5ypeKo+CgipkwHwYDVR0j BBgwFoAUxxeBckSrCI6tDk12FlrWBsWLa94wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDVjMWUyZjMtNGZiZC00NGJiLTgzZjAtYmI1YWZlNjQ1NzVlLzAvQzcxNzgxNzI0 NEFCMDg4RUFEMEU0RDc2MTY1QUQ2MDZDNThCNkJERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzE3ODE3MjQ0QUIwODhFQUQwRTRENzYxNjVBRDYwNkM1OEI2 QkRFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDVjMWUyZjMtNGZiZC00NGJiLTgz ZjAtYmI1YWZlNjQ1NzVlLzAvQzcxNzgxNzI0NEFCMDg4RUFEMEU0RDc2MTY1QUQ2 MDZDNThCNkJERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+vngq77UdwjUm/7+s3sQd+/9Q85dYzhR4N 1uC09VvZsrTTAnwwmUSe8uIp9lL/Wy4LSqMImPqQ1Ebr9K3LeBVuj2rM/QQ9wDV3 CyZlAoT/evqirC2ue7AIcs8PPIkbLiuGx2ZgHeurQsJpSamErWHPI2nr7IAOxTQA mcthIz2rDKr5IUhYkWso2GGcDPROnc8ciRT7zqCDMwGgblyt67EJ0fkBA0WmsfRg pZw2r13uKUMaqD2HFjKi8rVq3M3kDSBE5x5g1YJlt8duBl+ohZeZ2h4PVqrhg7KC M9RkWkUVHe3seH5qogaSgVvWLaGBhzj95JHBfBXIOJKkA8RhAfY= -----END CERTIFICATE-----Generated at Sat Sep 26 14:54:00 2026 by rpki-client