$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft File: 5BD70FF0C393471CFAF795433474B327BD4832F9.mft (raw, json) Hash identifier: GPmNpLryZDYvq5l0dHlhYk0ahnPuMmxxUxWPbJE4ruo= Subject key identifier: 24:DE:3A:32:63:DA:1C:74:38:47:64:C3:77:D6:32:23:61:5C:51:2D Authority key identifier: 5B:D7:0F:F0:C3:93:47:1C:FA:F7:95:43:34:74:B3:27:BD:48:32:F9 Certificate issuer: /CN=5BD70FF0C393471CFAF795433474B327BD4832F9 Certificate serial: 29D154ACCCEB1D03F04A6F08DF355CE67974C779 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BD70FF0C393471CFAF795433474B327BD4832F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft Manifest number: C5 Signing time: Thu 24 Sep 2026 20:46:13 +0000 Manifest this update: Thu 24 Sep 2026 20:41:13 +0000 Manifest next update: Fri 25 Sep 2026 23:37:13 +0000 Files and hashes: 1: 5BD70FF0C393471CFAF795433474B327BD4832F9.crl (hash: 0DMmXv3Bt5XJQzkWcS5CnySs9bu/O1Sb/+8Vu2Nu8FU=) 2: 3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa (hash: tdzqlaQf0fF4d+ZUvSQhNIWl0HYGOdoxh6aHUWDnZjg=) 3: 3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa (hash: VRIdIq5putn/ECgQ5btezrubt1dqb54ZcZ8apLF1yIY=) 4: 3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa (hash: bBQLsVkx2CpNTLhQIb39ezRJZR+3VFuLJFWKGpnOARA=) 5: 3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa (hash: kDdkImc9WCIWpXnaeyzXyBkOibkDgoSjiG8qhXynUZA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.crl rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BD70FF0C393471CFAF795433474B327BD4832F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 23:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:d1:54:ac:cc:eb:1d:03:f0:4a:6f:08:df:35:5c:e6:79:74:c7:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD70FF0C393471CFAF795433474B327BD4832F9 Validity Not Before: Sep 24 20:41:13 2026 GMT Not After : Sep 25 23:37:13 2026 GMT Subject: CN=24DE3A3263DA1C74384764C377D63223615C512D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:40:2a:79:8c:03:15:4d:67:05:ff:96:d1:53: 5b:16:fe:57:7f:61:38:f5:6e:0c:f6:5e:aa:c9:fa: c2:6b:eb:be:00:11:3e:62:ab:3e:cc:28:04:07:c7: 5f:83:0d:e5:c4:ce:aa:b9:15:dc:b8:f0:44:01:22: 8a:01:a9:b1:f2:a9:a5:6a:3a:33:89:74:33:be:a1: 81:11:b6:ed:0f:0f:5b:7f:1b:17:94:02:59:0d:03: 67:f9:11:35:da:87:01:0d:1c:cc:c9:05:e1:aa:d6: f8:d6:a4:03:63:7d:63:17:c5:a1:bd:5d:f9:21:5c: a9:b2:c9:b1:01:f3:3b:86:22:cf:0a:0f:d4:80:fd: 51:3e:f4:9d:b1:81:3d:6c:20:ec:a5:2b:f4:97:d8: cb:8b:e2:bc:ca:e9:b7:4b:e5:90:ce:d6:36:c3:da: a6:b8:9f:72:8c:48:ec:a5:96:56:49:79:49:1a:4e: e8:b9:9e:1f:25:5b:34:4c:0a:67:04:36:36:8d:4e: c9:d1:19:fa:e2:40:58:fc:9c:df:1c:e1:7c:f0:a0: 93:58:3a:dc:ce:99:40:d9:c4:63:f2:a2:30:9c:65: d1:ac:2c:1d:ad:17:a4:29:41:06:ec:fe:80:24:b0: c7:d2:dc:91:94:11:db:ba:c9:86:69:10:e9:36:1a: d4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DE:3A:32:63:DA:1C:74:38:47:64:C3:77:D6:32:23:61:5C:51:2D X509v3 Authority Key Identifier: keyid:5B:D7:0F:F0:C3:93:47:1C:FA:F7:95:43:34:74:B3:27:BD:48:32:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BD70FF0C393471CFAF795433474B327BD4832F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:f6:34:62:30:98:3b:7c:b1:2a:9c:aa:3d:ee:aa:67:83:0a: 43:26:d8:73:19:22:ab:12:3a:42:37:e2:17:91:b1:96:68:ae: 44:84:89:4f:4f:99:fa:20:22:70:01:a7:bf:3f:bc:02:8c:6a: 1c:b6:3c:e1:3f:64:60:9c:4d:10:e3:73:13:22:b1:4e:11:bd: 65:ce:3b:46:31:63:90:32:7c:db:e8:be:6e:d4:d2:4f:75:d8: 0c:9e:ae:bb:8f:99:ed:fd:ee:50:44:0c:78:ff:db:51:3e:3a: e9:ff:b3:fb:32:10:25:69:fe:e0:fa:7f:5b:4b:ea:80:65:b9: 54:1c:9d:ae:99:69:a1:e1:f0:4f:c6:97:82:dd:11:85:bf:e5: a4:c7:dc:4d:5e:cf:95:3c:5b:ed:97:fa:40:2e:b8:fe:47:3f: 60:b5:fb:1b:c5:2a:1d:1e:99:a6:e9:51:ef:db:f4:7e:16:8f: 2c:d7:bc:cd:5c:bd:17:9c:d2:7f:26:fe:a8:04:e1:e8:73:55: c7:6b:98:e2:b4:eb:45:9a:61:1e:f0:71:2d:50:d1:ff:e0:32: 3f:7b:de:a5:c2:e6:94:59:ed:4e:4b:65:bf:14:58:e9:96:1e: a4:f5:08:ca:62:9c:2f:e6:60:7a:35:71:78:98:d2:26:70:97: 23:8f:a4:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKdFUrMzrHQPwSm8I3zVc5nl0x3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJENzBGRjBDMzkzNDcxQ0ZBRjc5NTQzMzQ3NEIzMjdC RDQ4MzJGOTAeFw0yNjA5MjQyMDQxMTNaFw0yNjA5MjUyMzM3MTNaMDMxMTAvBgNV BAMTKDI0REUzQTMyNjNEQTFDNzQzODQ3NjRDMzc3RDYzMjIzNjE1QzUxMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyQCp5jAMVTWcF/5bRU1sW/ld/ YTj1bgz2XqrJ+sJr674AET5iqz7MKAQHx1+DDeXEzqq5Fdy48EQBIooBqbHyqaVq OjOJdDO+oYERtu0PD1t/GxeUAlkNA2f5ETXahwENHMzJBeGq1vjWpANjfWMXxaG9 XfkhXKmyybEB8zuGIs8KD9SA/VE+9J2xgT1sIOylK/SX2MuL4rzK6bdL5ZDO1jbD 2qa4n3KMSOylllZJeUkaTui5nh8lWzRMCmcENjaNTsnRGfriQFj8nN8c4XzwoJNY OtzOmUDZxGPyojCcZdGsLB2tF6QpQQbs/oAksMfS3JGUEdu6yYZpEOk2GtQZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJN46MmPaHHQ4R2TDd9YyI2FcUS0wHwYDVR0j BBgwFoAUW9cP8MOTRxz695VDNHSzJ71IMvkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkyNGZhOWEtZTVmMy00MjY1LTllMWQtODRlNDUzNTk2MWQwLzAvNUJENzBGRjBD MzkzNDcxQ0ZBRjc5NTQzMzQ3NEIzMjdCRDQ4MzJGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QkQ3MEZGMEMzOTM0NzFDRkFGNzk1NDMzNDc0QjMyN0JENDgz MkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkyNGZhOWEtZTVmMy00MjY1LTll MWQtODRlNDUzNTk2MWQwLzAvNUJENzBGRjBDMzkzNDcxQ0ZBRjc5NTQzMzQ3NEIz MjdCRDQ4MzJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIn2NGIwmDt8sSqcqj3uqmeDCkMm2HMZIqsS OkI34heRsZZorkSEiU9PmfogInABp78/vAKMahy2POE/ZGCcTRDjcxMisU4RvWXO O0YxY5AyfNvovm7U0k912AyerruPme397lBEDHj/21E+Oun/s/syECVp/uD6f1tL 6oBluVQcna6ZaaHh8E/Gl4LdEYW/5aTH3E1ez5U8W+2X+kAuuP5HP2C1+xvFKh0e mabpUe/b9H4WjyzXvM1cvRec0n8m/qgE4ehzVcdrmOK060WaYR7wcS1Q0f/gMj97 3qXC5pRZ7U5LZb8UWOmWHqT1CMpinC/mYHo1cXiY0iZwlyOPpNU= -----END CERTIFICATE-----Generated at Fri Sep 25 05:41:38 2026 by rpki-client