$ rpki-client -vvvf rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft File: F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft (raw, json) Hash identifier: ytNP75I5rDhH+ubIRs8mx4pEDlraXrB8/kRbvRoNOxQ= Subject key identifier: D7:D9:1C:E4:39:0F:F8:ED:A6:39:E3:0D:81:0C:4C:6D:74:9D:2C:0C Authority key identifier: F5:B5:D4:6C:5D:CE:84:47:07:C0:D7:89:60:39:77:CD:1F:E1:EA:F6 Certificate issuer: /CN=F5B5D46C5DCE844707C0D789603977CD1FE1EAF6 Certificate serial: 599019CEBA552029CEF686A34343E53939F7ACFE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 06:49:24 +0000 Manifest this update: Wed 23 Sep 2026 06:44:24 +0000 Manifest next update: Thu 24 Sep 2026 06:50:24 +0000 Files and hashes: 1: 3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa (hash: KrFgsVnJ/CPVgce61GzFtNxXXABIAjXPOpkQ6UBGiUQ=) 2: 3136302e3139312e3139392e302f32342d3234203d3e20313533313537.roa (hash: 03BuWy0OfURI+FKE0txZsH5LInMm2YyYlx6DInNWH9E=) 3: F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl (hash: NTtYGF11Z+TltGHgRNtQeGWK9MhZzIKKu3qvgdeUXxo=) 4: 3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa (hash: ZdektWGBi3rfOIP5V7EV+AEsc9XAfei8AhQcCJZB3h0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 06:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:90:19:ce:ba:55:20:29:ce:f6:86:a3:43:43:e5:39:39:f7:ac:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5B5D46C5DCE844707C0D789603977CD1FE1EAF6 Validity Not Before: Sep 23 06:44:24 2026 GMT Not After : Sep 24 06:50:24 2026 GMT Subject: CN=D7D91CE4390FF8EDA639E30D810C4C6D749D2C0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:06:64:14:42:23:fa:77:ff:3b:8e:91:bc:8e: 65:94:11:b8:fb:1d:9b:c5:5b:54:50:0f:af:4b:b1: a1:42:25:40:eb:af:74:e6:6e:3e:b9:2d:66:a4:ad: 8c:ea:74:ff:f6:28:ff:99:c4:d2:f3:42:d2:af:47: 20:20:fe:85:45:e7:46:e8:62:c3:98:28:5d:3f:a3: d4:75:f3:a3:41:ab:12:b0:36:09:52:0e:26:e3:93: 5c:33:fa:2a:80:77:6b:0a:d5:f4:2b:42:da:48:1e: 8b:98:b6:52:02:b3:eb:4b:4c:1d:97:a8:1b:25:5d: 06:e2:62:03:dd:28:07:81:bd:39:cc:a4:1d:a3:43: a5:2e:28:35:ad:85:27:cf:7d:49:92:4d:70:4a:96: c3:0e:34:4e:7a:8a:bb:2e:03:53:cf:3b:da:e8:33: b1:a3:2e:81:e0:a2:69:25:8c:6e:e8:d9:2a:90:87: 81:ba:16:36:6e:c0:35:b9:41:ca:21:ac:fe:dc:f0: 81:be:7c:d9:2f:58:b5:22:6b:34:11:ea:27:04:ea: b5:73:b1:fb:33:42:2b:b8:4f:dd:42:94:9d:74:1f: 96:1f:d4:df:38:41:6d:29:81:20:10:ea:f9:68:b3: 9d:64:c8:de:3c:35:83:52:4a:42:11:c1:23:33:58: 0b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D9:1C:E4:39:0F:F8:ED:A6:39:E3:0D:81:0C:4C:6D:74:9D:2C:0C X509v3 Authority Key Identifier: keyid:F5:B5:D4:6C:5D:CE:84:47:07:C0:D7:89:60:39:77:CD:1F:E1:EA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:5d:c2:3a:a9:b9:8b:59:49:86:cd:aa:02:fb:76:39:ff:db: 36:9a:ae:58:1c:5c:32:1f:a1:35:2d:cd:4e:a7:00:75:73:e7: 23:43:29:67:8a:51:b7:c8:1a:e6:bc:c8:05:05:98:ce:df:9d: 2d:9f:b8:0c:30:85:fc:ed:d4:f5:ce:df:a0:f2:48:10:a7:18: bd:e3:7e:48:5e:f1:74:19:95:4a:07:44:f7:fe:bf:89:32:d9: 1b:14:db:82:e7:88:87:70:6f:fb:78:0e:4e:e7:38:2f:33:ae: bb:4a:27:fb:3c:1f:bf:53:2f:e2:f3:96:2b:06:0f:f8:86:14: b2:0c:5b:9d:a8:c1:71:c6:ac:36:72:16:91:f7:9f:d3:aa:b4: 71:a0:d8:fa:a3:76:46:48:db:95:d1:0b:e1:72:ef:9b:4f:e9: 90:03:a5:c6:66:43:29:3a:14:25:79:c6:3b:c4:0d:26:f7:2e: cf:87:4d:25:55:8c:80:22:a4:be:1f:56:01:8b:be:29:a5:2a: 0d:71:90:d0:2f:a6:9c:d9:1b:64:e4:70:16:25:3e:44:d4:13: 4b:b6:2e:ca:ea:1b:07:1d:77:1b:24:2a:27:c4:1a:4c:52:8c: 0e:fa:c0:99:5e:46:4b:dc:57:03:3e:c1:43:72:42:e5:69:bc: d1:d1:d8:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWZAZzrpVICnO9oajQ0PlOTn3rP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVCNUQ0NkM1RENFODQ0NzA3QzBENzg5NjAzOTc3Q0Qx RkUxRUFGNjAeFw0yNjA5MjMwNjQ0MjRaFw0yNjA5MjQwNjUwMjRaMDMxMTAvBgNV BAMTKEQ3RDkxQ0U0MzkwRkY4RURBNjM5RTMwRDgxMEM0QzZENzQ5RDJDMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDABmQUQiP6d/87jpG8jmWUEbj7 HZvFW1RQD69LsaFCJUDrr3Tmbj65LWakrYzqdP/2KP+ZxNLzQtKvRyAg/oVF50bo YsOYKF0/o9R186NBqxKwNglSDibjk1wz+iqAd2sK1fQrQtpIHouYtlICs+tLTB2X qBslXQbiYgPdKAeBvTnMpB2jQ6UuKDWthSfPfUmSTXBKlsMONE56irsuA1PPO9ro M7GjLoHgomkljG7o2SqQh4G6FjZuwDW5QcohrP7c8IG+fNkvWLUiazQR6icE6rVz sfszQiu4T91ClJ10H5Yf1N84QW0pgSAQ6vlos51kyN48NYNSSkIRwSMzWAuRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU19kc5DkP+O2mOeMNgQxMbXSdLAwwHwYDVR0j BBgwFoAU9bXUbF3OhEcHwNeJYDl3zR/h6vYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzY5ZjhhYTgtODk3MS00ZTUxLThiNTEtODAzYjQ5YjMyYTRmLzAvRjVCNUQ0NkM1 RENFODQ0NzA3QzBENzg5NjAzOTc3Q0QxRkUxRUFGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GNUI1RDQ2QzVEQ0U4NDQ3MDdDMEQ3ODk2MDM5NzdDRDFGRTFF QUY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzY5ZjhhYTgtODk3MS00ZTUxLThi NTEtODAzYjQ5YjMyYTRmLzAvRjVCNUQ0NkM1RENFODQ0NzA3QzBENzg5NjAzOTc3 Q0QxRkUxRUFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGpdwjqpuYtZSYbNqgL7djn/2zaarlgcXDIf oTUtzU6nAHVz5yNDKWeKUbfIGua8yAUFmM7fnS2fuAwwhfzt1PXO36DySBCnGL3j fkhe8XQZlUoHRPf+v4ky2RsU24LniIdwb/t4Dk7nOC8zrrtKJ/s8H79TL+LzlisG D/iGFLIMW52owXHGrDZyFpH3n9OqtHGg2PqjdkZI25XRC+Fy75tP6ZADpcZmQyk6 FCV5xjvEDSb3Ls+HTSVVjIAipL4fVgGLvimlKg1xkNAvppzZG2TkcBYlPkTUE0u2 LsrqGwcddxskKifEGkxSjA76wJleRkvcVwM+wUNyQuVpvNHR2CA= -----END CERTIFICATE-----Generated at Wed Sep 23 19:37:31 2026 by rpki-client