$ rpki-client -vvvf rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft File: D51AA8B3D72CDB71C90345B767919665E60A217F.mft (raw, json) Hash identifier: kA+XV528ygHyoGbACZfnhcWbWyhTPpUw7vFlWfV7UyU= Subject key identifier: 5C:B4:A3:8A:E2:F3:8B:03:44:16:C4:7C:52:B1:BD:BF:D4:6E:3D:AE Authority key identifier: D5:1A:A8:B3:D7:2C:DB:71:C9:03:45:B7:67:91:96:65:E6:0A:21:7F Certificate issuer: /CN=D51AA8B3D72CDB71C90345B767919665E60A217F Certificate serial: 7F7A8BCD7E25C64CBBD7016B81E42F30CB8E2F14 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft Manifest number: C5 Signing time: Fri 25 Sep 2026 13:57:29 +0000 Manifest this update: Fri 25 Sep 2026 13:52:29 +0000 Manifest next update: Sat 26 Sep 2026 16:38:29 +0000 Files and hashes: 1: D51AA8B3D72CDB71C90345B767919665E60A217F.crl (hash: Lbz3j9sku6S1uOxRWFViMPJEzz6EdMnNQJjTQ0eo8zk=) 2: 3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa (hash: qWXJBwwFjRlNPlzGu34yKlzyWtSJkvJR6tTW+DXklsI=) 3: 323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa (hash: rfjdhFUeqRzlpu/a6IIMJJdIbxMUcj3gavb0NZINzaQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.crl rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 15:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:7a:8b:cd:7e:25:c6:4c:bb:d7:01:6b:81:e4:2f:30:cb:8e:2f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D51AA8B3D72CDB71C90345B767919665E60A217F Validity Not Before: Sep 25 13:52:29 2026 GMT Not After : Sep 26 16:38:29 2026 GMT Subject: CN=5CB4A38AE2F38B034416C47C52B1BDBFD46E3DAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:32:09:c4:b9:62:ac:06:07:3a:4f:a2:92:1f: 2d:fe:4c:3b:80:4b:36:74:42:56:e3:32:de:7e:15: 0f:cd:93:83:a0:86:4c:6e:22:cd:9b:b3:b0:7f:00: 80:15:fb:98:af:61:d5:ca:c7:89:db:f8:6e:69:94: 92:af:c5:e6:86:2a:10:ea:48:fb:e3:14:f5:ca:8d: ed:47:9e:57:93:68:4b:15:bf:7f:72:6c:71:34:d2: f5:b7:d8:7e:e6:07:7f:ac:a3:6d:4c:af:8f:98:49: 8f:c8:9a:76:30:00:af:b1:47:93:81:c8:08:32:fe: 9a:41:f7:88:ec:bf:b9:87:ac:0a:1b:25:52:2e:70: 6b:31:44:0c:5e:8b:ad:09:6d:a4:a9:5e:30:aa:dc: 20:ba:13:f5:42:4e:c8:6e:c6:00:d7:b6:fc:c1:ea: 8a:b5:4c:d2:32:0f:72:3e:b1:dd:b6:bb:f6:6a:1e: 47:73:22:46:26:cb:52:37:ce:d1:c5:3e:91:4c:95: b2:22:11:eb:15:71:7e:78:6c:24:74:2c:e9:ce:f2: a7:9e:6f:90:31:16:91:23:2f:de:d6:77:50:20:3d: 78:d5:84:b0:f6:7a:61:09:06:28:97:94:c4:96:fd: b8:47:77:0a:79:3d:c0:53:f7:7a:52:bf:73:ec:82: c5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B4:A3:8A:E2:F3:8B:03:44:16:C4:7C:52:B1:BD:BF:D4:6E:3D:AE X509v3 Authority Key Identifier: keyid:D5:1A:A8:B3:D7:2C:DB:71:C9:03:45:B7:67:91:96:65:E6:0A:21:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:20:46:6e:45:aa:3b:79:99:89:fb:fa:a0:1a:b7:24:97:9a: 0b:55:7d:25:2d:1a:5f:97:49:2c:ba:89:2e:42:da:6f:81:a1: 31:c6:39:3d:32:f4:36:43:c6:fd:32:cb:d7:5e:ce:ed:3c:d5: 39:f1:16:e4:10:be:d7:f6:a5:02:4f:d5:9f:11:4b:17:28:a7: e1:ad:d9:3a:8f:54:8c:ea:56:6f:95:90:fa:f8:55:08:52:22: d1:3e:16:2f:0c:22:c5:3b:58:7d:f9:d8:b7:16:e0:36:5b:d3: e0:bd:aa:0c:21:1c:47:a7:47:b5:a1:87:f3:b5:43:d4:44:f6: 33:1b:20:af:69:01:19:ed:5e:cd:24:ee:21:8e:65:63:34:96: 60:03:6a:99:16:12:f9:fb:16:cd:00:3e:fd:79:c1:d5:ee:b7: a3:26:0f:90:90:4d:d6:47:50:0e:5a:73:11:58:f9:a6:58:e1: 01:d6:ca:ad:ba:2f:7b:c0:60:eb:d3:da:d7:f9:6d:f5:6f:76: 64:6a:78:f9:d0:da:60:16:a7:6d:78:de:57:16:83:10:6c:d2: 2c:3a:91:03:8a:96:b1:de:36:32:67:c2:89:a4:9c:ed:2e:73: ef:fe:f0:d6:16:82:ac:1a:aa:07:8a:f9:09:5b:f7:da:86:00: 1a:e5:1f:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf3qLzX4lxky71wFrgeQvMMuOLxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUxQUE4QjNENzJDREI3MUM5MDM0NUI3Njc5MTk2NjVF NjBBMjE3RjAeFw0yNjA5MjUxMzUyMjlaFw0yNjA5MjYxNjM4MjlaMDMxMTAvBgNV BAMTKDVDQjRBMzhBRTJGMzhCMDM0NDE2QzQ3QzUyQjFCREJGRDQ2RTNEQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrMgnEuWKsBgc6T6KSHy3+TDuA SzZ0QlbjMt5+FQ/Nk4OghkxuIs2bs7B/AIAV+5ivYdXKx4nb+G5plJKvxeaGKhDq SPvjFPXKje1HnleTaEsVv39ybHE00vW32H7mB3+so21Mr4+YSY/ImnYwAK+xR5OB yAgy/ppB94jsv7mHrAobJVIucGsxRAxei60JbaSpXjCq3CC6E/VCTshuxgDXtvzB 6oq1TNIyD3I+sd22u/ZqHkdzIkYmy1I3ztHFPpFMlbIiEesVcX54bCR0LOnO8qee b5AxFpEjL97Wd1AgPXjVhLD2emEJBiiXlMSW/bhHdwp5PcBT93pSv3PsgsWJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXLSjiuLziwNEFsR8UrG9v9RuPa4wHwYDVR0j BBgwFoAU1Rqos9cs23HJA0W3Z5GWZeYKIX8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA2NTJiYzYtOGJiNi00ZjI2LTg4YjEtMzgwZGFjMThlMjY4LzAvRDUxQUE4QjNE NzJDREI3MUM5MDM0NUI3Njc5MTk2NjVFNjBBMjE3Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTFBQThCM0Q3MkNEQjcxQzkwMzQ1Qjc2NzkxOTY2NUU2MEEy MTdGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA2NTJiYzYtOGJiNi00ZjI2LTg4 YjEtMzgwZGFjMThlMjY4LzAvRDUxQUE4QjNENzJDREI3MUM5MDM0NUI3Njc5MTk2 NjVFNjBBMjE3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwgRm5Fqjt5mYn7+qAatySXmgtVfSUtGl+X SSy6iS5C2m+BoTHGOT0y9DZDxv0yy9dezu081TnxFuQQvtf2pQJP1Z8RSxcop+Gt 2TqPVIzqVm+VkPr4VQhSItE+Fi8MIsU7WH352LcW4DZb0+C9qgwhHEenR7Whh/O1 Q9RE9jMbIK9pARntXs0k7iGOZWM0lmADapkWEvn7Fs0APv15wdXut6MmD5CQTdZH UA5acxFY+aZY4QHWyq26L3vAYOvT2tf5bfVvdmRqePnQ2mAWp2143lcWgxBs0iw6 kQOKlrHeNjJnwomknO0uc+/+8NYWgqwaqgeK+Qlb99qGABrlH2Y= -----END CERTIFICATE-----Generated at Fri Sep 25 17:49:05 2026 by rpki-client