$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.mft File: 5137BC6C642818ED44761CE24BD59136B86E9502.mft (raw, json) Hash identifier: II/353aNBP8KJuzt+OTlyC1Zjc+5a1xBg3CnokgM3wk= Subject key identifier: 06:E2:20:FE:02:AF:5B:B5:7A:91:04:9C:7E:A8:94:B4:0E:FA:58:BD Authority key identifier: 51:37:BC:6C:64:28:18:ED:44:76:1C:E2:4B:D5:91:36:B8:6E:95:02 Certificate issuer: /CN=5137BC6C642818ED44761CE24BD59136B86E9502 Certificate serial: 337BA781D76F828EFCC94DBEC2EF542A6451392C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5137BC6C642818ED44761CE24BD59136B86E9502.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 09:43:10 +0000 Manifest this update: Wed 23 Sep 2026 09:38:10 +0000 Manifest next update: Thu 24 Sep 2026 10:51:10 +0000 Files and hashes: 1: 323430333a393530303a3a2f33322d3336203d3e2039363537.roa (hash: Bjupm6rpCAaMTeTPZ2eGuF40Rt3f9ZMn/qqAW7B+FsQ=) 2: 5137BC6C642818ED44761CE24BD59136B86E9502.crl (hash: g+zBuMHW0AkkjZ77Q6TnoC0qVxifgWHJzfbCYMZ6cWc=) 3: 3230322e3133382e3232342e302f31392d3234203d3e2039363537.roa (hash: rnnGREcPzTzqU+DHtFpFgNVjo93sVnYIgoX5i3YQ96Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.crl rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5137BC6C642818ED44761CE24BD59136B86E9502.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:7b:a7:81:d7:6f:82:8e:fc:c9:4d:be:c2:ef:54:2a:64:51:39:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5137BC6C642818ED44761CE24BD59136B86E9502 Validity Not Before: Sep 23 09:38:10 2026 GMT Not After : Sep 24 10:51:10 2026 GMT Subject: CN=06E220FE02AF5BB57A91049C7EA894B40EFA58BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a3:e9:91:2c:3e:4f:06:8e:41:1f:b9:8a:b2: 03:6f:97:cb:cd:d0:52:23:fd:e7:cf:91:53:9e:ba: 53:30:0f:7c:e6:27:7f:e9:24:a2:04:60:4f:1b:a3: 56:ee:1a:b8:81:5d:ce:dc:f6:46:12:0b:d2:9c:37: 49:a9:68:04:fb:f7:32:50:ed:c0:9c:b4:a2:57:f4: 54:6d:ec:c2:d9:ee:b5:07:f9:b6:2d:14:a3:8a:62: 6c:a0:50:7b:12:14:d4:41:83:a8:62:a3:42:fe:8c: d6:4d:d2:a1:42:0d:cc:ae:c4:1c:f1:31:ca:45:1f: b4:cb:02:aa:a7:4a:24:e5:46:33:e7:9b:d1:29:b8: a8:0b:d2:c9:ee:7a:81:c8:44:c5:7e:b5:a3:75:fd: f3:1a:fd:e8:e0:16:c7:60:cc:fc:0a:e8:e2:ab:c8: fd:9b:4e:f0:37:9d:e9:59:23:fc:67:13:82:3e:63: 29:c3:91:98:0a:a9:8a:24:cf:45:ac:b3:d0:85:15: 0f:91:5a:31:4d:d5:f0:76:2a:5c:d9:ab:6c:ef:72: 53:c9:b6:e8:3e:d1:9e:13:17:c7:bf:2c:af:f5:70: 7d:35:fd:5f:5d:be:2d:83:3e:17:91:f3:b2:43:a5: 12:03:4a:25:e2:7a:bd:a5:0c:88:32:03:08:37:dc: 90:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E2:20:FE:02:AF:5B:B5:7A:91:04:9C:7E:A8:94:B4:0E:FA:58:BD X509v3 Authority Key Identifier: keyid:51:37:BC:6C:64:28:18:ED:44:76:1C:E2:4B:D5:91:36:B8:6E:95:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5137BC6C642818ED44761CE24BD59136B86E9502.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:85:cc:04:d0:2a:fb:34:91:38:d9:5c:53:85:3c:41:ee:0b: 4a:ee:34:ec:be:75:ee:b9:46:2f:56:15:44:a3:72:f5:f1:eb: 36:6d:0a:9f:cc:39:e0:5c:eb:a1:f3:03:f8:d2:a3:20:29:86: b0:1f:2a:be:ce:3e:9c:41:96:09:7b:9e:43:d4:a8:43:c2:17: 78:3b:53:22:14:44:22:39:e3:be:0a:68:34:7a:13:5d:1c:77: 3e:5b:a9:35:f5:83:e6:e3:2a:ec:b3:63:28:fc:e2:ba:42:2b: b4:53:3c:51:06:f0:48:04:52:24:da:39:bc:7e:ea:fc:22:83: d1:45:75:c3:72:09:60:5f:a3:b9:34:52:a4:ff:57:57:61:c2: b2:19:ea:ef:be:3d:8d:32:1a:76:ef:0e:d9:0a:03:6d:f9:ee: 6a:c9:ec:5c:f9:b2:37:86:2a:c9:ee:9a:04:0f:ab:f4:43:34: 92:e2:b2:34:5a:85:2a:ef:83:be:7c:dc:07:8c:0d:c9:55:59: da:13:20:71:4d:3a:70:69:4c:38:60:97:d5:0e:ab:fd:1c:c5: 32:80:22:fd:54:36:61:3a:72:11:31:20:14:d5:ac:b7:5d:6e: 62:bb:2a:9d:da:0b:83:14:8c:b6:60:ce:00:5e:42:ae:17:d9: b4:cf:f9:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM3ungddvgo78yU2+wu9UKmRROSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEzN0JDNkM2NDI4MThFRDQ0NzYxQ0UyNEJENTkxMzZC ODZFOTUwMjAeFw0yNjA5MjMwOTM4MTBaFw0yNjA5MjQxMDUxMTBaMDMxMTAvBgNV BAMTKDA2RTIyMEZFMDJBRjVCQjU3QTkxMDQ5QzdFQTg5NEI0MEVGQTU4QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQo+mRLD5PBo5BH7mKsgNvl8vN 0FIj/efPkVOeulMwD3zmJ3/pJKIEYE8bo1buGriBXc7c9kYSC9KcN0mpaAT79zJQ 7cCctKJX9FRt7MLZ7rUH+bYtFKOKYmygUHsSFNRBg6hio0L+jNZN0qFCDcyuxBzx McpFH7TLAqqnSiTlRjPnm9EpuKgL0snueoHIRMV+taN1/fMa/ejgFsdgzPwK6OKr yP2bTvA3nelZI/xnE4I+YynDkZgKqYokz0Wss9CFFQ+RWjFN1fB2KlzZq2zvclPJ tug+0Z4TF8e/LK/1cH01/V9dvi2DPheR87JDpRIDSiXier2lDIgyAwg33JBPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBuIg/gKvW7V6kQScfqiUtA76WL0wHwYDVR0j BBgwFoAUUTe8bGQoGO1EdhziS9WRNrhulQIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzhmNmJlYjgtZTRlOC00ZTM5LTgyNzUtMWM2ZDc3YzNlZWY4LzAvNTEzN0JDNkM2 NDI4MThFRDQ0NzYxQ0UyNEJENTkxMzZCODZFOTUwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MTM3QkM2QzY0MjgxOEVENDQ3NjFDRTI0QkQ1OTEzNkI4NkU5 NTAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzhmNmJlYjgtZTRlOC00ZTM5LTgy NzUtMWM2ZDc3YzNlZWY4LzAvNTEzN0JDNkM2NDI4MThFRDQ0NzYxQ0UyNEJENTkx MzZCODZFOTUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAqFzATQKvs0kTjZXFOFPEHuC0ruNOy+de65 Ri9WFUSjcvXx6zZtCp/MOeBc66HzA/jSoyAphrAfKr7OPpxBlgl7nkPUqEPCF3g7 UyIURCI5474KaDR6E10cdz5bqTX1g+bjKuyzYyj84rpCK7RTPFEG8EgEUiTaObx+ 6vwig9FFdcNyCWBfo7k0UqT/V1dhwrIZ6u++PY0yGnbvDtkKA2357mrJ7Fz5sjeG KsnumgQPq/RDNJLisjRahSrvg7583AeMDclVWdoTIHFNOnBpTDhgl9UOq/0cxTKA Iv1UNmE6chExIBTVrLddbmK7Kp3aC4MUjLZgzgBeQq4X2bTP+XQ= -----END CERTIFICATE-----Generated at Thu Sep 24 01:03:40 2026 by rpki-client