$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.mft File: 5AE2131384B411127BE4CF7467B12F83CBAD9996.mft (raw, json) Hash identifier: BC2aQazvK6iD/7devI/iCzuymc1khm5Vi9DOLCAyTbw= Subject key identifier: EE:D3:07:45:F2:85:F8:47:52:30:F0:E2:6F:82:2A:46:98:F9:46:F6 Authority key identifier: 5A:E2:13:13:84:B4:11:12:7B:E4:CF:74:67:B1:2F:83:CB:AD:99:96 Certificate issuer: /CN=5AE2131384B411127BE4CF7467B12F83CBAD9996 Certificate serial: 6950B33477FB1B7779714A6D2440924EF450590D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AE2131384B411127BE4CF7467B12F83CBAD9996.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 11:09:29 +0000 Manifest this update: Thu 24 Sep 2026 11:04:29 +0000 Manifest next update: Fri 25 Sep 2026 14:56:29 +0000 Files and hashes: 1: 3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa (hash: I0jTp/Lb+KlyYGeSMZScDem+MblcbAhoI37lZDiIvac=) 2: 3130332e3137372e31312e302f32342d3234203d3e20313437313634.roa (hash: NmIt0iuskNCmt4uz1oIpjbFNHodPs9Y9zQPXOPslKF0=) 3: 5AE2131384B411127BE4CF7467B12F83CBAD9996.crl (hash: k4NzQDa2/Ni0VVUpl0LgKL/rgtVSdX5s36mtTbZxlM0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.crl rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AE2131384B411127BE4CF7467B12F83CBAD9996.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 14:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:50:b3:34:77:fb:1b:77:79:71:4a:6d:24:40:92:4e:f4:50:59:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE2131384B411127BE4CF7467B12F83CBAD9996 Validity Not Before: Sep 24 11:04:29 2026 GMT Not After : Sep 25 14:56:29 2026 GMT Subject: CN=EED30745F285F8475230F0E26F822A4698F946F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f1:94:77:d7:ff:b8:53:22:db:4a:10:82:7c: 5b:71:c3:c6:2a:aa:6c:aa:a5:f1:ce:af:9e:c5:22: 05:cf:3e:ec:9e:1f:49:d8:28:ad:97:2b:02:55:e0: 96:77:65:0b:86:81:1f:52:87:a3:ce:62:04:a2:ec: a6:71:04:f7:15:8e:ac:f1:65:42:59:68:53:4c:92: 4d:eb:b4:80:f0:8f:22:ba:87:f4:aa:95:5a:60:1b: fb:a3:7f:f4:4a:47:a2:dd:cf:5d:cb:01:39:a1:73: c3:7e:ed:97:3a:b6:a6:9b:5b:21:ac:64:bd:50:18: 8f:cc:21:86:43:a3:86:f6:bd:47:6b:6f:54:15:2e: a7:b4:ef:53:53:4c:2e:3e:2e:59:06:e6:9a:32:b2: 79:dd:38:16:da:f9:ee:92:f8:ae:f2:a6:8e:45:f6: 04:67:ab:7e:fc:28:48:12:c8:ff:1e:1e:83:7e:3d: 41:d1:5d:98:62:de:2f:64:9f:cd:87:d0:fc:2a:ab: 28:6e:aa:b3:11:97:11:3b:c2:18:6b:d4:77:27:e5: d4:19:ca:3d:d5:01:df:79:1c:2c:5f:45:1a:0e:14: 57:d1:6c:cf:01:6c:de:43:d5:72:32:c1:cb:b2:5f: 88:1e:fe:2d:ef:01:26:41:1f:97:c9:bf:cc:dc:fb: 11:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D3:07:45:F2:85:F8:47:52:30:F0:E2:6F:82:2A:46:98:F9:46:F6 X509v3 Authority Key Identifier: keyid:5A:E2:13:13:84:B4:11:12:7B:E4:CF:74:67:B1:2F:83:CB:AD:99:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AE2131384B411127BE4CF7467B12F83CBAD9996.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:8e:04:a5:1b:bb:b2:95:06:1b:e9:df:d9:c8:a1:d5:d5:58: 02:b1:74:f9:f6:54:a3:ed:77:ff:6e:9c:00:dc:3a:bf:bb:01: e9:dc:49:d5:99:49:2c:cb:28:d8:6a:47:9e:6b:af:cd:e9:9e: 39:f3:df:7b:4a:1c:82:ce:46:b2:24:1f:15:0c:87:dc:0a:55: 89:65:d6:cc:52:4c:2a:68:ee:7c:b3:ab:b8:af:e5:bb:b4:f7: e6:df:c7:a4:e1:83:06:c7:a6:0b:37:c7:3c:ce:bc:9b:bd:99: bb:8a:9a:db:ec:26:27:67:a8:97:a9:07:8e:1d:be:11:46:ed: d5:7f:68:19:f7:a6:36:28:9e:c3:f1:f9:c8:b5:f3:60:5f:d7: c9:ca:bc:df:70:2f:55:89:10:4b:2d:c5:6b:99:4c:f0:e5:b3: 18:37:da:88:ae:53:19:5f:d8:42:7d:98:ef:90:d2:7a:dd:c9: 72:37:9f:de:f9:41:5e:af:48:2a:63:9b:a4:13:ab:a2:34:59: 1a:d9:e7:1c:93:cb:d3:5f:d0:9b:fd:f1:5b:9d:ac:a8:47:ea: f9:e2:e9:8f:2d:dd:c1:38:31:35:b7:ba:e5:e3:9d:5b:76:d3: 17:a1:10:b7:dd:e1:b0:c7:98:13:16:b6:db:dc:4e:42:7c:30: ae:5e:67:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaVCzNHf7G3d5cUptJECSTvRQWQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFMjEzMTM4NEI0MTExMjdCRTRDRjc0NjdCMTJGODND QkFEOTk5NjAeFw0yNjA5MjQxMTA0MjlaFw0yNjA5MjUxNDU2MjlaMDMxMTAvBgNV BAMTKEVFRDMwNzQ1RjI4NUY4NDc1MjMwRjBFMjZGODIyQTQ2OThGOTQ2RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ8ZR31/+4UyLbShCCfFtxw8Yq qmyqpfHOr57FIgXPPuyeH0nYKK2XKwJV4JZ3ZQuGgR9Sh6POYgSi7KZxBPcVjqzx ZUJZaFNMkk3rtIDwjyK6h/SqlVpgG/ujf/RKR6Ldz13LATmhc8N+7Zc6tqabWyGs ZL1QGI/MIYZDo4b2vUdrb1QVLqe071NTTC4+LlkG5poysnndOBba+e6S+K7ypo5F 9gRnq378KEgSyP8eHoN+PUHRXZhi3i9kn82H0PwqqyhuqrMRlxE7whhr1Hcn5dQZ yj3VAd95HCxfRRoOFFfRbM8BbN5D1XIywcuyX4ge/i3vASZBH5fJv8zc+xE9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7tMHRfKF+EdSMPDib4IqRpj5RvYwHwYDVR0j BBgwFoAUWuITE4S0ERJ75M90Z7Evg8utmZYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQxOTZkNjUtMjFhOC00YjA0LWE5ZGUtNzI4M2ZiZTNjMWNiLzAvNUFFMjEzMTM4 NEI0MTExMjdCRTRDRjc0NjdCMTJGODNDQkFEOTk5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QUUyMTMxMzg0QjQxMTEyN0JFNENGNzQ2N0IxMkY4M0NCQUQ5 OTk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQxOTZkNjUtMjFhOC00YjA0LWE5 ZGUtNzI4M2ZiZTNjMWNiLzAvNUFFMjEzMTM4NEI0MTExMjdCRTRDRjc0NjdCMTJG ODNDQkFEOTk5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJuOBKUbu7KVBhvp39nIodXVWAKxdPn2VKPt d/9unADcOr+7AencSdWZSSzLKNhqR55rr83pnjnz33tKHILORrIkHxUMh9wKVYll 1sxSTCpo7nyzq7iv5bu09+bfx6ThgwbHpgs3xzzOvJu9mbuKmtvsJidnqJepB44d vhFG7dV/aBn3pjYonsPx+ci182Bf18nKvN9wL1WJEEstxWuZTPDlsxg32oiuUxlf 2EJ9mO+Q0nrdyXI3n975QV6vSCpjm6QTq6I0WRrZ5xyTy9Nf0Jv98VudrKhH6vni 6Y8t3cE4MTW3uuXjnVt20xehELfd4bDHmBMWttvcTkJ8MK5eZzA= -----END CERTIFICATE-----Generated at Fri Sep 25 05:43:38 2026 by rpki-client