$ rpki-client -vvvf rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft File: 5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft (raw, json) Hash identifier: pGas76GRDzEkTHJW3VjMzRIJfqenmFAct4efX9Dzroo= Subject key identifier: 1C:AF:F7:58:F0:98:78:10:10:C3:CA:D3:51:BD:3C:95:F3:BA:E3:8F Authority key identifier: 5A:C7:FD:C1:38:0E:98:33:9F:28:DB:DC:57:B2:1E:7D:2F:95:A0:C0 Certificate issuer: /CN=5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0 Certificate serial: 340FEAB237A7B963D688490DA212C36924C194A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 21:42:58 +0000 Manifest this update: Wed 23 Sep 2026 21:37:58 +0000 Manifest next update: Thu 24 Sep 2026 23:04:58 +0000 Files and hashes: 1: 323430313a633432303a3a2f33322d3438203d3e20313431303538.roa (hash: fc+4JU1Tpp/1O31vstVFMWqbX3rMZmX9kGoVnJ5dzDQ=) 2: 3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa (hash: 4g4u+OEshRSiXLYJx+dZnyPxCHcmqZ8djxIy4N3tcCM=) 3: 3130332e3135352e3131332e302f32342d3234203d3e20313431303538.roa (hash: KmWWkFu4uWgTsq2Hfq2FHIMCUvYeIO46DVlLY6UTkvU=) 4: 5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.crl (hash: pePTpF28IPg7bpsggBoocFlkhctpTdSiYti/PxgHaW8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.crl rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:04:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:0f:ea:b2:37:a7:b9:63:d6:88:49:0d:a2:12:c3:69:24:c1:94:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0 Validity Not Before: Sep 23 21:37:58 2026 GMT Not After : Sep 24 23:04:58 2026 GMT Subject: CN=1CAFF758F098781010C3CAD351BD3C95F3BAE38F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2a:84:7c:4d:1c:4e:d3:27:17:ed:90:0d:37: fa:b0:4d:85:45:4c:ab:78:db:b2:c0:60:58:30:23: fe:6a:da:58:89:0e:76:5a:f8:fd:04:cd:9f:ae:ec: 89:c3:74:04:18:13:5c:ac:b2:fe:67:6d:ff:18:bf: 24:bb:06:fd:b3:2c:5d:16:f0:0a:61:59:59:55:0e: 06:83:28:33:9a:70:d5:8b:7d:9d:d8:bf:3a:03:c5: 23:09:19:58:3f:60:f8:56:db:8f:ab:59:ab:98:a7: 33:5a:f1:1b:2d:e5:cc:6f:a3:19:18:d4:ae:56:41: 76:fb:7e:4d:0b:36:55:b4:23:95:c7:6a:92:bb:89: ed:71:dc:52:84:96:76:2a:6e:a2:21:72:e6:39:58: 59:81:33:bd:20:1b:36:89:46:9c:d4:2f:34:1c:66: 34:4a:e0:40:b3:27:cd:8f:5a:93:8a:a9:c4:bf:74: 1c:7d:ce:09:3e:c5:c8:a3:3b:63:c0:47:b4:db:89: 22:4f:b5:5f:c3:93:b2:ea:ce:5d:90:61:99:61:2c: 3f:fa:90:a4:a0:74:7a:93:35:40:c5:f9:4b:df:9e: 1b:78:24:81:76:60:32:c1:44:7e:96:fa:8a:67:58: b2:87:c5:bd:7a:da:26:a0:04:25:97:88:71:96:3c: ee:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AF:F7:58:F0:98:78:10:10:C3:CA:D3:51:BD:3C:95:F3:BA:E3:8F X509v3 Authority Key Identifier: keyid:5A:C7:FD:C1:38:0E:98:33:9F:28:DB:DC:57:B2:1E:7D:2F:95:A0:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:4b:e8:de:b8:3f:51:e9:7b:35:b3:b8:1c:44:1b:1d:9e:a0: 03:dd:a2:b6:5a:65:50:13:b7:07:43:bd:a8:92:6c:9d:2b:f8: 14:12:db:04:4d:84:01:a8:b6:d8:d1:0f:e1:43:da:69:0d:19: bc:f6:43:e7:e1:c0:0c:f8:2c:60:4f:dd:e2:49:d9:01:7c:cf: 66:fe:92:f5:d5:72:94:c4:cf:b0:4d:da:7b:05:cf:62:2d:4f: b6:1f:48:b3:2d:d3:21:52:ff:b5:e1:f6:ad:28:b6:2f:71:52: c0:72:e6:c6:b2:b3:70:e8:2f:ef:b4:a0:08:1d:2f:e7:29:b6: 9d:bd:53:fb:06:22:42:c0:5d:c7:0a:1d:4a:17:80:da:4f:d6: e7:8f:e1:62:95:a4:1b:c2:03:82:26:41:52:09:21:b3:f6:a3: 8e:be:ad:e4:ec:b1:de:80:8b:74:6d:82:02:e0:65:42:ef:fc: 03:bf:17:23:4c:58:5c:c4:5d:22:a6:d4:d1:33:f1:38:ea:f0: 42:58:71:ef:ca:90:4c:17:87:e3:ce:c5:7c:f5:13:93:49:5b: d3:04:97:2a:27:31:8f:74:49:b2:27:3b:17:f3:07:5f:0e:26: 40:8c:66:fe:61:25:98:35:23:d5:24:f8:85:56:95:c9:f3:99: 8c:f6:08:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNA/qsjenuWPWiEkNohLDaSTBlKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFDN0ZEQzEzODBFOTgzMzlGMjhEQkRDNTdCMjFFN0Qy Rjk1QTBDMDAeFw0yNjA5MjMyMTM3NThaFw0yNjA5MjQyMzA0NThaMDMxMTAvBgNV BAMTKDFDQUZGNzU4RjA5ODc4MTAxMEMzQ0FEMzUxQkQzQzk1RjNCQUUzOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEKoR8TRxO0ycX7ZANN/qwTYVF TKt427LAYFgwI/5q2liJDnZa+P0EzZ+u7InDdAQYE1yssv5nbf8YvyS7Bv2zLF0W 8AphWVlVDgaDKDOacNWLfZ3YvzoDxSMJGVg/YPhW24+rWauYpzNa8Rst5cxvoxkY 1K5WQXb7fk0LNlW0I5XHapK7ie1x3FKElnYqbqIhcuY5WFmBM70gGzaJRpzULzQc ZjRK4ECzJ82PWpOKqcS/dBx9zgk+xcijO2PAR7TbiSJPtV/Dk7Lqzl2QYZlhLD/6 kKSgdHqTNUDF+Uvfnht4JIF2YDLBRH6W+opnWLKHxb162iagBCWXiHGWPO65AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHK/3WPCYeBAQw8rTUb08lfO6448wHwYDVR0j BBgwFoAUWsf9wTgOmDOfKNvcV7IefS+VoMAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTNiODU4ZjYtZGUyMC00MTIxLWJjZWEtOTA3NmVkY2NjMDk3LzAvNUFDN0ZEQzEz ODBFOTgzMzlGMjhEQkRDNTdCMjFFN0QyRjk1QTBDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QUM3RkRDMTM4MEU5ODMzOUYyOERCREM1N0IyMUU3RDJGOTVB MEMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTNiODU4ZjYtZGUyMC00MTIxLWJj ZWEtOTA3NmVkY2NjMDk3LzAvNUFDN0ZEQzEzODBFOTgzMzlGMjhEQkRDNTdCMjFF N0QyRjk1QTBDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtL6N64P1HpezWzuBxEGx2eoAPdorZaZVAT twdDvaiSbJ0r+BQS2wRNhAGottjRD+FD2mkNGbz2Q+fhwAz4LGBP3eJJ2QF8z2b+ kvXVcpTEz7BN2nsFz2ItT7YfSLMt0yFS/7Xh9q0oti9xUsBy5says3DoL++0oAgd L+cptp29U/sGIkLAXccKHUoXgNpP1ueP4WKVpBvCA4ImQVIJIbP2o46+reTssd6A i3RtggLgZULv/AO/FyNMWFzEXSKm1NEz8Tjq8EJYce/KkEwXh+POxXz1E5NJW9ME lyonMY90SbInOxfzB18OJkCMZv5hJZg1I9Uk+IVWlcnzmYz2CEI= -----END CERTIFICATE-----Generated at Thu Sep 24 05:59:59 2026 by rpki-client