$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/5108179E3FB57F5AC45F1773279A69AF94DC10D1.mft File: 5108179E3FB57F5AC45F1773279A69AF94DC10D1.mft (raw, json) Hash identifier: lsnYh7FLOa91RUOj6ldr+NLmCAhazq60PW33kVGJhGs= Subject key identifier: 9F:98:BD:86:82:10:A7:F0:B8:97:4D:95:68:6F:23:73:06:60:6C:68 Authority key identifier: 51:08:17:9E:3F:B5:7F:5A:C4:5F:17:73:27:9A:69:AF:94:DC:10:D1 Certificate issuer: /CN=5108179E3FB57F5AC45F1773279A69AF94DC10D1 Certificate serial: 16DBF433C533093A03E76BEE9B6E85C3E6105EA2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5108179E3FB57F5AC45F1773279A69AF94DC10D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/5108179E3FB57F5AC45F1773279A69AF94DC10D1.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 18:44:12 +0000 Manifest this update: Wed 23 Sep 2026 18:39:12 +0000 Manifest next update: Thu 24 Sep 2026 22:04:12 +0000 Files and hashes: 1: 3130332e3130382e3230302e302f32342d3234203d3e20313336313031.roa (hash: xgHgXW996SxponRAZGTpcyeVjDtTlNUeBNA9uYpacKM=) 2: 3130332e3130382e3230312e302f32342d3234203d3e20313336313031.roa (hash: 4qVuLP3oyx7RiJngtOccrj/XkML4ZSk5eigFLJLBWTE=) 3: 323030313a6466303a643730303a3a2f34382d3438203d3e20313336313031.roa (hash: cIWtTV8yQ7p3PtcGTWoKgsMP07LYm0CdEzenYPsjfco=) 4: 5108179E3FB57F5AC45F1773279A69AF94DC10D1.crl (hash: in3ilawSR9D3z7zWfIiVzAHaFRYQhv0+niftKQBBlXQ=) 5: 3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa (hash: BfqUHI21QYImi0lr+Z58Iqsa7Onxr7/qLGGPmYicXKE=) 6: 3130332e39302e36342e302f32342d3234203d3e20313336313031.roa (hash: tTM/9NWG3IhzxJoEk+Z1/+wUc0rz0UR/sG3hU3aFT5I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/5108179E3FB57F5AC45F1773279A69AF94DC10D1.crl rsync://rpki-rsync.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/5108179E3FB57F5AC45F1773279A69AF94DC10D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5108179E3FB57F5AC45F1773279A69AF94DC10D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:db:f4:33:c5:33:09:3a:03:e7:6b:ee:9b:6e:85:c3:e6:10:5e:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5108179E3FB57F5AC45F1773279A69AF94DC10D1 Validity Not Before: Sep 23 18:39:12 2026 GMT Not After : Sep 24 22:04:12 2026 GMT Subject: CN=9F98BD868210A7F0B8974D95686F237306606C68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3c:0e:5c:c4:ed:fc:ab:ee:e9:66:5e:12:7e: a3:ac:f4:56:74:a3:eb:cf:23:9f:3f:f7:da:57:de: 41:8e:c8:93:c6:30:f4:c2:68:ea:69:b8:5c:8c:73: 33:99:43:3e:c7:03:43:06:bc:f0:b6:25:af:66:0a: 10:05:6d:61:18:b9:ae:28:dd:f5:54:f3:bf:62:2f: c7:46:d4:21:34:79:a3:9e:0b:79:83:c4:b1:98:8f: 6b:13:58:f2:41:3c:b1:77:1c:07:3e:b8:a2:a3:a1: 58:b0:9f:43:b3:28:c4:92:39:35:e1:7b:59:0d:d9: 9f:d1:e5:98:bb:89:4d:fd:14:b6:77:08:0c:73:a6: 7a:6c:76:d6:d1:2d:33:02:af:61:10:c6:f4:4a:1b: 9f:2d:b0:c3:71:d6:ae:fc:97:51:19:ee:44:83:81: 65:5d:87:c9:cb:44:dc:6d:9f:7b:99:35:04:e6:99: d8:e4:7d:92:b1:59:7c:70:e5:6a:57:b1:e4:5c:f1: 5b:dc:16:72:93:47:bc:d3:aa:2c:07:46:2d:bf:1c: d6:0d:0e:e2:eb:a0:61:66:6a:3c:e9:2d:4a:f6:2f: 14:29:1c:0b:59:90:bd:5f:f4:ad:ec:73:23:a8:0b: af:f4:64:52:7c:3d:d5:46:25:d8:79:24:a0:94:bb: 64:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:98:BD:86:82:10:A7:F0:B8:97:4D:95:68:6F:23:73:06:60:6C:68 X509v3 Authority Key Identifier: keyid:51:08:17:9E:3F:B5:7F:5A:C4:5F:17:73:27:9A:69:AF:94:DC:10:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/5108179E3FB57F5AC45F1773279A69AF94DC10D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5108179E3FB57F5AC45F1773279A69AF94DC10D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/5108179E3FB57F5AC45F1773279A69AF94DC10D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:44:18:f3:1e:a2:63:ec:9d:2d:da:58:d7:c1:77:13:13:f8: 89:9a:b6:90:0a:37:57:8b:fd:0b:85:e8:1a:49:9c:a2:0c:0c: 7a:e3:68:3f:5c:64:ff:34:07:ec:a0:06:69:70:fc:6e:84:06: 6e:00:f3:24:56:52:2b:f5:8b:ca:c1:24:58:a1:ea:75:bd:89: 10:18:e0:47:70:e6:51:8f:81:0d:99:b4:f3:88:0e:89:fe:9c: 4d:61:8b:a7:d2:6c:6f:14:c8:86:b5:40:3a:a8:ed:56:a3:3c: 9d:7f:29:42:5a:dc:49:92:3a:3f:cf:b2:05:7f:9b:2e:c3:75: fa:98:7f:b3:e4:73:c9:da:c2:42:05:8d:eb:df:70:c3:a2:3e: 05:a6:91:b7:69:9c:00:b7:68:a1:83:2a:93:70:a4:d8:8b:0b: b9:5e:0e:6d:af:09:20:05:f1:73:86:0a:44:a2:0e:1a:0f:91: df:66:f9:df:d2:09:67:99:0c:1d:9b:39:e5:66:ac:b3:9e:cf: 5d:0c:c4:18:79:14:1f:13:9a:38:fa:30:87:02:72:77:d9:d5: 04:ff:cc:65:32:55:1c:78:03:00:cd:04:51:cd:8d:fb:4e:21: 21:43:07:aa:11:3d:56:de:89:31:bf:35:8f:00:eb:d1:9d:d5: 2e:c7:3a:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFtv0M8UzCToD52vum26Fw+YQXqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEwODE3OUUzRkI1N0Y1QUM0NUYxNzczMjc5QTY5QUY5 NERDMTBEMTAeFw0yNjA5MjMxODM5MTJaFw0yNjA5MjQyMjA0MTJaMDMxMTAvBgNV BAMTKDlGOThCRDg2ODIxMEE3RjBCODk3NEQ5NTY4NkYyMzczMDY2MDZDNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVPA5cxO38q+7pZl4SfqOs9FZ0 o+vPI58/99pX3kGOyJPGMPTCaOppuFyMczOZQz7HA0MGvPC2Ja9mChAFbWEYua4o 3fVU879iL8dG1CE0eaOeC3mDxLGYj2sTWPJBPLF3HAc+uKKjoViwn0OzKMSSOTXh e1kN2Z/R5Zi7iU39FLZ3CAxzpnpsdtbRLTMCr2EQxvRKG58tsMNx1q78l1EZ7kSD gWVdh8nLRNxtn3uZNQTmmdjkfZKxWXxw5WpXseRc8VvcFnKTR7zTqiwHRi2/HNYN DuLroGFmajzpLUr2LxQpHAtZkL1f9K3scyOoC6/0ZFJ8PdVGJdh5JKCUu2QvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn5i9hoIQp/C4l02VaG8jcwZgbGgwHwYDVR0j BBgwFoAUUQgXnj+1f1rEXxdzJ5ppr5TcENEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2YzNDA0ZTYtYmIyYS00NGIwLWJlZGUtYThiMzUwMTQ2MTJkLzAvNTEwODE3OUUz RkI1N0Y1QUM0NUYxNzczMjc5QTY5QUY5NERDMTBEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MTA4MTc5RTNGQjU3RjVBQzQ1RjE3NzMyNzlBNjlBRjk0REMx MEQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2YzNDA0ZTYtYmIyYS00NGIwLWJl ZGUtYThiMzUwMTQ2MTJkLzAvNTEwODE3OUUzRkI1N0Y1QUM0NUYxNzczMjc5QTY5 QUY5NERDMTBEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdEGPMeomPsnS3aWNfBdxMT+ImatpAKN1eL /QuF6BpJnKIMDHrjaD9cZP80B+ygBmlw/G6EBm4A8yRWUiv1i8rBJFih6nW9iRAY 4Edw5lGPgQ2ZtPOIDon+nE1hi6fSbG8UyIa1QDqo7VajPJ1/KUJa3EmSOj/PsgV/ my7DdfqYf7Pkc8nawkIFjevfcMOiPgWmkbdpnAC3aKGDKpNwpNiLC7leDm2vCSAF 8XOGCkSiDhoPkd9m+d/SCWeZDB2bOeVmrLOez10MxBh5FB8Tmjj6MIcCcnfZ1QT/ zGUyVRx4AwDNBFHNjftOISFDB6oRPVbeiTG/NY8A69Gd1S7HOjM= -----END CERTIFICATE-----Generated at Thu Sep 24 12:16:16 2026 by rpki-client