$ rpki-client -vvvf rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft File: 5D885821D2406437CDFEC04380E967515A67AECC.mft (raw, json) Hash identifier: 34D1xsaFgEODVqag3bVGwM15CRgRJ1dwLa3fWswSqKg= Subject key identifier: C2:A8:80:18:32:4F:1E:1E:55:B1:EA:0F:2F:B3:ED:86:38:B4:40:65 Authority key identifier: 5D:88:58:21:D2:40:64:37:CD:FE:C0:43:80:E9:67:51:5A:67:AE:CC Certificate issuer: /CN=5D885821D2406437CDFEC04380E967515A67AECC Certificate serial: 32D988AD69C58AFE93727B6ABFD9C05F05E81296 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft Manifest number: C5 Signing time: Sun 27 Sep 2026 00:19:51 +0000 Manifest this update: Sun 27 Sep 2026 00:14:51 +0000 Manifest next update: Mon 28 Sep 2026 03:53:51 +0000 Files and hashes: 1: 3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa (hash: K0RHUYKMgdp0wpj2LpgjeiPXy+duWorfZjM80sQwxyc=) 2: 3130332e35342e3137312e302f32342d3234203d3e20313431303731.roa (hash: L6gQCpLzy7aXDtfuVgbwQW0xcldnnRmpgqFEsdoAP3Q=) 3: 5D885821D2406437CDFEC04380E967515A67AECC.crl (hash: QJN6ZW3OYtcKrjDfnO9OgU9xnGouUmr2KYrST4n8kcs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.crl rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:d9:88:ad:69:c5:8a:fe:93:72:7b:6a:bf:d9:c0:5f:05:e8:12:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D885821D2406437CDFEC04380E967515A67AECC Validity Not Before: Sep 27 00:14:51 2026 GMT Not After : Sep 28 03:53:51 2026 GMT Subject: CN=C2A88018324F1E1E55B1EA0F2FB3ED8638B44065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d1:6c:b8:10:42:5a:05:22:8d:d6:ad:45:4a: ed:bd:f0:d7:d5:61:c5:7e:cc:9b:d3:07:32:82:60: 5a:ba:0d:2f:56:b1:ec:16:41:70:a8:11:19:66:b4: b0:f1:f0:02:43:60:9a:a0:22:01:48:7b:73:87:cd: 74:32:e6:d1:90:68:4c:79:8a:44:44:0b:5a:9c:46: ca:46:c9:d7:66:b9:40:ae:fe:64:91:5d:33:06:e3: 49:64:a2:95:7e:7c:67:20:85:6c:4a:24:6c:8f:c2: ae:e6:2f:7d:05:15:95:e0:35:c5:ba:ed:d3:4c:9b: d5:20:30:95:c0:ad:b0:72:42:60:2c:c3:cc:bd:c9: 3e:db:07:b9:80:7c:44:da:97:54:63:f7:9f:b4:d8: 73:08:6f:ce:93:e6:81:40:99:ea:b1:de:9a:32:22: 3e:46:53:3a:e6:90:22:e4:c6:66:55:ae:cf:29:0f: 63:37:1d:c4:cb:13:8b:8d:dd:63:1f:61:8d:72:e9: 47:7c:d7:f5:52:6e:92:24:db:79:3d:fd:e1:4a:d7: 2a:17:83:f6:1d:18:95:9c:0c:22:ec:21:bb:59:54: 20:76:2f:fc:20:cd:42:ad:f6:14:bf:20:c3:48:7c: 57:be:56:46:97:1c:1e:88:13:5f:d1:c0:37:bf:6f: fb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A8:80:18:32:4F:1E:1E:55:B1:EA:0F:2F:B3:ED:86:38:B4:40:65 X509v3 Authority Key Identifier: keyid:5D:88:58:21:D2:40:64:37:CD:FE:C0:43:80:E9:67:51:5A:67:AE:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:6d:49:3e:e0:30:25:a1:9a:d2:91:73:4b:33:9c:72:ad:05: da:a6:1f:b2:bd:98:69:48:6d:8f:23:45:c2:c6:4d:33:36:81: be:ac:2e:0b:07:79:97:fe:96:ed:ec:dc:8f:a2:24:a1:a9:8d: d5:8e:e5:b0:76:0a:53:82:d5:4a:37:ff:12:4f:73:35:42:3f: 33:61:f9:ab:f4:b7:e5:ee:2f:23:36:ce:83:0e:c1:d8:ec:bc: be:86:73:06:85:78:75:b9:cf:61:03:0f:46:a3:93:05:ef:5e: 62:d4:7c:57:6d:6a:1c:07:8c:cc:14:14:55:f7:6a:95:30:bc: 3b:2f:16:62:c5:5a:f7:58:e6:14:1a:50:2a:86:40:8a:ca:9c: f8:e1:60:3b:66:fb:61:25:bc:48:b3:ef:b4:dc:a2:50:cf:96: 39:54:dd:a5:b8:1d:05:b4:b2:8c:23:0c:a9:fa:16:9e:13:45: 1d:bd:4c:b9:76:d7:ff:67:c6:29:7f:f3:24:03:c9:f0:5c:d3: 07:14:24:31:f4:82:f6:5f:5d:eb:18:8c:76:f5:3a:f7:8d:19: 7a:e6:fd:6b:cf:f1:c5:8a:4e:9e:bb:e9:88:4b:5b:79:0e:f3: b8:2f:a6:79:84:3a:0a:00:05:8a:8f:b2:5e:2a:7a:8f:0f:c1: 10:f8:7d:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMtmIrWnFiv6Tcntqv9nAXwXoEpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ4ODU4MjFEMjQwNjQzN0NERkVDMDQzODBFOTY3NTE1 QTY3QUVDQzAeFw0yNjA5MjcwMDE0NTFaFw0yNjA5MjgwMzUzNTFaMDMxMTAvBgNV BAMTKEMyQTg4MDE4MzI0RjFFMUU1NUIxRUEwRjJGQjNFRDg2MzhCNDQwNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg0Wy4EEJaBSKN1q1FSu298NfV YcV+zJvTBzKCYFq6DS9WsewWQXCoERlmtLDx8AJDYJqgIgFIe3OHzXQy5tGQaEx5 ikREC1qcRspGyddmuUCu/mSRXTMG40lkopV+fGcghWxKJGyPwq7mL30FFZXgNcW6 7dNMm9UgMJXArbByQmAsw8y9yT7bB7mAfETal1Rj95+02HMIb86T5oFAmeqx3poy Ij5GUzrmkCLkxmZVrs8pD2M3HcTLE4uN3WMfYY1y6Ud81/VSbpIk23k9/eFK1yoX g/YdGJWcDCLsIbtZVCB2L/wgzUKt9hS/IMNIfFe+VkaXHB6IE1/RwDe/b/uXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwqiAGDJPHh5VseoPL7Pthji0QGUwHwYDVR0j BBgwFoAUXYhYIdJAZDfN/sBDgOlnUVpnrswwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODM3Njk0YjctMzI1Ni00NjY2LWEzZmUtNmU4MmU3ODNiMWUxLzAvNUQ4ODU4MjFE MjQwNjQzN0NERkVDMDQzODBFOTY3NTE1QTY3QUVDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDg4NTgyMUQyNDA2NDM3Q0RGRUMwNDM4MEU5Njc1MTVBNjdB RUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODM3Njk0YjctMzI1Ni00NjY2LWEz ZmUtNmU4MmU3ODNiMWUxLzAvNUQ4ODU4MjFEMjQwNjQzN0NERkVDMDQzODBFOTY3 NTE1QTY3QUVDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1tST7gMCWhmtKRc0sznHKtBdqmH7K9mGlI bY8jRcLGTTM2gb6sLgsHeZf+lu3s3I+iJKGpjdWO5bB2ClOC1Uo3/xJPczVCPzNh +av0t+XuLyM2zoMOwdjsvL6GcwaFeHW5z2EDD0ajkwXvXmLUfFdtahwHjMwUFFX3 apUwvDsvFmLFWvdY5hQaUCqGQIrKnPjhYDtm+2ElvEiz77TcolDPljlU3aW4HQW0 sowjDKn6Fp4TRR29TLl21/9nxil/8yQDyfBc0wcUJDH0gvZfXesYjHb1OveNGXrm /WvP8cWKTp676YhLW3kO87gvpnmEOgoABYqPsl4qeo8PwRD4fY0= -----END CERTIFICATE-----Generated at Sun Sep 27 07:50:49 2026 by rpki-client