$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.mft File: B5B29AB56D2B927BDE3361B6CB58CD08539262B0.mft (raw, json) Hash identifier: ttzeidHaaCW2w4XL2IHATxh/dTmCvdfdCt6lVbip8iY= Subject key identifier: 25:4E:FC:60:FA:FC:A7:45:19:B2:36:2F:21:8D:B9:10:AE:59:0D:55 Authority key identifier: B5:B2:9A:B5:6D:2B:92:7B:DE:33:61:B6:CB:58:CD:08:53:92:62:B0 Certificate issuer: /CN=B5B29AB56D2B927BDE3361B6CB58CD08539262B0 Certificate serial: 16BED1F09D3778EFC2393CC825570CDC2DC3D98D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 13:37:16 +0000 Manifest this update: Fri 25 Sep 2026 13:32:16 +0000 Manifest next update: Sat 26 Sep 2026 16:18:16 +0000 Files and hashes: 1: 3230322e3132392e3232342e302f32322d3234203d3e203338373831.roa (hash: zUwwGmxcrXHUEybdjp6Ek486OiNzUkHwLan92qEDTQE=) 2: 323030313a6466333a653630303a3a2f34382d3438203d3e203338373831.roa (hash: IbczqxcYZ+zxW3Aa+76klhFYL/3X9BCvNeRgAfb1vp4=) 3: B5B29AB56D2B927BDE3361B6CB58CD08539262B0.crl (hash: /JycOy6E69V8Gr0ABvieW0RwQ60CHVADDtukMEpks0w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.crl rsync://rpki-rsync.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 16:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:be:d1:f0:9d:37:78:ef:c2:39:3c:c8:25:57:0c:dc:2d:c3:d9:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5B29AB56D2B927BDE3361B6CB58CD08539262B0 Validity Not Before: Sep 25 13:32:16 2026 GMT Not After : Sep 26 16:18:16 2026 GMT Subject: CN=254EFC60FAFCA74519B2362F218DB910AE590D55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c8:e3:45:01:0e:fb:7b:70:a3:f0:a9:9d:8b: 50:0e:46:f7:3b:53:e7:c2:71:b5:2a:1d:e8:47:00: 56:c3:22:6e:15:77:8d:e7:30:b6:1f:7c:96:85:8f: d2:e7:aa:94:a7:34:be:b4:9d:7f:00:d2:1b:93:0c: 01:41:68:07:57:c5:8a:f7:43:af:16:dd:3f:53:c7: 7c:01:4b:0a:b3:74:c8:ec:9c:77:d3:ab:e2:34:55: e7:fc:17:27:a9:c4:7d:ec:1e:97:41:72:c3:ca:83: f8:bd:d2:89:74:71:2b:c8:08:1b:2b:01:f3:ad:42: 93:23:a4:fe:77:3e:7d:25:69:1d:5d:31:7d:b0:8c: ce:2f:3c:2e:6a:5c:56:d5:fc:60:3b:ed:bf:d1:51: 8e:d6:0f:07:fa:eb:ca:44:38:d8:0d:90:c6:7c:e4: a9:76:39:c1:33:4d:18:49:51:13:86:5e:39:cd:e4: be:ad:fd:19:77:da:d0:ab:3f:24:c2:ae:38:80:e4: 72:1e:f2:99:0c:55:5b:40:7c:cb:16:e1:8c:05:d1: 9a:d3:ba:ec:8f:a6:bf:cc:c7:e7:d3:4b:c2:2f:f2: 7f:72:0f:a8:60:1c:94:ef:b8:00:c5:b4:68:b2:ff: f1:64:c6:f2:8d:75:77:51:ce:ec:11:9c:7b:d1:a2: 3c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:4E:FC:60:FA:FC:A7:45:19:B2:36:2F:21:8D:B9:10:AE:59:0D:55 X509v3 Authority Key Identifier: keyid:B5:B2:9A:B5:6D:2B:92:7B:DE:33:61:B6:CB:58:CD:08:53:92:62:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:52:64:d1:33:c5:46:c0:47:77:a0:c8:a2:0a:f0:82:98:96: 4e:6a:c6:41:79:8f:d9:a0:9e:6d:fc:15:86:b4:d2:61:4a:b8: ec:db:c1:8f:6f:88:eb:91:c1:33:5d:be:81:4e:32:ca:10:ae: 88:bc:4b:e8:5f:cf:04:be:b0:49:70:e7:0c:42:d6:c8:dc:30: b1:91:0b:71:dd:fa:fa:b0:49:ef:0d:4e:96:a8:e9:5b:03:ed: 7c:a8:f3:28:91:99:ed:5c:d8:83:13:c4:88:f8:43:2d:f7:29: 9f:af:44:44:bc:b6:bf:e4:0a:72:fe:0a:50:85:c2:69:ea:59: 0d:3d:e7:dc:af:bc:64:df:13:6b:34:bb:34:c2:c1:5c:fd:88: cb:4e:a0:22:6b:e9:d8:4e:69:dc:cd:94:da:1e:fa:51:13:5b: 47:22:50:a8:c7:11:36:e0:d5:c9:c5:1f:1e:4a:71:ab:c5:11: 58:ce:c3:cd:db:4b:73:bf:91:4f:6a:62:24:25:0b:8c:23:bd: b9:c4:40:c7:e9:00:63:b6:c1:12:97:17:7d:45:be:67:9c:d0: 9f:b9:1e:0f:e0:7a:d4:2c:17:57:22:13:08:bd:a6:2b:70:47: b6:c8:ec:0b:de:a2:49:1d:de:6b:01:ee:50:5c:11:57:f8:7f: 5e:a6:20:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFr7R8J03eO/COTzIJVcM3C3D2Y0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVCMjlBQjU2RDJCOTI3QkRFMzM2MUI2Q0I1OENEMDg1 MzkyNjJCMDAeFw0yNjA5MjUxMzMyMTZaFw0yNjA5MjYxNjE4MTZaMDMxMTAvBgNV BAMTKDI1NEVGQzYwRkFGQ0E3NDUxOUIyMzYyRjIxOERCOTEwQUU1OTBENTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIyONFAQ77e3Cj8Kmdi1AORvc7 U+fCcbUqHehHAFbDIm4Vd43nMLYffJaFj9LnqpSnNL60nX8A0huTDAFBaAdXxYr3 Q68W3T9Tx3wBSwqzdMjsnHfTq+I0Vef8FyepxH3sHpdBcsPKg/i90ol0cSvICBsr AfOtQpMjpP53Pn0laR1dMX2wjM4vPC5qXFbV/GA77b/RUY7WDwf668pEONgNkMZ8 5Kl2OcEzTRhJUROGXjnN5L6t/Rl32tCrPyTCrjiA5HIe8pkMVVtAfMsW4YwF0ZrT uuyPpr/Mx+fTS8Iv8n9yD6hgHJTvuADFtGiy//FkxvKNdXdRzuwRnHvRojxhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJU78YPr8p0UZsjYvIY25EK5ZDVUwHwYDVR0j BBgwFoAUtbKatW0rknveM2G2y1jNCFOSYrAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDc5MzY4NmItMzM4NC00NDEyLThlN2MtZTlkMWI4NTJhYTFlLzAvQjVCMjlBQjU2 RDJCOTI3QkRFMzM2MUI2Q0I1OENEMDg1MzkyNjJCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNUIyOUFCNTZEMkI5MjdCREUzMzYxQjZDQjU4Q0QwODUzOTI2 MkIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDc5MzY4NmItMzM4NC00NDEyLThl N2MtZTlkMWI4NTJhYTFlLzAvQjVCMjlBQjU2RDJCOTI3QkRFMzM2MUI2Q0I1OENE MDg1MzkyNjJCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhSZNEzxUbAR3egyKIK8IKYlk5qxkF5j9mg nm38FYa00mFKuOzbwY9viOuRwTNdvoFOMsoQroi8S+hfzwS+sElw5wxC1sjcMLGR C3Hd+vqwSe8NTpao6VsD7Xyo8yiRme1c2IMTxIj4Qy33KZ+vRES8tr/kCnL+ClCF wmnqWQ0959yvvGTfE2s0uzTCwVz9iMtOoCJr6dhOadzNlNoe+lETW0ciUKjHETbg 1cnFHx5KcavFEVjOw83bS3O/kU9qYiQlC4wjvbnEQMfpAGO2wRKXF31Fvmec0J+5 Hg/getQsF1ciEwi9pitwR7bI7Aveokkd3msB7lBcEVf4f16mICo= -----END CERTIFICATE-----Generated at Fri Sep 25 19:52:29 2026 by rpki-client