$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft File: 5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft (raw, json) Hash identifier: CD6uWl0JFZVZKtzwvwd3G3p0/YenZ9QlcPVysuurtPY= Subject key identifier: 8C:61:71:54:45:59:E9:2B:36:64:11:C0:32:6D:3B:50:30:42:C9:73 Authority key identifier: 5F:71:52:CE:E0:4F:DA:FB:4A:3E:4A:0F:3F:D0:AD:F8:22:C5:CD:24 Certificate issuer: /CN=5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24 Certificate serial: 3C868EB3E0FFB40292C5AD351283CD5456D3FBE0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 12:46:58 +0000 Manifest this update: Wed 23 Sep 2026 12:41:58 +0000 Manifest next update: Thu 24 Sep 2026 16:41:58 +0000 Files and hashes: 1: 3130332e36382e3233322e302f32332d3233203d3e20313530353431.roa (hash: jrMRupZddQA8qjBzuVH771xwK+1/f2hSGRy4MrlXlSc=) 2: 5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl (hash: 1uGeEo1mTvhHzUFwminjg62WdWWDgVN9RQW5P1WUnDE=) 3: 3130332e36382e3233322e302f32342d3234203d3e20313530353431.roa (hash: swr4aEtGPRWs62gogwkO9Y1o8MbTFhHlDaee8r9gWcE=) 4: 3130332e36382e3233332e302f32342d3234203d3e20313530353431.roa (hash: hrwaL58bLcWsXLir3kxI1OkAj6GGFQmLA1ZKUXd0Ogs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:86:8e:b3:e0:ff:b4:02:92:c5:ad:35:12:83:cd:54:56:d3:fb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24 Validity Not Before: Sep 23 12:41:58 2026 GMT Not After : Sep 24 16:41:58 2026 GMT Subject: CN=8C6171544559E92B366411C0326D3B503042C973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:86:c5:92:04:58:10:a7:68:8d:0d:8d:8c:b7: 74:7b:ec:c1:98:b0:02:c9:8e:01:bb:18:05:eb:30: 36:98:f6:1f:a2:16:b3:f6:b2:a5:6b:8e:99:79:96: 01:26:de:29:24:03:d3:89:44:ec:f4:d5:bb:50:22: 38:a4:74:92:c0:cb:e6:a5:68:23:04:4c:56:eb:6d: 93:8e:4e:e6:0a:5d:ec:8e:20:54:67:0d:71:7f:db: 3d:45:36:b1:f6:dc:47:a0:f1:75:a3:a1:66:36:0b: ce:1f:2f:5c:61:9d:fb:76:1f:0c:1f:3b:87:b4:fa: f6:53:49:2c:b1:ad:86:72:82:6e:89:51:51:31:c2: 79:58:21:e9:56:1d:f9:77:49:af:b6:94:44:28:e5: da:f7:51:2c:2b:cc:5f:36:52:d6:07:b7:96:42:79: 9b:95:48:a6:b9:a6:bb:6f:3f:63:5f:34:99:c3:da: 2c:e5:1b:93:15:d7:83:2e:95:fc:7d:e7:90:c8:51: 53:4d:a9:cd:3a:b8:29:9b:bd:c1:ef:98:52:d4:90: 36:d7:be:15:77:dc:16:91:66:dd:8b:50:16:2b:32: 97:e6:0c:18:cd:54:21:01:44:34:37:ce:af:88:ec: 03:23:b7:1f:bd:b7:ce:7d:f8:2a:3b:ad:ff:86:cc: fa:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:61:71:54:45:59:E9:2B:36:64:11:C0:32:6D:3B:50:30:42:C9:73 X509v3 Authority Key Identifier: keyid:5F:71:52:CE:E0:4F:DA:FB:4A:3E:4A:0F:3F:D0:AD:F8:22:C5:CD:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/5F7152CEE04FDAFB4A3E4A0F3FD0ADF822C5CD24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:48:1a:bd:5a:74:16:1f:3a:8e:ef:34:d9:88:2a:31:3a:0a: a1:da:cf:33:73:b7:1f:fe:08:1c:31:b3:fc:53:dd:38:da:0c: f9:6c:15:8d:02:e7:6c:de:0d:c7:41:2b:0a:20:de:9c:f5:dd: d8:9e:bb:bd:8d:b6:4c:62:42:a2:a9:89:5b:1a:2a:e3:a1:95: 27:23:e1:eb:62:07:d2:1b:69:68:2e:d6:a6:5f:33:67:64:01: 8e:51:37:08:12:51:1f:d2:94:7b:b2:be:e7:30:fd:02:9d:d8: ad:42:ef:93:1d:03:15:4d:f7:af:bf:4c:c0:84:be:d7:d8:18: f1:fc:dc:70:13:a1:cc:59:54:a4:e3:42:7f:78:40:73:46:25: 3d:37:c8:ed:8a:71:5f:b6:4e:52:bb:09:15:ad:2d:c6:12:a8: 41:de:52:28:0f:26:a8:e0:cd:26:5e:d6:f9:54:75:8f:97:e6: e5:96:17:1e:c0:18:6f:77:e7:7b:bc:c6:8c:5c:2e:14:81:c6: f1:c5:5f:78:17:85:90:e8:fd:1c:4a:f5:ca:ba:67:90:e4:f4: f6:c6:ab:84:98:ca:63:ef:ba:3b:be:e9:73:14:99:0a:f7:69: b5:57:6c:24:52:6c:fa:30:27:8d:bf:4b:4d:f0:7c:c5:76:27: 7b:94:c9:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPIaOs+D/tAKSxa01EoPNVFbT++AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY3MTUyQ0VFMDRGREFGQjRBM0U0QTBGM0ZEMEFERjgy MkM1Q0QyNDAeFw0yNjA5MjMxMjQxNThaFw0yNjA5MjQxNjQxNThaMDMxMTAvBgNV BAMTKDhDNjE3MTU0NDU1OUU5MkIzNjY0MTFDMDMyNkQzQjUwMzA0MkM5NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzhsWSBFgQp2iNDY2Mt3R77MGY sALJjgG7GAXrMDaY9h+iFrP2sqVrjpl5lgEm3ikkA9OJROz01btQIjikdJLAy+al aCMETFbrbZOOTuYKXeyOIFRnDXF/2z1FNrH23Eeg8XWjoWY2C84fL1xhnft2Hwwf O4e0+vZTSSyxrYZygm6JUVExwnlYIelWHfl3Sa+2lEQo5dr3USwrzF82UtYHt5ZC eZuVSKa5prtvP2NfNJnD2izlG5MV14Mulfx955DIUVNNqc06uCmbvcHvmFLUkDbX vhV33BaRZt2LUBYrMpfmDBjNVCEBRDQ3zq+I7AMjtx+9t859+Co7rf+GzPofAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjGFxVEVZ6Ss2ZBHAMm07UDBCyXMwHwYDVR0j BBgwFoAUX3FSzuBP2vtKPkoPP9Ct+CLFzSQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTgxNTU0NWMtYzk5Ni00NjBmLTkyZGQtNjI5NGFlYzkyYzUyLzAvNUY3MTUyQ0VF MDRGREFGQjRBM0U0QTBGM0ZEMEFERjgyMkM1Q0QyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RjcxNTJDRUUwNEZEQUZCNEEzRTRBMEYzRkQwQURGODIyQzVD RDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTgxNTU0NWMtYzk5Ni00NjBmLTky ZGQtNjI5NGFlYzkyYzUyLzAvNUY3MTUyQ0VFMDRGREFGQjRBM0U0QTBGM0ZEMEFE RjgyMkM1Q0QyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtIGr1adBYfOo7vNNmIKjE6CqHazzNztx/+ CBwxs/xT3TjaDPlsFY0C52zeDcdBKwog3pz13dieu72NtkxiQqKpiVsaKuOhlScj 4etiB9IbaWgu1qZfM2dkAY5RNwgSUR/SlHuyvucw/QKd2K1C75MdAxVN96+/TMCE vtfYGPH83HATocxZVKTjQn94QHNGJT03yO2KcV+2TlK7CRWtLcYSqEHeUigPJqjg zSZe1vlUdY+X5uWWFx7AGG9353u8xoxcLhSBxvHFX3gXhZDo/RxK9cq6Z5Dk9PbG q4SYymPvuju+6XMUmQr3abVXbCRSbPowJ42/S03wfMV2J3uUyUY= -----END CERTIFICATE-----Generated at Thu Sep 24 08:38:56 2026 by rpki-client