$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft File: 05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft (raw, json) Hash identifier: jPA/q1glc1zXIh5D+8feio+vz3eoztReO+Zo8k0BiGs= Subject key identifier: 19:9F:05:04:7A:49:0A:45:3B:3C:54:0B:72:D9:11:77:4A:AD:CA:6C Authority key identifier: 05:37:9F:0D:08:D0:5D:F8:DE:41:D2:AC:19:AD:0B:EF:87:3C:B1:DC Certificate issuer: /CN=05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC Certificate serial: 1EEEF44DE18D4A83724277DA31EF3ABCD7278C3D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 16:36:32 +0000 Manifest this update: Wed 23 Sep 2026 16:31:32 +0000 Manifest next update: Thu 24 Sep 2026 19:05:32 +0000 Files and hashes: 1: 05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.crl (hash: Rv4DezEC/UsCi0NbbKaOv/RD4o1Tct7KQwXDauoJYvk=) 2: 3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa (hash: 4wSG33FQW497l9wd4KCTscDggwNpLmu4SJOzxz44RVQ=) 3: 3130332e32342e3134382e302f32322d3234203d3e203233393439.roa (hash: 7oQYk70vQKgevBK4UvvhjpK8SNhKYOZ4R1FXSVnjFQo=) 4: 323430313a653438303a3a2f33322d3438203d3e203233393439.roa (hash: Tj1GCuxVuIwoJv3jzrY6G2gcMOfZzcLibiYAvCSsF9Y=) 5: 34332e3232392e32302e302f32322d3234203d3e203233393439.roa (hash: 5ip0zyOFzxKc/CLTR+cuhj/u/zV2t14XhZlqC+WxFAQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.crl rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ee:f4:4d:e1:8d:4a:83:72:42:77:da:31:ef:3a:bc:d7:27:8c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC Validity Not Before: Sep 23 16:31:32 2026 GMT Not After : Sep 24 19:05:32 2026 GMT Subject: CN=199F05047A490A453B3C540B72D911774AADCA6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:1e:f4:92:87:da:6a:d3:15:42:a6:47:fe:62: e3:4e:04:15:93:f4:db:72:d6:f2:52:b3:ac:8c:26: 7c:20:40:7d:7e:78:83:9a:54:7c:6d:46:a1:86:a9: d5:6d:fe:f2:bd:27:c3:ea:f0:55:ed:6a:7c:eb:83: d1:4f:8e:1a:65:95:bc:0c:fe:60:c5:7f:d8:cd:84: 0b:b1:8e:c7:88:cd:da:fc:4e:18:de:d7:a0:51:15: 7c:72:85:92:41:41:61:a2:bf:51:e3:bc:da:ee:88: d0:19:20:12:dc:94:fc:5d:d5:89:07:23:58:2a:a7: df:b8:61:76:d2:2f:72:5f:30:3c:2c:82:c4:f3:5e: d4:61:52:03:ee:35:5d:4f:3e:10:0e:26:fb:fe:f0: 2d:f0:fd:c4:d9:f8:44:23:a7:70:eb:7a:7d:97:cc: 80:b5:d7:6c:14:e1:fa:25:69:53:a0:2d:64:e7:9f: 4c:b6:13:18:b8:52:02:20:f2:e7:a2:db:6c:79:61: e8:3d:d7:c7:fd:41:d1:ab:1c:34:7a:5b:8d:4f:b3: 7e:11:a3:b2:24:47:38:cc:1d:00:11:63:19:4e:b9: 21:8a:a3:e9:2d:b2:d6:a6:76:3b:2f:dc:57:fd:85: f8:00:dc:37:40:f9:00:6f:69:46:25:fb:f1:bf:9f: 85:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9F:05:04:7A:49:0A:45:3B:3C:54:0B:72:D9:11:77:4A:AD:CA:6C X509v3 Authority Key Identifier: keyid:05:37:9F:0D:08:D0:5D:F8:DE:41:D2:AC:19:AD:0B:EF:87:3C:B1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a6:e0:e1:5e:dd:97:0a:f8:2f:89:14:21:d7:62:8b:f2:e3: ae:5e:ed:06:5c:85:97:41:54:52:a6:3d:a2:76:2c:95:53:75: 46:6d:70:3e:e9:91:0d:41:1f:cb:4c:39:98:86:3a:28:10:7b: 31:4a:88:9e:71:e7:30:dd:2b:1c:21:72:08:aa:5e:3d:92:4d: 98:e1:ff:cb:d0:d4:b7:37:13:d1:67:e1:28:cd:40:cb:bf:2a: 0e:aa:f9:c5:32:31:c6:77:53:f6:5f:99:c9:ba:f4:3a:0d:bc: 4f:5e:1f:ca:2a:d5:2c:3a:b6:60:63:9d:1e:a8:eb:0a:17:01: ec:57:54:b7:71:a9:28:74:e3:8f:b8:7a:b9:1b:aa:91:b1:6d: fa:9d:54:2e:f0:ad:d3:ce:07:39:48:e3:02:2b:03:ac:bd:7b: 8d:2c:4a:99:8a:19:4d:ff:46:72:56:42:6f:a6:8f:fc:cd:29: 75:ae:f6:3f:81:1e:da:48:f7:3c:eb:ae:c3:71:21:2d:89:be: 81:a3:af:a8:92:71:e0:5a:12:23:1b:6c:08:cd:07:66:0d:a5: 0f:ef:af:5a:bc:ee:c4:45:a2:1a:d6:20:d7:62:fd:1a:f6:b2: cf:99:38:c7:a4:99:0b:24:67:50:57:08:3b:26:bc:ef:ae:c0: d5:4c:67:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHu70TeGNSoNyQnfaMe86vNcnjD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDUzNzlGMEQwOEQwNURGOERFNDFEMkFDMTlBRDBCRUY4 NzNDQjFEQzAeFw0yNjA5MjMxNjMxMzJaFw0yNjA5MjQxOTA1MzJaMDMxMTAvBgNV BAMTKDE5OUYwNTA0N0E0OTBBNDUzQjNDNTQwQjcyRDkxMTc3NEFBRENBNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwHvSSh9pq0xVCpkf+YuNOBBWT 9Nty1vJSs6yMJnwgQH1+eIOaVHxtRqGGqdVt/vK9J8Pq8FXtanzrg9FPjhpllbwM /mDFf9jNhAuxjseIzdr8Thje16BRFXxyhZJBQWGiv1HjvNruiNAZIBLclPxd1YkH I1gqp9+4YXbSL3JfMDwsgsTzXtRhUgPuNV1PPhAOJvv+8C3w/cTZ+EQjp3Dren2X zIC112wU4folaVOgLWTnn0y2Exi4UgIg8uei22x5Yeg918f9QdGrHDR6W41Ps34R o7IkRzjMHQARYxlOuSGKo+ktstamdjsv3Ff9hfgA3DdA+QBvaUYl+/G/n4XrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGZ8FBHpJCkU7PFQLctkRd0qtymwwHwYDVR0j BBgwFoAUBTefDQjQXfjeQdKsGa0L74c8sdwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmI2OTgyMmMtMmUyMi00OGJlLThiYTItNjM0ZjU4MmMyZWNiLzAvMDUzNzlGMEQw OEQwNURGOERFNDFEMkFDMTlBRDBCRUY4NzNDQjFEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNTM3OUYwRDA4RDA1REY4REU0MUQyQUMxOUFEMEJFRjg3M0NC MURDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmI2OTgyMmMtMmUyMi00OGJlLThi YTItNjM0ZjU4MmMyZWNiLzAvMDUzNzlGMEQwOEQwNURGOERFNDFEMkFDMTlBRDBC RUY4NzNDQjFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqm4OFe3ZcK+C+JFCHXYovy465e7QZchZdB VFKmPaJ2LJVTdUZtcD7pkQ1BH8tMOZiGOigQezFKiJ5x5zDdKxwhcgiqXj2STZjh /8vQ1Lc3E9Fn4SjNQMu/Kg6q+cUyMcZ3U/Zfmcm69DoNvE9eH8oq1Sw6tmBjnR6o 6woXAexXVLdxqSh044+4erkbqpGxbfqdVC7wrdPOBzlI4wIrA6y9e40sSpmKGU3/ RnJWQm+mj/zNKXWu9j+BHtpI9zzrrsNxIS2JvoGjr6iSceBaEiMbbAjNB2YNpQ/v r1q87sRFohrWINdi/Rr2ss+ZOMekmQskZ1BXCDsmvO+uwNVMZ68= -----END CERTIFICATE-----Generated at Thu Sep 24 06:01:43 2026 by rpki-client