$ rpki-client -vvvf rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft File: 5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft (raw, json) Hash identifier: CbtvYd7tul9lBFnClkLebopcqTbVTZIFQ7s63kvsL6c= Subject key identifier: F1:B2:F1:3B:A6:0D:1D:85:E3:05:1D:12:D7:98:6D:CE:D3:93:B6:28 Authority key identifier: 5B:84:74:CD:5A:D7:F5:98:A4:82:68:99:DD:65:21:7A:1B:B8:5C:61 Certificate issuer: /CN=5B8474CD5AD7F598A4826899DD65217A1BB85C61 Certificate serial: 5D5FF39FDF23C2F0CCD7EBAFC1B79ACCE01489D6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 12:05:37 +0000 Manifest this update: Thu 24 Sep 2026 12:00:37 +0000 Manifest next update: Fri 25 Sep 2026 15:29:37 +0000 Files and hashes: 1: 323430323a326134303a3a2f33322d3438203d3e20313336383733.roa (hash: ZSQfDBDx08SMOJ9/mfQRF6dJyZ/7l6GG2dcY9tQkt/U=) 2: 5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl (hash: TW7mA0n/SIkE7Nf6sk1GAhAUpInftLtzznamhpMFOs8=) 3: 3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa (hash: BWylbxtj1ROm+MVww31ybQOgEWW9jWHft5tLSvCMDwM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:5f:f3:9f:df:23:c2:f0:cc:d7:eb:af:c1:b7:9a:cc:e0:14:89:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B8474CD5AD7F598A4826899DD65217A1BB85C61 Validity Not Before: Sep 24 12:00:37 2026 GMT Not After : Sep 25 15:29:37 2026 GMT Subject: CN=F1B2F13BA60D1D85E3051D12D7986DCED393B628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:85:93:b2:6e:c9:9e:dd:92:dd:ab:f8:11:bd: aa:4a:6d:33:62:6d:10:81:c7:a9:c4:cd:64:72:7a: 3c:ad:4e:c2:7a:30:41:08:1f:c1:56:90:61:36:c5: 5d:3a:d1:b9:eb:54:cd:c5:68:0c:60:b0:24:a9:82: 1b:87:77:83:c8:4b:56:9d:e4:0f:af:de:49:c6:71: 6a:5f:be:a6:63:de:3f:d4:fb:9a:07:fe:3b:4d:bb: 27:62:8f:94:af:37:c5:23:86:35:40:8f:75:e8:2d: 35:1e:7f:35:91:bb:e2:26:fa:08:b4:be:60:a8:0d: 6f:ec:85:56:04:42:33:d8:ae:e2:49:49:ab:6b:c0: 05:a0:b0:71:c6:d3:b2:4b:8b:67:4d:5f:d7:8e:d8: 41:63:f9:9e:56:78:42:2d:13:01:93:6f:d8:b5:cf: b6:51:38:90:51:b1:6f:13:fd:56:6e:7d:ff:65:c2: 72:87:dd:53:e5:8e:bd:4f:0b:76:52:0a:2d:d8:5e: 95:d9:43:88:b7:92:30:df:72:d9:20:0e:82:a8:17: fc:7e:40:04:77:7d:bc:8f:b6:73:7e:ad:32:91:bd: 7e:43:85:a7:69:05:6f:d4:cb:82:ce:46:89:51:a2: 89:ba:ef:e1:ae:bc:b1:0b:68:69:52:bd:34:d6:cf: 0d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B2:F1:3B:A6:0D:1D:85:E3:05:1D:12:D7:98:6D:CE:D3:93:B6:28 X509v3 Authority Key Identifier: keyid:5B:84:74:CD:5A:D7:F5:98:A4:82:68:99:DD:65:21:7A:1B:B8:5C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:7d:d1:6b:56:1d:46:12:d8:c9:50:f2:81:61:17:7b:00:cf: 7e:64:ee:4b:d4:9f:5a:2e:a5:51:d6:0b:3e:b8:97:f9:06:1e: f6:17:d9:62:c0:a4:d0:e9:09:59:18:ee:f9:6b:b5:0b:04:78: 86:43:2d:0e:de:21:ec:42:ad:d9:4b:3f:4a:53:b0:b1:9e:a8: 01:9e:c7:09:4f:bf:82:b9:3a:43:d1:87:7f:0a:a9:42:6e:e7: 54:e5:9b:6c:83:e3:5c:ac:0b:50:e4:47:5f:77:67:10:ab:73: e9:28:69:c3:be:cb:a0:b9:f4:81:ac:f3:54:fe:21:69:7f:28: 5d:be:0f:59:5f:18:9d:8b:5b:59:95:86:1e:45:38:fd:6c:87: 27:0c:7c:fb:48:27:b8:23:e0:cc:ae:cb:eb:bf:a6:be:91:d9: b3:cb:a1:82:58:9e:d3:ee:90:6e:9f:9f:13:5a:0b:2c:30:a1: 5c:f3:fc:e2:2d:9e:b7:2a:41:52:d3:4b:16:ee:c5:5c:cf:c3: 1f:59:28:67:ec:39:4f:f3:18:04:4f:14:dd:80:05:7a:9e:4e: cf:6e:a6:bc:73:b2:86:51:f2:81:d9:52:58:a2:16:d7:b7:3a: 8e:69:1f:50:49:76:a3:d4:1c:2f:05:c0:bf:ff:a8:3c:08:35: 03:12:b9:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXV/zn98jwvDM1+uvwbeazOAUidYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI4NDc0Q0Q1QUQ3RjU5OEE0ODI2ODk5REQ2NTIxN0Ex QkI4NUM2MTAeFw0yNjA5MjQxMjAwMzdaFw0yNjA5MjUxNTI5MzdaMDMxMTAvBgNV BAMTKEYxQjJGMTNCQTYwRDFEODVFMzA1MUQxMkQ3OTg2RENFRDM5M0I2MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDihZOybsme3ZLdq/gRvapKbTNi bRCBx6nEzWRyejytTsJ6MEEIH8FWkGE2xV060bnrVM3FaAxgsCSpghuHd4PIS1ad 5A+v3knGcWpfvqZj3j/U+5oH/jtNuydij5SvN8UjhjVAj3XoLTUefzWRu+Im+gi0 vmCoDW/shVYEQjPYruJJSatrwAWgsHHG07JLi2dNX9eO2EFj+Z5WeEItEwGTb9i1 z7ZROJBRsW8T/VZuff9lwnKH3VPljr1PC3ZSCi3YXpXZQ4i3kjDfctkgDoKoF/x+ QAR3fbyPtnN+rTKRvX5DhadpBW/Uy4LORolRoom67+GuvLELaGlSvTTWzw3FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8bLxO6YNHYXjBR0S15htztOTtigwHwYDVR0j BBgwFoAUW4R0zVrX9ZikgmiZ3WUhehu4XGEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU3YTZiY2ItOWViNi00OWRlLWI5OTgtMGJlZDNjNWMxMjc4LzAvNUI4NDc0Q0Q1 QUQ3RjU5OEE0ODI2ODk5REQ2NTIxN0ExQkI4NUM2MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81Qjg0NzRDRDVBRDdGNTk4QTQ4MjY4OTlERDY1MjE3QTFCQjg1 QzYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU3YTZiY2ItOWViNi00OWRlLWI5 OTgtMGJlZDNjNWMxMjc4LzAvNUI4NDc0Q0Q1QUQ3RjU5OEE0ODI2ODk5REQ2NTIx N0ExQkI4NUM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJ90WtWHUYS2MlQ8oFhF3sAz35k7kvUn1ou pVHWCz64l/kGHvYX2WLApNDpCVkY7vlrtQsEeIZDLQ7eIexCrdlLP0pTsLGeqAGe xwlPv4K5OkPRh38KqUJu51Tlm2yD41ysC1DkR193ZxCrc+koacO+y6C59IGs81T+ IWl/KF2+D1lfGJ2LW1mVhh5FOP1shycMfPtIJ7gj4Myuy+u/pr6R2bPLoYJYntPu kG6fnxNaCywwoVzz/OItnrcqQVLTSxbuxVzPwx9ZKGfsOU/zGARPFN2ABXqeTs9u prxzsoZR8oHZUliiFte3Oo5pH1BJdqPUHC8FwL//qDwINQMSuS0= -----END CERTIFICATE-----Generated at Thu Sep 24 23:37:14 2026 by rpki-client