$ rpki-client -vvvf rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft File: 5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft (raw, json) Hash identifier: ECDLwFGTNzYW5PKS7Ft+Z7K/3LLiQ+9O2KmTKyP5vNY= Subject key identifier: C1:B4:B0:4D:33:97:DD:2C:26:70:54:47:8E:78:02:E8:24:86:60:32 Authority key identifier: 5B:78:39:D3:FA:2F:BC:37:45:20:65:6B:0E:BD:B7:87:43:B9:68:ED Certificate issuer: /CN=5B7839D3FA2FBC374520656B0EBDB78743B968ED Certificate serial: 25FF4BB381B923A591F382A6D6974E066BC96603 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B7839D3FA2FBC374520656B0EBDB78743B968ED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 11:50:11 +0000 Manifest this update: Thu 24 Sep 2026 11:45:11 +0000 Manifest next update: Fri 25 Sep 2026 15:33:11 +0000 Files and hashes: 1: 3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa (hash: 7rg8BQPn02cWQCL5uHjDLR1BDjr+8xgU8r0m19XIL1o=) 2: 5B7839D3FA2FBC374520656B0EBDB78743B968ED.crl (hash: eR7w2ivBcJ32LH7gAYrcVT/SasIAHZxIEvGNm1xj+VY=) 3: 323430353a396363303a3a2f33322d3438203d3e20313339393637.roa (hash: aOlWVzlvXbOa4KHfHqYRVq472gGuD+dyeTRVu2qUTbc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.crl rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B7839D3FA2FBC374520656B0EBDB78743B968ED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ff:4b:b3:81:b9:23:a5:91:f3:82:a6:d6:97:4e:06:6b:c9:66:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B7839D3FA2FBC374520656B0EBDB78743B968ED Validity Not Before: Sep 24 11:45:11 2026 GMT Not After : Sep 25 15:33:11 2026 GMT Subject: CN=C1B4B04D3397DD2C267054478E7802E824866032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3d:fc:21:a4:32:19:39:49:c0:7b:01:be:38: 2c:5e:5d:79:c8:56:30:2d:80:2a:b4:49:4a:f5:a1: 38:df:94:f0:61:c8:de:61:e5:01:d2:d2:e6:05:f0: d9:ff:59:96:16:a3:21:93:33:d0:8b:82:55:bd:4a: 1d:7e:81:37:07:dd:e2:a5:10:52:1e:a3:26:f1:8e: 1b:8a:b2:0a:13:b6:dc:4b:56:9f:90:5a:53:2f:f9: 4e:d5:e5:85:62:71:eb:a8:80:2b:da:bd:73:fb:7c: 8f:67:74:ce:19:fa:4e:38:63:ca:2a:46:ca:d0:29: 03:de:7a:b0:6e:22:ee:7d:68:61:12:14:29:14:c1: 9e:5e:e6:82:49:53:7c:8c:13:e7:4f:4a:31:e1:5e: 63:61:ab:5f:8d:31:fe:9c:73:76:86:c7:27:ca:61: 92:e1:9b:72:89:cf:93:2c:0e:5b:9d:03:44:7a:69: 86:ba:8d:5e:d6:2b:aa:4f:8e:96:ad:4d:e7:d7:64: 3b:dc:8b:8b:c0:36:9b:c4:08:7c:13:e2:c9:80:30: 9c:e9:7f:e5:a0:74:53:1b:82:be:b2:c3:00:d4:2b: 17:dd:ca:8b:15:20:fa:75:36:5f:40:2e:75:9c:fe: d0:68:25:71:cb:94:65:09:d6:6a:8e:c9:08:cd:9f: b5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B4:B0:4D:33:97:DD:2C:26:70:54:47:8E:78:02:E8:24:86:60:32 X509v3 Authority Key Identifier: keyid:5B:78:39:D3:FA:2F:BC:37:45:20:65:6B:0E:BD:B7:87:43:B9:68:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B7839D3FA2FBC374520656B0EBDB78743B968ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:59:b2:64:90:7a:cb:18:a2:2f:8b:cd:5e:95:fa:fd:83:0d: 27:80:e7:48:5c:28:4b:19:ba:7b:c1:2b:9a:63:89:e3:22:55: 92:7e:c0:6f:19:85:ae:84:e1:b8:61:69:00:ca:41:b2:03:aa: 0a:d8:b6:14:e1:12:fc:ff:5f:f3:4a:2e:f8:a1:14:cc:ab:d6: ff:d8:c2:23:89:56:dd:17:f2:ee:fe:73:70:cb:46:80:ef:09: e7:0f:97:ac:29:66:22:ed:98:b6:10:25:80:69:ad:16:98:66: 7e:ec:db:b2:c4:ca:7f:7a:c8:a3:f7:24:8f:2e:cd:76:6b:3f: 3f:6f:ae:bd:2f:e2:b2:3f:66:86:a3:59:6e:bf:d7:17:25:74: 3c:5c:6b:5b:28:7e:c1:d6:d1:50:8e:5e:23:27:64:0f:c3:ce: 11:d9:1f:58:0e:5e:60:77:d6:0a:6a:42:de:57:ad:72:4c:e1: 65:c6:39:9c:18:3d:a3:c5:11:82:68:4a:d3:ed:33:99:b9:93: ed:81:55:01:b6:23:53:14:ce:f0:c8:57:66:91:ff:8b:4d:ef: 51:b9:e2:21:c9:2c:0d:08:78:54:9c:1b:da:c4:38:d4:de:a0: fc:bb:4b:8c:38:b8:dd:54:98:28:79:95:9d:ce:69:6a:81:8e: 76:5f:cb:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJf9Ls4G5I6WR84Km1pdOBmvJZgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI3ODM5RDNGQTJGQkMzNzQ1MjA2NTZCMEVCREI3ODc0 M0I5NjhFRDAeFw0yNjA5MjQxMTQ1MTFaFw0yNjA5MjUxNTMzMTFaMDMxMTAvBgNV BAMTKEMxQjRCMDREMzM5N0REMkMyNjcwNTQ0NzhFNzgwMkU4MjQ4NjYwMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2PfwhpDIZOUnAewG+OCxeXXnI VjAtgCq0SUr1oTjflPBhyN5h5QHS0uYF8Nn/WZYWoyGTM9CLglW9Sh1+gTcH3eKl EFIeoybxjhuKsgoTttxLVp+QWlMv+U7V5YViceuogCvavXP7fI9ndM4Z+k44Y8oq RsrQKQPeerBuIu59aGESFCkUwZ5e5oJJU3yME+dPSjHhXmNhq1+NMf6cc3aGxyfK YZLhm3KJz5MsDludA0R6aYa6jV7WK6pPjpatTefXZDvci4vANpvECHwT4smAMJzp f+WgdFMbgr6ywwDUKxfdyosVIPp1Nl9ALnWc/tBoJXHLlGUJ1mqOyQjNn7UhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwbSwTTOX3SwmcFRHjngC6CSGYDIwHwYDVR0j BBgwFoAUW3g50/ovvDdFIGVrDr23h0O5aO0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjljNTMyN2YtMTBmZC00Y2YwLTg1MWMtMGNmY2QzYzNjNjk3LzAvNUI3ODM5RDNG QTJGQkMzNzQ1MjA2NTZCMEVCREI3ODc0M0I5NjhFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81Qjc4MzlEM0ZBMkZCQzM3NDUyMDY1NkIwRUJEQjc4NzQzQjk2 OEVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjljNTMyN2YtMTBmZC00Y2YwLTg1 MWMtMGNmY2QzYzNjNjk3LzAvNUI3ODM5RDNGQTJGQkMzNzQ1MjA2NTZCMEVCREI3 ODc0M0I5NjhFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1ZsmSQessYoi+LzV6V+v2DDSeA50hcKEsZ unvBK5pjieMiVZJ+wG8Zha6E4bhhaQDKQbIDqgrYthThEvz/X/NKLvihFMyr1v/Y wiOJVt0X8u7+c3DLRoDvCecPl6wpZiLtmLYQJYBprRaYZn7s27LEyn96yKP3JI8u zXZrPz9vrr0v4rI/ZoajWW6/1xcldDxca1sofsHW0VCOXiMnZA/DzhHZH1gOXmB3 1gpqQt5XrXJM4WXGOZwYPaPFEYJoStPtM5m5k+2BVQG2I1MUzvDIV2aR/4tN71G5 4iHJLA0IeFScG9rEONTeoPy7S4w4uN1UmCh5lZ3OaWqBjnZfy4s= -----END CERTIFICATE-----Generated at Thu Sep 24 19:03:08 2026 by rpki-client