$ rpki-client -vvvf rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft File: 00095019ECFE138568A45C973E2550DDCDFE24F9.mft (raw, json) Hash identifier: mYZBZKmbJOXW+bQ9gSfvLp3tvS0us6CXIjD8xLaKf80= Subject key identifier: 09:EE:D3:42:EF:7C:2D:12:F8:E7:56:5E:3F:9B:D4:EF:9F:DB:3E:C9 Authority key identifier: 00:09:50:19:EC:FE:13:85:68:A4:5C:97:3E:25:50:DD:CD:FE:24:F9 Certificate issuer: /CN=00095019ECFE138568A45C973E2550DDCDFE24F9 Certificate serial: 60316786231EF70E4BEC7234E1ABE7B5440DA9C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft Manifest number: C5 Signing time: Fri 25 Sep 2026 19:50:09 +0000 Manifest this update: Fri 25 Sep 2026 19:45:09 +0000 Manifest next update: Sat 26 Sep 2026 23:22:09 +0000 Files and hashes: 1: 00095019ECFE138568A45C973E2550DDCDFE24F9.crl (hash: TITlqTNOKJ8fDVn64OfuDP8Rtfc65JzcqH6Fin1JLkE=) 2: 3138302e39342e392e302f32342d3234203d3e20313532303430.roa (hash: 9NjGQraMtFt8WFleFmys2JeiEGfDbejk4iig/XaEVZ4=) 3: 3138302e39342e382e302f32342d3234203d3e20313532303430.roa (hash: QD46OeSAEEYRUHA+p9YKqowoXvSQlWoPfMsfotiNmwI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.crl rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:31:67:86:23:1e:f7:0e:4b:ec:72:34:e1:ab:e7:b5:44:0d:a9:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00095019ECFE138568A45C973E2550DDCDFE24F9 Validity Not Before: Sep 25 19:45:09 2026 GMT Not After : Sep 26 23:22:09 2026 GMT Subject: CN=09EED342EF7C2D12F8E7565E3F9BD4EF9FDB3EC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a0:b0:1c:3d:e7:cc:c2:78:59:0c:ec:fe:95: 40:09:f4:70:db:d1:cb:88:59:5a:44:2a:17:4f:48: c0:25:94:5a:0c:9b:b0:37:c3:2d:d7:ea:f3:c6:c4: 4f:c8:db:a0:ba:4c:49:ab:17:6d:51:0f:30:a2:5f: 67:79:e8:ca:55:3f:72:1e:f4:16:0d:d3:98:b6:6e: 27:b9:4c:92:11:78:8c:36:38:ba:37:08:8b:94:a9: c5:d6:e8:79:5f:37:6c:63:f6:b4:88:58:29:d1:93: 3a:0a:a2:67:aa:8d:24:b7:bf:d8:e0:de:76:8d:da: a7:15:66:e3:28:ff:2d:db:d5:6a:52:1f:7e:7c:46: 0f:2c:11:ab:50:49:0d:d9:d5:48:34:14:3b:e5:92: ab:c7:8b:e2:4a:20:db:12:e3:95:7a:6b:c5:c4:e4: 59:75:f2:9e:ee:77:ef:d9:12:c0:0d:0d:0a:a2:37: 52:d4:51:f8:82:11:ae:31:f8:0f:28:b9:06:d6:a6: 0c:53:dd:4f:29:ad:9a:56:f7:51:28:9a:9f:72:1c: 5f:22:30:20:f4:25:a1:6a:b5:ec:07:e6:3d:98:ee: dd:14:31:f5:3e:f1:3b:b8:16:39:ed:d9:62:d3:4a: b3:ed:c8:63:7c:aa:80:32:d1:2b:eb:65:38:d8:63: 07:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EE:D3:42:EF:7C:2D:12:F8:E7:56:5E:3F:9B:D4:EF:9F:DB:3E:C9 X509v3 Authority Key Identifier: keyid:00:09:50:19:EC:FE:13:85:68:A4:5C:97:3E:25:50:DD:CD:FE:24:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:52:1e:c3:43:90:e1:2f:d9:d3:05:9f:11:07:40:59:bb:ac: c1:c0:09:82:71:08:24:bb:21:eb:a9:13:2b:74:e6:ba:06:a9: 88:d3:fc:7a:6e:81:62:e1:82:90:4e:f1:f6:52:dc:5d:2e:85: f3:b9:9d:fe:66:33:09:33:a0:4e:e5:50:2c:94:15:e0:24:7f: 15:a8:7c:7d:a0:a1:69:63:06:6d:98:68:3c:a6:aa:ca:a3:fa: 6e:08:ab:fb:54:98:8f:56:f6:66:71:4e:54:26:67:28:b7:f5: e2:91:d9:ea:42:1a:b2:9d:f5:58:fd:78:a8:35:1e:bb:5b:23: 40:37:ad:55:ed:18:f2:9b:5f:86:73:f3:8b:23:b0:04:67:d7: fe:39:a0:ce:6d:c3:c3:86:14:7d:04:45:43:0f:7b:a0:97:ae: 88:a6:44:60:f0:4f:c0:5f:ca:0a:50:1e:06:2f:33:b7:fc:23: fb:7d:eb:47:18:fd:f0:9f:b2:6b:c1:a4:2e:5c:dd:a2:b7:f5: 36:6f:ef:b5:14:ea:1f:29:82:3e:3f:f1:28:d7:c5:60:03:69: 0c:37:74:c5:0c:cf:a7:c1:28:07:c3:58:08:93:44:1a:e6:65: 7b:f6:a5:ce:01:2e:8e:7c:90:23:2f:d9:69:d9:7e:0b:9b:ea: 63:2f:85:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYDFnhiMe9w5L7HI04avntUQNqcYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDAwOTUwMTlFQ0ZFMTM4NTY4QTQ1Qzk3M0UyNTUwRERD REZFMjRGOTAeFw0yNjA5MjUxOTQ1MDlaFw0yNjA5MjYyMzIyMDlaMDMxMTAvBgNV BAMTKDA5RUVEMzQyRUY3QzJEMTJGOEU3NTY1RTNGOUJENEVGOUZEQjNFQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLoLAcPefMwnhZDOz+lUAJ9HDb 0cuIWVpEKhdPSMAllFoMm7A3wy3X6vPGxE/I26C6TEmrF21RDzCiX2d56MpVP3Ie 9BYN05i2bie5TJIReIw2OLo3CIuUqcXW6HlfN2xj9rSIWCnRkzoKomeqjSS3v9jg 3naN2qcVZuMo/y3b1WpSH358Rg8sEatQSQ3Z1Ug0FDvlkqvHi+JKINsS45V6a8XE 5Fl18p7ud+/ZEsANDQqiN1LUUfiCEa4x+A8ouQbWpgxT3U8prZpW91Eomp9yHF8i MCD0JaFqtewH5j2Y7t0UMfU+8Tu4Fjnt2WLTSrPtyGN8qoAy0SvrZTjYYwcNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCe7TQu98LRL451ZeP5vU75/bPskwHwYDVR0j BBgwFoAUAAlQGez+E4VopFyXPiVQ3c3+JPkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTZmMWViNGItNDhkYy00ZWVhLTkxODEtMTI4Y2IyOGIzZGJhLzAvMDAwOTUwMTlF Q0ZFMTM4NTY4QTQ1Qzk3M0UyNTUwRERDREZFMjRGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDA5NTAxOUVDRkUxMzg1NjhBNDVDOTczRTI1NTBERENERkUy NEY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTZmMWViNGItNDhkYy00ZWVhLTkx ODEtMTI4Y2IyOGIzZGJhLzAvMDAwOTUwMTlFQ0ZFMTM4NTY4QTQ1Qzk3M0UyNTUw RERDREZFMjRGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZSHsNDkOEv2dMFnxEHQFm7rMHACYJxCCS7 IeupEyt05roGqYjT/HpugWLhgpBO8fZS3F0uhfO5nf5mMwkzoE7lUCyUFeAkfxWo fH2goWljBm2YaDymqsqj+m4Iq/tUmI9W9mZxTlQmZyi39eKR2epCGrKd9Vj9eKg1 HrtbI0A3rVXtGPKbX4Zz84sjsARn1/45oM5tw8OGFH0ERUMPe6CXroimRGDwT8Bf ygpQHgYvM7f8I/t960cY/fCfsmvBpC5c3aK39TZv77UU6h8pgj4/8SjXxWADaQw3 dMUMz6fBKAfDWAiTRBrmZXv2pc4BLo58kCMv2WnZfgub6mMvha8= -----END CERTIFICATE-----Generated at Sat Sep 26 12:31:48 2026 by rpki-client