$ rpki-client -vvvf rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.mft File: 5B4C702133C87BA4BC2E55E712270969ABE45A51.mft (raw, json) Hash identifier: 1YjO494OJtGxb0Ze1M5PUxHSrsJX2gEFK24fhtYe6mU= Subject key identifier: 35:07:54:2F:6B:1B:E4:B9:15:C5:B5:9F:63:55:62:60:66:83:91:E8 Authority key identifier: 5B:4C:70:21:33:C8:7B:A4:BC:2E:55:E7:12:27:09:69:AB:E4:5A:51 Certificate issuer: /CN=5B4C702133C87BA4BC2E55E712270969ABE45A51 Certificate serial: 0A0EF27D87BF094F608F138D927D8614CCC4C510 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B4C702133C87BA4BC2E55E712270969ABE45A51.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 18:18:18 +0000 Manifest this update: Thu 24 Sep 2026 18:13:18 +0000 Manifest next update: Fri 25 Sep 2026 20:59:18 +0000 Files and hashes: 1: 3130332e35352e3235332e302f32342d3234203d3e20313531353838.roa (hash: Vkq3URZ932rcZk4u78E4tOq6/4bheSUZYPRHTmwP30Y=) 2: 3130332e35352e3235322e302f32332d3233203d3e20313531353838.roa (hash: BHukqw3OCwpT8gyX9jofbrVK6NJ8azV8C28UZNn4k40=) 3: 5B4C702133C87BA4BC2E55E712270969ABE45A51.crl (hash: 42+TabD5BZJ6mQ5W/mt7gLG5ukqkshvEe3P1LAjxBA0=) 4: 3130332e35352e3235322e302f32342d3234203d3e20313531353838.roa (hash: sLHnpPIHUxO29WSb75hs0N2E96R8Wj78zUMN4pLDvZ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.crl rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B4C702133C87BA4BC2E55E712270969ABE45A51.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:0e:f2:7d:87:bf:09:4f:60:8f:13:8d:92:7d:86:14:cc:c4:c5:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B4C702133C87BA4BC2E55E712270969ABE45A51 Validity Not Before: Sep 24 18:13:18 2026 GMT Not After : Sep 25 20:59:18 2026 GMT Subject: CN=3507542F6B1BE4B915C5B59F63556260668391E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1f:f7:7b:b9:24:ca:40:59:68:56:00:51:16: 5b:d9:2d:2a:d7:46:d4:f9:61:3f:f2:1a:3a:82:04: 18:e3:dd:6f:ed:67:6e:6d:3c:ac:fa:81:9d:08:6f: d8:5b:1d:ad:c0:bc:8b:b1:6c:65:5b:5a:af:bb:eb: 55:75:68:87:66:a6:f0:9f:b3:52:17:99:c5:f1:62: 35:fd:44:f7:ec:ab:fd:5d:c5:91:4a:ca:41:5c:1b: 30:10:0c:ff:95:05:24:f0:76:be:84:45:c0:cf:f7: 00:bc:01:66:e6:4d:f0:69:92:53:c8:54:5b:00:74: e7:4a:bd:f7:c8:60:3c:32:c3:1c:d6:68:76:29:81: 28:3f:1f:fa:21:23:9a:3e:23:1f:50:10:e3:a2:ec: 30:ef:49:34:4b:b6:2b:02:3b:1b:3c:5d:b7:0c:70: 89:12:d2:92:51:64:1c:7a:fc:c6:17:a5:9f:34:59: 13:25:9e:5f:41:48:33:d2:9f:4b:3a:00:72:8b:d0: 75:11:a2:71:bd:bd:91:c1:dd:b0:7a:2d:89:f9:8a: 89:81:04:b0:0a:04:8c:30:0d:24:22:f3:cd:9a:11: 34:a3:a3:e2:5a:83:d8:3f:4d:d1:6b:ed:01:f9:4c: 79:d4:13:ec:6a:a3:50:f8:a9:d0:bf:9f:a9:16:45: 6f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:07:54:2F:6B:1B:E4:B9:15:C5:B5:9F:63:55:62:60:66:83:91:E8 X509v3 Authority Key Identifier: keyid:5B:4C:70:21:33:C8:7B:A4:BC:2E:55:E7:12:27:09:69:AB:E4:5A:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B4C702133C87BA4BC2E55E712270969ABE45A51.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:ff:f1:bf:c9:98:e1:64:9c:94:56:3d:84:f5:c7:a5:5a:fb: df:7b:c2:3f:3a:a6:95:0e:94:73:db:b1:cd:94:08:9b:34:dc: 86:f7:d5:9f:08:f6:44:77:4e:77:78:7a:24:ce:eb:fa:de:be: 10:2e:60:32:1c:dc:6e:e1:a6:87:e5:b8:2a:de:aa:97:c6:79: 56:eb:5a:bf:9c:aa:be:cb:ae:a4:3c:cb:d0:6c:be:69:2a:34: 96:82:5b:8d:82:62:79:d7:50:4b:5e:b6:bd:65:61:ff:65:13: 01:7a:ed:fd:e3:33:29:cd:f7:f5:b2:0e:2e:4c:63:5e:31:bc: 17:b6:f1:56:a9:d2:0c:f8:be:7c:d4:35:0d:cf:2a:6d:ae:69: 54:46:ea:10:a4:6b:d2:31:fd:bc:77:fc:a4:0f:4d:f1:20:23: bc:4f:b6:0c:c3:61:69:ae:63:49:c2:7d:fc:7d:f7:c1:d9:60: 3e:bf:0d:22:8f:60:29:9d:2d:d9:d1:aa:f8:65:40:47:52:01: 5f:d5:d5:07:7f:91:6e:a7:8a:27:0a:6b:e4:65:4e:54:5e:71: 0f:5d:67:57:85:a9:db:8a:6f:47:5b:23:81:74:81:9f:34:61: 4d:19:0b:68:77:c3:91:a7:d0:a0:f1:da:b8:9f:9f:c1:8f:1d: e8:b3:70:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCg7yfYe/CU9gjxONkn2GFMzExRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI0QzcwMjEzM0M4N0JBNEJDMkU1NUU3MTIyNzA5NjlB QkU0NUE1MTAeFw0yNjA5MjQxODEzMThaFw0yNjA5MjUyMDU5MThaMDMxMTAvBgNV BAMTKDM1MDc1NDJGNkIxQkU0QjkxNUM1QjU5RjYzNTU2MjYwNjY4MzkxRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/H/d7uSTKQFloVgBRFlvZLSrX RtT5YT/yGjqCBBjj3W/tZ25tPKz6gZ0Ib9hbHa3AvIuxbGVbWq+761V1aIdmpvCf s1IXmcXxYjX9RPfsq/1dxZFKykFcGzAQDP+VBSTwdr6ERcDP9wC8AWbmTfBpklPI VFsAdOdKvffIYDwywxzWaHYpgSg/H/ohI5o+Ix9QEOOi7DDvSTRLtisCOxs8XbcM cIkS0pJRZBx6/MYXpZ80WRMlnl9BSDPSn0s6AHKL0HURonG9vZHB3bB6LYn5iomB BLAKBIwwDSQi882aETSjo+Jag9g/TdFr7QH5THnUE+xqo1D4qdC/n6kWRW8BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNQdUL2sb5LkVxbWfY1ViYGaDkegwHwYDVR0j BBgwFoAUW0xwITPIe6S8LlXnEicJaavkWlEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDE0ZTA0ZmEtNzE4OC00ZjRmLTgxYmItMzMwMzg5Zjg3MDE1LzAvNUI0QzcwMjEz M0M4N0JBNEJDMkU1NUU3MTIyNzA5NjlBQkU0NUE1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QjRDNzAyMTMzQzg3QkE0QkMyRTU1RTcxMjI3MDk2OUFCRTQ1 QTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDE0ZTA0ZmEtNzE4OC00ZjRmLTgx YmItMzMwMzg5Zjg3MDE1LzAvNUI0QzcwMjEzM0M4N0JBNEJDMkU1NUU3MTIyNzA5 NjlBQkU0NUE1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAML/8b/JmOFknJRWPYT1x6Va+997wj86ppUO lHPbsc2UCJs03Ib31Z8I9kR3Tnd4eiTO6/revhAuYDIc3G7hpofluCreqpfGeVbr Wr+cqr7LrqQ8y9BsvmkqNJaCW42CYnnXUEtetr1lYf9lEwF67f3jMynN9/WyDi5M Y14xvBe28Vap0gz4vnzUNQ3PKm2uaVRG6hCka9Ix/bx3/KQPTfEgI7xPtgzDYWmu Y0nCffx998HZYD6/DSKPYCmdLdnRqvhlQEdSAV/V1Qd/kW6niicKa+RlTlRecQ9d Z1eFqduKb0dbI4F0gZ80YU0ZC2h3w5Gn0KDx2rifn8GPHeizcMk= -----END CERTIFICATE-----Generated at Thu Sep 24 21:51:37 2026 by rpki-client