$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft File: 5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft (raw, json) Hash identifier: HeDcocwTM2v6K3DGOr9+LDYu+O26FkjOkrpYd7TIB+s= Subject key identifier: 60:67:BB:7C:E7:0C:72:A9:19:86:DF:F6:3E:37:70:9B:95:BB:14:BB Authority key identifier: 5D:10:A7:2C:87:21:CE:50:C0:93:BD:9B:5D:1A:C9:BB:6F:E9:34:95 Certificate issuer: /CN=5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495 Certificate serial: 4C6576EE3EC6F525102D3F4BD93770747576470F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 12:16:14 +0000 Manifest this update: Wed 23 Sep 2026 12:11:14 +0000 Manifest next update: Thu 24 Sep 2026 15:11:14 +0000 Files and hashes: 1: 5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.crl (hash: ZA4LjfTKZlvpc73rXTJKAGLWXZAhl8eTSKxqI2liIro=) 2: 3136302e31392e38392e302f32342d3234203d3e20313532373839.roa (hash: JniyB+kykIY2ndXJuy/YxGMo3Dbdi9UVhfqGmbiBAvY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.crl rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 15:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:65:76:ee:3e:c6:f5:25:10:2d:3f:4b:d9:37:70:74:75:76:47:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495 Validity Not Before: Sep 23 12:11:14 2026 GMT Not After : Sep 24 15:11:14 2026 GMT Subject: CN=6067BB7CE70C72A91986DFF63E37709B95BB14BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a0:60:13:51:a3:48:52:83:a4:8b:8e:7d:74: 55:51:11:e0:54:5b:b5:55:84:de:a4:4a:99:c5:c5: a7:e8:9d:f6:81:52:a4:4b:e9:70:61:6a:c0:ad:35: b6:10:2a:f3:16:50:83:1f:5e:3b:3d:38:b4:b5:33: b2:d2:ae:ea:04:a4:a4:dd:ee:df:a0:97:d0:81:a3: d2:f8:0e:26:cf:d8:e6:b7:d0:a7:e7:56:13:7b:07: b1:f6:7e:52:98:10:1f:18:3f:e3:42:b9:87:9f:49: e2:e1:af:10:22:03:13:e3:ee:10:c5:29:27:c5:54: 73:60:39:ce:52:ea:43:60:29:97:6a:d9:7f:c4:a0: ff:90:0f:a5:6e:47:f5:de:57:76:8d:58:37:f9:aa: 9d:1f:85:bd:33:6f:11:23:3e:02:65:f1:ae:e7:b3: de:61:69:4a:ef:95:55:18:c6:35:e7:34:76:4d:5f: 37:69:ad:44:4a:dc:33:38:82:a2:68:ed:08:10:88: 12:30:a2:5f:bf:3d:b1:73:bf:d3:8f:94:d5:cf:3c: 41:49:4e:40:b0:2c:86:c7:cf:0c:d5:ed:3e:40:7a: 08:c6:7f:62:1d:c1:f7:22:f9:b1:ba:bd:5d:d1:22: a4:e3:75:8e:24:f0:7e:4e:42:38:0d:61:35:24:04: 26:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:67:BB:7C:E7:0C:72:A9:19:86:DF:F6:3E:37:70:9B:95:BB:14:BB X509v3 Authority Key Identifier: keyid:5D:10:A7:2C:87:21:CE:50:C0:93:BD:9B:5D:1A:C9:BB:6F:E9:34:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:1e:ac:87:06:63:89:1f:1e:d8:77:8e:49:b0:f5:64:de:01: 9c:9f:b6:d6:f0:65:01:8a:8d:95:a9:e6:d3:89:6b:02:b4:9f: 6d:07:b6:33:93:23:0d:d2:71:26:70:59:ac:c7:a6:0c:16:16: 86:fb:6d:cb:be:a3:05:f8:c6:52:58:7d:99:6f:bd:86:84:9a: ee:6b:07:10:e4:df:05:4a:52:34:da:e8:c1:e7:1f:cc:ee:71: ee:62:78:43:15:61:0e:95:1c:08:3b:9f:dd:20:93:10:8e:83: 62:8d:e5:58:2d:c0:a4:02:81:40:13:ec:12:86:b5:f4:ff:f1: 2d:2d:f3:61:5f:b3:8f:65:5b:74:2e:72:b2:f2:ba:26:bd:55: 6d:97:95:fe:74:b3:06:99:75:5d:3f:f5:11:05:ba:e5:ca:38: f5:96:ee:2b:5e:b7:1e:5f:6a:6e:6b:6a:84:b3:64:b5:52:04: 4d:a5:8c:ae:c3:ac:1c:aa:51:3e:47:04:ec:35:f2:5a:a4:a5: 42:6d:ce:2b:bc:a9:e3:f2:12:51:ce:5c:ce:cc:53:26:e8:2a: 2d:89:67:d9:e1:40:65:04:42:9a:5f:80:76:ca:34:3b:28:5f: 7a:36:66:00:bc:b5:c6:60:89:63:df:0b:83:c3:02:01:3c:57: 42:46:63:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTGV27j7G9SUQLT9L2TdwdHV2Rw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQxMEE3MkM4NzIxQ0U1MEMwOTNCRDlCNUQxQUM5QkI2 RkU5MzQ5NTAeFw0yNjA5MjMxMjExMTRaFw0yNjA5MjQxNTExMTRaMDMxMTAvBgNV BAMTKDYwNjdCQjdDRTcwQzcyQTkxOTg2REZGNjNFMzc3MDlCOTVCQjE0QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcoGATUaNIUoOki459dFVREeBU W7VVhN6kSpnFxafonfaBUqRL6XBhasCtNbYQKvMWUIMfXjs9OLS1M7LSruoEpKTd 7t+gl9CBo9L4DibP2Oa30KfnVhN7B7H2flKYEB8YP+NCuYefSeLhrxAiAxPj7hDF KSfFVHNgOc5S6kNgKZdq2X/EoP+QD6VuR/XeV3aNWDf5qp0fhb0zbxEjPgJl8a7n s95haUrvlVUYxjXnNHZNXzdprURK3DM4gqJo7QgQiBIwol+/PbFzv9OPlNXPPEFJ TkCwLIbHzwzV7T5AegjGf2Idwfci+bG6vV3RIqTjdY4k8H5OQjgNYTUkBCYdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYGe7fOcMcqkZht/2Pjdwm5W7FLswHwYDVR0j BBgwFoAUXRCnLIchzlDAk72bXRrJu2/pNJUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGRjMTAwN2QtZmQ2MS00NTQzLThmNWYtM2ZkZmZhNGIwMWU2LzAvNUQxMEE3MkM4 NzIxQ0U1MEMwOTNCRDlCNUQxQUM5QkI2RkU5MzQ5NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81RDEwQTcyQzg3MjFDRTUwQzA5M0JEOUI1RDFBQzlCQjZGRTkz NDk1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGRjMTAwN2QtZmQ2MS00NTQzLThm NWYtM2ZkZmZhNGIwMWU2LzAvNUQxMEE3MkM4NzIxQ0U1MEMwOTNCRDlCNUQxQUM5 QkI2RkU5MzQ5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJAerIcGY4kfHth3jkmw9WTeAZyfttbwZQGK jZWp5tOJawK0n20HtjOTIw3ScSZwWazHpgwWFob7bcu+owX4xlJYfZlvvYaEmu5r BxDk3wVKUjTa6MHnH8zuce5ieEMVYQ6VHAg7n90gkxCOg2KN5VgtwKQCgUAT7BKG tfT/8S0t82Ffs49lW3QucrLyuia9VW2Xlf50swaZdV0/9REFuuXKOPWW7itetx5f am5raoSzZLVSBE2ljK7DrByqUT5HBOw18lqkpUJtziu8qePyElHOXM7MUyboKi2J Z9nhQGUEQppfgHbKNDsoX3o2ZgC8tcZgiWPfC4PDAgE8V0JGY/c= -----END CERTIFICATE-----Generated at Wed Sep 23 23:17:45 2026 by rpki-client