$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft File: 5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft (raw, json) Hash identifier: GssJMfG9Zne77IwXK5BAjMux/14sY25Y+XfRetxI47U= Subject key identifier: F0:A8:B0:48:96:61:D6:89:C0:6D:7A:74:B2:9A:07:DF:77:66:90:4A Authority key identifier: 55:03:FF:56:57:01:23:37:ED:F3:A3:9C:DA:8A:20:EF:CD:9F:72:5D Certificate issuer: /CN=5503FF5657012337EDF3A39CDA8A20EFCD9F725D Certificate serial: 62FB4324AAACAD828D0C09BE7132C344DF1D9D3B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 02:59:22 +0000 Manifest this update: Thu 24 Sep 2026 02:54:22 +0000 Manifest next update: Fri 25 Sep 2026 05:18:22 +0000 Files and hashes: 1: 3130332e3231372e3230382e302f32322d3234203d3e203338373630.roa (hash: 8JHdIEqNbeJfT5OVw6EBi4k3e542O+VmKhuJlmXA+os=) 2: 5503FF5657012337EDF3A39CDA8A20EFCD9F725D.crl (hash: zl7VW7oFDghRViso7HnKI1jAiduTJDQ2Zg0nRUws3QE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.crl rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:fb:43:24:aa:ac:ad:82:8d:0c:09:be:71:32:c3:44:df:1d:9d:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5503FF5657012337EDF3A39CDA8A20EFCD9F725D Validity Not Before: Sep 24 02:54:22 2026 GMT Not After : Sep 25 05:18:22 2026 GMT Subject: CN=F0A8B0489661D689C06D7A74B29A07DF7766904A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:62:58:f6:49:f0:2d:3c:08:9d:17:67:9a:09: 67:ec:8b:ab:ae:6f:b3:fa:67:47:8e:21:e8:66:1d: dd:0d:37:b5:6b:78:87:c2:f3:6a:6a:63:37:35:80: f4:f5:f0:ef:e3:84:24:02:56:dc:79:dd:b4:65:ba: 89:3f:af:45:6c:d8:6e:6c:bb:96:1d:41:76:98:c3: f2:10:c1:7f:ac:21:9a:db:f8:49:e8:74:8a:22:2c: e5:1c:7c:04:4b:3f:c6:57:2a:30:1e:b6:be:48:78: c7:00:9c:52:ec:7f:05:46:7e:80:57:d4:d0:56:c7: 23:34:a5:f8:d3:a6:4c:0b:5f:2f:a1:98:a6:27:65: 4c:57:22:74:f0:b4:07:a0:46:5f:3e:a0:a3:71:9c: 7a:bf:a2:0f:90:2c:4d:06:7a:82:78:08:77:d8:cd: cd:85:70:ce:6a:8c:ed:37:27:88:a9:55:17:47:72: 2b:2e:c2:5a:e7:18:66:a6:f7:f8:95:c3:4a:f7:95: 44:26:c9:7c:10:e7:b9:bf:a8:c4:07:5c:52:23:e8: f5:2f:84:aa:7c:a5:a8:6b:6a:a6:a2:15:2b:b2:e6: 4e:d7:13:f2:2e:21:1f:a2:07:98:6b:e3:f7:70:14: 69:8b:e5:34:58:4f:13:d3:a3:9e:c1:97:8d:d3:ae: 86:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A8:B0:48:96:61:D6:89:C0:6D:7A:74:B2:9A:07:DF:77:66:90:4A X509v3 Authority Key Identifier: keyid:55:03:FF:56:57:01:23:37:ED:F3:A3:9C:DA:8A:20:EF:CD:9F:72:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:16:61:d8:71:37:70:5a:ed:07:1b:70:4d:aa:69:67:e9:61: 19:ca:9a:d2:22:9f:90:36:a9:87:5c:c2:55:a9:38:34:5f:2f: 97:41:9e:94:b0:87:5e:7f:db:c9:1c:3f:46:5d:3d:ba:06:2f: b1:15:49:98:02:ba:a6:81:93:18:1c:6f:64:3a:3c:5a:b3:a6: 56:6f:07:50:af:83:f6:2c:06:c2:7c:f0:4d:bd:b4:2f:5c:0d: c0:e9:63:b9:e1:9a:6a:bf:79:1c:72:8f:51:3c:3a:3e:0f:a4: b9:55:8b:f9:9a:0c:3d:af:0b:a8:1e:db:b4:e3:0d:ff:32:2b: e7:ae:a0:0d:31:15:69:8b:35:11:10:33:ac:64:d4:c6:92:8f: 5e:c7:08:a8:d7:1c:37:ec:41:b4:a0:93:ad:6d:52:0c:53:75: 4d:29:df:52:5d:5c:2e:6f:ea:5a:c4:e6:61:56:f3:90:82:a0: de:18:e2:e6:0d:4e:3f:48:54:8d:00:cf:64:4a:00:e0:04:75: e5:46:fd:d2:66:c1:81:4d:72:f6:c4:0e:82:a7:4e:4c:9a:c7: b9:ab:dd:e7:66:29:fe:af:44:66:c9:97:6d:5e:56:35:6b:44: e8:78:27:39:95:40:87:b0:78:f0:80:78:0b:24:2e:0f:76:0c: 4c:29:1e:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYvtDJKqsrYKNDAm+cTLDRN8dnTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUwM0ZGNTY1NzAxMjMzN0VERjNBMzlDREE4QTIwRUZD RDlGNzI1RDAeFw0yNjA5MjQwMjU0MjJaFw0yNjA5MjUwNTE4MjJaMDMxMTAvBgNV BAMTKEYwQThCMDQ4OTY2MUQ2ODlDMDZEN0E3NEIyOUEwN0RGNzc2NjkwNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Ylj2SfAtPAidF2eaCWfsi6uu b7P6Z0eOIehmHd0NN7VreIfC82pqYzc1gPT18O/jhCQCVtx53bRluok/r0Vs2G5s u5YdQXaYw/IQwX+sIZrb+EnodIoiLOUcfARLP8ZXKjAetr5IeMcAnFLsfwVGfoBX 1NBWxyM0pfjTpkwLXy+hmKYnZUxXInTwtAegRl8+oKNxnHq/og+QLE0GeoJ4CHfY zc2FcM5qjO03J4ipVRdHcisuwlrnGGam9/iVw0r3lUQmyXwQ57m/qMQHXFIj6PUv hKp8pahraqaiFSuy5k7XE/IuIR+iB5hr4/dwFGmL5TRYTxPTo57Bl43TroaDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8KiwSJZh1onAbXp0spoH33dmkEowHwYDVR0j BBgwFoAUVQP/VlcBIzft86Oc2oog782fcl0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNhNWZmZGMtMTUxYS00YWFkLWEyYjctNDMyNjQ5ZGU2ZGJlLzAvNTUwM0ZGNTY1 NzAxMjMzN0VERjNBMzlDREE4QTIwRUZDRDlGNzI1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NTAzRkY1NjU3MDEyMzM3RURGM0EzOUNEQThBMjBFRkNEOUY3 MjVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNhNWZmZGMtMTUxYS00YWFkLWEy YjctNDMyNjQ5ZGU2ZGJlLzAvNTUwM0ZGNTY1NzAxMjMzN0VERjNBMzlDREE4QTIw RUZDRDlGNzI1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEWYdhxN3Ba7QcbcE2qaWfpYRnKmtIin5A2 qYdcwlWpODRfL5dBnpSwh15/28kcP0ZdPboGL7EVSZgCuqaBkxgcb2Q6PFqzplZv B1Cvg/YsBsJ88E29tC9cDcDpY7nhmmq/eRxyj1E8Oj4PpLlVi/maDD2vC6ge27Tj Df8yK+euoA0xFWmLNREQM6xk1MaSj17HCKjXHDfsQbSgk61tUgxTdU0p31JdXC5v 6lrE5mFW85CCoN4Y4uYNTj9IVI0Az2RKAOAEdeVG/dJmwYFNcvbEDoKnTkyax7mr 3edmKf6vRGbJl21eVjVrROh4JzmVQIewePCAeAskLg92DEwpHtE= -----END CERTIFICATE-----Generated at Thu Sep 24 05:56:53 2026 by rpki-client