$ rpki-client -vvvf rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft File: D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft (raw, json) Hash identifier: BKeIs0zziqadCPuRn1SIoWP9ADxJOjJCEoR5EcXW4Gs= Subject key identifier: 77:8E:D3:D2:CE:BE:E7:30:BF:81:24:34:A8:DE:21:D5:8A:C9:6F:3F Authority key identifier: D5:B2:BC:B4:D7:CD:44:98:6E:0C:DE:AB:B1:9A:3E:8D:A8:ED:A3:DE Certificate issuer: /CN=D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE Certificate serial: 5A6406F181059D494092A67AE416BB7D0DE4DC85 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 06:18:31 +0000 Manifest this update: Thu 24 Sep 2026 06:13:31 +0000 Manifest next update: Fri 25 Sep 2026 06:53:31 +0000 Files and hashes: 1: D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.crl (hash: 0gz8leJZMFRR1jadnRROf3jCboLY7oU5rGRJZhrKMQg=) 2: 3130332e3136392e37322e302f32332d3234203d3e203338333230.roa (hash: Mbf898IR+Gt5QKErijFC4UdXVW5evXBibnE21kjCzDc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.crl rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 06:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:64:06:f1:81:05:9d:49:40:92:a6:7a:e4:16:bb:7d:0d:e4:dc:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE Validity Not Before: Sep 24 06:13:31 2026 GMT Not After : Sep 25 06:53:31 2026 GMT Subject: CN=778ED3D2CEBEE730BF812434A8DE21D58AC96F3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:46:b8:a6:8f:0d:26:ca:ca:b5:06:19:d3:46: d9:75:1f:0f:41:aa:2f:53:d7:77:fb:26:4f:02:69: 00:b5:76:fe:5f:a4:83:b5:b9:00:da:d1:04:60:e0: 77:a0:85:7a:73:56:e3:ff:ae:e2:52:3c:e7:98:c9: 44:0b:66:67:a3:c1:38:11:58:ea:6a:62:73:1d:32: 38:2d:77:9e:1c:43:7e:0d:27:0a:af:64:cf:d7:4a: 2d:97:71:58:13:4e:c8:25:10:89:74:48:7a:a7:5b: b8:7f:94:a4:ec:18:d2:1c:94:fb:24:f1:2c:e0:8c: ff:4b:f9:45:aa:9d:44:de:84:2c:0c:95:1f:ba:68: c0:13:14:53:c0:b8:14:b0:28:fd:dd:14:37:28:69: 15:39:08:53:46:48:e6:b0:0b:00:bc:ae:a6:fa:96: a2:54:59:6c:b2:31:5e:38:d7:de:40:04:40:50:17: a1:04:84:1f:fa:9e:2e:8c:ba:6d:7f:31:32:69:ae: 54:8f:a2:44:78:17:3d:aa:b3:f6:75:25:e2:55:42: 6e:33:44:20:f2:10:63:05:6d:99:98:d0:b1:96:fa: 78:a2:85:7a:9f:78:0d:be:22:29:1b:c3:8f:6a:24: 38:a1:c3:9a:b5:a4:62:1d:15:e7:dc:ee:50:f8:43: 56:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:8E:D3:D2:CE:BE:E7:30:BF:81:24:34:A8:DE:21:D5:8A:C9:6F:3F X509v3 Authority Key Identifier: keyid:D5:B2:BC:B4:D7:CD:44:98:6E:0C:DE:AB:B1:9A:3E:8D:A8:ED:A3:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:a6:55:5a:fa:01:30:be:f5:bb:73:ef:22:4b:73:17:50:02: e4:27:55:33:1e:df:8f:17:22:6e:f4:d5:4a:bb:3a:48:b8:65: 9d:15:66:3a:b6:fb:4a:14:b4:7b:2b:ad:89:e5:b3:ad:d3:fa: 32:68:a7:78:88:9e:6e:5e:48:88:e9:14:c0:e1:fa:d1:a9:59: 7b:25:2c:05:59:0c:a7:b2:e5:22:1c:6f:5b:24:f2:a8:b9:89: 95:2f:07:c2:37:30:eb:12:5e:e2:79:73:0d:90:98:c9:27:6c: d5:a0:af:af:30:20:50:70:a1:4d:94:7c:1d:7d:b0:6d:41:65: 74:35:7f:da:ed:46:52:8a:fc:fc:6b:aa:19:03:70:d9:e5:43: 41:ce:7c:de:bd:31:76:8f:02:68:e5:2b:04:73:ce:a9:80:09: ce:94:c3:ad:9d:f7:01:9c:b6:2e:01:a7:1d:31:db:9c:0b:9c: 0e:37:e9:b8:2e:98:1a:98:be:9a:20:23:fe:63:b5:fa:5c:e1: fe:bb:cd:df:af:75:2c:c2:98:58:d4:d9:dd:74:2c:f6:3d:7c: ce:ea:9b:d7:05:1e:85:5f:ad:f2:21:f9:45:6a:12:2f:e6:42: e9:87:c4:11:70:c4:c8:22:2a:95:1b:3a:dd:98:a2:8d:ca:df: 70:45:28:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWmQG8YEFnUlAkqZ65Ba7fQ3k3IUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVCMkJDQjREN0NENDQ5ODZFMENERUFCQjE5QTNFOERB OEVEQTNERTAeFw0yNjA5MjQwNjEzMzFaFw0yNjA5MjUwNjUzMzFaMDMxMTAvBgNV BAMTKDc3OEVEM0QyQ0VCRUU3MzBCRjgxMjQzNEE4REUyMUQ1OEFDOTZGM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpRrimjw0mysq1BhnTRtl1Hw9B qi9T13f7Jk8CaQC1dv5fpIO1uQDa0QRg4HeghXpzVuP/ruJSPOeYyUQLZmejwTgR WOpqYnMdMjgtd54cQ34NJwqvZM/XSi2XcVgTTsglEIl0SHqnW7h/lKTsGNIclPsk 8SzgjP9L+UWqnUTehCwMlR+6aMATFFPAuBSwKP3dFDcoaRU5CFNGSOawCwC8rqb6 lqJUWWyyMV44195ABEBQF6EEhB/6ni6Mum1/MTJprlSPokR4Fz2qs/Z1JeJVQm4z RCDyEGMFbZmY0LGW+niihXqfeA2+Iikbw49qJDihw5q1pGIdFefc7lD4Q1bVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd47T0s6+5zC/gSQ0qN4h1YrJbz8wHwYDVR0j BBgwFoAU1bK8tNfNRJhuDN6rsZo+jajto94wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQxYTAyZTYtMjE3MS00N2M5LTg2YzktZDVkODBmNDU4ODM2LzAvRDVCMkJDQjRE N0NENDQ5ODZFMENERUFCQjE5QTNFOERBOEVEQTNERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENUIyQkNCNEQ3Q0Q0NDk4NkUwQ0RFQUJCMTlBM0U4REE4RURB M0RFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQxYTAyZTYtMjE3MS00N2M5LTg2 YzktZDVkODBmNDU4ODM2LzAvRDVCMkJDQjREN0NENDQ5ODZFMENERUFCQjE5QTNF OERBOEVEQTNERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGmVVr6ATC+9btz7yJLcxdQAuQnVTMe348X Im701Uq7Oki4ZZ0VZjq2+0oUtHsrrYnls63T+jJop3iInm5eSIjpFMDh+tGpWXsl LAVZDKey5SIcb1sk8qi5iZUvB8I3MOsSXuJ5cw2QmMknbNWgr68wIFBwoU2UfB19 sG1BZXQ1f9rtRlKK/PxrqhkDcNnlQ0HOfN69MXaPAmjlKwRzzqmACc6Uw62d9wGc ti4Bpx0x25wLnA436bgumBqYvpogI/5jtfpc4f67zd+vdSzCmFjU2d10LPY9fM7q m9cFHoVfrfIh+UVqEi/mQumHxBFwxMgiKpUbOt2Yoo3K33BFKO8= -----END CERTIFICATE-----Generated at Thu Sep 24 11:07:39 2026 by rpki-client