$ rpki-client -vvvf rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.mft File: 509D7A005D22B25F29771D4736A9F3273A87402B.mft (raw, json) Hash identifier: uJ28g4J/z57AIoskRZSVcun+6tDIwXNaMK2pkJjRH/s= Subject key identifier: 2E:C2:3F:CB:A0:61:0C:15:D5:AC:56:CA:0D:44:07:E8:24:F8:EC:77 Authority key identifier: 50:9D:7A:00:5D:22:B2:5F:29:77:1D:47:36:A9:F3:27:3A:87:40:2B Certificate issuer: /CN=509D7A005D22B25F29771D4736A9F3273A87402B Certificate serial: 5F4F217568BED931A2039DAD343E98E19F8740C9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/509D7A005D22B25F29771D4736A9F3273A87402B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 17:01:46 +0000 Manifest this update: Thu 24 Sep 2026 16:56:46 +0000 Manifest next update: Fri 25 Sep 2026 19:02:46 +0000 Files and hashes: 1: 509D7A005D22B25F29771D4736A9F3273A87402B.crl (hash: vxJYW3UgdayYQ7fFnQSOCS+du6hLaDPOgGotPET8zFg=) 2: 3130332e39372e342e302f32342d3234203d3e20313336313237.roa (hash: 3XT6Qf//u+3dqP7/6tKzMllxBOnpkDd6boyw9AssiHI=) 3: 3130332e39372e342e302f32322d3234203d3e20313336313237.roa (hash: JKx5cXFJ9JwbuaKvmzbMBf7ucrHYe7PUJvHjTqORfvc=) 4: 3130332e39372e362e302f32342d3234203d3e20313336313237.roa (hash: RQSgO7tNppNvAC3aE8/fyIG2xxaOqC+3ztcNnXjPeng=) 5: 3130332e39372e352e302f32342d3234203d3e20313336313237.roa (hash: gia04ffSWp+0qNudeLLR7irdY7oXCN/dKfEZqry+RoQ=) 6: 323430313a383034303a3a2f33322d3332203d3e20313336313237.roa (hash: Dj85ZEdEHR8+WCo+8/1VIzd5RABBzm91ckkaaPaldnM=) 7: 3130332e39372e372e302f32342d3234203d3e20313336313237.roa (hash: u9MbGwZTtdpRxvA0JKGeSH6mVkoh1gSizjeQTtefh6M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.crl rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/509D7A005D22B25F29771D4736A9F3273A87402B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:4f:21:75:68:be:d9:31:a2:03:9d:ad:34:3e:98:e1:9f:87:40:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509D7A005D22B25F29771D4736A9F3273A87402B Validity Not Before: Sep 24 16:56:46 2026 GMT Not After : Sep 25 19:02:46 2026 GMT Subject: CN=2EC23FCBA0610C15D5AC56CA0D4407E824F8EC77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cc:e2:7e:e8:9f:91:8c:cc:87:21:65:1e:92: 2f:38:96:f7:81:67:d2:f5:0d:94:e9:c4:db:24:25: e9:88:16:f5:19:82:99:f0:a5:32:d3:79:45:cf:3e: 93:1e:b8:d0:63:fb:fa:c5:9f:ba:c8:db:d5:ba:00: 57:80:d5:6a:33:c8:86:68:27:b6:79:d8:fc:b5:6f: d8:1c:ef:6b:17:c4:3f:97:77:d8:f0:10:cb:c4:bd: 25:af:41:11:96:a8:ad:eb:dd:58:13:aa:3a:61:c1: 18:3e:f0:0b:4f:52:97:cb:79:3d:7a:e2:a2:f1:ed: d4:57:4a:06:d3:13:46:d8:d0:f9:66:cf:84:04:05: 86:a1:ab:d4:38:bf:ae:7c:5c:69:2e:20:1e:73:b7: ab:19:95:4c:cf:de:2e:31:fa:b9:85:7f:e0:97:13: 5e:23:c7:8a:5c:78:58:b1:7c:72:dc:05:ee:6a:fa: 18:3a:d4:d3:8a:70:22:b1:21:1b:63:da:8b:f8:cc: 7c:bd:09:4f:b2:0c:7d:a1:6b:e3:f7:7f:e6:94:68: 32:82:d4:aa:3e:ce:28:74:24:a3:da:9a:37:9b:86: 14:e1:85:9e:c7:c5:51:aa:15:6f:90:78:c6:4c:33: c2:de:e0:88:67:72:2c:e8:f9:e1:5b:a1:ed:02:0d: 29:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C2:3F:CB:A0:61:0C:15:D5:AC:56:CA:0D:44:07:E8:24:F8:EC:77 X509v3 Authority Key Identifier: keyid:50:9D:7A:00:5D:22:B2:5F:29:77:1D:47:36:A9:F3:27:3A:87:40:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/509D7A005D22B25F29771D4736A9F3273A87402B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:aa:02:b2:d4:9a:23:fd:66:38:7d:6d:fa:0f:4c:98:d5:06: e6:19:01:10:05:2e:6a:55:ab:6d:6d:52:32:14:1c:87:91:a9: a6:1b:68:9b:fe:f8:d2:ed:1f:ca:28:c6:49:b7:91:a5:d4:c3: ca:1b:38:96:0d:07:a3:ff:cd:ba:fb:e2:70:2d:7e:d9:93:2a: 95:c4:d0:43:ca:12:88:b2:1c:81:1e:ea:bb:23:9b:bd:a6:c9: bb:5f:25:40:7b:43:8f:d2:2b:4b:51:b8:9e:5e:8f:4f:72:92: c2:8b:71:82:b9:d9:80:3b:be:d8:04:87:9d:82:28:cd:3a:19: 98:46:9b:58:86:c2:30:a1:24:98:36:f8:58:fc:3c:8a:ad:e4: 38:58:b1:83:a5:7f:bf:3a:e0:d0:13:7f:31:20:60:41:1c:65: 34:17:cd:a4:48:90:a8:90:cb:7f:42:74:d7:17:b9:63:8e:ca: 99:24:bb:d7:ae:b7:e0:c7:79:af:b1:ae:d9:33:37:94:0d:71: db:23:bb:ab:f5:0c:ce:3e:c7:83:ba:5b:2f:7d:48:19:32:cd: 7a:87:aa:e7:c4:01:7b:48:58:00:09:4e:10:97:d0:de:bc:ce: 7e:14:0f:4a:ef:d3:9a:1e:cf:89:61:b5:dd:a0:2c:9e:24:c2: ed:23:0c:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX08hdWi+2TGiA52tND6Y4Z+HQMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA5RDdBMDA1RDIyQjI1RjI5NzcxRDQ3MzZBOUYzMjcz QTg3NDAyQjAeFw0yNjA5MjQxNjU2NDZaFw0yNjA5MjUxOTAyNDZaMDMxMTAvBgNV BAMTKDJFQzIzRkNCQTA2MTBDMTVENUFDNTZDQTBENDQwN0U4MjRGOEVDNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMzOJ+6J+RjMyHIWUeki84lveB Z9L1DZTpxNskJemIFvUZgpnwpTLTeUXPPpMeuNBj+/rFn7rI29W6AFeA1WozyIZo J7Z52Py1b9gc72sXxD+Xd9jwEMvEvSWvQRGWqK3r3VgTqjphwRg+8AtPUpfLeT16 4qLx7dRXSgbTE0bY0Plmz4QEBYahq9Q4v658XGkuIB5zt6sZlUzP3i4x+rmFf+CX E14jx4pceFixfHLcBe5q+hg61NOKcCKxIRtj2ov4zHy9CU+yDH2ha+P3f+aUaDKC 1Ko+zih0JKPamjebhhThhZ7HxVGqFW+QeMZMM8Le4Ihncizo+eFboe0CDSn9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULsI/y6BhDBXVrFbKDUQH6CT47HcwHwYDVR0j BBgwFoAUUJ16AF0isl8pdx1HNqnzJzqHQCswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDRiMjczMDMtOWUzZC00ZDQyLWFmMjUtNmEwZjExODA4ZjI3LzAvNTA5RDdBMDA1 RDIyQjI1RjI5NzcxRDQ3MzZBOUYzMjczQTg3NDAyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MDlEN0EwMDVEMjJCMjVGMjk3NzFENDczNkE5RjMyNzNBODc0 MDJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDRiMjczMDMtOWUzZC00ZDQyLWFm MjUtNmEwZjExODA4ZjI3LzAvNTA5RDdBMDA1RDIyQjI1RjI5NzcxRDQ3MzZBOUYz MjczQTg3NDAyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISqArLUmiP9Zjh9bfoPTJjVBuYZARAFLmpV q21tUjIUHIeRqaYbaJv++NLtH8ooxkm3kaXUw8obOJYNB6P/zbr74nAtftmTKpXE 0EPKEoiyHIEe6rsjm72mybtfJUB7Q4/SK0tRuJ5ej09yksKLcYK52YA7vtgEh52C KM06GZhGm1iGwjChJJg2+Fj8PIqt5DhYsYOlf7864NATfzEgYEEcZTQXzaRIkKiQ y39CdNcXuWOOypkku9eut+DHea+xrtkzN5QNcdsju6v1DM4+x4O6Wy99SBkyzXqH qufEAXtIWAAJThCX0N68zn4UD0rv05oez4lhtd2gLJ4kwu0jDEc= -----END CERTIFICATE-----Generated at Thu Sep 24 21:59:58 2026 by rpki-client