$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/5675AA245CEF919DAFAE165474D97FEABD97EF27.mft File: 5675AA245CEF919DAFAE165474D97FEABD97EF27.mft (raw, json) Hash identifier: wo1JKY+SQWsekObfr6DJws2ddvFfgjKDNZxbspJXAtQ= Subject key identifier: 2D:FD:CA:0B:36:1D:1D:90:00:58:17:9D:2B:94:16:8D:A4:36:CE:B4 Authority key identifier: 56:75:AA:24:5C:EF:91:9D:AF:AE:16:54:74:D9:7F:EA:BD:97:EF:27 Certificate issuer: /CN=5675AA245CEF919DAFAE165474D97FEABD97EF27 Certificate serial: 20DFF2B4567BDBE311139DC8EF3EB29BA93DE8C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5675AA245CEF919DAFAE165474D97FEABD97EF27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/5675AA245CEF919DAFAE165474D97FEABD97EF27.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 12:56:54 +0000 Manifest this update: Thu 24 Sep 2026 12:51:54 +0000 Manifest next update: Fri 25 Sep 2026 16:25:54 +0000 Files and hashes: 1: 5675AA245CEF919DAFAE165474D97FEABD97EF27.crl (hash: FmI5sJDrO1bHb6972LkAEwAyXBZW+vSvjlgrEnJxAjI=) 2: 3130332e31382e3233322e302f32332d3234203d3e20313530323331.roa (hash: HxzvTIopg+934/St0RtxMZkBEPYX29d8UkuRMlyo12U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/5675AA245CEF919DAFAE165474D97FEABD97EF27.crl rsync://rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/5675AA245CEF919DAFAE165474D97FEABD97EF27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5675AA245CEF919DAFAE165474D97FEABD97EF27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:df:f2:b4:56:7b:db:e3:11:13:9d:c8:ef:3e:b2:9b:a9:3d:e8:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5675AA245CEF919DAFAE165474D97FEABD97EF27 Validity Not Before: Sep 24 12:51:54 2026 GMT Not After : Sep 25 16:25:54 2026 GMT Subject: CN=2DFDCA0B361D1D900058179D2B94168DA436CEB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:61:93:6b:8e:a3:cb:8e:cb:50:52:42:16:39: 91:32:19:3a:a6:44:da:70:dc:b9:d2:90:5c:bb:65: 8b:93:3e:be:a7:09:b9:78:c4:ec:43:60:0c:ad:84: 2f:ca:33:70:96:b8:10:7b:eb:66:7e:25:8b:cf:2e: f8:9c:b0:01:3c:e2:b8:ab:9b:bd:a5:6c:e7:df:b6: b1:50:d8:d0:2c:8b:bb:77:88:7a:5d:e7:82:c9:f0: eb:71:26:3b:99:8f:72:2c:42:c1:77:58:cd:ff:28: de:5f:03:84:54:9e:4d:45:48:82:ab:17:98:63:c8: a8:65:54:f5:e2:9b:03:ba:5f:6e:c2:b4:1e:53:cf: 01:ef:ba:3c:fd:5f:64:ba:cc:35:30:c2:fe:a5:85: ab:1c:0c:d8:2f:a9:f8:5f:8f:1e:28:47:87:46:83: 03:95:f8:18:6d:60:64:af:ad:9f:ba:04:6f:6f:8a: 25:5a:a7:31:43:6d:fc:4a:12:bc:14:88:ab:57:d4: af:9b:ec:87:e2:f1:6b:e4:b8:23:91:b7:8e:99:b3: 61:f9:38:ad:92:ca:92:a7:f1:fc:28:c3:49:50:0e: 15:e3:96:9d:bd:9e:d1:cf:55:bc:11:0f:66:4e:ed: 29:94:ee:61:99:71:c4:4f:52:07:b4:d9:44:61:9f: 14:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FD:CA:0B:36:1D:1D:90:00:58:17:9D:2B:94:16:8D:A4:36:CE:B4 X509v3 Authority Key Identifier: keyid:56:75:AA:24:5C:EF:91:9D:AF:AE:16:54:74:D9:7F:EA:BD:97:EF:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/5675AA245CEF919DAFAE165474D97FEABD97EF27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5675AA245CEF919DAFAE165474D97FEABD97EF27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/5675AA245CEF919DAFAE165474D97FEABD97EF27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:33:6d:d6:1a:d2:cc:a9:d1:91:91:9b:b4:e6:c5:9e:76:f0: 96:02:2d:c1:a1:af:ad:a5:77:b0:68:63:42:0b:e9:bf:a5:e5: 66:e7:1c:7f:63:0e:c4:a7:47:91:24:c4:79:ea:84:66:4b:8a: 30:06:0a:84:e0:61:d0:eb:7e:27:1b:85:e9:c9:cf:7b:16:57: ce:a6:29:d4:e2:ea:07:d0:81:d4:ac:9b:b3:17:93:b5:07:c2: b7:32:ca:83:0a:32:57:b2:22:43:65:59:c9:fa:60:69:9a:53: fd:ee:20:4c:ee:25:f5:ea:17:fa:d6:f0:c2:23:2b:2a:f5:ab: 9c:e6:4b:d3:72:b6:10:08:57:af:cc:32:46:68:92:28:f4:98: f1:13:74:9c:8f:5e:93:1a:ad:04:86:f2:17:c2:05:6c:69:cf: 0f:ae:93:0c:b2:f3:33:42:14:32:25:8b:fc:04:d8:0c:7e:c4: 46:7c:cf:d4:dd:7f:b1:c2:fc:fc:87:14:cc:ea:97:48:64:1d: d3:2a:63:49:b5:08:cc:87:73:e3:1a:ad:0c:4c:b6:3c:ca:e6: cb:22:79:be:c2:36:0c:56:1f:74:19:df:41:83:fd:1c:92:c6: b6:5b:62:1e:f6:11:bc:46:46:5c:e3:f4:24:47:35:e8:96:18: a5:c1:14:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIN/ytFZ72+MRE53I7z6ym6k96MUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY3NUFBMjQ1Q0VGOTE5REFGQUUxNjU0NzREOTdGRUFC RDk3RUYyNzAeFw0yNjA5MjQxMjUxNTRaFw0yNjA5MjUxNjI1NTRaMDMxMTAvBgNV BAMTKDJERkRDQTBCMzYxRDFEOTAwMDU4MTc5RDJCOTQxNjhEQTQzNkNFQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAYZNrjqPLjstQUkIWOZEyGTqm RNpw3LnSkFy7ZYuTPr6nCbl4xOxDYAythC/KM3CWuBB762Z+JYvPLvicsAE84rir m72lbOfftrFQ2NAsi7t3iHpd54LJ8OtxJjuZj3IsQsF3WM3/KN5fA4RUnk1FSIKr F5hjyKhlVPXimwO6X27CtB5TzwHvujz9X2S6zDUwwv6lhascDNgvqfhfjx4oR4dG gwOV+BhtYGSvrZ+6BG9viiVapzFDbfxKErwUiKtX1K+b7Ifi8WvkuCORt46Zs2H5 OK2SypKn8fwow0lQDhXjlp29ntHPVbwRD2ZO7SmU7mGZccRPUge02URhnxSPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULf3KCzYdHZAAWBedK5QWjaQ2zrQwHwYDVR0j BBgwFoAUVnWqJFzvkZ2vrhZUdNl/6r2X7ycwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDcyMjQxOTEtYmZmMC00ODE1LWJlMGUtYTJhYThkMzhkNWEwLzAvNTY3NUFBMjQ1 Q0VGOTE5REFGQUUxNjU0NzREOTdGRUFCRDk3RUYyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81Njc1QUEyNDVDRUY5MTlEQUZBRTE2NTQ3NEQ5N0ZFQUJEOTdF RjI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDcyMjQxOTEtYmZmMC00ODE1LWJl MGUtYTJhYThkMzhkNWEwLzAvNTY3NUFBMjQ1Q0VGOTE5REFGQUUxNjU0NzREOTdG RUFCRDk3RUYyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUzbdYa0syp0ZGRm7TmxZ528JYCLcGhr62l d7BoY0IL6b+l5WbnHH9jDsSnR5EkxHnqhGZLijAGCoTgYdDrficbhenJz3sWV86m KdTi6gfQgdSsm7MXk7UHwrcyyoMKMleyIkNlWcn6YGmaU/3uIEzuJfXqF/rW8MIj Kyr1q5zmS9NythAIV6/MMkZokij0mPETdJyPXpMarQSG8hfCBWxpzw+ukwyy8zNC FDIli/wE2Ax+xEZ8z9Tdf7HC/PyHFMzql0hkHdMqY0m1CMyHc+MarQxMtjzK5ssi eb7CNgxWH3QZ30GD/RySxrZbYh72EbxGRlzj9CRHNeiWGKXBFF0= -----END CERTIFICATE-----Generated at Thu Sep 24 23:30:23 2026 by rpki-client