$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft File: A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft (raw, json) Hash identifier: eZjvRnVSOvB+wzHHg8/huBNitkIVuepr0PcHnHXPSSQ= Subject key identifier: EF:DB:E1:7D:87:54:95:E3:EB:52:A1:0C:5F:C1:E9:46:F2:07:FF:89 Authority key identifier: A5:33:6F:EF:F1:11:D5:B9:25:A8:95:4E:53:C4:C9:C5:E2:2A:B8:00 Certificate issuer: /CN=A5336FEFF111D5B925A8954E53C4C9C5E22AB800 Certificate serial: 43F0F4A7EA514166D8615516A7960187ED6CEB42 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 01:22:55 +0000 Manifest this update: Wed 23 Sep 2026 01:17:55 +0000 Manifest next update: Thu 24 Sep 2026 03:38:55 +0000 Files and hashes: 1: A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl (hash: YEMzm1JXEylz1JyCDSqjadxYPb6sILCc6QcAZz53aiQ=) 2: 3130332e3132352e31342e302f32342d3234203d3e20313335363336.roa (hash: m7Frx9lSqsLf1s8zbJ/qpER1sGLgEtc9hyQy6nCFDhY=) 3: 3130332e3132352e31332e302f32342d3234203d3e20313335363336.roa (hash: 8YrdvedqGs1zZAIQAtRZi80VSrXLRsF6zbtnQUstSsA=) 4: 3130332e3132352e31352e302f32342d3234203d3e20313335363336.roa (hash: +IUhzjX4iJxCcMgbcQWdmMHcD7sxtYcY/3hZmSmLykA=) 5: 3130332e3132352e31322e302f32342d3234203d3e20313533333137.roa (hash: AZJ4QAHlxTzcVIbJwO/UxabGeC31FjTnD/rHg0D3/ME=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 03:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:f0:f4:a7:ea:51:41:66:d8:61:55:16:a7:96:01:87:ed:6c:eb:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5336FEFF111D5B925A8954E53C4C9C5E22AB800 Validity Not Before: Sep 23 01:17:55 2026 GMT Not After : Sep 24 03:38:55 2026 GMT Subject: CN=EFDBE17D875495E3EB52A10C5FC1E946F207FF89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2f:1a:d7:93:e6:82:3c:e5:42:34:eb:4b:b5: 0f:d8:be:d2:fa:3a:71:c4:7c:8d:4f:3b:2f:78:8f: 05:4d:c9:cd:e4:a3:61:44:48:e8:45:95:b2:2b:c0: 52:d9:25:6d:b4:d2:bd:c2:14:92:98:27:48:09:1d: 24:ef:36:c2:69:8d:b8:bb:f4:91:7f:a9:fc:43:7e: 61:60:bd:9d:75:f7:0d:ab:cc:b9:3f:fc:dc:c2:64: b9:2d:9b:7a:0a:a6:ab:b3:0b:a2:e2:65:8e:e0:3a: b5:78:6e:a9:49:3e:ff:01:4b:b9:90:78:93:6c:ff: 87:34:83:bb:c1:f0:29:ad:d5:77:c3:f3:95:f7:00: 08:91:f2:ac:49:f7:f5:c7:68:7d:39:62:ee:09:fe: ca:4d:14:6b:41:9b:96:75:12:fc:19:d8:87:d5:aa: 65:a2:6c:8c:f7:96:c2:e0:0a:cf:99:91:ad:df:0b: 48:35:f2:a4:39:e2:45:07:25:ff:e0:7c:59:15:11: 31:9d:38:76:79:89:7a:5a:63:a7:dd:e6:7b:b0:0d: 94:15:c5:63:a1:51:00:01:59:db:63:03:75:e0:08: 93:27:58:25:8a:a0:8e:f8:c4:49:db:11:de:cd:66: 5b:aa:1b:a0:82:50:15:63:51:fc:ac:21:85:e9:79: b8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DB:E1:7D:87:54:95:E3:EB:52:A1:0C:5F:C1:E9:46:F2:07:FF:89 X509v3 Authority Key Identifier: keyid:A5:33:6F:EF:F1:11:D5:B9:25:A8:95:4E:53:C4:C9:C5:E2:2A:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:18:eb:88:82:9c:20:34:28:f6:d1:b4:ce:bc:9e:30:a3:37: 4d:16:f6:11:37:86:81:04:2f:62:a6:33:d9:56:d8:8b:6e:07: b0:fc:eb:c8:3f:46:5c:c3:4f:da:0f:6d:ab:54:93:8d:7d:83: c1:1f:1b:67:78:54:13:f0:c3:dd:bf:90:41:ec:ed:19:5e:47: de:98:a4:6d:e2:04:00:cc:df:39:ab:8c:0f:8a:09:83:9a:ae: 96:40:d6:a4:59:14:46:2d:15:f1:1d:32:1e:f6:d5:18:0e:d4: cf:ee:f1:05:57:bd:0d:70:99:67:64:98:98:64:96:96:8e:56: e0:d2:6c:c0:1b:f0:a0:7c:8d:82:c5:e0:bf:8f:5f:0f:63:c4: b8:a0:f7:e1:a9:43:b0:5a:52:55:9a:35:93:88:43:bf:57:5d: c4:e7:72:a9:b3:00:ad:b9:8b:f4:10:59:0f:59:42:1e:cb:a2: b5:37:ed:35:f3:39:9c:fb:54:69:85:16:39:a6:a9:98:b8:3a: ec:f9:dc:99:7f:96:48:f9:7b:0d:43:e6:a3:24:8b:e7:46:4c: 5b:d9:01:1e:40:f0:83:72:e6:f1:53:de:4c:2e:d6:58:8d:f6: c0:cc:6e:f0:88:ee:93:f7:a0:ec:40:b2:cd:c5:8c:46:dc:9b: 99:05:74:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ/D0p+pRQWbYYVUWp5YBh+1s60IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzMzZGRUZGMTExRDVCOTI1QTg5NTRFNTNDNEM5QzVF MjJBQjgwMDAeFw0yNjA5MjMwMTE3NTVaFw0yNjA5MjQwMzM4NTVaMDMxMTAvBgNV BAMTKEVGREJFMTdEODc1NDk1RTNFQjUyQTEwQzVGQzFFOTQ2RjIwN0ZGODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkLxrXk+aCPOVCNOtLtQ/YvtL6 OnHEfI1POy94jwVNyc3ko2FESOhFlbIrwFLZJW200r3CFJKYJ0gJHSTvNsJpjbi7 9JF/qfxDfmFgvZ119w2rzLk//NzCZLktm3oKpquzC6LiZY7gOrV4bqlJPv8BS7mQ eJNs/4c0g7vB8Cmt1XfD85X3AAiR8qxJ9/XHaH05Yu4J/spNFGtBm5Z1EvwZ2IfV qmWibIz3lsLgCs+Zka3fC0g18qQ54kUHJf/gfFkVETGdOHZ5iXpaY6fd5nuwDZQV xWOhUQABWdtjA3XgCJMnWCWKoI74xEnbEd7NZluqG6CCUBVjUfysIYXpebjXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU79vhfYdUlePrUqEMX8HpRvIH/4kwHwYDVR0j BBgwFoAUpTNv7/ER1bklqJVOU8TJxeIquAAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGM1NGJlOWEtOWI1ZC00YzY0LWI0ZTgtNjFjNzRlOWVjZWRjLzAvQTUzMzZGRUZG MTExRDVCOTI1QTg5NTRFNTNDNEM5QzVFMjJBQjgwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNTMzNkZFRkYxMTFENUI5MjVBODk1NEU1M0M0QzlDNUUyMkFC ODAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGM1NGJlOWEtOWI1ZC00YzY0LWI0 ZTgtNjFjNzRlOWVjZWRjLzAvQTUzMzZGRUZGMTExRDVCOTI1QTg5NTRFNTNDNEM5 QzVFMjJBQjgwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8Y64iCnCA0KPbRtM68njCjN00W9hE3hoEE L2KmM9lW2ItuB7D868g/RlzDT9oPbatUk419g8EfG2d4VBPww92/kEHs7RleR96Y pG3iBADM3zmrjA+KCYOarpZA1qRZFEYtFfEdMh721RgO1M/u8QVXvQ1wmWdkmJhk lpaOVuDSbMAb8KB8jYLF4L+PXw9jxLig9+GpQ7BaUlWaNZOIQ79XXcTncqmzAK25 i/QQWQ9ZQh7LorU37TXzOZz7VGmFFjmmqZi4Ouz53Jl/lkj5ew1D5qMki+dGTFvZ AR5A8INy5vFT3kwu1liN9sDMbvCI7pP3oOxAss3FjEbcm5kFdCo= -----END CERTIFICATE-----Generated at Wed Sep 23 17:25:03 2026 by rpki-client