$ rpki-client -vvvf rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft File: 5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft (raw, json) Hash identifier: CrtYRyA1UirvYSB+5njjU7OtgM84UXTFVSW/T9U+CBU= Subject key identifier: 84:86:9D:BB:79:43:68:05:35:57:4E:0B:04:5D:96:BB:06:F3:5F:5F Authority key identifier: 5D:59:59:C0:4A:DE:DB:A5:EB:17:E7:1F:95:F6:C4:02:5E:DE:CB:DB Certificate issuer: /CN=5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB Certificate serial: 53E15F1382C579C17E645AA648DC4DF16903200D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 16:56:13 +0000 Manifest this update: Fri 25 Sep 2026 16:51:13 +0000 Manifest next update: Sat 26 Sep 2026 19:01:13 +0000 Files and hashes: 1: 5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.crl (hash: GI32r6LIm/jWtEQiqPzz1JM4649BJYr1Q1AEMy1BZao=) 2: 3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa (hash: HU+tP0ePX+yD7/CYpvvWhY8DWw0D5TG8DRzaRiSU/0w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.crl rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:e1:5f:13:82:c5:79:c1:7e:64:5a:a6:48:dc:4d:f1:69:03:20:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB Validity Not Before: Sep 25 16:51:13 2026 GMT Not After : Sep 26 19:01:13 2026 GMT Subject: CN=84869DBB7943680535574E0B045D96BB06F35F5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:13:45:d3:5e:f0:f0:f4:d9:94:d2:0d:c1:e2: 11:df:31:6a:af:9c:68:68:a8:38:69:73:e4:13:d1: ee:16:55:5a:f9:c8:f4:50:60:14:d5:7c:f7:00:11: be:14:ed:45:f4:cf:27:80:96:b1:46:54:db:33:22: 4e:50:08:cd:e7:1c:99:b5:8e:02:2e:0d:fb:12:e3: 46:1d:3d:bc:27:0d:a2:06:7b:8e:da:19:8f:b8:e6: 04:15:f6:1f:93:94:36:39:f2:9f:c7:43:85:09:50: a4:62:b2:67:12:98:b1:bc:08:0a:24:bc:04:cd:49: c9:3c:51:e3:de:66:c1:98:64:e8:a2:c1:b7:c1:65: 1c:fe:93:40:9a:c0:06:da:85:ff:38:6c:d0:74:2b: 73:6d:5f:73:79:e1:66:b3:ff:b0:9c:45:6f:a7:8f: a9:b7:bf:a3:35:26:d8:f8:bb:61:3d:0f:e3:93:f3: 7a:94:6b:0d:08:e4:3a:68:d7:3f:54:6c:4d:e8:a3: 4c:16:98:57:f7:76:13:1f:37:f7:ba:86:03:44:cb: 19:e9:3f:6c:da:a9:83:b5:29:55:ac:e3:bf:3d:9c: c9:2e:2c:44:69:53:f8:c2:6e:04:2f:0b:5f:a8:87: c1:39:26:ce:49:84:d1:5f:ff:9c:87:a8:ca:7b:29: 89:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:86:9D:BB:79:43:68:05:35:57:4E:0B:04:5D:96:BB:06:F3:5F:5F X509v3 Authority Key Identifier: keyid:5D:59:59:C0:4A:DE:DB:A5:EB:17:E7:1F:95:F6:C4:02:5E:DE:CB:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:cc:47:d3:ae:3a:06:6e:6d:ac:1b:28:9f:57:c5:08:9c:79: 81:41:77:d4:aa:fc:b4:b3:7c:24:98:99:71:4d:b5:c4:fd:1f: c7:4d:2d:71:29:e6:02:93:c4:7f:fd:50:93:9d:46:88:4e:33: dc:22:0c:a7:82:c8:97:7b:12:3f:31:79:24:82:20:cb:a0:c4: ec:73:ac:07:2e:b0:7c:6f:c3:0b:41:6a:8a:1d:95:df:81:67: 06:00:a0:d4:89:d9:ed:91:46:10:28:07:03:ab:1e:d7:8c:32: 0c:6d:ff:c9:b9:20:d0:5d:a0:de:e8:fe:7b:98:84:60:35:2d: 9e:30:dc:cc:60:e0:af:a9:61:07:98:42:b7:55:9b:6b:d0:96: 5a:12:e3:61:65:90:27:47:74:5c:83:1b:98:0c:18:a0:f9:73: 3d:ca:4b:20:de:28:21:ad:b0:2c:01:de:3d:7c:fd:15:78:19: e9:aa:22:6f:3e:95:39:3d:47:40:91:d8:90:c4:9d:75:79:e5: 7e:6d:39:5f:2d:c2:38:5b:58:ad:08:a9:77:b3:da:2c:e9:4c: fc:c3:96:75:10:dc:64:85:6f:7d:50:cf:bf:2d:f6:c0:bc:69: e1:92:86:9b:9b:53:a8:b3:c8:71:1c:0d:a1:1b:1c:1d:03:46: 3f:2c:62:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU+FfE4LFecF+ZFqmSNxN8WkDIA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ1OTU5QzA0QURFREJBNUVCMTdFNzFGOTVGNkM0MDI1 RURFQ0JEQjAeFw0yNjA5MjUxNjUxMTNaFw0yNjA5MjYxOTAxMTNaMDMxMTAvBgNV BAMTKDg0ODY5REJCNzk0MzY4MDUzNTU3NEUwQjA0NUQ5NkJCMDZGMzVGNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFE0XTXvDw9NmU0g3B4hHfMWqv nGhoqDhpc+QT0e4WVVr5yPRQYBTVfPcAEb4U7UX0zyeAlrFGVNszIk5QCM3nHJm1 jgIuDfsS40YdPbwnDaIGe47aGY+45gQV9h+TlDY58p/HQ4UJUKRismcSmLG8CAok vATNSck8UePeZsGYZOiiwbfBZRz+k0CawAbahf84bNB0K3NtX3N54Waz/7CcRW+n j6m3v6M1Jtj4u2E9D+OT83qUaw0I5Dpo1z9UbE3oo0wWmFf3dhMfN/e6hgNEyxnp P2zaqYO1KVWs4789nMkuLERpU/jCbgQvC1+oh8E5Js5JhNFf/5yHqMp7KYk7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhIadu3lDaAU1V04LBF2WuwbzX18wHwYDVR0j BBgwFoAUXVlZwEre26XrF+cflfbEAl7ey9swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDVlYWI0NDItNzQ4MC00NTgxLTgxZGQtMjNhMjAwNjE0MzgyLzAvNUQ1OTU5QzA0 QURFREJBNUVCMTdFNzFGOTVGNkM0MDI1RURFQ0JEQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDU5NTlDMDRBREVEQkE1RUIxN0U3MUY5NUY2QzQwMjVFREVD QkRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDVlYWI0NDItNzQ4MC00NTgxLTgx ZGQtMjNhMjAwNjE0MzgyLzAvNUQ1OTU5QzA0QURFREJBNUVCMTdFNzFGOTVGNkM0 MDI1RURFQ0JEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvMR9OuOgZubawbKJ9XxQiceYFBd9Sq/LSz fCSYmXFNtcT9H8dNLXEp5gKTxH/9UJOdRohOM9wiDKeCyJd7Ej8xeSSCIMugxOxz rAcusHxvwwtBaoodld+BZwYAoNSJ2e2RRhAoBwOrHteMMgxt/8m5INBdoN7o/nuY hGA1LZ4w3Mxg4K+pYQeYQrdVm2vQlloS42FlkCdHdFyDG5gMGKD5cz3KSyDeKCGt sCwB3j18/RV4GemqIm8+lTk9R0CR2JDEnXV55X5tOV8twjhbWK0IqXez2izpTPzD lnUQ3GSFb31Qz78t9sC8aeGShpubU6izyHEcDaEbHB0DRj8sYoc= -----END CERTIFICATE-----Generated at Sat Sep 26 09:38:40 2026 by rpki-client