$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.mft File: 529B615ABA9F13191A216A37170723B01A89793A.mft (raw, json) Hash identifier: 8FoNWW5qsylzOV0Otu5GH9QQyb/us7YjnXRVDc+FBZk= Subject key identifier: 70:5B:98:A4:23:B8:04:38:5A:79:9B:C4:4C:D4:43:55:53:B6:C6:74 Authority key identifier: 52:9B:61:5A:BA:9F:13:19:1A:21:6A:37:17:07:23:B0:1A:89:79:3A Certificate issuer: /CN=529B615ABA9F13191A216A37170723B01A89793A Certificate serial: 6F72698C012C6D06C58A1D54970FCDE748639F06 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/529B615ABA9F13191A216A37170723B01A89793A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 18:43:35 +0000 Manifest this update: Fri 25 Sep 2026 18:38:35 +0000 Manifest next update: Sat 26 Sep 2026 22:09:35 +0000 Files and hashes: 1: 529B615ABA9F13191A216A37170723B01A89793A.crl (hash: xXQJssYHC5Uv/HXePNDm8NRggbRHNl6qzDmJBdJ1Yy8=) 2: 3130332e38332e39362e302f32322d3234203d3e20313336303738.roa (hash: FGY54/U/sApIO0WnuIi9FgJuB2ojszOr2KUIIMJQgfQ=) 3: 323430303a393163303a3a2f33322d3438203d3e20313336303738.roa (hash: yuCoctK3fh/1noMtqmTNEcpu7lQ/bDLhcWGke9P3cXA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.crl rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/529B615ABA9F13191A216A37170723B01A89793A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 22:09:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:72:69:8c:01:2c:6d:06:c5:8a:1d:54:97:0f:cd:e7:48:63:9f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529B615ABA9F13191A216A37170723B01A89793A Validity Not Before: Sep 25 18:38:35 2026 GMT Not After : Sep 26 22:09:35 2026 GMT Subject: CN=705B98A423B804385A799BC44CD4435553B6C674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ff:fa:63:d8:60:ff:ac:f5:09:77:b1:b1:37: 00:c8:de:14:47:4c:08:ba:05:b5:03:b4:ab:2a:9a: f9:37:70:f3:3e:13:aa:74:06:7f:ac:83:79:51:cf: 1c:2a:55:9b:ef:92:7a:04:32:b2:31:51:67:af:72: 96:fa:02:03:56:54:b8:58:da:d7:7f:1f:31:e1:14: 9a:9c:2b:1a:0a:89:b1:ea:0c:f7:7c:20:b4:d2:57: f9:8c:cf:81:51:87:b6:c3:bd:64:c0:5d:08:a9:95: bd:71:68:c8:e2:ea:9c:89:68:2c:18:4f:43:46:01: 03:ce:5b:26:3e:b1:73:f3:dd:2a:51:ed:10:00:a9: 5b:a8:e5:f9:0b:e3:1c:19:34:45:54:1b:8f:da:62: 26:52:d4:4e:4c:71:4c:fd:64:24:09:c7:6d:05:49: d8:b9:23:c4:eb:57:d9:c3:87:47:13:33:8c:4d:f9: d8:8b:40:46:84:86:99:40:bb:f8:95:3a:af:fb:9a: 60:1f:38:19:f0:91:7e:c4:af:1a:90:74:48:fd:62: c0:36:13:1f:54:c6:2c:e8:fb:5b:6b:8c:44:64:a9: 0e:63:ec:8a:65:ef:59:ce:bb:59:98:8d:14:9d:01: 8a:33:57:5d:d5:d7:62:ae:7e:64:9a:a1:f8:b7:72: d5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5B:98:A4:23:B8:04:38:5A:79:9B:C4:4C:D4:43:55:53:B6:C6:74 X509v3 Authority Key Identifier: keyid:52:9B:61:5A:BA:9F:13:19:1A:21:6A:37:17:07:23:B0:1A:89:79:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/529B615ABA9F13191A216A37170723B01A89793A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:bb:ae:35:12:25:c6:35:12:8f:49:f9:a6:8a:fe:a1:46:23: 9f:ed:b2:80:77:af:c5:cf:2f:00:3b:ab:47:2f:dc:ab:5e:b3: 18:48:11:f1:c2:be:12:fe:de:b4:c2:58:ec:82:5a:4d:3b:e1: 39:36:3b:8b:e9:a7:f3:87:d0:fa:a0:5c:54:f0:f5:81:16:40: af:21:23:89:46:90:45:02:04:e8:d6:bb:81:c4:48:b2:59:15: e8:16:c0:a9:26:d7:a0:6e:cd:e3:f1:15:bd:04:53:31:f5:22: f9:31:66:39:d1:13:23:5e:c0:fe:84:b2:f6:6b:25:08:41:e9: cb:7f:91:c5:21:79:c1:d0:76:ec:82:25:c0:e0:db:f9:68:ae: 70:c7:c0:68:ea:a3:37:e1:09:01:98:83:bb:b8:65:72:cf:dd: 1c:91:6e:18:ab:ed:20:c9:ae:5e:56:6c:61:37:6e:7a:04:37: a4:68:2b:96:9f:a1:ec:cf:03:c0:d5:6d:ac:c1:f9:92:34:2e: ef:c3:3e:f7:f8:98:21:9c:30:4f:a9:5e:22:c5:67:30:2d:af: 02:72:96:92:e4:c8:9a:8a:82:05:17:5f:97:1c:23:08:01:cd: e3:c9:0a:eb:fe:70:e2:17:0b:26:c8:67:26:4e:8d:88:7a:a1: fa:57:c6:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb3JpjAEsbQbFih1Ulw/N50hjnwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5QjYxNUFCQTlGMTMxOTFBMjE2QTM3MTcwNzIzQjAx QTg5NzkzQTAeFw0yNjA5MjUxODM4MzVaFw0yNjA5MjYyMjA5MzVaMDMxMTAvBgNV BAMTKDcwNUI5OEE0MjNCODA0Mzg1QTc5OUJDNDRDRDQ0MzU1NTNCNkM2NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK//pj2GD/rPUJd7GxNwDI3hRH TAi6BbUDtKsqmvk3cPM+E6p0Bn+sg3lRzxwqVZvvknoEMrIxUWevcpb6AgNWVLhY 2td/HzHhFJqcKxoKibHqDPd8ILTSV/mMz4FRh7bDvWTAXQiplb1xaMji6pyJaCwY T0NGAQPOWyY+sXPz3SpR7RAAqVuo5fkL4xwZNEVUG4/aYiZS1E5McUz9ZCQJx20F Sdi5I8TrV9nDh0cTM4xN+diLQEaEhplAu/iVOq/7mmAfOBnwkX7ErxqQdEj9YsA2 Ex9Uxizo+1trjERkqQ5j7Ipl71nOu1mYjRSdAYozV13V12KufmSaofi3ctVZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcFuYpCO4BDhaeZvETNRDVVO2xnQwHwYDVR0j BBgwFoAUUpthWrqfExkaIWo3FwcjsBqJeTowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzZlYzM1ZWQtMGYzNi00M2Q3LWI1MzctMDZkYjMxNGM5MGQ1LzAvNTI5QjYxNUFC QTlGMTMxOTFBMjE2QTM3MTcwNzIzQjAxQTg5NzkzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MjlCNjE1QUJBOUYxMzE5MUEyMTZBMzcxNzA3MjNCMDFBODk3 OTNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzZlYzM1ZWQtMGYzNi00M2Q3LWI1 MzctMDZkYjMxNGM5MGQ1LzAvNTI5QjYxNUFCQTlGMTMxOTFBMjE2QTM3MTcwNzIz QjAxQTg5NzkzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABO7rjUSJcY1Eo9J+aaK/qFGI5/tsoB3r8XP LwA7q0cv3KtesxhIEfHCvhL+3rTCWOyCWk074Tk2O4vpp/OH0PqgXFTw9YEWQK8h I4lGkEUCBOjWu4HESLJZFegWwKkm16BuzePxFb0EUzH1IvkxZjnREyNewP6EsvZr JQhB6ct/kcUhecHQduyCJcDg2/lornDHwGjqozfhCQGYg7u4ZXLP3RyRbhir7SDJ rl5WbGE3bnoEN6RoK5afoezPA8DVbazB+ZI0Lu/DPvf4mCGcME+pXiLFZzAtrwJy lpLkyJqKggUXX5ccIwgBzePJCuv+cOIXCybIZyZOjYh6ofpXxiE= -----END CERTIFICATE-----Generated at Sat Sep 26 14:55:57 2026 by rpki-client