$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft File: 05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft (raw, json) Hash identifier: KNXTKi4Wgk6+vc+bQFVYPp2K9z1nywFJNIAy9AA9C10= Subject key identifier: 5E:FE:7E:78:76:9F:FE:86:E7:42:F4:50:2B:31:7B:C3:99:70:58:4F Authority key identifier: 05:CF:9E:16:17:EC:F8:BE:02:F2:FD:FA:27:F1:3A:86:2A:2B:20:EB Certificate issuer: /CN=05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB Certificate serial: 04E0656492C35395F9F6FF4AAA6314F9FEF78EBA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft Manifest number: BE Signing time: Wed 23 Sep 2026 16:21:17 +0000 Manifest this update: Wed 23 Sep 2026 16:16:17 +0000 Manifest next update: Thu 24 Sep 2026 16:44:17 +0000 Files and hashes: 1: 3130332e38312e3235342e302f32342d3234203d3e20313530353533.roa (hash: Fdccteawm8p+b48M0aaG/VtbesmEvdRHnNtrJ03BLvI=) 2: 3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa (hash: z6kI94sxzHsqlH3E/LSFr36Xmy4KrSkD+IFv+WC4jTo=) 3: 05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.crl (hash: lc8Lkmlqa8p8e1BfiLpj0DFdg0fAr4mZRHHYA+xa0L8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.crl rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e0:65:64:92:c3:53:95:f9:f6:ff:4a:aa:63:14:f9:fe:f7:8e:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB Validity Not Before: Sep 23 16:16:17 2026 GMT Not After : Sep 24 16:44:17 2026 GMT Subject: CN=5EFE7E78769FFE86E742F4502B317BC39970584F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:95:1a:f0:46:c1:76:dc:05:a6:44:e4:21:68: f4:2e:b6:6a:9d:a4:0b:31:76:e8:62:b2:db:59:71: fc:b0:44:39:74:ee:7d:7c:2c:95:b0:9a:9a:4b:ec: 97:72:14:3b:eb:1d:57:cf:5a:b3:b9:88:c7:95:b4: 14:9d:2b:8b:02:72:75:98:f5:b9:63:3c:c8:ee:45: 19:d7:39:e9:44:92:d5:45:eb:a7:56:c0:7e:4d:22: 2f:a0:ae:b4:5f:46:90:46:ad:48:b1:e1:28:4c:6a: 42:ff:ac:f0:c7:0d:5d:9c:8b:db:47:bc:cf:47:ea: 19:e9:df:11:ab:2f:5a:4a:63:5b:a5:a0:7e:6e:57: e4:f8:5a:71:8c:99:4a:b4:d9:fa:5e:16:5f:40:f2: 24:8f:4c:eb:1a:f1:39:c5:21:ca:6d:d5:0e:4d:36: ce:0d:bc:52:6a:72:85:a3:e8:62:9c:44:e0:a1:78: 92:60:9a:74:48:eb:dd:58:d5:0b:4e:a2:4c:6e:9b: cc:d4:97:49:a8:fe:fc:5e:54:ef:86:a9:2c:56:97: 8c:c3:b5:0f:49:65:82:26:f1:70:1b:f0:a5:53:e8: 2f:4e:31:6a:94:02:06:81:63:41:cd:91:f2:10:89: 07:b0:a3:6d:9c:3f:a2:16:cf:86:c6:f1:27:db:b4: 6d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FE:7E:78:76:9F:FE:86:E7:42:F4:50:2B:31:7B:C3:99:70:58:4F X509v3 Authority Key Identifier: keyid:05:CF:9E:16:17:EC:F8:BE:02:F2:FD:FA:27:F1:3A:86:2A:2B:20:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:be:e6:1b:8f:13:c3:20:d4:62:2e:4b:c1:77:71:49:51:90: 53:49:2e:dd:e1:a3:4c:91:3f:a9:6c:fa:2b:22:70:7b:ef:fa: 7b:60:57:48:4e:36:3a:db:4d:fc:47:46:e3:53:e2:60:d8:9d: 73:f7:b5:e6:6e:6c:5a:c6:6f:37:71:aa:8e:4d:39:d7:c1:de: 47:1f:e3:4b:3a:8c:8f:79:59:23:e2:ca:5a:d5:f0:b2:ae:97: 34:e3:01:7a:e8:d7:cc:79:4a:21:37:1c:0b:1f:f0:52:c7:36: a3:cf:ce:35:56:de:c3:25:31:cd:d5:d7:32:f6:df:21:28:89: 3f:f2:56:46:55:37:31:ec:42:d5:c5:99:db:d4:4c:1d:85:0e: 43:de:81:3b:a7:d5:ee:30:99:86:24:64:1b:07:47:8f:1a:e0: 01:07:b4:b6:cf:b5:92:e0:4b:6c:71:2d:c6:6b:3c:53:b8:37: ef:60:eb:00:8d:2e:37:e5:2b:f9:17:0c:31:af:a0:f6:10:cd: 74:ef:23:fa:0d:55:e5:bc:76:a6:d5:ee:7d:52:a5:a4:19:b3: d3:9c:ff:31:11:fc:fc:c5:cf:05:e5:f2:87:9c:68:e2:67:88: 0e:0b:c5:6d:92:de:d6:6c:0f:56:0c:83:0c:d8:35:58:ea:85: 73:df:80:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBOBlZJLDU5X59v9KqmMU+f73jrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDVDRjlFMTYxN0VDRjhCRTAyRjJGREZBMjdGMTNBODYy QTJCMjBFQjAeFw0yNjA5MjMxNjE2MTdaFw0yNjA5MjQxNjQ0MTdaMDMxMTAvBgNV BAMTKDVFRkU3RTc4NzY5RkZFODZFNzQyRjQ1MDJCMzE3QkMzOTk3MDU4NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmlRrwRsF23AWmROQhaPQutmqd pAsxduhisttZcfywRDl07n18LJWwmppL7JdyFDvrHVfPWrO5iMeVtBSdK4sCcnWY 9bljPMjuRRnXOelEktVF66dWwH5NIi+grrRfRpBGrUix4ShMakL/rPDHDV2ci9tH vM9H6hnp3xGrL1pKY1uloH5uV+T4WnGMmUq02fpeFl9A8iSPTOsa8TnFIcpt1Q5N Ns4NvFJqcoWj6GKcROCheJJgmnRI691Y1QtOokxum8zUl0mo/vxeVO+GqSxWl4zD tQ9JZYIm8XAb8KVT6C9OMWqUAgaBY0HNkfIQiQewo22cP6IWz4bG8SfbtG3nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXv5+eHaf/obnQvRQKzF7w5lwWE8wHwYDVR0j BBgwFoAUBc+eFhfs+L4C8v36J/E6hiorIOswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRmZDQyMzQtMTMyMy00ZjBlLWI2ODYtMWQ3MmFjYjg4MDI5LzAvMDVDRjlFMTYx N0VDRjhCRTAyRjJGREZBMjdGMTNBODYyQTJCMjBFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNUNGOUUxNjE3RUNGOEJFMDJGMkZERkEyN0YxM0E4NjJBMkIy MEVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWRmZDQyMzQtMTMyMy00ZjBlLWI2 ODYtMWQ3MmFjYjg4MDI5LzAvMDVDRjlFMTYxN0VDRjhCRTAyRjJGREZBMjdGMTNB ODYyQTJCMjBFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKC+5huPE8Mg1GIuS8F3cUlRkFNJLt3ho0yR P6ls+isicHvv+ntgV0hONjrbTfxHRuNT4mDYnXP3teZubFrGbzdxqo5NOdfB3kcf 40s6jI95WSPiylrV8LKulzTjAXro18x5SiE3HAsf8FLHNqPPzjVW3sMlMc3V1zL2 3yEoiT/yVkZVNzHsQtXFmdvUTB2FDkPegTun1e4wmYYkZBsHR48a4AEHtLbPtZLg S2xxLcZrPFO4N+9g6wCNLjflK/kXDDGvoPYQzXTvI/oNVeW8dqbV7n1SpaQZs9Oc /zER/PzFzwXl8oecaOJniA4LxW2S3tZsD1YMgwzYNVjqhXPfgPk= -----END CERTIFICATE-----Generated at Thu Sep 24 02:31:34 2026 by rpki-client