$ rpki-client -vvvf rpki-rsync.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/5256FBBE2FC545F984496DD4986EC64B662694E0.mft File: 5256FBBE2FC545F984496DD4986EC64B662694E0.mft (raw, json) Hash identifier: 06kCHXq3PjtI8nZHgKzFWRAv0BGTGRS+Azf9xL0hTHY= Subject key identifier: BB:49:00:11:F5:4E:72:ED:A7:7B:E0:D1:59:38:D6:94:D0:CF:C7:DC Authority key identifier: 52:56:FB:BE:2F:C5:45:F9:84:49:6D:D4:98:6E:C6:4B:66:26:94:E0 Certificate issuer: /CN=5256FBBE2FC545F984496DD4986EC64B662694E0 Certificate serial: 59ADC4A40186144D4D3DE134E7E1EFA8993E7450 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5256FBBE2FC545F984496DD4986EC64B662694E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/5256FBBE2FC545F984496DD4986EC64B662694E0.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 23:34:46 +0000 Manifest this update: Thu 24 Sep 2026 23:29:46 +0000 Manifest next update: Sat 26 Sep 2026 00:52:46 +0000 Files and hashes: 1: 3130332e3235332e3132342e302f32342d3234203d3e203539313432.roa (hash: PVeUI9LzABp9X4uUesClPYyGG94/1D9llRU48PC0AGA=) 2: 5256FBBE2FC545F984496DD4986EC64B662694E0.crl (hash: flOVYNYycSetwz6oqFyNfdTqfYJznvqTDLgmVLfHH5k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/5256FBBE2FC545F984496DD4986EC64B662694E0.crl rsync://rpki-rsync.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/5256FBBE2FC545F984496DD4986EC64B662694E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5256FBBE2FC545F984496DD4986EC64B662694E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 00:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ad:c4:a4:01:86:14:4d:4d:3d:e1:34:e7:e1:ef:a8:99:3e:74:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5256FBBE2FC545F984496DD4986EC64B662694E0 Validity Not Before: Sep 24 23:29:46 2026 GMT Not After : Sep 26 00:52:46 2026 GMT Subject: CN=BB490011F54E72EDA77BE0D15938D694D0CFC7DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:d1:16:93:01:12:e5:e1:d6:10:e6:9b:fd: 00:54:c1:50:53:23:83:e5:e4:40:e5:e3:f4:86:39: 67:0d:e0:34:cd:02:54:f9:8f:41:d0:00:a7:f7:91: c7:bb:f1:dc:a2:9d:3b:1a:fd:ce:b0:7d:f1:2e:af: 58:14:9f:5b:26:ba:94:70:aa:32:ff:bd:0e:91:43: 71:0e:b2:4e:b3:ec:03:35:d3:99:8a:6a:44:5b:9a: 5a:f7:55:82:fb:90:92:c6:0c:67:eb:9d:7d:31:d7: 87:54:a5:17:d8:7f:06:8d:41:9e:1f:ba:c5:5b:74: 3d:4e:b2:b9:c5:99:bc:7f:06:47:af:4d:5c:ad:11: 97:62:a3:99:5d:6f:eb:5c:77:f5:93:56:7d:2f:91: 74:c5:75:8d:a6:c8:f9:fd:40:86:03:03:d5:93:10: 57:a7:6c:e3:c5:c7:6d:ec:71:e8:f9:d7:71:1a:69: 12:67:dd:ce:85:95:30:f3:e1:e0:6d:c6:9d:57:c1: 9c:3c:e2:ca:8a:74:3d:08:dc:58:f3:52:0c:11:c6: e9:21:fc:f4:a7:e5:11:ed:3e:2c:e2:ba:8f:9c:62: fc:fb:44:99:9b:6c:66:38:9b:f7:65:3b:f6:45:8a: bb:72:1e:61:f5:ef:7e:78:a7:1a:05:1e:f8:c3:94: f4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:49:00:11:F5:4E:72:ED:A7:7B:E0:D1:59:38:D6:94:D0:CF:C7:DC X509v3 Authority Key Identifier: keyid:52:56:FB:BE:2F:C5:45:F9:84:49:6D:D4:98:6E:C6:4B:66:26:94:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/5256FBBE2FC545F984496DD4986EC64B662694E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5256FBBE2FC545F984496DD4986EC64B662694E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/5256FBBE2FC545F984496DD4986EC64B662694E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:1e:e0:c7:d4:7d:58:fc:b4:af:c6:fa:7d:3a:0d:a1:91:e3: 8c:88:fe:1e:12:ca:81:4f:95:2d:cc:c9:a6:6e:e2:b2:e4:8a: be:65:d6:5f:89:76:ef:c5:aa:1f:bf:1c:e5:68:03:c4:2e:2b: 1c:1c:cf:2f:07:b2:29:e7:db:91:d2:73:85:23:9d:33:30:44: 88:bb:91:b5:bb:c6:81:37:42:e9:96:92:65:b0:b2:48:35:58: 3f:6a:a7:5f:67:fe:9d:a0:3e:4b:83:73:1e:53:8d:74:b0:cc: 31:56:09:f4:a1:58:f0:cc:c3:75:a1:e8:e2:6f:cf:40:ec:54: 7d:f5:49:0a:9a:63:a5:b7:ca:3f:99:39:1a:d9:58:00:d4:ba: 93:58:e5:bc:50:17:dc:fe:19:f3:58:85:3c:14:16:2e:77:9a: 27:9c:7f:9d:08:fd:47:43:9d:89:47:4a:d0:e9:da:c4:5c:74: e6:c4:bc:ad:27:16:02:e4:94:8e:5a:51:c9:74:b1:c8:af:9b: 7f:88:98:0f:a3:a3:d6:e2:a6:75:5f:53:fe:8f:19:03:17:49: 98:61:1b:09:28:52:a1:03:15:aa:cb:d9:bb:2b:08:41:ef:fa: 09:e5:f7:d9:d3:1e:7b:a5:cf:09:f9:84:66:ba:44:ce:c2:14: ca:e7:c0:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWa3EpAGGFE1NPeE05+HvqJk+dFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI1NkZCQkUyRkM1NDVGOTg0NDk2REQ0OTg2RUM2NEI2 NjI2OTRFMDAeFw0yNjA5MjQyMzI5NDZaFw0yNjA5MjYwMDUyNDZaMDMxMTAvBgNV BAMTKEJCNDkwMDExRjU0RTcyRURBNzdCRTBEMTU5MzhENjk0RDBDRkM3REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9HdEWkwES5eHWEOab/QBUwVBT I4Pl5EDl4/SGOWcN4DTNAlT5j0HQAKf3kce78dyinTsa/c6wffEur1gUn1smupRw qjL/vQ6RQ3EOsk6z7AM105mKakRbmlr3VYL7kJLGDGfrnX0x14dUpRfYfwaNQZ4f usVbdD1OsrnFmbx/BkevTVytEZdio5ldb+tcd/WTVn0vkXTFdY2myPn9QIYDA9WT EFenbOPFx23scej513EaaRJn3c6FlTDz4eBtxp1XwZw84sqKdD0I3FjzUgwRxukh /PSn5RHtPiziuo+cYvz7RJmbbGY4m/dlO/ZFirtyHmH17354pxoFHvjDlPTHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu0kAEfVOcu2ne+DRWTjWlNDPx9wwHwYDVR0j BBgwFoAUUlb7vi/FRfmESW3UmG7GS2YmlOAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTMyYzUxMjEtZjc0OS00YTU0LWE5ZWMtZjZjMzQ5ZjM0MzEwLzAvNTI1NkZCQkUy RkM1NDVGOTg0NDk2REQ0OTg2RUM2NEI2NjI2OTRFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MjU2RkJCRTJGQzU0NUY5ODQ0OTZERDQ5ODZFQzY0QjY2MjY5 NEUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTMyYzUxMjEtZjc0OS00YTU0LWE5 ZWMtZjZjMzQ5ZjM0MzEwLzAvNTI1NkZCQkUyRkM1NDVGOTg0NDk2REQ0OTg2RUM2 NEI2NjI2OTRFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQe4MfUfVj8tK/G+n06DaGR44yI/h4SyoFP lS3MyaZu4rLkir5l1l+Jdu/Fqh+/HOVoA8QuKxwczy8Hsinn25HSc4UjnTMwRIi7 kbW7xoE3QumWkmWwskg1WD9qp19n/p2gPkuDcx5TjXSwzDFWCfShWPDMw3Wh6OJv z0DsVH31SQqaY6W3yj+ZORrZWADUupNY5bxQF9z+GfNYhTwUFi53miecf50I/UdD nYlHStDp2sRcdObEvK0nFgLklI5aUcl0scivm3+ImA+jo9bipnVfU/6PGQMXSZhh GwkoUqEDFarL2bsrCEHv+gnl99nTHnulzwn5hGa6RM7CFMrnwHs= -----END CERTIFICATE-----Generated at Fri Sep 25 14:35:38 2026 by rpki-client