$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft File: 5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft (raw, json) Hash identifier: SQ60mS97ORRmjbwFPn9O/aBfuqEy6kL68rOQU/5JhKU= Subject key identifier: 0F:84:94:E3:FC:51:CC:FE:33:24:FE:A8:B5:D9:66:B4:3D:F9:4A:C0 Authority key identifier: 5D:7B:B6:DB:EA:00:E7:01:77:98:92:AA:68:6C:CB:F1:95:A3:D2:0D Certificate issuer: /CN=5D7BB6DBEA00E701779892AA686CCBF195A3D20D Certificate serial: 172D02DF1B6FD18104968056C69606912E3722AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft Manifest number: CD Signing time: Sat 03 Oct 2026 09:37:46 +0000 Manifest this update: Sat 03 Oct 2026 09:32:46 +0000 Manifest next update: Sun 04 Oct 2026 12:56:46 +0000 Files and hashes: 1: 323430333a653863303a3a2f33322d3332203d3e20313338303930.roa (hash: qU+T/ppZu7pLksCA/CM9lZkM5mfpYBVP5R9hFRPxoSA=) 2: 3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa (hash: efvSat7dwZI7/h9HiVLzn4AEIjGPLWmD8NmsCl2Z3eg=) 3: 3130332e3132342e3234342e302f32342d3234203d3e20313338303930.roa (hash: SLYwMEBT661dkmjDpYSCi8eFhdF8+h1KCwjAiRVXBbM=) 4: 3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa (hash: 03GjbFQLnGl1ayimN4oj+A3/RatUprwYfoHZREcuOgQ=) 5: 3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa (hash: GD5PKDcWrMo+jB6m0zjy8Pss+9lo2DQ/VB/jtC+zOzo=) 6: 5D7BB6DBEA00E701779892AA686CCBF195A3D20D.crl (hash: IcBVWES3nF2ztByciVhCXWGnRSGBQsIXzZu8s8Gz+y0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.crl rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 12:56:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:2d:02:df:1b:6f:d1:81:04:96:80:56:c6:96:06:91:2e:37:22:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D7BB6DBEA00E701779892AA686CCBF195A3D20D Validity Not Before: Oct 3 09:32:46 2026 GMT Not After : Oct 4 12:56:46 2026 GMT Subject: CN=0F8494E3FC51CCFE3324FEA8B5D966B43DF94AC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cf:39:d0:fe:5b:3f:0b:a4:5a:b8:05:93:94: be:be:41:e4:db:43:35:be:6a:df:5c:48:02:47:59: ae:5a:69:1d:1e:3b:ef:9d:13:a3:80:f1:e4:27:d8: f3:dc:2f:5a:7e:5b:2c:35:1d:9f:c5:49:cd:64:1b: 79:a8:7e:df:5f:b9:52:85:ed:e6:62:59:e2:3b:83: 30:21:50:24:44:fb:f1:31:4c:10:99:8c:f7:c0:a6: 55:4e:28:09:1e:a7:23:55:64:37:05:6e:c3:c9:dd: f8:31:02:78:3c:7a:bb:1b:d5:60:1b:bd:fc:01:38: 1f:28:f9:5e:84:8a:f9:57:22:77:c5:37:99:33:44: f1:77:c6:cc:ab:94:7c:de:22:06:0a:17:c7:7f:3b: a9:c6:22:e2:41:d4:aa:92:85:36:e6:0c:05:94:cb: d7:b8:58:60:39:95:65:9b:3f:31:ba:d1:e5:25:25: 33:32:42:b0:cd:4b:e0:a5:23:5a:8d:64:e6:7c:9f: e7:b4:ff:11:2c:dc:03:f2:9a:26:93:ca:06:b7:a2: a3:f8:13:f2:ce:8e:f3:ad:c7:eb:e7:67:f9:b5:56: 41:ee:2a:c5:2f:1d:36:d8:b3:a1:b0:8c:c1:23:4b: 9a:2e:7d:69:7f:83:4f:36:5d:a1:9c:78:66:70:1e: 50:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:84:94:E3:FC:51:CC:FE:33:24:FE:A8:B5:D9:66:B4:3D:F9:4A:C0 X509v3 Authority Key Identifier: keyid:5D:7B:B6:DB:EA:00:E7:01:77:98:92:AA:68:6C:CB:F1:95:A3:D2:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:c9:0a:61:06:9f:2d:91:ef:27:b7:8a:92:b2:46:5d:9a:1f: 7e:0d:68:f6:4f:74:c7:aa:b1:26:09:41:85:81:cc:b2:0c:27: 9f:5d:21:a3:5b:02:5e:96:40:54:11:c7:ea:ab:0f:63:d0:51: 98:18:56:72:1f:73:00:ec:59:2d:71:ec:33:47:a2:12:bd:f5: b6:c8:e5:e6:cc:c3:8d:b6:b3:97:d2:ae:8d:a0:4e:80:99:16: 44:d5:9f:38:5d:c3:89:ca:14:06:60:75:8f:ac:a3:43:5d:27: e5:4f:fa:17:a5:6a:59:10:a1:17:fb:e4:a9:d0:5e:ed:59:75: e4:4f:d0:64:38:24:29:97:5e:7e:93:72:91:cb:fd:31:19:bb: 8e:46:8d:81:11:0a:e0:b3:cf:ec:1a:d5:48:6d:71:ef:21:62: f2:74:d0:2c:48:68:c5:fc:3a:e2:bf:9b:ab:e3:67:c0:e1:80: 97:6c:98:25:a3:7e:71:57:dc:ae:1e:fd:dd:1c:d8:df:de:78: d6:22:4d:0d:10:14:dc:46:67:78:a8:09:77:14:de:cb:36:bd: cd:19:b2:2c:0e:c1:3c:23:7c:6c:1d:aa:61:ce:03:de:a5:9e: 58:e1:bd:7f:27:06:9c:87:31:b7:bb:14:ea:5a:1e:75:90:de: bb:04:71:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFy0C3xtv0YEEloBWxpYGkS43IqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ3QkI2REJFQTAwRTcwMTc3OTg5MkFBNjg2Q0NCRjE5 NUEzRDIwRDAeFw0yNjEwMDMwOTMyNDZaFw0yNjEwMDQxMjU2NDZaMDMxMTAvBgNV BAMTKDBGODQ5NEUzRkM1MUNDRkUzMzI0RkVBOEI1RDk2NkI0M0RGOTRBQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQzznQ/ls/C6RauAWTlL6+QeTb QzW+at9cSAJHWa5aaR0eO++dE6OA8eQn2PPcL1p+Wyw1HZ/FSc1kG3moft9fuVKF 7eZiWeI7gzAhUCRE+/ExTBCZjPfAplVOKAkepyNVZDcFbsPJ3fgxAng8ersb1WAb vfwBOB8o+V6EivlXInfFN5kzRPF3xsyrlHzeIgYKF8d/O6nGIuJB1KqShTbmDAWU y9e4WGA5lWWbPzG60eUlJTMyQrDNS+ClI1qNZOZ8n+e0/xEs3APymiaTyga3oqP4 E/LOjvOtx+vnZ/m1VkHuKsUvHTbYs6GwjMEjS5oufWl/g082XaGceGZwHlAnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD4SU4/xRzP4zJP6otdlmtD35SsAwHwYDVR0j BBgwFoAUXXu22+oA5wF3mJKqaGzL8ZWj0g0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmUyYzkyODUtYzA5YS00NTA2LWEzMjAtZmRhMWEwN2ZkOWVjLzAvNUQ3QkI2REJF QTAwRTcwMTc3OTg5MkFBNjg2Q0NCRjE5NUEzRDIwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDdCQjZEQkVBMDBFNzAxNzc5ODkyQUE2ODZDQ0JGMTk1QTNE MjBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmUyYzkyODUtYzA5YS00NTA2LWEz MjAtZmRhMWEwN2ZkOWVjLzAvNUQ3QkI2REJFQTAwRTcwMTc3OTg5MkFBNjg2Q0NC RjE5NUEzRDIwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADXJCmEGny2R7ye3ipKyRl2aH34NaPZPdMeq sSYJQYWBzLIMJ59dIaNbAl6WQFQRx+qrD2PQUZgYVnIfcwDsWS1x7DNHohK99bbI 5ebMw422s5fSro2gToCZFkTVnzhdw4nKFAZgdY+so0NdJ+VP+helalkQoRf75KnQ Xu1ZdeRP0GQ4JCmXXn6TcpHL/TEZu45GjYERCuCzz+wa1Uhtce8hYvJ00CxIaMX8 OuK/m6vjZ8DhgJdsmCWjfnFX3K4e/d0c2N/eeNYiTQ0QFNxGZ3ioCXcU3ss2vc0Z siwOwTwjfGwdqmHOA96lnljhvX8nBpyHMbe7FOpaHnWQ3rsEcSM= -----END CERTIFICATE-----Generated at Sun Oct 4 07:16:26 2026 by rpki-client