$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft File: 5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft (raw, json) Hash identifier: 2idA0RB+5kDyTOSaPq/D71Euywel18OkOUkMKtS0uLQ= Subject key identifier: 4A:86:A7:8B:85:99:86:A6:B6:31:2A:6F:87:96:AD:2A:6B:C5:44:FA Authority key identifier: 5F:BE:DE:98:3A:63:22:B9:99:A4:6A:B6:AA:CC:F6:A7:C6:06:3F:B5 Certificate issuer: /CN=5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5 Certificate serial: 75491F9FE19B6737296FCF3CEC3C863AA394A85B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft Manifest number: C5 Signing time: Fri 25 Sep 2026 11:29:43 +0000 Manifest this update: Fri 25 Sep 2026 11:24:43 +0000 Manifest next update: Sat 26 Sep 2026 15:12:43 +0000 Files and hashes: 1: 3130332e3135342e35332e302f32342d3234203d3e20313430343739.roa (hash: /1UO8tVQ+wLCWDJC+/9ddMEbFB3CgcFjCBFNxuu9120=) 2: 3130332e3135342e35322e302f32342d3234203d3e20313430343739.roa (hash: hB2D7K4UTkw5fpBq+t9X3VNB/1j6WvNNmkdz6+J5cvo=) 3: 323430363a353463303a3a2f33332d3333203d3e20313430343739.roa (hash: 2cV6nPzmY4kD2CJExVdWuMSGfjJCPD1xihnYeBD8ieA=) 4: 323430363a353463303a383030303a3a2f33332d3333203d3e20313430343739.roa (hash: bIsAPyP9rDpPX3/Ob3Qv6l0T0cqP2nXkNSsYJzMdy0g=) 5: 5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.crl (hash: 5zsayr/AYozKjkshsAhO8WvGC+D8nfMRuc7asdpl0Zw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.crl rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 15:12:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:49:1f:9f:e1:9b:67:37:29:6f:cf:3c:ec:3c:86:3a:a3:94:a8:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5 Validity Not Before: Sep 25 11:24:43 2026 GMT Not After : Sep 26 15:12:43 2026 GMT Subject: CN=4A86A78B859986A6B6312A6F8796AD2A6BC544FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:61:b1:1a:8e:94:46:95:f8:8a:63:97:53:87: 5c:79:56:31:ec:75:78:71:25:0c:85:3a:8c:b8:25: 46:da:77:42:50:b5:34:61:2e:b3:e5:87:0d:24:80: 6e:9b:e7:14:8b:9c:14:a2:99:c4:06:78:e9:0e:28: e1:6d:6f:cc:e5:29:93:af:7b:62:ef:b4:7b:1f:54: 40:11:02:ab:70:fb:f7:92:80:36:73:c9:61:e6:46: 09:57:3c:c4:b9:7a:39:f1:54:2f:79:ab:bd:28:6d: 59:76:8d:d9:77:28:f2:67:d6:82:6d:30:eb:bb:22: 5e:86:00:db:bd:45:f8:0b:12:02:dd:42:40:57:38: 1d:d0:e0:04:9e:b2:bf:f9:69:bf:1d:21:03:fb:4b: 77:89:55:32:18:9f:b9:79:74:cb:00:d4:b1:6e:81: 6f:e6:19:d2:5d:b0:4f:c4:36:30:65:0d:80:19:11: 5e:96:9b:7d:1d:5d:61:70:b8:37:d1:22:ed:50:47: 27:b3:f9:83:6b:9a:a8:26:0a:c1:05:0e:72:6f:f6: 9b:ef:67:35:6a:2e:94:5f:09:b0:ce:3e:85:e9:16: 8b:cd:9f:4b:74:2f:45:51:ec:39:a6:9b:f1:ff:de: f6:16:e4:a5:28:5d:25:57:c4:1c:d8:31:d9:74:ba: 27:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:86:A7:8B:85:99:86:A6:B6:31:2A:6F:87:96:AD:2A:6B:C5:44:FA X509v3 Authority Key Identifier: keyid:5F:BE:DE:98:3A:63:22:B9:99:A4:6A:B6:AA:CC:F6:A7:C6:06:3F:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f3:cc:f0:77:8a:c4:59:0c:f1:1c:b4:82:50:9b:68:f5:7e: 39:d7:00:3a:40:d9:46:71:a0:e7:68:fb:2f:87:2b:e3:97:40: 40:73:28:cb:65:c1:ba:cd:8c:79:f6:ca:31:77:2a:bc:5f:2a: 69:a2:c9:a1:9f:3b:13:24:aa:09:12:b0:20:83:18:15:de:58: 9c:75:07:18:ea:82:d3:4b:e7:19:5e:71:5d:4c:05:f0:62:95: 36:97:0e:1d:e6:b9:3f:48:6d:f9:dc:86:a3:d7:f7:26:cf:ce: e6:b1:39:f4:95:0e:dc:9e:a2:66:2b:5d:b4:e9:d3:2b:96:90: e2:9d:6a:01:fb:64:8c:b5:15:c0:74:b4:58:0f:56:ec:51:25: 23:27:99:c9:a7:80:ac:c4:9e:be:ba:d3:c5:8e:44:4c:1c:62: d2:62:82:ee:a5:c4:e1:90:e9:62:ce:f4:ae:5d:5c:58:cc:65: c8:9d:4b:f0:7b:fd:cd:b2:f5:3d:46:43:6a:1f:e7:56:30:2a: 6f:60:a9:b0:9a:f6:55:0e:ac:4a:5d:5f:5f:5c:20:32:73:76: 33:b9:aa:13:33:b0:1a:08:39:99:17:23:dd:ef:d9:d8:a1:0e: 42:8c:56:ea:9e:8a:3f:f4:23:a4:e7:07:8e:41:60:a0:3c:3a: 03:16:d2:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdUkfn+GbZzcpb8887DyGOqOUqFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCRURFOTgzQTYzMjJCOTk5QTQ2QUI2QUFDQ0Y2QTdD NjA2M0ZCNTAeFw0yNjA5MjUxMTI0NDNaFw0yNjA5MjYxNTEyNDNaMDMxMTAvBgNV BAMTKDRBODZBNzhCODU5OTg2QTZCNjMxMkE2Rjg3OTZBRDJBNkJDNTQ0RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWYbEajpRGlfiKY5dTh1x5VjHs dXhxJQyFOoy4JUbad0JQtTRhLrPlhw0kgG6b5xSLnBSimcQGeOkOKOFtb8zlKZOv e2LvtHsfVEARAqtw+/eSgDZzyWHmRglXPMS5ejnxVC95q70obVl2jdl3KPJn1oJt MOu7Il6GANu9RfgLEgLdQkBXOB3Q4ASesr/5ab8dIQP7S3eJVTIYn7l5dMsA1LFu gW/mGdJdsE/ENjBlDYAZEV6Wm30dXWFwuDfRIu1QRyez+YNrmqgmCsEFDnJv9pvv ZzVqLpRfCbDOPoXpFovNn0t0L0VR7Dmmm/H/3vYW5KUoXSVXxBzYMdl0uieDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSoani4WZhqa2MSpvh5atKmvFRPowHwYDVR0j BBgwFoAUX77emDpjIrmZpGq2qsz2p8YGP7UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGM3NjVkNTEtYjBiMS00MzVkLWE2NmItNjA0YzZlNWQyOWVmLzAvNUZCRURFOTgz QTYzMjJCOTk5QTQ2QUI2QUFDQ0Y2QTdDNjA2M0ZCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkJFREU5ODNBNjMyMkI5OTlBNDZBQjZBQUNDRjZBN0M2MDYz RkI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGM3NjVkNTEtYjBiMS00MzVkLWE2 NmItNjA0YzZlNWQyOWVmLzAvNUZCRURFOTgzQTYzMjJCOTk5QTQ2QUI2QUFDQ0Y2 QTdDNjA2M0ZCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvzzPB3isRZDPEctIJQm2j1fjnXADpA2UZx oOdo+y+HK+OXQEBzKMtlwbrNjHn2yjF3KrxfKmmiyaGfOxMkqgkSsCCDGBXeWJx1 BxjqgtNL5xlecV1MBfBilTaXDh3muT9IbfnchqPX9ybPzuaxOfSVDtyeomYrXbTp 0yuWkOKdagH7ZIy1FcB0tFgPVuxRJSMnmcmngKzEnr6608WOREwcYtJigu6lxOGQ 6WLO9K5dXFjMZcidS/B7/c2y9T1GQ2of51YwKm9gqbCa9lUOrEpdX19cIDJzdjO5 qhMzsBoIOZkXI93v2dihDkKMVuqeij/0I6TnB45BYKA8OgMW0s8= -----END CERTIFICATE-----Generated at Fri Sep 25 20:38:04 2026 by rpki-client