$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft File: 5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft (raw, json) Hash identifier: 9K1cyLUamsnW6f3nJTR62BHSFLtGWoss2/gNJJEjmKk= Subject key identifier: 56:46:EB:56:7C:D0:80:5B:B2:22:D7:D2:EB:5F:51:4B:F0:63:24:3B Authority key identifier: 5C:74:45:C1:E1:37:6E:4A:7B:40:4B:C5:3A:71:AC:92:7D:2C:22:04 Certificate issuer: /CN=5C7445C1E1376E4A7B404BC53A71AC927D2C2204 Certificate serial: 0A32B9AAF7DA15DA72F045639296EBAE4939539D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft Manifest number: C1 Signing time: Tue 22 Sep 2026 23:35:40 +0000 Manifest this update: Tue 22 Sep 2026 23:30:40 +0000 Manifest next update: Thu 24 Sep 2026 02:56:40 +0000 Files and hashes: 1: 5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl (hash: Qu75mhfQyH40mi1JxytnkYgLmeHKO8HXJd58nYalgx0=) 2: 3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa (hash: YDSkpFGq8xybThgooh1RThJN9W0fBsfNyr37Omd1f4w=) 3: 3136302e32352e3137342e302f32342d3234203d3e20313533303733.roa (hash: FXO9CsmctV8fdA5KiII/rw/3Y+5l9AlF4P2ED3TDR8A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 02:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:32:b9:aa:f7:da:15:da:72:f0:45:63:92:96:eb:ae:49:39:53:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7445C1E1376E4A7B404BC53A71AC927D2C2204 Validity Not Before: Sep 22 23:30:40 2026 GMT Not After : Sep 24 02:56:40 2026 GMT Subject: CN=5646EB567CD0805BB222D7D2EB5F514BF063243B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:78:4c:ad:2a:bf:a7:e3:90:46:e3:e8:42:e4: 78:ce:bb:e0:83:ff:b9:dd:76:3a:12:86:2b:76:87: 4c:f2:54:7e:54:a6:8e:09:6f:1c:16:a8:64:2b:9d: 0b:3c:a1:fe:e3:4e:f1:53:d6:81:6d:0c:ea:c9:a1: e7:cd:08:ab:2d:d1:56:fc:b4:29:75:29:94:a7:15: 8c:d9:73:6d:33:ec:bb:52:e1:db:a2:f4:31:2e:ff: dc:5a:85:78:23:0b:6c:6f:49:97:2f:04:2a:35:70: ec:4f:5f:eb:f9:46:cf:56:57:3f:86:25:18:0d:88: 9a:65:ee:98:f2:3a:de:f4:ae:f2:33:eb:4a:0b:ca: cc:d8:b4:7c:ca:22:cd:af:eb:64:74:c5:d7:21:36: be:3c:82:d2:b6:ae:74:82:77:79:ad:5c:bf:8a:c3: a7:21:36:08:d0:a9:f4:a9:08:41:c6:54:ee:36:38: b8:b5:bf:b7:5d:90:cc:fb:77:0a:99:07:99:cd:58: 13:4d:fd:c5:73:5c:1e:1b:f9:17:9d:89:c8:3b:8c: b1:e3:fa:f7:19:6f:6d:a9:62:c9:86:df:b1:50:ce: eb:3d:4b:a1:ae:af:25:08:a4:ed:f0:25:81:d3:59: 56:c9:1b:11:16:1d:07:d6:95:2f:82:dc:3d:01:f1: ca:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:46:EB:56:7C:D0:80:5B:B2:22:D7:D2:EB:5F:51:4B:F0:63:24:3B X509v3 Authority Key Identifier: keyid:5C:74:45:C1:E1:37:6E:4A:7B:40:4B:C5:3A:71:AC:92:7D:2C:22:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:91:7d:31:c5:e9:38:c1:52:32:26:38:a4:69:34:aa:c5:7d: 03:07:11:e7:aa:26:4e:a9:86:9e:21:ed:41:61:1f:01:a9:2d: 87:1b:2e:5e:93:5f:ee:c5:d0:87:96:59:54:cc:ef:ae:52:fb: c2:64:30:81:48:c0:71:8f:06:71:28:78:f9:c3:03:8e:c4:be: 12:50:9b:07:be:a4:09:9d:22:83:85:40:22:7e:34:6b:6f:75: 08:ef:0a:e3:72:e2:4a:73:c2:50:69:41:cf:98:eb:66:ab:60: ab:25:16:83:0a:72:08:1f:5c:2a:3e:67:48:60:3e:cf:ef:86: f6:3a:f0:15:d2:e3:30:56:10:db:48:42:47:e9:f2:40:4c:e2: c1:a0:dd:83:25:b3:6f:3a:98:36:dc:7a:e3:09:89:ed:27:19: 60:02:ba:43:0e:76:21:ec:13:35:f7:38:72:b3:75:07:82:77: b8:c5:55:1b:66:a0:01:4b:13:0b:6d:18:ff:9c:90:b7:25:82: bc:b1:15:52:60:eb:92:44:59:d0:b1:23:db:7c:e5:cc:a4:c6: 70:2e:bc:58:35:db:b1:a7:6c:b3:14:05:e0:56:45:86:0b:83: f6:2b:6c:53:9e:19:9b:d1:ae:c7:7a:a4:75:25:50:80:91:d6: 4c:72:87:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCjK5qvfaFdpy8EVjkpbrrkk5U50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3NDQ1QzFFMTM3NkU0QTdCNDA0QkM1M0E3MUFDOTI3 RDJDMjIwNDAeFw0yNjA5MjIyMzMwNDBaFw0yNjA5MjQwMjU2NDBaMDMxMTAvBgNV BAMTKDU2NDZFQjU2N0NEMDgwNUJCMjIyRDdEMkVCNUY1MTRCRjA2MzI0M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoeEytKr+n45BG4+hC5HjOu+CD /7nddjoShit2h0zyVH5Upo4JbxwWqGQrnQs8of7jTvFT1oFtDOrJoefNCKst0Vb8 tCl1KZSnFYzZc20z7LtS4dui9DEu/9xahXgjC2xvSZcvBCo1cOxPX+v5Rs9WVz+G JRgNiJpl7pjyOt70rvIz60oLyszYtHzKIs2v62R0xdchNr48gtK2rnSCd3mtXL+K w6chNgjQqfSpCEHGVO42OLi1v7ddkMz7dwqZB5nNWBNN/cVzXB4b+Redicg7jLHj +vcZb22pYsmG37FQzus9S6GuryUIpO3wJYHTWVbJGxEWHQfWlS+C3D0B8cp5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVkbrVnzQgFuyItfS619RS/BjJDswHwYDVR0j BBgwFoAUXHRFweE3bkp7QEvFOnGskn0sIgQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWM3MmVlM2MtZTE4MC00Mjk2LTlkYWQtOTUwMGVmZDk0ODkwLzAvNUM3NDQ1QzFF MTM3NkU0QTdCNDA0QkM1M0E3MUFDOTI3RDJDMjIwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81Qzc0NDVDMUUxMzc2RTRBN0I0MDRCQzUzQTcxQUM5MjdEMkMy MjA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM3MmVlM2MtZTE4MC00Mjk2LTlk YWQtOTUwMGVmZDk0ODkwLzAvNUM3NDQ1QzFFMTM3NkU0QTdCNDA0QkM1M0E3MUFD OTI3RDJDMjIwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKRfTHF6TjBUjImOKRpNKrFfQMHEeeqJk6p hp4h7UFhHwGpLYcbLl6TX+7F0IeWWVTM765S+8JkMIFIwHGPBnEoePnDA47EvhJQ mwe+pAmdIoOFQCJ+NGtvdQjvCuNy4kpzwlBpQc+Y62arYKslFoMKcggfXCo+Z0hg Ps/vhvY68BXS4zBWENtIQkfp8kBM4sGg3YMls286mDbceuMJie0nGWACukMOdiHs EzX3OHKzdQeCd7jFVRtmoAFLEwttGP+ckLclgryxFVJg65JEWdCxI9t85cykxnAu vFg127GnbLMUBeBWRYYLg/YrbFOeGZvRrsd6pHUlUICR1kxyh6k= -----END CERTIFICATE-----Generated at Wed Sep 23 17:28:45 2026 by rpki-client