$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft File: 5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft (raw, json) Hash identifier: p3dClhk0tONfsz/AnnrEEMqwmLEye12WGZELjO/Yn3g= Subject key identifier: 97:44:A5:0F:69:4C:D2:4B:E1:C3:2D:19:CC:F4:BD:EF:B1:D8:22:0B Authority key identifier: 5F:7C:0C:BF:5B:B8:C4:66:1C:32:A0:E0:43:E5:00:56:0D:BF:47:29 Certificate issuer: /CN=5F7C0CBF5BB8C4661C32A0E043E500560DBF4729 Certificate serial: FE27B6DB4C5E8982FB769EB47A0174ABEB7B41 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 19:04:38 +0000 Manifest this update: Wed 23 Sep 2026 18:59:38 +0000 Manifest next update: Thu 24 Sep 2026 20:07:38 +0000 Files and hashes: 1: 3130332e35322e3231332e302f32342d3234203d3e20313333383136.roa (hash: SfQvGENDC41waooB6j4WUvvJFAlrc4V5XQaGfGIyIVQ=) 2: 5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.crl (hash: YvJ5GzfPdavJs//wM+DBIzmd9H4eyRgMfDz5/Xxgbg0=) 3: 3130332e3138352e3139362e302f32342d3234203d3e20313333383136.roa (hash: oPlCdoIfmCJKqeBLs55VVkT8uc2vPldYwiU3y8pfCsM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.crl rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: fe:27:b6:db:4c:5e:89:82:fb:76:9e:b4:7a:01:74:ab:eb:7b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F7C0CBF5BB8C4661C32A0E043E500560DBF4729 Validity Not Before: Sep 23 18:59:38 2026 GMT Not After : Sep 24 20:07:38 2026 GMT Subject: CN=9744A50F694CD24BE1C32D19CCF4BDEFB1D8220B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ef:9f:a2:c6:3d:12:39:82:79:2b:15:25:3a: 91:d9:45:15:b2:03:27:ba:55:c8:38:11:92:d1:83: b5:fb:5a:08:dd:ac:c2:35:37:42:30:c3:e5:8a:83: 41:ce:84:10:db:06:d4:64:70:d6:6c:00:e8:46:da: 3f:4f:82:06:fa:b8:6a:07:e2:f6:e8:1f:50:9d:3f: 1d:8a:93:d0:fa:6b:56:19:14:9b:e4:a8:31:06:bd: 85:cb:ce:3c:75:48:e9:aa:b4:21:f7:c6:d7:84:03: d7:aa:10:52:22:49:3b:58:ec:84:43:f9:4e:1e:4f: 0c:99:0e:40:83:c0:78:78:12:40:b3:75:2a:b7:be: c9:ee:8d:ff:e9:5b:e8:52:8d:79:1e:56:4a:a9:51: cf:16:68:39:71:c4:19:8e:3a:9f:fa:2c:b4:f8:d4: 3e:75:e7:03:40:b8:a8:06:72:ca:f3:da:bf:9a:5c: a3:d9:3d:63:8f:b5:fc:6e:7b:bc:7a:28:a0:b6:2b: 3f:bc:8a:d8:04:eb:22:d3:7f:e9:12:90:49:7b:39: 44:bf:0c:df:5d:ab:31:15:52:58:61:5c:e1:2a:36: 5f:99:e3:ab:8f:f7:4c:7f:78:95:42:27:af:86:29: ca:4d:73:e1:ae:82:d5:5d:e0:3d:7c:2c:3a:9b:00: db:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:44:A5:0F:69:4C:D2:4B:E1:C3:2D:19:CC:F4:BD:EF:B1:D8:22:0B X509v3 Authority Key Identifier: keyid:5F:7C:0C:BF:5B:B8:C4:66:1C:32:A0:E0:43:E5:00:56:0D:BF:47:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:01:3c:65:2c:10:4f:11:0c:43:c7:0f:c6:e9:a3:b4:18:7e: 3b:b0:a2:39:ca:2b:8e:01:1b:a4:93:66:c2:4a:9e:7a:83:9c: 67:96:ee:a2:5f:75:ac:3d:4a:e2:03:6a:32:97:12:29:0b:29: 10:2b:d3:24:27:67:99:3e:6c:6c:7e:4c:8c:90:87:0a:0e:8a: 2e:25:95:ad:1a:26:8e:b4:d6:0d:f3:12:ff:67:4d:03:5f:0b: b2:15:f2:ce:dc:f2:4c:4e:a5:90:2c:9b:3e:de:d9:68:4d:a8: 44:25:b6:17:a2:11:69:fe:62:1d:6d:b1:b3:0f:14:57:84:ae: 98:cc:7f:5c:fe:2f:f7:84:e1:26:e1:c3:29:0a:02:3c:de:44: 78:d7:3a:87:d5:4f:ed:7b:39:a5:b9:82:60:b2:4d:80:ef:86: a9:5d:1e:43:44:13:b8:2a:f6:fb:f6:36:22:9a:e7:6a:e6:fa: 0e:04:6e:48:ed:60:62:5d:21:5d:f3:da:38:29:c4:23:d3:fe: b0:16:c3:b6:5b:13:1f:3b:ba:d1:3e:3d:14:22:50:86:59:ab: eb:f2:fa:5e:de:b1:55:18:b0:cc:8a:09:a3:ab:6b:0b:ce:2f: 28:f3:fe:d0:2e:22:f6:7e:dd:ac:6d:22:98:ae:9a:6d:bb:18: c9:0a:81:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAP4ntttMXomC+3aetHoBdKvre0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY3QzBDQkY1QkI4QzQ2NjFDMzJBMEUwNDNFNTAwNTYw REJGNDcyOTAeFw0yNjA5MjMxODU5MzhaFw0yNjA5MjQyMDA3MzhaMDMxMTAvBgNV BAMTKDk3NDRBNTBGNjk0Q0QyNEJFMUMzMkQxOUNDRjRCREVGQjFEODIyMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd75+ixj0SOYJ5KxUlOpHZRRWy Aye6Vcg4EZLRg7X7WgjdrMI1N0Iww+WKg0HOhBDbBtRkcNZsAOhG2j9Pggb6uGoH 4vboH1CdPx2Kk9D6a1YZFJvkqDEGvYXLzjx1SOmqtCH3xteEA9eqEFIiSTtY7IRD +U4eTwyZDkCDwHh4EkCzdSq3vsnujf/pW+hSjXkeVkqpUc8WaDlxxBmOOp/6LLT4 1D515wNAuKgGcsrz2r+aXKPZPWOPtfxue7x6KKC2Kz+8itgE6yLTf+kSkEl7OUS/ DN9dqzEVUlhhXOEqNl+Z46uP90x/eJVCJ6+GKcpNc+GugtVd4D18LDqbANuzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl0SlD2lM0kvhwy0ZzPS977HYIgswHwYDVR0j BBgwFoAUX3wMv1u4xGYcMqDgQ+UAVg2/RykwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGU5YWJiMWEtZDZjMC00NTRmLTg3MGEtOGJlZWRkODFmY2QyLzAvNUY3QzBDQkY1 QkI4QzQ2NjFDMzJBMEUwNDNFNTAwNTYwREJGNDcyOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RjdDMENCRjVCQjhDNDY2MUMzMkEwRTA0M0U1MDA1NjBEQkY0 NzI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGU5YWJiMWEtZDZjMC00NTRmLTg3 MGEtOGJlZWRkODFmY2QyLzAvNUY3QzBDQkY1QkI4QzQ2NjFDMzJBMEUwNDNFNTAw NTYwREJGNDcyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4BPGUsEE8RDEPHD8bpo7QYfjuwojnKK44B G6STZsJKnnqDnGeW7qJfdaw9SuIDajKXEikLKRAr0yQnZ5k+bGx+TIyQhwoOii4l la0aJo601g3zEv9nTQNfC7IV8s7c8kxOpZAsmz7e2WhNqEQltheiEWn+Yh1tsbMP FFeErpjMf1z+L/eE4SbhwykKAjzeRHjXOofVT+17OaW5gmCyTYDvhqldHkNEE7gq 9vv2NiKa52rm+g4EbkjtYGJdIV3z2jgpxCPT/rAWw7ZbEx87utE+PRQiUIZZq+vy +l7esVUYsMyKCaOrawvOLyjz/tAuIvZ+3axtIpiumm27GMkKgQU= -----END CERTIFICATE-----Generated at Thu Sep 24 12:03:07 2026 by rpki-client