$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft File: 1587930E115B02B61F9967A961669E9C2E5D3155.mft (raw, json) Hash identifier: 9Qrdo8OE+AZsQaYMk8tM3oEDZJeDRzBb3l5rVGzYErE= Subject key identifier: C4:52:C5:18:BD:B8:DA:26:6A:70:BF:0C:42:C5:45:EC:D6:B7:8D:63 Authority key identifier: 15:87:93:0E:11:5B:02:B6:1F:99:67:A9:61:66:9E:9C:2E:5D:31:55 Certificate issuer: /CN=1587930E115B02B61F9967A961669E9C2E5D3155 Certificate serial: 5BDD63DA4A9678034568164FEAF33690830DD38E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1587930E115B02B61F9967A961669E9C2E5D3155.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 04:15:55 +0000 Manifest this update: Thu 24 Sep 2026 04:10:55 +0000 Manifest next update: Fri 25 Sep 2026 05:30:55 +0000 Files and hashes: 1: 323030313a6466303a3434613a3a2f34382d3438203d3e203436303536.roa (hash: UOVDSlhXigw/Uz77MSYpnkR4v33gbqMyBOUU19NWXlU=) 2: 1587930E115B02B61F9967A961669E9C2E5D3155.crl (hash: iDpOgGNcIrK5nAf1T0OOivjdTHL2yLeQGrVwY4czCHs=) 3: 3130332e3234352e3132322e302f32342d3234203d3e203436303536.roa (hash: bWoZrHRRCMJiRa1MlW6R+wP7Q96czuFPoxQnXJiuOos=) 4: 3230322e35322e35302e302f32342d3234203d3e203436303536.roa (hash: jclNRlrhqL+AfaCj+qvPSgX0Z4Wtr2IefaNqa2LPL2c=) 5: 3130332e3234352e3132332e302f32342d3234203d3e203436303536.roa (hash: WdT499tVpG8NeV+SEnNVp+8I6jVjAbHrv0KbxNWN8RU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.crl rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1587930E115B02B61F9967A961669E9C2E5D3155.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:dd:63:da:4a:96:78:03:45:68:16:4f:ea:f3:36:90:83:0d:d3:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1587930E115B02B61F9967A961669E9C2E5D3155 Validity Not Before: Sep 24 04:10:55 2026 GMT Not After : Sep 25 05:30:55 2026 GMT Subject: CN=C452C518BDB8DA266A70BF0C42C545ECD6B78D63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fb:67:f1:9c:64:1b:df:6d:fe:9a:ea:1b:fc: 53:ad:4c:0c:28:ef:a1:9a:47:0a:ef:98:b2:00:e2: 1b:4e:81:96:f2:37:6c:ef:0f:32:09:ec:dd:3d:b4: a7:ed:26:28:2d:9e:00:1d:87:69:04:c3:3e:ed:c2: 69:e7:db:41:5c:08:5b:20:bb:cf:48:21:a9:fb:c2: 1a:2d:3a:5d:82:49:a1:07:e8:de:80:fd:06:a5:d6: 03:76:4a:32:2e:f7:c2:63:41:b2:70:97:f6:cd:66: 48:40:ea:66:9b:c9:9d:ab:0a:0a:6a:5a:50:5c:00: 67:91:cc:69:6a:87:a0:b3:9b:41:ff:8f:2b:9c:ac: d1:f6:3c:60:9c:6e:3b:0e:3e:8b:37:9a:58:51:77: 4c:10:a4:fc:3b:ef:1e:ae:bd:fd:fc:70:f7:00:83: 8c:5c:67:1c:da:47:3e:a3:22:fa:2f:1c:5d:30:eb: 91:30:7c:a5:0d:08:53:87:fe:85:cd:94:0a:f6:41: d6:4d:d0:49:ad:5e:3c:9f:63:b1:b8:03:50:8f:21: f1:b3:1b:ad:86:b2:22:84:6f:e9:53:6e:bb:28:05: 33:35:ea:a0:51:c8:43:2c:5a:73:41:bd:0e:18:c6: 57:8f:b0:4e:d6:14:d5:cb:ca:3c:b0:68:80:48:40: 79:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:52:C5:18:BD:B8:DA:26:6A:70:BF:0C:42:C5:45:EC:D6:B7:8D:63 X509v3 Authority Key Identifier: keyid:15:87:93:0E:11:5B:02:B6:1F:99:67:A9:61:66:9E:9C:2E:5D:31:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1587930E115B02B61F9967A961669E9C2E5D3155.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:e8:34:49:1c:9a:01:fb:cd:f0:07:c4:a3:29:36:34:61:8a: eb:d4:cf:87:dd:4b:fc:97:2b:50:3b:4e:3e:92:5c:2d:e7:55: 38:1e:73:37:5f:d1:e6:70:be:d4:f8:cf:0f:ac:9b:c0:07:41: 72:2e:31:d5:f6:c3:63:25:88:88:4b:98:9f:5d:77:99:21:ee: 79:75:f5:be:9c:62:20:39:d3:11:16:5b:05:96:d1:20:b7:6e: 78:a3:92:20:34:5f:d2:e8:59:b7:8c:77:a5:b8:8d:8d:00:b7: 05:ce:bc:7e:d1:46:67:47:c0:e2:7d:66:99:c0:bf:3e:07:1f: 73:a2:5e:e7:2c:2a:09:b0:18:7a:24:06:c3:a6:e4:bf:99:b7: 83:46:d6:41:b0:73:71:76:b7:b3:a0:20:91:e6:ce:06:41:ee: cf:c7:0d:07:00:b8:e1:a3:17:70:32:94:0e:a1:4b:d9:13:78: 0e:9b:aa:12:49:a1:43:a4:c0:6b:76:8d:89:a3:05:26:80:21: f4:f2:e3:fb:50:ea:35:2e:48:41:64:78:af:cb:86:c7:bb:9f: 40:77:f8:62:b9:1f:ef:4f:b2:5a:92:27:54:99:ef:51:00:b7: 1b:a0:bf:58:cf:85:5c:27:12:0c:eb:21:8d:bc:8e:bf:7a:87: 8f:c0:bf:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW91j2kqWeANFaBZP6vM2kIMN044wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU4NzkzMEUxMTVCMDJCNjFGOTk2N0E5NjE2NjlFOUMy RTVEMzE1NTAeFw0yNjA5MjQwNDEwNTVaFw0yNjA5MjUwNTMwNTVaMDMxMTAvBgNV BAMTKEM0NTJDNTE4QkRCOERBMjY2QTcwQkYwQzQyQzU0NUVDRDZCNzhENjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF+2fxnGQb323+muob/FOtTAwo 76GaRwrvmLIA4htOgZbyN2zvDzIJ7N09tKftJigtngAdh2kEwz7twmnn20FcCFsg u89IIan7whotOl2CSaEH6N6A/Qal1gN2SjIu98JjQbJwl/bNZkhA6mabyZ2rCgpq WlBcAGeRzGlqh6Czm0H/jyucrNH2PGCcbjsOPos3mlhRd0wQpPw77x6uvf38cPcA g4xcZxzaRz6jIvovHF0w65EwfKUNCFOH/oXNlAr2QdZN0EmtXjyfY7G4A1CPIfGz G62GsiKEb+lTbrsoBTM16qBRyEMsWnNBvQ4YxlePsE7WFNXLyjywaIBIQHlJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxFLFGL242iZqcL8MQsVF7Na3jWMwHwYDVR0j BBgwFoAUFYeTDhFbArYfmWepYWaenC5dMVUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjQxMGZhNDMtMGJlMy00NzFhLTljMjAtODEwNDYyOTFjYTExLzAvMTU4NzkzMEUx MTVCMDJCNjFGOTk2N0E5NjE2NjlFOUMyRTVEMzE1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTg3OTMwRTExNUIwMkI2MUY5OTY3QTk2MTY2OUU5QzJFNUQz MTU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjQxMGZhNDMtMGJlMy00NzFhLTlj MjAtODEwNDYyOTFjYTExLzAvMTU4NzkzMEUxMTVCMDJCNjFGOTk2N0E5NjE2NjlF OUMyRTVEMzE1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHoNEkcmgH7zfAHxKMpNjRhiuvUz4fdS/yX K1A7Tj6SXC3nVTgeczdf0eZwvtT4zw+sm8AHQXIuMdX2w2MliIhLmJ9dd5kh7nl1 9b6cYiA50xEWWwWW0SC3bnijkiA0X9LoWbeMd6W4jY0AtwXOvH7RRmdHwOJ9ZpnA vz4HH3OiXucsKgmwGHokBsOm5L+Zt4NG1kGwc3F2t7OgIJHmzgZB7s/HDQcAuOGj F3AylA6hS9kTeA6bqhJJoUOkwGt2jYmjBSaAIfTy4/tQ6jUuSEFkeK/Lhse7n0B3 +GK5H+9PslqSJ1SZ71EAtxugv1jPhVwnEgzrIY28jr96h4/Av0U= -----END CERTIFICATE-----Generated at Thu Sep 24 19:05:08 2026 by rpki-client