$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft File: 5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft (raw, json) Hash identifier: NYR1we1Ybch0nDI3Oi39AGgJGCjiHFufmXZukCpAeO8= Subject key identifier: 12:54:20:6E:33:0B:FF:45:F9:9E:2A:AB:67:BE:85:FA:4D:6C:5F:6E Authority key identifier: 52:97:FC:0B:52:CD:4F:C7:F0:6C:16:53:10:D1:13:C8:1A:16:F8:DF Certificate issuer: /CN=5297FC0B52CD4FC7F06C165310D113C81A16F8DF Certificate serial: 61CB9E1A79F8E356D70AF8FD385997F1014378B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 04:21:28 +0000 Manifest this update: Wed 23 Sep 2026 04:16:28 +0000 Manifest next update: Thu 24 Sep 2026 07:39:28 +0000 Files and hashes: 1: 3135372e36362e36322e302f32332d3233203d3e20313431363039.roa (hash: s0qL2weEhTe4sBj4h3x5XjkUykXaQaRd3WPD4VdRPq0=) 2: 3135372e36362e36332e302f32342d3234203d3e20313431363039.roa (hash: Xm5n/XLcKtlX7vaWLbK2D/7cXu3TQ6c3pSXsVlfA9/0=) 3: 5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl (hash: 4NNmJ3Xam/Pzflec3HvKYEixmA+JS6nxYfAGpEZ7M68=) 4: 3135372e36362e36322e302f32342d3234203d3e20313431363039.roa (hash: NHw4QH7kx6gwhf24chR9MVQWVvSl6RuQvk3rMGt5qyQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 07:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:cb:9e:1a:79:f8:e3:56:d7:0a:f8:fd:38:59:97:f1:01:43:78:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5297FC0B52CD4FC7F06C165310D113C81A16F8DF Validity Not Before: Sep 23 04:16:28 2026 GMT Not After : Sep 24 07:39:28 2026 GMT Subject: CN=1254206E330BFF45F99E2AAB67BE85FA4D6C5F6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:04:cb:f3:25:83:a0:2e:24:5a:7f:c4:e9:63: b9:9e:57:75:9b:83:73:59:d4:43:d7:58:57:a9:e8: cb:52:f0:1b:5d:1d:10:37:bc:fc:76:8e:41:23:d3: ea:1f:d4:3e:da:ff:da:f0:62:4a:c0:e7:3e:ec:f7: 45:ac:6d:75:4f:85:6c:58:60:61:e0:e6:c1:30:41: ce:e4:95:5f:0b:b0:bf:b0:ea:08:66:f1:39:4a:da: 22:36:cc:14:37:11:03:2b:f8:e2:0f:60:31:7f:a2: d1:6d:6a:13:b2:1b:0d:14:e9:fd:38:f7:59:5b:36: e3:5a:64:87:b6:69:b2:fd:4e:f8:5e:f3:a2:d5:c4: 7b:46:08:42:99:01:6a:25:17:c3:6f:b1:b5:5d:f3: 14:75:94:94:ef:74:ec:01:c4:4f:b8:11:88:7f:54: 67:76:73:04:70:52:3a:ad:62:7d:78:a6:80:4c:12: f1:ce:9c:da:70:e8:3f:b5:62:20:f1:7f:42:74:bc: 00:3f:2e:8d:78:f9:a1:99:6f:3d:59:22:81:97:f5: 5f:1d:36:19:48:71:f3:53:5e:18:1f:f9:e0:3c:6b: 9c:f8:64:87:55:6d:05:9e:a2:80:bc:4c:67:84:25: c8:72:fe:cd:96:b1:f9:de:81:76:fb:58:81:69:0b: bf:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:54:20:6E:33:0B:FF:45:F9:9E:2A:AB:67:BE:85:FA:4D:6C:5F:6E X509v3 Authority Key Identifier: keyid:52:97:FC:0B:52:CD:4F:C7:F0:6C:16:53:10:D1:13:C8:1A:16:F8:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:46:fd:d3:8b:4e:eb:12:87:2d:98:f9:6d:f3:94:21:a9:4c: d2:eb:03:04:83:80:95:94:8e:d4:9c:5d:03:ec:67:0d:cb:bd: b9:d0:a1:80:17:e3:7d:db:4b:77:40:32:0f:6e:69:c0:e2:c0: 8e:ae:89:0a:d8:33:1b:91:94:b0:08:73:8f:b4:32:2a:61:98: 08:2e:94:e7:ef:d3:3c:fa:0b:9e:ac:a8:10:ba:e9:7f:1b:68: 39:be:d2:4f:30:68:c7:4f:67:c9:e1:ea:d7:23:66:21:74:5e: 5a:35:02:e5:ff:12:4e:ad:77:9e:dd:01:93:70:f7:03:95:10: 80:8a:1b:54:f0:5e:c5:f9:87:3c:c0:d6:f2:f5:db:2b:23:60: dd:cb:d0:ea:54:b7:05:1e:3d:ba:af:7a:14:fe:7a:57:9d:05: 70:c3:11:3e:42:17:50:ab:a3:ec:6c:53:5d:b5:5b:44:be:de: 18:84:87:66:de:70:8d:2e:b9:2a:91:f5:d2:1e:f2:de:12:a1: 90:6e:09:81:4e:d9:cf:40:fe:ce:e7:c3:2c:bf:fd:f1:99:28: dd:ba:2a:84:ad:ab:b7:20:25:4d:d1:40:ff:a3:8f:8f:83:34: 55:10:bf:bd:bc:d3:7d:6b:c4:44:c7:7e:e8:1d:2f:1c:40:df: aa:12:63:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYcueGnn441bXCvj9OFmX8QFDeLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5N0ZDMEI1MkNENEZDN0YwNkMxNjUzMTBEMTEzQzgx QTE2RjhERjAeFw0yNjA5MjMwNDE2MjhaFw0yNjA5MjQwNzM5MjhaMDMxMTAvBgNV BAMTKDEyNTQyMDZFMzMwQkZGNDVGOTlFMkFBQjY3QkU4NUZBNEQ2QzVGNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaBMvzJYOgLiRaf8TpY7meV3Wb g3NZ1EPXWFep6MtS8BtdHRA3vPx2jkEj0+of1D7a/9rwYkrA5z7s90WsbXVPhWxY YGHg5sEwQc7klV8LsL+w6ghm8TlK2iI2zBQ3EQMr+OIPYDF/otFtahOyGw0U6f04 91lbNuNaZIe2abL9Tvhe86LVxHtGCEKZAWolF8NvsbVd8xR1lJTvdOwBxE+4EYh/ VGd2cwRwUjqtYn14poBMEvHOnNpw6D+1YiDxf0J0vAA/Lo14+aGZbz1ZIoGX9V8d NhlIcfNTXhgf+eA8a5z4ZIdVbQWeooC8TGeEJchy/s2WsfnegXb7WIFpC79TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUElQgbjML/0X5niqrZ76F+k1sX24wHwYDVR0j BBgwFoAUUpf8C1LNT8fwbBZTENETyBoW+N8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2RkYmI3OWMtOWVhMi00N2YwLWI0NWYtMTgxNjY1MGJhMjNmLzAvNTI5N0ZDMEI1 MkNENEZDN0YwNkMxNjUzMTBEMTEzQzgxQTE2RjhERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81Mjk3RkMwQjUyQ0Q0RkM3RjA2QzE2NTMxMEQxMTNDODFBMTZG OERGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2RkYmI3OWMtOWVhMi00N2YwLWI0 NWYtMTgxNjY1MGJhMjNmLzAvNTI5N0ZDMEI1MkNENEZDN0YwNkMxNjUzMTBEMTEz QzgxQTE2RjhERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxG/dOLTusShy2Y+W3zlCGpTNLrAwSDgJWU jtScXQPsZw3LvbnQoYAX433bS3dAMg9uacDiwI6uiQrYMxuRlLAIc4+0MiphmAgu lOfv0zz6C56sqBC66X8baDm+0k8waMdPZ8nh6tcjZiF0Xlo1AuX/Ek6td57dAZNw 9wOVEICKG1TwXsX5hzzA1vL12ysjYN3L0OpUtwUePbqvehT+eledBXDDET5CF1Cr o+xsU121W0S+3hiEh2becI0uuSqR9dIe8t4SoZBuCYFO2c9A/s7nwyy//fGZKN26 KoStq7cgJU3RQP+jj4+DNFUQv728031rxETHfugdLxxA36oSY9o= -----END CERTIFICATE-----Generated at Wed Sep 23 18:06:21 2026 by rpki-client