$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft File: 5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft (raw, json) Hash identifier: OTtEpTZuF5KYB7X7H5qSimHPRsxTBNRO5n3J0e5kcNk= Subject key identifier: 3D:81:E5:45:45:0B:B1:6A:5D:39:AE:DA:B4:96:A6:58:FB:C9:AF:7E Authority key identifier: 5A:1C:0A:49:62:48:63:92:EE:3F:99:8A:F6:D4:FF:70:39:A8:3F:F3 Certificate issuer: /CN=5A1C0A4962486392EE3F998AF6D4FF7039A83FF3 Certificate serial: 1E08EC05834087AE8AB29238998A954F625D13ED Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 10:38:46 +0000 Manifest this update: Thu 24 Sep 2026 10:33:46 +0000 Manifest next update: Fri 25 Sep 2026 14:18:46 +0000 Files and hashes: 1: 5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl (hash: hXEX5qwDq/V7vtraWuvjBh4oGserS5PxyBrT5Pkbn6U=) 2: 3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa (hash: UIelaNmfU5flXZDJq0nsLusBExENtoFESIIlQRjCnSM=) 3: 3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa (hash: WS8lomwMTaspR/6nCKhD2CzQyU48KkvD9JTWAS0vGqs=) 4: 3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa (hash: 7DiSKTCfGBXxBlqPDk9dxpdFDrZ/cVVBzOWF8p4BC1M=) 5: 323030313a6466313a383530303a3a2f34382d3438203d3e20313336313131.roa (hash: EBT29i1PsqgcTeXQev4zG3xPyCKZ73fS930Tr0addJQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 14:18:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:08:ec:05:83:40:87:ae:8a:b2:92:38:99:8a:95:4f:62:5d:13:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A1C0A4962486392EE3F998AF6D4FF7039A83FF3 Validity Not Before: Sep 24 10:33:46 2026 GMT Not After : Sep 25 14:18:46 2026 GMT Subject: CN=3D81E545450BB16A5D39AEDAB496A658FBC9AF7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fd:80:4e:95:65:ee:a9:0d:7d:e5:78:6e:33: 1e:cb:a3:44:b5:18:e5:c8:23:85:c0:95:41:3c:59: 23:69:a9:08:bf:13:31:73:48:73:2c:86:7d:7e:02: 85:75:67:ab:4d:50:97:cf:e8:43:f6:88:56:12:33: a7:51:8e:2a:a8:e9:0a:41:97:af:28:af:10:30:c1: 7b:a5:7b:49:a4:6a:c8:a7:74:37:e5:3d:8f:7e:0c: 03:9a:25:63:b3:dc:8b:ab:4d:89:1e:50:a3:0f:5e: 95:cc:d0:5d:1d:55:10:65:35:38:78:44:c0:d8:f6: 84:47:eb:40:57:72:c7:0a:8a:66:33:df:c2:57:27: 52:f7:dd:0e:e4:56:a4:d4:24:90:f2:cf:dc:69:3a: 14:05:f9:1c:29:36:94:eb:ae:d5:c7:98:de:67:fd: cb:66:c5:fc:1c:b2:72:90:ae:d6:24:d7:36:e9:78: 4e:3f:a9:f8:c6:92:74:e0:f2:55:f0:1f:59:cb:a9: 11:3e:cb:cd:ec:af:f9:af:9a:8a:d3:5a:30:52:e4: bc:e7:25:c9:2a:6a:76:7f:99:0b:ba:5e:de:c2:b2: 62:5e:4a:df:6a:63:7d:e4:50:fb:c5:11:15:01:8a: 61:f9:bc:db:23:a3:6d:3c:30:ae:e7:69:0b:3b:20: c8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:81:E5:45:45:0B:B1:6A:5D:39:AE:DA:B4:96:A6:58:FB:C9:AF:7E X509v3 Authority Key Identifier: keyid:5A:1C:0A:49:62:48:63:92:EE:3F:99:8A:F6:D4:FF:70:39:A8:3F:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c5:69:bd:43:63:20:28:b6:33:6e:8b:05:f6:b9:c3:84:e1: f5:bb:f6:53:f9:fe:95:82:27:4d:4f:fa:d2:f5:14:7c:0e:67: b7:b3:cc:44:d3:38:4e:b8:98:5e:1a:a8:cf:d3:7c:a0:51:e2: b6:2f:fe:4a:19:6b:0b:57:58:74:61:e3:0c:eb:bf:7b:ea:9e: f8:be:b0:3a:61:b1:66:07:d4:6e:01:3f:5a:fd:7e:98:26:6f: fd:fb:52:37:8b:02:57:e6:29:5e:b7:66:39:6f:9e:0d:30:79: 0a:2a:f8:68:bf:37:be:1c:9a:44:47:83:95:1e:61:07:44:32: 9d:e4:31:98:e5:f1:7b:a5:03:03:20:6d:46:d1:be:70:40:d5: 28:86:11:cc:2d:ba:3c:bf:6c:56:8f:d0:75:92:c3:dc:ad:d0: 0f:65:bd:ac:ca:7f:1f:24:44:78:7e:4e:84:dd:7d:e2:95:62: 44:90:69:dc:0d:83:1d:a0:35:8d:e4:e8:53:6a:5c:2b:85:e4: e8:ac:93:6b:13:f1:e2:7e:14:dd:2d:cd:5c:b8:dc:9e:4e:84: 00:3e:65:1d:4d:f9:cd:62:ba:4d:03:90:25:69:59:df:9e:28: c8:fb:52:aa:e6:ce:92:e9:cf:91:c5:46:59:93:e2:79:75:2e: 94:53:ea:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHgjsBYNAh66KspI4mYqVT2JdE+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUExQzBBNDk2MjQ4NjM5MkVFM0Y5OThBRjZENEZGNzAz OUE4M0ZGMzAeFw0yNjA5MjQxMDMzNDZaFw0yNjA5MjUxNDE4NDZaMDMxMTAvBgNV BAMTKDNEODFFNTQ1NDUwQkIxNkE1RDM5QUVEQUI0OTZBNjU4RkJDOUFGN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI/YBOlWXuqQ195XhuMx7Lo0S1 GOXII4XAlUE8WSNpqQi/EzFzSHMshn1+AoV1Z6tNUJfP6EP2iFYSM6dRjiqo6QpB l68orxAwwXule0mkasindDflPY9+DAOaJWOz3IurTYkeUKMPXpXM0F0dVRBlNTh4 RMDY9oRH60BXcscKimYz38JXJ1L33Q7kVqTUJJDyz9xpOhQF+RwpNpTrrtXHmN5n /ctmxfwcsnKQrtYk1zbpeE4/qfjGknTg8lXwH1nLqRE+y83sr/mvmorTWjBS5Lzn JckqanZ/mQu6Xt7CsmJeSt9qY33kUPvFERUBimH5vNsjo208MK7naQs7IMgFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPYHlRUULsWpdOa7atJamWPvJr34wHwYDVR0j BBgwFoAUWhwKSWJIY5LuP5mK9tT/cDmoP/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzJmMjg4NzktNDg0NC00MmRlLWIyZDktYTk2NjZkZTI4MmVhLzAvNUExQzBBNDk2 MjQ4NjM5MkVFM0Y5OThBRjZENEZGNzAzOUE4M0ZGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QTFDMEE0OTYyNDg2MzkyRUUzRjk5OEFGNkQ0RkY3MDM5QTgz RkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzJmMjg4NzktNDg0NC00MmRlLWIy ZDktYTk2NjZkZTI4MmVhLzAvNUExQzBBNDk2MjQ4NjM5MkVFM0Y5OThBRjZENEZG NzAzOUE4M0ZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzFab1DYyAotjNuiwX2ucOE4fW79lP5/pWC J01P+tL1FHwOZ7ezzETTOE64mF4aqM/TfKBR4rYv/koZawtXWHRh4wzrv3vqnvi+ sDphsWYH1G4BP1r9fpgmb/37UjeLAlfmKV63Zjlvng0weQoq+Gi/N74cmkRHg5Ue YQdEMp3kMZjl8XulAwMgbUbRvnBA1SiGEcwtujy/bFaP0HWSw9yt0A9lvazKfx8k RHh+ToTdfeKVYkSQadwNgx2gNY3k6FNqXCuF5Oisk2sT8eJ+FN0tzVy43J5OhAA+ ZR1N+c1iuk0DkCVpWd+eKMj7UqrmzpLpz5HFRlmT4nl1LpRT6kw= -----END CERTIFICATE-----Generated at Fri Sep 25 06:59:53 2026 by rpki-client