$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft File: 5843958BB240779320D7F0C2B674ACF5EF6122BC.mft (raw, json) Hash identifier: UGg8e86NwgZBQ+6nVOuTm6EqBLyjMcWWPkXxnNYg5mc= Subject key identifier: 31:63:A2:78:DB:79:B1:3F:7D:AC:78:DE:3C:B7:19:D1:F1:A9:D8:EB Authority key identifier: 58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC Certificate issuer: /CN=5843958BB240779320D7F0C2B674ACF5EF6122BC Certificate serial: 6E43CCA03144A0FB82198DB58199F0D519EB4C4D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 04:31:10 +0000 Manifest this update: Thu 24 Sep 2026 04:26:10 +0000 Manifest next update: Fri 25 Sep 2026 05:21:10 +0000 Files and hashes: 1: 34332e3235322e3130342e302f32322d3234203d3e203435333035.roa (hash: lVR5iCrB58ZGOeyqsgP1KQLwdS0WjCcfUKPYsWN8lxI=) 2: 3130332e32382e3131322e302f32322d3234203d3e203435333035.roa (hash: yPK7GQUu85mTor59GtzCw8idVr6kmAEeffKza8nzEd8=) 3: 5843958BB240779320D7F0C2B674ACF5EF6122BC.crl (hash: 24rg/aClWyBonvvfZcIhmb+gCll9mwB1qBxEvDWtgBA=) 4: 3132342e34302e3234382e302f32342d3234203d3e20313432333237.roa (hash: zO201tAVoPKGV/ct4ikI5lfPCjZ1ksaQX5GMEkLajwg=) 5: 3132342e34302e3234382e302f32312d3234203d3e203435333035.roa (hash: bNdzrUkHylX3nBoyTDryEKwja6jOzq2DQP/kaLdB4H4=) 6: 3230322e35362e3136342e302f32322d3234203d3e203435333035.roa (hash: WeFmDyNsHJ6btvYfzDFQoJzW4vr0tmZoF+30o64Nsw4=) 7: 323030313a6466303a61333a3a2f34382d3438203d3e203435333035.roa (hash: jOCXET8yniqJ02iHiMoBI6iwGo2/5oUN4/jc3LtL0jQ=) 8: 3132342e34302e3235332e302f32342d3234203d3e20313432333237.roa (hash: t3N8/NmkXItiVJAARc4CSYWSo+yW57apDjW3aqHeSkc=) 9: 34332e3235322e3130342e302f32342d3234203d3e20313432333237.roa (hash: 3HeHx0erxEkjN9PtOgU3W6tKucWeXKE5FEYLyXwycJc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:21:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:43:cc:a0:31:44:a0:fb:82:19:8d:b5:81:99:f0:d5:19:eb:4c:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5843958BB240779320D7F0C2B674ACF5EF6122BC Validity Not Before: Sep 24 04:26:10 2026 GMT Not After : Sep 25 05:21:10 2026 GMT Subject: CN=3163A278DB79B13F7DAC78DE3CB719D1F1A9D8EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ac:0f:67:2b:b1:b8:27:a8:40:fa:5e:4f:7f: ee:ac:51:01:d5:cb:bf:a6:c7:bc:63:dd:2f:78:9d: d2:c4:41:3b:57:79:24:a2:88:c0:45:91:6f:19:f4: 3f:13:1b:9e:51:3f:14:9c:28:49:1f:32:11:68:25: cc:1d:ac:6a:a6:87:50:dc:70:fa:dc:64:d9:6e:17: cc:fc:56:71:04:24:1e:15:49:f0:dd:20:39:7c:5e: 24:5f:e5:81:20:76:f8:48:71:1a:42:b7:58:d9:8a: fe:fa:dd:30:36:59:92:41:96:87:0b:c1:0b:91:33: c1:d8:36:e6:be:5a:63:94:57:4a:87:4f:62:23:01: 73:69:dc:f2:ae:6b:89:36:1b:8c:7d:7d:ef:19:db: 33:24:fc:86:10:14:d4:41:04:ba:c3:1c:bc:8f:6b: 3c:02:77:3c:68:ae:74:38:0f:16:d7:67:87:02:97: 8a:ee:8e:20:b2:f4:24:76:66:3c:4b:64:aa:7c:6a: 63:bc:db:1f:37:99:ad:b2:cb:8f:4e:58:4c:e9:9b: 6d:17:a4:d0:15:91:de:81:cb:90:59:33:0b:3f:cd: 59:42:95:ec:75:ad:b0:58:5a:fd:6e:5e:c3:89:d9: 7e:22:ac:ec:f2:3d:0b:68:02:cb:0a:fd:45:9f:3e: 2b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:63:A2:78:DB:79:B1:3F:7D:AC:78:DE:3C:B7:19:D1:F1:A9:D8:EB X509v3 Authority Key Identifier: keyid:58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:5a:97:2d:5f:1e:29:69:45:cb:a9:e4:49:8a:80:37:33:e8: c8:df:2a:a5:8a:ce:f6:1e:2b:17:be:cf:3e:3f:3a:d2:4a:23: 6e:07:10:78:72:e9:57:a2:8b:28:90:80:39:db:28:05:df:94: ed:f5:9b:d9:6d:7a:90:65:6b:1c:be:23:ad:ff:ff:a3:9f:13: 26:80:10:60:6d:c3:40:fa:16:14:0b:e8:e0:f5:5d:39:3d:98: 06:7a:ac:2a:fd:3a:b9:17:c9:fa:c3:61:a4:dc:e1:3c:1d:33: 40:60:0f:9c:fe:e5:d0:02:9a:0a:41:b5:b2:82:46:92:d6:86: cf:80:ca:bf:ec:d5:e3:63:2e:94:2a:29:a8:0e:9c:1e:34:91: b0:ca:09:a8:96:2b:6f:52:47:74:43:77:58:8b:1e:ba:72:8b: 9d:ee:0b:0d:1f:b8:54:90:51:a6:69:6f:21:6b:c8:d2:54:93: fa:b9:a9:f9:29:f7:50:54:8a:0c:29:c5:db:6e:b0:86:80:6c: 24:b9:d7:dd:26:8b:90:f4:64:02:70:65:65:53:35:04:01:34: fd:a3:ec:14:b1:61:f3:40:76:a6:1e:c9:bb:28:8a:e6:8d:d8: e4:a1:37:84:5f:12:de:bf:a4:be:6d:dd:3f:95:07:44:a3:b5: d2:39:bc:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbkPMoDFEoPuCGY21gZnw1RnrTE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg0Mzk1OEJCMjQwNzc5MzIwRDdGMEMyQjY3NEFDRjVF RjYxMjJCQzAeFw0yNjA5MjQwNDI2MTBaFw0yNjA5MjUwNTIxMTBaMDMxMTAvBgNV BAMTKDMxNjNBMjc4REI3OUIxM0Y3REFDNzhERTNDQjcxOUQxRjFBOUQ4RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWrA9nK7G4J6hA+l5Pf+6sUQHV y7+mx7xj3S94ndLEQTtXeSSiiMBFkW8Z9D8TG55RPxScKEkfMhFoJcwdrGqmh1Dc cPrcZNluF8z8VnEEJB4VSfDdIDl8XiRf5YEgdvhIcRpCt1jZiv763TA2WZJBlocL wQuRM8HYNua+WmOUV0qHT2IjAXNp3PKua4k2G4x9fe8Z2zMk/IYQFNRBBLrDHLyP azwCdzxornQ4DxbXZ4cCl4rujiCy9CR2ZjxLZKp8amO82x83ma2yy49OWEzpm20X pNAVkd6By5BZMws/zVlClex1rbBYWv1uXsOJ2X4irOzyPQtoAssK/UWfPivtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMWOieNt5sT99rHjePLcZ0fGp2OswHwYDVR0j BBgwFoAUWEOVi7JAd5Mg1/DCtnSs9e9hIrwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ5NWMxOWMtMzI2Mi00OGM3LWFmMDItMzdhODM1ZDBhNzc5LzAvNTg0Mzk1OEJC MjQwNzc5MzIwRDdGMEMyQjY3NEFDRjVFRjYxMjJCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODQzOTU4QkIyNDA3NzkzMjBEN0YwQzJCNjc0QUNGNUVGNjEy MkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ5NWMxOWMtMzI2Mi00OGM3LWFm MDItMzdhODM1ZDBhNzc5LzAvNTg0Mzk1OEJCMjQwNzc5MzIwRDdGMEMyQjY3NEFD RjVFRjYxMjJCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJaly1fHilpRcup5EmKgDcz6MjfKqWKzvYe Kxe+zz4/OtJKI24HEHhy6VeiiyiQgDnbKAXflO31m9ltepBlaxy+I63//6OfEyaA EGBtw0D6FhQL6OD1XTk9mAZ6rCr9OrkXyfrDYaTc4TwdM0BgD5z+5dACmgpBtbKC RpLWhs+Ayr/s1eNjLpQqKagOnB40kbDKCaiWK29SR3RDd1iLHrpyi53uCw0fuFSQ UaZpbyFryNJUk/q5qfkp91BUigwpxdtusIaAbCS5190mi5D0ZAJwZWVTNQQBNP2j 7BSxYfNAdqYeybsoiuaN2OShN4RfEt6/pL5t3T+VB0SjtdI5vPM= -----END CERTIFICATE-----Generated at Thu Sep 24 08:43:38 2026 by rpki-client