$ rpki-client -vvvf rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft File: 5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft (raw, json) Hash identifier: FvULugHZ7WjOV1c+PfAJj+UFPzBnR8P0T184LUHCslA= Subject key identifier: F9:3E:23:89:DD:0B:00:79:55:4B:32:B0:27:55:3F:5B:E6:B2:FE:71 Authority key identifier: 5C:1F:8B:81:BA:95:84:8F:A5:18:96:E0:95:DB:7A:42:92:09:7E:FA Certificate issuer: /CN=5C1F8B81BA95848FA51896E095DB7A4292097EFA Certificate serial: 60663B44A23370DDBB798BE5F948D518CB4CCEFD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C1F8B81BA95848FA51896E095DB7A4292097EFA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 13:12:13 +0000 Manifest this update: Thu 24 Sep 2026 13:07:13 +0000 Manifest next update: Fri 25 Sep 2026 14:25:13 +0000 Files and hashes: 1: 3130332e3138362e39322e302f32332d3234203d3e20313439363937.roa (hash: 59pE6Ft4WIHTXAP3g5lUlDtYPeQDKcESjhCmblAbyfo=) 2: 5C1F8B81BA95848FA51896E095DB7A4292097EFA.crl (hash: 2NkkvisWMObxExOSXkiBsLurM8WSaUEVeFBdG5X2XaU=) 3: 3130332e3138362e39332e302f32342d3234203d3e20313439363937.roa (hash: 1KOQAKv6O99pd7ry74vlSf/BC5MqWkjxGtXhI66S9EE=) 4: 3130332e3138362e39322e302f32342d3234203d3e20313439363937.roa (hash: SYK3QYwE1Bkhg2g4VRE2icwWvyuVDU6csoYcYgAZP3U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.crl rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C1F8B81BA95848FA51896E095DB7A4292097EFA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 14:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:66:3b:44:a2:33:70:dd:bb:79:8b:e5:f9:48:d5:18:cb:4c:ce:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C1F8B81BA95848FA51896E095DB7A4292097EFA Validity Not Before: Sep 24 13:07:13 2026 GMT Not After : Sep 25 14:25:13 2026 GMT Subject: CN=F93E2389DD0B0079554B32B027553F5BE6B2FE71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e6:3a:2e:9b:15:79:22:78:86:14:c7:a6:ca: ed:fd:96:cf:36:47:59:ea:c6:6e:ce:c5:c6:f1:e4: a0:57:95:8a:f0:60:12:12:ff:27:d7:93:fb:ee:2b: 79:50:ab:6f:73:73:18:73:f4:95:01:33:2e:ad:e7: 86:ef:02:b0:72:31:40:bd:a4:0e:d4:83:25:fa:f3: ea:33:b2:9e:f5:68:20:51:81:d6:af:61:4d:aa:80: 06:40:98:58:b7:37:dc:f1:00:7e:c0:91:11:8b:7f: d8:91:49:6e:39:86:7f:1e:5b:16:b2:a7:27:45:f4: 42:28:42:9d:51:c7:7e:50:b0:ac:16:09:82:23:f5: 78:6c:a4:24:ea:2f:7f:ca:9e:ad:00:a8:44:fa:bd: 9d:57:74:2b:dc:70:e2:ec:9e:47:2c:61:7f:c8:ef: be:4d:c0:d0:7d:84:15:75:3d:80:d4:b5:ad:6f:0c: 02:32:37:13:76:75:3d:e0:85:9b:e0:e3:36:43:8c: e5:c5:c1:07:ee:21:16:83:1d:c1:f4:65:7d:ab:4d: 07:4b:26:fe:80:b4:b2:55:81:ad:5f:55:cd:d3:c8: 9a:0f:b5:01:b2:78:9c:72:4e:b7:a1:eb:68:5e:1d: 3a:d8:c0:fd:8d:10:0c:58:57:ca:85:50:09:71:15: da:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:3E:23:89:DD:0B:00:79:55:4B:32:B0:27:55:3F:5B:E6:B2:FE:71 X509v3 Authority Key Identifier: keyid:5C:1F:8B:81:BA:95:84:8F:A5:18:96:E0:95:DB:7A:42:92:09:7E:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C1F8B81BA95848FA51896E095DB7A4292097EFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:b8:f9:95:8f:1b:4e:5a:cf:4d:f9:38:7e:15:41:98:72:0c: 82:8b:33:fa:e1:6c:d2:1b:26:e6:32:73:87:16:ba:b6:2f:b0: fc:b3:36:b2:43:a0:67:3e:03:48:78:2f:b9:d9:82:98:46:71: e5:71:d1:13:3e:ab:8a:15:af:b1:20:2a:89:75:0d:69:f3:c2: 7a:99:ca:0e:68:48:73:4e:03:ed:fc:11:52:15:2b:70:29:6f: 40:1b:a5:4e:dc:a7:ac:02:cc:83:0d:59:3e:f2:fb:f5:4b:0d: e3:66:f7:47:65:a8:c8:76:1c:3c:33:82:4d:fe:8d:7e:ea:e0: 31:3a:2e:9e:ad:97:d1:9b:74:97:b9:19:4a:39:64:1f:99:6f: fc:15:c2:fe:76:24:4c:91:55:83:a3:30:d8:4b:76:f8:24:ec: e7:cd:b5:6b:de:ca:80:2f:4d:33:01:51:56:88:48:93:76:0c: 2a:8c:a4:66:dd:fe:46:ff:5c:4c:b6:ca:f2:e6:c2:0f:7a:30: b3:19:0e:df:24:af:de:1e:30:4b:d4:1b:b9:01:b0:5b:06:c9: 5c:99:6f:0c:e9:3e:73:ad:f9:81:89:5a:3b:7f:fc:61:da:54: cb:b1:ed:86:c7:2b:2a:3b:bc:17:69:16:6b:8c:02:69:d1:b9: fc:35:e9:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYGY7RKIzcN27eYvl+UjVGMtMzv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMxRjhCODFCQTk1ODQ4RkE1MTg5NkUwOTVEQjdBNDI5 MjA5N0VGQTAeFw0yNjA5MjQxMzA3MTNaFw0yNjA5MjUxNDI1MTNaMDMxMTAvBgNV BAMTKEY5M0UyMzg5REQwQjAwNzk1NTRCMzJCMDI3NTUzRjVCRTZCMkZFNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt5joumxV5IniGFMemyu39ls82 R1nqxm7Oxcbx5KBXlYrwYBIS/yfXk/vuK3lQq29zcxhz9JUBMy6t54bvArByMUC9 pA7UgyX68+ozsp71aCBRgdavYU2qgAZAmFi3N9zxAH7AkRGLf9iRSW45hn8eWxay pydF9EIoQp1Rx35QsKwWCYIj9XhspCTqL3/Knq0AqET6vZ1XdCvccOLsnkcsYX/I 775NwNB9hBV1PYDUta1vDAIyNxN2dT3ghZvg4zZDjOXFwQfuIRaDHcH0ZX2rTQdL Jv6AtLJVga1fVc3TyJoPtQGyeJxyTreh62heHTrYwP2NEAxYV8qFUAlxFdpFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+T4jid0LAHlVSzKwJ1U/W+ay/nEwHwYDVR0j BBgwFoAUXB+LgbqVhI+lGJbgldt6QpIJfvowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTRlMWFjN2MtOTA0ZC00OTNmLWJhNWUtNWUwODM3ZGNiZDI5LzAvNUMxRjhCODFC QTk1ODQ4RkE1MTg5NkUwOTVEQjdBNDI5MjA5N0VGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QzFGOEI4MUJBOTU4NDhGQTUxODk2RTA5NURCN0E0MjkyMDk3 RUZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTRlMWFjN2MtOTA0ZC00OTNmLWJh NWUtNWUwODM3ZGNiZDI5LzAvNUMxRjhCODFCQTk1ODQ4RkE1MTg5NkUwOTVEQjdB NDI5MjA5N0VGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHK4+ZWPG05az035OH4VQZhyDIKLM/rhbNIb JuYyc4cWurYvsPyzNrJDoGc+A0h4L7nZgphGceVx0RM+q4oVr7EgKol1DWnzwnqZ yg5oSHNOA+38EVIVK3Apb0AbpU7cp6wCzIMNWT7y+/VLDeNm90dlqMh2HDwzgk3+ jX7q4DE6Lp6tl9GbdJe5GUo5ZB+Zb/wVwv52JEyRVYOjMNhLdvgk7OfNtWveyoAv TTMBUVaISJN2DCqMpGbd/kb/XEy2yvLmwg96MLMZDt8kr94eMEvUG7kBsFsGyVyZ bwzpPnOt+YGJWjt//GHaVMux7YbHKyo7vBdpFmuMAmnRufw16e8= -----END CERTIFICATE-----Generated at Fri Sep 25 07:01:58 2026 by rpki-client