$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft File: 5FF85953C6850E359467A581C3FE1AC78E529F2F.mft (raw, json) Hash identifier: CkAn3L+wRNPwNGIzHb2TN6SZIQYaOFH/q/cBw+cU59E= Subject key identifier: A4:37:D7:6B:03:AD:BE:F2:EB:6A:B8:F9:EC:D6:07:69:01:78:FA:49 Authority key identifier: 5F:F8:59:53:C6:85:0E:35:94:67:A5:81:C3:FE:1A:C7:8E:52:9F:2F Certificate issuer: /CN=5FF85953C6850E359467A581C3FE1AC78E529F2F Certificate serial: 36108214675996C8389A2D0A471E502CC48E9336 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 11:04:18 +0000 Manifest this update: Thu 24 Sep 2026 10:59:18 +0000 Manifest next update: Fri 25 Sep 2026 13:32:18 +0000 Files and hashes: 1: 3131352e3136362e3131312e302f32342d3234203d3e203134363138.roa (hash: kPUK2GFDFYlKn9GXNmNAqFN8ChpgIluMw/CP+FmKw0o=) 2: 35382e36352e3234302e302f32312d3234203d3e203234353335.roa (hash: AwkHb7HGSUt+TaaLZZEdADtv/v78j6fMphbiNKpRchs=) 3: 323430333a666630303a3a2f33322d3438203d3e203234353335.roa (hash: +qKLLz9ehRuOchJ8m6wI99oYtklf5Gx9ixqGHWMAzMw=) 4: 5FF85953C6850E359467A581C3FE1AC78E529F2F.crl (hash: /IHaM6oW1t40h85daCU0SJZjWDIStm6qspU1jkf/Ia8=) 5: 3131352e3136362e3131312e302f32342d3234203d3e20333936393832.roa (hash: t97u2GqJ2jtckgSGR6Sjz6Jn9nKSQHkBxpLPsPLvaYM=) 6: 3131352e3136362e39362e302f31392d3234203d3e203234353335.roa (hash: MmVOOc/LuqFNSXqQ5IddobFw0Ch137C+avOoyFd6ZzY=) 7: 3131352e3136362e3131312e302f32342d3234203d3e203136353039.roa (hash: uTaNGo7IDdsOGs73zESne28tA+ZzMyK0wMRINMuXTcQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.crl rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:10:82:14:67:59:96:c8:38:9a:2d:0a:47:1e:50:2c:c4:8e:93:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF85953C6850E359467A581C3FE1AC78E529F2F Validity Not Before: Sep 24 10:59:18 2026 GMT Not After : Sep 25 13:32:18 2026 GMT Subject: CN=A437D76B03ADBEF2EB6AB8F9ECD607690178FA49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:81:7b:91:5a:36:ec:63:29:49:39:0a:57:c5: 7a:28:2d:08:a4:7d:4a:9b:62:12:ee:70:ae:14:ee: 99:4f:f3:e4:cd:81:0a:f4:87:06:3d:38:5a:5f:c9: de:ea:ac:4d:eb:33:00:23:bd:59:dd:f5:6e:b3:f3: 34:41:ec:43:4f:45:7a:5c:29:88:3a:ae:62:65:1e: 9f:a1:8b:d2:67:60:f9:3d:1e:c2:9c:32:2c:6b:b9: 23:a2:2c:b3:a7:b7:9d:5c:bf:04:b1:42:41:e7:02: 8b:5c:06:6f:66:23:6c:c4:67:bb:f2:58:36:99:43: ce:5e:07:b7:3c:32:f9:3e:67:82:4b:97:87:61:9a: cd:b0:15:2c:4d:f8:08:ed:e5:d3:b1:18:d8:fb:ae: 94:13:7e:c3:c9:bd:43:71:b4:18:6b:d1:18:ae:80: 03:10:be:c9:1c:3c:66:bb:0d:c7:0d:bb:58:c3:46: 60:ac:69:2f:a6:95:9b:e6:84:14:9f:e3:98:96:7c: 63:1d:d7:59:ba:16:82:88:4f:c7:72:c3:8d:14:1a: 9c:a5:4d:d2:07:a5:24:46:a9:6d:a4:fd:e9:bf:07: e5:75:98:08:89:d8:a6:19:51:97:89:e8:b8:23:65: a8:f9:0f:34:40:b8:aa:49:21:b2:ad:15:de:83:d0: a0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:37:D7:6B:03:AD:BE:F2:EB:6A:B8:F9:EC:D6:07:69:01:78:FA:49 X509v3 Authority Key Identifier: keyid:5F:F8:59:53:C6:85:0E:35:94:67:A5:81:C3:FE:1A:C7:8E:52:9F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e9:99:bd:36:6b:fc:a4:26:02:8c:9e:83:6d:e4:c7:c2:56: c3:5e:30:2a:e9:cc:20:a9:f2:b6:50:f3:79:c9:c4:f7:3f:d5: 86:10:34:c2:dc:1e:5f:c6:54:f5:36:b3:56:dc:df:63:dc:01: c4:87:43:e8:bd:65:95:cd:f1:e5:ea:3f:19:f1:9c:30:66:86: 28:23:ea:bd:97:19:9f:fa:84:c7:d2:1e:86:aa:2c:b0:f3:d1: 38:06:9e:96:e9:f7:b4:35:e5:4a:2a:65:47:9c:ac:f8:1b:51: 82:88:48:a8:f5:8a:91:37:64:f3:13:80:47:3b:99:02:a9:a0: e7:f2:64:9f:bf:16:ea:fb:17:fa:e3:ea:b8:96:a0:90:82:0a: 73:0a:aa:d9:04:ca:a5:50:36:ef:24:ae:d3:25:6c:c4:16:af: e4:4e:66:7e:2e:a2:ec:76:fb:d8:76:32:0e:4c:59:e6:26:3e: 65:ff:a5:01:aa:c3:70:d0:e8:15:ad:45:d9:31:a2:e5:63:fb: 4b:25:4a:bd:d4:02:b3:98:06:19:89:ac:55:84:cc:39:21:dc: 02:ea:2c:6a:ea:e4:67:2c:aa:b9:f5:46:34:c8:c2:c9:90:ff: 2c:a7:e8:2f:8a:b6:c1:1c:dd:ce:ad:01:f9:1f:9c:db:07:d4: 79:fb:e4:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNhCCFGdZlsg4mi0KRx5QLMSOkzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGODU5NTNDNjg1MEUzNTk0NjdBNTgxQzNGRTFBQzc4 RTUyOUYyRjAeFw0yNjA5MjQxMDU5MThaFw0yNjA5MjUxMzMyMThaMDMxMTAvBgNV BAMTKEE0MzdENzZCMDNBREJFRjJFQjZBQjhGOUVDRDYwNzY5MDE3OEZBNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAgXuRWjbsYylJOQpXxXooLQik fUqbYhLucK4U7plP8+TNgQr0hwY9OFpfyd7qrE3rMwAjvVnd9W6z8zRB7ENPRXpc KYg6rmJlHp+hi9JnYPk9HsKcMixruSOiLLOnt51cvwSxQkHnAotcBm9mI2zEZ7vy WDaZQ85eB7c8Mvk+Z4JLl4dhms2wFSxN+Ajt5dOxGNj7rpQTfsPJvUNxtBhr0Riu gAMQvskcPGa7DccNu1jDRmCsaS+mlZvmhBSf45iWfGMd11m6FoKIT8dyw40UGpyl TdIHpSRGqW2k/em/B+V1mAiJ2KYZUZeJ6LgjZaj5DzRAuKpJIbKtFd6D0KBpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpDfXawOtvvLrarj57NYHaQF4+kkwHwYDVR0j BBgwFoAUX/hZU8aFDjWUZ6WBw/4ax45Sny8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmRkNDdmNTYtZWM1My00MmViLTliOGItZmEwOGY4NzRkMzE5LzAvNUZGODU5NTND Njg1MEUzNTk0NjdBNTgxQzNGRTFBQzc4RTUyOUYyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkY4NTk1M0M2ODUwRTM1OTQ2N0E1ODFDM0ZFMUFDNzhFNTI5 RjJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmRkNDdmNTYtZWM1My00MmViLTli OGItZmEwOGY4NzRkMzE5LzAvNUZGODU5NTNDNjg1MEUzNTk0NjdBNTgxQzNGRTFB Qzc4RTUyOUYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvpmb02a/ykJgKMnoNt5MfCVsNeMCrpzCCp 8rZQ83nJxPc/1YYQNMLcHl/GVPU2s1bc32PcAcSHQ+i9ZZXN8eXqPxnxnDBmhigj 6r2XGZ/6hMfSHoaqLLDz0TgGnpbp97Q15UoqZUecrPgbUYKISKj1ipE3ZPMTgEc7 mQKpoOfyZJ+/Fur7F/rj6riWoJCCCnMKqtkEyqVQNu8krtMlbMQWr+ROZn4uoux2 +9h2Mg5MWeYmPmX/pQGqw3DQ6BWtRdkxouVj+0slSr3UArOYBhmJrFWEzDkh3ALq LGrq5Gcsqrn1RjTIwsmQ/yyn6C+KtsEc3c6tAfkfnNsH1Hn75HI= -----END CERTIFICATE-----Generated at Fri Sep 25 02:54:41 2026 by rpki-client