$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft File: 5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft (raw, json) Hash identifier: cuHBf5EpiAdCOI9a07bcmM2A7yIux8I7mpUJQHWZUAI= Subject key identifier: 36:1A:8D:CA:53:34:C5:6C:E9:06:D2:82:3F:FA:13:B3:68:15:BB:8F Authority key identifier: 5D:F5:DB:B1:48:D0:F4:EA:BB:1A:70:87:D8:CA:D8:7F:B2:A9:15:64 Certificate issuer: /CN=5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564 Certificate serial: 7E0F156D903E6AD5503BE6C86AC71079AA641846 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft Manifest number: BF Signing time: Wed 23 Sep 2026 03:55:59 +0000 Manifest this update: Wed 23 Sep 2026 03:50:59 +0000 Manifest next update: Thu 24 Sep 2026 05:41:59 +0000 Files and hashes: 1: 5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.crl (hash: iP1AcNZfm6+CHh2kqXllfNZWbpaLtwzI511JQ019/l4=) 2: 3130332e3134322e38382e302f32342d3234203d3e20313339333638.roa (hash: tQktaum4KycUd3NVfEb+S8gEbr6uIhyBlDiFsL9oiH8=) 3: 3130332e3134322e38392e302f32342d3234203d3e20313339333638.roa (hash: 4JRcCjrbt6UQy9keTGtyxuVyA16nB/RDNc0x3IcBoFU=) 4: 3130332e3134322e38382e302f32332d3233203d3e20313339333638.roa (hash: 85nzKNKm1prDMlKjYCs/G3skXgXdFpd3BSx7AhsXh80=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.crl rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 05:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:0f:15:6d:90:3e:6a:d5:50:3b:e6:c8:6a:c7:10:79:aa:64:18:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564 Validity Not Before: Sep 23 03:50:59 2026 GMT Not After : Sep 24 05:41:59 2026 GMT Subject: CN=361A8DCA5334C56CE906D2823FFA13B36815BB8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d8:6c:ba:b8:db:79:b2:75:1c:5b:61:87:94: 9b:5d:6f:24:75:d4:ec:b0:26:78:8c:a8:14:bc:0b: 31:83:ab:a2:3c:10:a1:22:cb:9e:d7:c3:f4:a1:3c: ce:d8:3a:ed:1c:f7:91:ff:f7:06:b1:f1:e0:bb:26: 1b:2d:a5:30:73:9d:3b:0e:67:e0:33:f7:96:9c:0a: a2:0e:38:86:1b:d8:04:63:94:dd:f6:0a:b8:a3:1f: 5c:fa:33:59:5b:c3:52:c3:97:87:e2:55:b6:80:53: 2b:2a:86:46:30:4c:f3:86:dd:24:4c:1a:dd:2d:76: 16:60:1d:7c:f8:b1:a2:76:e9:5e:1d:50:f6:1a:62: 85:b7:96:24:b5:d0:60:eb:93:3c:10:1a:a5:20:c8: 0d:ee:93:b7:fe:4c:1b:3a:bc:e3:75:31:94:1c:da: 75:61:9b:29:2a:46:14:12:38:3d:80:3f:9d:ca:7c: 92:e9:6d:35:05:3c:fb:66:a2:36:07:81:e0:f2:8b: 0e:67:35:86:77:7e:f0:ef:59:45:6b:5d:06:48:b4: 50:0d:7d:ea:92:ef:7d:65:cc:b5:fe:d6:9a:5f:99: 6e:75:12:7d:38:05:21:57:79:83:27:4f:a8:24:3e: 82:6c:a1:e8:b2:8e:de:91:72:6a:09:9a:eb:0e:85: f4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:1A:8D:CA:53:34:C5:6C:E9:06:D2:82:3F:FA:13:B3:68:15:BB:8F X509v3 Authority Key Identifier: keyid:5D:F5:DB:B1:48:D0:F4:EA:BB:1A:70:87:D8:CA:D8:7F:B2:A9:15:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:2f:00:e5:44:57:95:95:6b:bc:7b:16:b8:29:6f:ee:b1:f7: 3c:5f:b8:08:66:a3:47:17:d3:6b:9c:2c:59:ea:8f:43:9e:b7: c1:a1:9e:1f:c1:72:7a:2d:74:06:22:85:95:0b:6a:80:71:b9: 78:de:28:01:d0:46:b0:00:b3:34:4d:a2:77:9c:ac:7a:dd:2e: 51:92:86:e7:bd:7c:62:af:e7:e9:24:97:7c:e9:86:c3:35:7e: 91:fe:5c:cc:ad:da:13:64:cd:a4:9b:45:b2:81:81:1b:24:f6: 03:b5:17:e6:94:d2:b4:1f:99:7f:71:28:26:e0:ba:ab:f0:c1: 53:0d:25:7a:a4:5a:9c:fe:b5:39:94:36:ea:a8:86:a6:a6:3d: 43:2a:1b:47:c5:d8:1c:ab:9f:62:5f:74:b2:5a:20:98:d2:31: d3:bb:29:84:c7:41:43:1b:0b:3d:26:c8:7e:5e:a2:be:c9:18: 2e:d0:58:d8:85:c7:93:1a:b7:24:3b:11:c9:6e:ee:13:83:13: 15:04:94:41:1c:0a:f4:98:cc:83:bc:0c:11:90:1d:00:c6:8d: df:2a:4a:e5:8f:de:4a:47:b8:82:28:3e:ef:22:4c:3d:74:e9: b3:1f:e3:18:c5:67:68:87:52:4b:ac:8f:56:1b:7c:de:00:ac: e4:4f:c7:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfg8VbZA+atVQO+bIascQeapkGEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGNURCQjE0OEQwRjRFQUJCMUE3MDg3RDhDQUQ4N0ZC MkE5MTU2NDAeFw0yNjA5MjMwMzUwNTlaFw0yNjA5MjQwNTQxNTlaMDMxMTAvBgNV BAMTKDM2MUE4RENBNTMzNEM1NkNFOTA2RDI4MjNGRkExM0IzNjgxNUJCOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD2Gy6uNt5snUcW2GHlJtdbyR1 1OywJniMqBS8CzGDq6I8EKEiy57Xw/ShPM7YOu0c95H/9wax8eC7JhstpTBznTsO Z+Az95acCqIOOIYb2ARjlN32CrijH1z6M1lbw1LDl4fiVbaAUysqhkYwTPOG3SRM Gt0tdhZgHXz4saJ26V4dUPYaYoW3liS10GDrkzwQGqUgyA3uk7f+TBs6vON1MZQc 2nVhmykqRhQSOD2AP53KfJLpbTUFPPtmojYHgeDyiw5nNYZ3fvDvWUVrXQZItFAN feqS731lzLX+1ppfmW51En04BSFXeYMnT6gkPoJsoeiyjt6RcmoJmusOhfRJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNhqNylM0xWzpBtKCP/oTs2gVu48wHwYDVR0j BBgwFoAUXfXbsUjQ9Oq7GnCH2MrYf7KpFWQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWQ0OWQ0OWItZGFlYS00OGMwLThkNzctMTM3MzhiNzQ1NzcyLzAvNURGNURCQjE0 OEQwRjRFQUJCMUE3MDg3RDhDQUQ4N0ZCMkE5MTU2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81REY1REJCMTQ4RDBGNEVBQkIxQTcwODdEOENBRDg3RkIyQTkx NTY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWQ0OWQ0OWItZGFlYS00OGMwLThk NzctMTM3MzhiNzQ1NzcyLzAvNURGNURCQjE0OEQwRjRFQUJCMUE3MDg3RDhDQUQ4 N0ZCMkE5MTU2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQvAOVEV5WVa7x7Frgpb+6x9zxfuAhmo0cX 02ucLFnqj0Oet8Ghnh/BcnotdAYihZULaoBxuXjeKAHQRrAAszRNonecrHrdLlGS hue9fGKv5+kkl3zphsM1fpH+XMyt2hNkzaSbRbKBgRsk9gO1F+aU0rQfmX9xKCbg uqvwwVMNJXqkWpz+tTmUNuqohqamPUMqG0fF2Byrn2JfdLJaIJjSMdO7KYTHQUMb Cz0myH5eor7JGC7QWNiFx5MatyQ7Eclu7hODExUElEEcCvSYzIO8DBGQHQDGjd8q SuWP3kpHuIIoPu8iTD106bMf4xjFZ2iHUkusj1YbfN4ArORPx6M= -----END CERTIFICATE-----Generated at Wed Sep 23 21:03:04 2026 by rpki-client