$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.mft File: 5340DB769DA0690FFA8A696A6047EDC148F1991A.mft (raw, json) Hash identifier: a/GhUog7r517vXLM+JY5AG3KdHJRBbS7rVQHVYMgxsA= Subject key identifier: AF:23:25:17:C9:0D:CF:D7:3C:28:60:B3:9F:5D:D0:13:9D:05:87:E8 Authority key identifier: 53:40:DB:76:9D:A0:69:0F:FA:8A:69:6A:60:47:ED:C1:48:F1:99:1A Certificate issuer: /CN=5340DB769DA0690FFA8A696A6047EDC148F1991A Certificate serial: 5CAE0EA67F775B0752F35DD5F467FB7F0DCAF374 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5340DB769DA0690FFA8A696A6047EDC148F1991A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 12:57:06 +0000 Manifest this update: Wed 23 Sep 2026 12:52:06 +0000 Manifest next update: Thu 24 Sep 2026 15:28:06 +0000 Files and hashes: 1: 5340DB769DA0690FFA8A696A6047EDC148F1991A.crl (hash: 8AgayNpSfoa51UtjUyZhl1Ff3qypXouKAk0IR8diGys=) 2: 3130332e3134372e3134302e302f32332d3234203d3e203137373639.roa (hash: ADXGlMGf5Kb+tXCSNEvEFMbQ1O+wDlMr9doBES2hSe0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.crl rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5340DB769DA0690FFA8A696A6047EDC148F1991A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 15:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ae:0e:a6:7f:77:5b:07:52:f3:5d:d5:f4:67:fb:7f:0d:ca:f3:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5340DB769DA0690FFA8A696A6047EDC148F1991A Validity Not Before: Sep 23 12:52:06 2026 GMT Not After : Sep 24 15:28:06 2026 GMT Subject: CN=AF232517C90DCFD73C2860B39F5DD0139D0587E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1e:12:0b:63:2a:02:ee:69:c3:d4:81:1e:e0: 4c:62:73:41:b0:7c:0f:9d:a8:17:8f:13:07:a7:23: be:28:3c:34:2c:76:41:cc:6e:75:2c:f8:07:c9:81: 2f:b7:1a:b6:2d:40:3c:9c:1c:cb:6a:7f:9c:e7:2a: 1d:15:9a:83:62:74:bd:55:9e:39:76:82:95:14:9a: b8:b6:4b:dc:f0:18:0a:0e:ce:5c:fa:4a:ea:a6:38: 2e:c0:00:d3:af:ee:e4:9e:12:4b:9b:55:62:5a:62: d7:ca:70:91:6d:4b:c4:f8:2d:31:a5:a4:35:6d:a5: f5:1c:27:c8:82:ea:7d:26:51:9d:54:fc:a0:07:2f: b5:29:b3:a5:c5:42:98:fc:4a:a6:0e:6b:57:8e:2e: c6:a3:4d:7a:a8:a0:02:7b:15:ed:a0:41:cd:ff:32: 23:8e:04:e8:74:2e:5f:f2:00:18:85:44:50:59:00: 89:1f:13:55:df:a1:91:d8:5d:32:92:c3:94:57:cd: 50:9e:c8:b8:c3:c7:9a:37:09:99:14:f9:15:bb:20: 7c:3b:33:f1:3d:98:af:a9:d4:a4:36:8f:59:02:38: c7:fe:a3:48:47:74:9b:27:09:64:70:21:54:f0:25: a9:18:8a:bb:42:38:2f:7d:51:f0:42:55:51:e8:cb: 30:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:23:25:17:C9:0D:CF:D7:3C:28:60:B3:9F:5D:D0:13:9D:05:87:E8 X509v3 Authority Key Identifier: keyid:53:40:DB:76:9D:A0:69:0F:FA:8A:69:6A:60:47:ED:C1:48:F1:99:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5340DB769DA0690FFA8A696A6047EDC148F1991A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:10:d3:a0:a5:b6:85:5d:9b:dc:d9:aa:1a:4e:8e:d8:f4:2a: fb:18:6b:8e:46:41:dc:e6:e5:32:ae:0b:cd:5a:19:ca:e8:57: 21:c6:e6:ed:31:ba:a7:d5:b9:28:77:8d:61:6b:c1:c2:92:e7: 23:8f:4d:87:2d:0e:ab:4d:7f:69:d1:8f:19:70:c2:0d:20:18: 93:82:a3:95:e5:e3:99:27:ae:9d:2b:1e:dc:ec:82:1e:10:96: b3:05:ac:b1:3f:51:8a:6e:8f:9a:3b:e1:c9:45:6c:0a:28:07: 60:14:fc:01:69:1e:cc:a5:a6:71:06:77:79:63:42:2c:78:7e: ac:9d:b9:a9:f4:b6:c3:3e:3c:f5:84:65:2e:84:2d:9e:af:6a: 97:ac:39:8d:bb:c6:25:05:91:62:ab:cf:84:91:73:cd:dc:95: ff:7c:80:7f:62:b6:82:9c:62:51:9c:c4:f5:00:d1:a1:66:83: 85:cf:cd:6b:7f:d4:2c:f6:02:9a:5c:f0:bd:fb:23:9e:5d:5e: ef:5f:cc:5c:7d:fc:0e:41:ae:ac:88:45:34:be:2e:02:7f:6a: 99:93:94:ff:ca:68:8a:ef:98:7b:f0:7f:b7:36:4e:36:d6:ad: 17:cf:96:98:75:1c:f5:dd:8e:d4:82:f1:31:54:86:df:05:4f: ad:42:bb:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXK4Opn93WwdS813V9Gf7fw3K83QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM0MERCNzY5REEwNjkwRkZBOEE2OTZBNjA0N0VEQzE0 OEYxOTkxQTAeFw0yNjA5MjMxMjUyMDZaFw0yNjA5MjQxNTI4MDZaMDMxMTAvBgNV BAMTKEFGMjMyNTE3QzkwRENGRDczQzI4NjBCMzlGNUREMDEzOUQwNTg3RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdHhILYyoC7mnD1IEe4Exic0Gw fA+dqBePEwenI74oPDQsdkHMbnUs+AfJgS+3GrYtQDycHMtqf5znKh0VmoNidL1V njl2gpUUmri2S9zwGAoOzlz6SuqmOC7AANOv7uSeEkubVWJaYtfKcJFtS8T4LTGl pDVtpfUcJ8iC6n0mUZ1U/KAHL7Ups6XFQpj8SqYOa1eOLsajTXqooAJ7Fe2gQc3/ MiOOBOh0Ll/yABiFRFBZAIkfE1XfoZHYXTKSw5RXzVCeyLjDx5o3CZkU+RW7IHw7 M/E9mK+p1KQ2j1kCOMf+o0hHdJsnCWRwIVTwJakYirtCOC99UfBCVVHoyzA3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUryMlF8kNz9c8KGCzn13QE50Fh+gwHwYDVR0j BBgwFoAUU0Dbdp2gaQ/6imlqYEftwUjxmRowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWM3MTQxMjItODYwYy00MTRlLWE2N2EtNjg0YTFiZTk2MGRlLzAvNTM0MERCNzY5 REEwNjkwRkZBOEE2OTZBNjA0N0VEQzE0OEYxOTkxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzQwREI3NjlEQTA2OTBGRkE4QTY5NkE2MDQ3RURDMTQ4RjE5 OTFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWM3MTQxMjItODYwYy00MTRlLWE2 N2EtNjg0YTFiZTk2MGRlLzAvNTM0MERCNzY5REEwNjkwRkZBOEE2OTZBNjA0N0VE QzE0OEYxOTkxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8Q06CltoVdm9zZqhpOjtj0KvsYa45GQdzm 5TKuC81aGcroVyHG5u0xuqfVuSh3jWFrwcKS5yOPTYctDqtNf2nRjxlwwg0gGJOC o5Xl45knrp0rHtzsgh4QlrMFrLE/UYpuj5o74clFbAooB2AU/AFpHsylpnEGd3lj Qix4fqyduan0tsM+PPWEZS6ELZ6vapesOY27xiUFkWKrz4SRc83clf98gH9itoKc YlGcxPUA0aFmg4XPzWt/1Cz2Appc8L37I55dXu9fzFx9/A5BrqyIRTS+LgJ/apmT lP/KaIrvmHvwf7c2TjbWrRfPlph1HPXdjtSC8TFUht8FT61Cu4w= -----END CERTIFICATE-----Generated at Thu Sep 24 00:07:40 2026 by rpki-client