$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft File: 5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft (raw, json) Hash identifier: m0kZQRtf0z1TJXV2Hr5oMnff4NCx5UUKf1o3LGyBr/E= Subject key identifier: 80:36:CA:7B:E5:04:FE:A1:AA:AB:59:21:0D:7E:E2:BC:2C:A7:90:BB Authority key identifier: 5D:13:BF:84:B8:D9:1A:8A:1A:C8:08:62:27:D5:9F:1D:C1:EA:3F:10 Certificate issuer: /CN=5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10 Certificate serial: 12AA93882E78B1A33C1923A953A3483DA434FB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft Manifest number: C6 Signing time: Fri 25 Sep 2026 04:10:29 +0000 Manifest this update: Fri 25 Sep 2026 04:05:29 +0000 Manifest next update: Sat 26 Sep 2026 06:04:29 +0000 Files and hashes: 1: 323030313a6466323a356130303a3a2f34382d3438203d3e20313335343434.roa (hash: LT7RL4AshZZWaOQ5M4cXziGumEcUQNnqOVToVNyckMU=) 2: 3130332e3233352e37322e302f32342d3234203d3e20313335343434.roa (hash: nEP4w2fSSO/JQDFjA5Ly4wgPOtkX8Po6PEn4YaYfsXM=) 3: 5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl (hash: 1LhMMS1Qc5AlN68Z5B/N2pcmDAbZDQ2EymzLXMcXRq0=) 4: 3130332e3233352e37332e302f32342d3234203d3e20313335333630.roa (hash: QFfNhq0siSwOs18xtBIQVVrABzIP0gTxhbpkKx5UaAs=) 5: 3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa (hash: W77EgJV2LrTum+AXobDiJMY0VCB5QZlN1pW9AzTxaMA=) 6: 3130332e3233352e37342e302f32342d3234203d3e20313335343434.roa (hash: ml3XOM3oooTz4pOGiWF5IYQEjwqeju+NuHaVYP3/oGM=) 7: 3130332e3231392e3234382e302f32322d3234203d3e20313335343434.roa (hash: sW+l8TDeWzgFji1PeDbQ2pWWxA4Q2fxlWjumQ/6eJhY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 05:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:aa:93:88:2e:78:b1:a3:3c:19:23:a9:53:a3:48:3d:a4:34:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10 Validity Not Before: Sep 25 04:05:29 2026 GMT Not After : Sep 26 06:04:29 2026 GMT Subject: CN=8036CA7BE504FEA1AAAB59210D7EE2BC2CA790BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b7:19:f1:85:dd:7a:3d:b4:dd:cd:93:e0:a8: f1:8b:16:8f:41:43:e7:ab:e2:3b:38:98:d4:07:87: 92:58:c1:3f:53:24:32:c9:c8:3f:87:6e:06:eb:24: 8a:eb:0a:49:7d:f9:4b:7e:13:9e:1c:e2:4c:0d:48: 51:9d:d4:87:ee:20:b0:1d:75:10:d6:b6:45:6c:dc: b7:fa:49:15:68:28:ab:bf:e4:3d:0c:74:e1:cd:42: 38:e1:63:6f:41:1e:81:e4:20:27:12:ae:e7:02:d0: 62:fb:d1:87:af:6b:8f:39:25:cb:26:6d:97:87:03: d8:78:03:36:86:8e:81:52:6e:88:d4:3e:9e:28:e9: 3e:1a:8d:31:c2:56:57:ff:38:61:07:ba:66:02:ac: 4e:f3:ca:c0:b4:02:8e:0d:80:44:39:f4:74:4a:e4: 03:f0:7a:42:da:25:00:15:ab:13:b9:08:e0:68:b4: 25:d7:01:67:0f:04:e4:38:af:75:e4:67:33:96:1a: 9f:19:65:55:20:6c:f1:c7:36:6c:17:fe:45:82:2a: 7f:1b:f5:59:e6:8e:f2:83:45:b5:9d:63:af:16:23: 2a:dd:13:51:50:3a:4e:cf:03:84:64:6d:31:a3:60: 94:44:6b:65:3d:67:81:60:c0:7e:ff:75:3d:9a:fa: bd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:36:CA:7B:E5:04:FE:A1:AA:AB:59:21:0D:7E:E2:BC:2C:A7:90:BB X509v3 Authority Key Identifier: keyid:5D:13:BF:84:B8:D9:1A:8A:1A:C8:08:62:27:D5:9F:1D:C1:EA:3F:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:b3:58:ca:64:94:f5:10:84:67:88:da:04:20:fb:61:fe:28: f4:85:dd:8e:67:d3:41:dc:64:69:90:b5:d9:d0:e3:18:e0:fb: 70:ca:b2:54:83:8f:23:8b:b1:73:f1:de:af:ff:bf:e3:7f:65: 19:27:ec:1a:d3:ba:cb:96:c2:6b:f2:e7:67:e6:1d:4e:ca:6e: d7:0d:17:1b:cc:b3:aa:5e:67:96:27:54:85:f1:07:1c:62:45: 6f:d6:95:f5:75:d2:4a:88:d5:20:2d:24:4d:a0:ac:9b:38:6a: 37:20:aa:62:6f:b5:0a:d1:87:f5:8e:0d:21:d5:20:f3:a2:bc: ac:15:49:28:2c:68:27:77:f7:e3:68:99:ad:e0:30:87:cf:9f: f1:5d:31:06:c1:35:78:cb:4a:af:c3:04:50:09:08:e5:4b:ae: c8:cc:ef:29:a4:49:62:9e:05:7b:c4:4e:e5:1c:54:37:52:65: 38:99:fd:7b:3d:27:8b:fa:08:e4:65:59:1b:aa:02:fa:7b:6f: 4a:84:a9:59:a3:44:a8:8b:1c:54:69:44:1d:32:46:ff:90:0b: 0f:5b:89:64:2a:34:42:b0:d0:f9:d5:d5:f5:3b:52:94:af:eb: 90:4e:5d:2d:b2:74:c4:94:9e:6a:80:94:f4:de:9b:f0:5c:43: ae:c6:79:dd -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITEqqTiC54saM8GSOpU6NIPaQ0+zANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg1RDEzQkY4NEI4RDkxQThBMUFDODA4NjIyN0Q1OUYxREMx RUEzRjEwMB4XDTI2MDkyNTA0MDUyOVoXDTI2MDkyNjA2MDQyOVowMzExMC8GA1UE AxMoODAzNkNBN0JFNTA0RkVBMUFBQUI1OTIxMEQ3RUUyQkMyQ0E3OTBCQjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ63GfGF3Xo9tN3Nk+Co8YsWj0FD 56viOziY1AeHkljBP1MkMsnIP4duBuskiusKSX35S34TnhziTA1IUZ3Uh+4gsB11 ENa2RWzct/pJFWgoq7/kPQx04c1COOFjb0EegeQgJxKu5wLQYvvRh69rjzklyyZt l4cD2HgDNoaOgVJuiNQ+nijpPhqNMcJWV/84YQe6ZgKsTvPKwLQCjg2ARDn0dErk A/B6QtolABWrE7kI4Gi0JdcBZw8E5DivdeRnM5YanxllVSBs8cc2bBf+RYIqfxv1 WeaO8oNFtZ1jrxYjKt0TUVA6Ts8DhGRtMaNglERrZT1ngWDAfv91PZr6vV8CAwEA AaOCAjwwggI4MB0GA1UdDgQWBBSANsp75QT+oaqrWSENfuK8LKeQuzAfBgNVHSME GDAWgBRdE7+EuNkaihrICGIn1Z8dweo/EDAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9i MWE3N2FkZC1hNDlhLTRjOGYtYTczNS1lZjk2YzMzYWIyOWYvMC81RDEzQkY4NEI4 RDkxQThBMUFDODA4NjIyN0Q1OUYxREMxRUEzRjEwLmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xLzVEMTNCRjg0QjhEOTFBOEExQUM4MDg2MjI3RDU5RjFEQzFFQTNG MTAuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iMWE3N2FkZC1hNDlhLTRjOGYtYTcz NS1lZjk2YzMzYWIyOWYvMC81RDEzQkY4NEI4RDkxQThBMUFDODA4NjIyN0Q1OUYx REMxRUEzRjEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEARLNYymSU9RCEZ4jaBCD7Yf4o9IXdjmfTQdxk aZC12dDjGOD7cMqyVIOPI4uxc/Her/+/439lGSfsGtO6y5bCa/LnZ+YdTspu1w0X G8yzql5nlidUhfEHHGJFb9aV9XXSSojVIC0kTaCsmzhqNyCqYm+1CtGH9Y4NIdUg 86K8rBVJKCxoJ3f342iZreAwh8+f8V0xBsE1eMtKr8MEUAkI5UuuyMzvKaRJYp4F e8RO5RxUN1JlOJn9ez0ni/oI5GVZG6oC+ntvSoSpWaNEqIscVGlEHTJG/5ALD1uJ ZCo0QrDQ+dXV9TtSlK/rkE5dLbJ0xJSeaoCU9N6b8FxDrsZ53Q== -----END CERTIFICATE-----Generated at Fri Sep 25 10:57:36 2026 by rpki-client