$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft File: 5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft (raw, json) Hash identifier: 4IXrSBdQBTqw4w28PbuxBTZ95Tqt8ED629coOTZsDDc= Subject key identifier: 1F:96:58:87:35:E8:47:30:B8:36:8C:25:43:62:4A:F1:EA:3A:4B:6E Authority key identifier: 5B:E4:C2:9E:EA:3D:D9:3B:A1:C2:71:DC:BA:88:BA:B8:BC:D9:DA:6A Certificate issuer: /CN=5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A Certificate serial: 373723E2257498432F1AFAC9F8C935F047BC7629 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 04:36:24 +0000 Manifest this update: Thu 24 Sep 2026 04:31:24 +0000 Manifest next update: Fri 25 Sep 2026 07:03:24 +0000 Files and hashes: 1: 5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.crl (hash: RGY1T7J3JsQX28Y3r41MTSZBz/DxcHPIMYUqjfuuQ20=) 2: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: FPQ2j3eI8yNWuffWW/KivobaVVZM8ZwQRSH4Q+fMF+8=) 3: 3130332e31372e37362e302f32342d3234203d3e20313331373831.roa (hash: 0nfe7ULTCbnllmGpbf8D6GJGB5XbaGw6kKl4Vys0voA=) 4: 3130332e31372e37372e302f32342d3234203d3e20313331373831.roa (hash: CZzWnarJZGz+1ihXkwXcLlHMFIQJITOjnmvNdl7iuE0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.crl rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:37:23:e2:25:74:98:43:2f:1a:fa:c9:f8:c9:35:f0:47:bc:76:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A Validity Not Before: Sep 24 04:31:24 2026 GMT Not After : Sep 25 07:03:24 2026 GMT Subject: CN=1F96588735E84730B8368C2543624AF1EA3A4B6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6f:b2:60:96:6d:f8:bb:82:a8:3d:4a:1c:2e: 7a:32:44:6b:2d:b0:0f:e2:58:f5:8e:b5:b5:45:bc: 1b:8a:84:f3:eb:58:5f:d8:9d:8f:80:36:22:b4:f6: de:d6:4a:9a:ba:df:03:cf:dc:2d:5c:94:c7:fe:ba: 76:c7:02:77:42:1f:1b:93:86:67:f1:e7:24:ac:52: 98:b4:e2:96:78:e6:16:d3:16:da:29:cc:9d:50:e3: 7c:f1:62:99:e8:cd:7a:8b:06:bc:a8:35:19:59:bf: 2b:9e:b2:1d:aa:3b:1a:8b:91:61:c2:24:72:6c:7a: 34:fd:2f:5c:d3:58:00:47:f1:26:b7:9c:54:39:76: cf:d9:34:c7:09:a7:1f:ee:c1:00:4e:75:df:46:f6: c4:4b:97:c2:ac:9c:89:a1:32:c3:54:0e:c2:94:66: f8:74:f7:6d:a3:4a:72:31:30:bc:81:32:b9:87:c3: 36:ae:e8:43:a1:bb:6b:21:94:ae:aa:3d:3b:71:e2: f8:5b:4f:af:3e:65:f0:cd:e2:bd:95:bb:2e:0f:1c: 52:97:6b:c3:43:6e:bd:75:a4:7e:b2:b4:02:32:b5: df:ac:bf:2f:fe:9e:7e:32:16:4f:45:4b:14:ea:47: 4c:eb:ec:4f:da:ba:c5:07:b3:3c:94:5b:c4:70:55: 7d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:96:58:87:35:E8:47:30:B8:36:8C:25:43:62:4A:F1:EA:3A:4B:6E X509v3 Authority Key Identifier: keyid:5B:E4:C2:9E:EA:3D:D9:3B:A1:C2:71:DC:BA:88:BA:B8:BC:D9:DA:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:f5:37:6f:88:e3:7e:a5:10:da:53:65:8a:09:b2:04:83:ab: 73:f8:05:24:6d:05:5b:40:01:e5:29:df:4e:09:fe:79:c5:3f: 16:24:12:81:20:06:2b:13:0f:4d:16:4b:f6:d1:2e:18:4c:62: 18:45:c2:44:47:57:91:57:e5:24:de:69:34:d3:aa:d8:60:96: 08:58:78:88:5b:e3:74:5f:ea:f7:3c:d9:3e:bf:f6:12:51:f9: b9:55:bd:66:f8:c0:9f:d5:13:b5:43:bf:88:f3:b1:17:b4:57: 0e:ff:68:40:56:30:98:c3:1d:77:52:7c:a9:2c:76:da:0c:0f: ea:80:40:bd:b4:73:9b:f6:b2:76:89:bc:44:9b:52:04:f2:a4: f5:a9:08:b5:46:d1:d0:e8:de:65:b0:55:d1:ed:c7:6d:44:b7: f3:a6:74:3e:15:d8:61:45:bd:ac:a3:4a:37:b7:50:eb:84:97: 12:e3:36:3d:2a:41:29:0f:42:2c:82:c6:0a:72:9d:bb:eb:7d: 4a:50:43:f6:ff:38:e8:84:3f:5b:fc:66:86:f2:4b:f3:2e:cb: dc:e5:47:ea:ec:25:31:e6:92:65:7b:80:98:af:33:98:1c:52: 35:ed:cc:2f:b5:cc:e3:87:0f:78:6a:f4:57:a4:66:b2:5e:33: 89:f2:9d:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNzcj4iV0mEMvGvrJ+Mk18Ee8dikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJFNEMyOUVFQTNERDkzQkExQzI3MURDQkE4OEJBQjhC Q0Q5REE2QTAeFw0yNjA5MjQwNDMxMjRaFw0yNjA5MjUwNzAzMjRaMDMxMTAvBgNV BAMTKDFGOTY1ODg3MzVFODQ3MzBCODM2OEMyNTQzNjI0QUYxRUEzQTRCNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1b7Jglm34u4KoPUocLnoyRGst sA/iWPWOtbVFvBuKhPPrWF/YnY+ANiK09t7WSpq63wPP3C1clMf+unbHAndCHxuT hmfx5ySsUpi04pZ45hbTFtopzJ1Q43zxYpnozXqLBryoNRlZvyuesh2qOxqLkWHC JHJsejT9L1zTWABH8Sa3nFQ5ds/ZNMcJpx/uwQBOdd9G9sRLl8KsnImhMsNUDsKU Zvh0922jSnIxMLyBMrmHwzau6EOhu2shlK6qPTtx4vhbT68+ZfDN4r2Vuy4PHFKX a8NDbr11pH6ytAIytd+svy/+nn4yFk9FSxTqR0zr7E/ausUHszyUW8RwVX3JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH5ZYhzXoRzC4NowlQ2JK8eo6S24wHwYDVR0j BBgwFoAUW+TCnuo92TuhwnHcuoi6uLzZ2mowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmEwNzE1MTQtZTRkZS00YWNlLWEwZGYtZjdjNGFiODA3NGE1LzAvNUJFNEMyOUVF QTNERDkzQkExQzI3MURDQkE4OEJBQjhCQ0Q5REE2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QkU0QzI5RUVBM0REOTNCQTFDMjcxRENCQTg4QkFCOEJDRDlE QTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmEwNzE1MTQtZTRkZS00YWNlLWEw ZGYtZjdjNGFiODA3NGE1LzAvNUJFNEMyOUVFQTNERDkzQkExQzI3MURDQkE4OEJB QjhCQ0Q5REE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIH1N2+I436lENpTZYoJsgSDq3P4BSRtBVtA AeUp304J/nnFPxYkEoEgBisTD00WS/bRLhhMYhhFwkRHV5FX5STeaTTTqthglghY eIhb43Rf6vc82T6/9hJR+blVvWb4wJ/VE7VDv4jzsRe0Vw7/aEBWMJjDHXdSfKks dtoMD+qAQL20c5v2snaJvESbUgTypPWpCLVG0dDo3mWwVdHtx21Et/OmdD4V2GFF vayjSje3UOuElxLjNj0qQSkPQiyCxgpynbvrfUpQQ/b/OOiEP1v8ZobyS/Muy9zl R+rsJTHmkmV7gJivM5gcUjXtzC+1zOOHD3hq9FekZrJeM4nynXw= -----END CERTIFICATE-----Generated at Thu Sep 24 08:38:31 2026 by rpki-client