$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft File: 5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft (raw, json) Hash identifier: SuZ3ibK+25EQKFcE9s/iEm4O4fYZOQyPbqlsxfH1s5w= Subject key identifier: 02:6C:22:C6:36:9A:FC:3E:B0:4A:09:3E:7D:89:DA:22:1B:13:07:C4 Authority key identifier: 5E:D0:FC:9D:E3:C5:BF:0F:26:41:FB:C8:2E:03:53:3A:D5:A6:C5:C1 Certificate issuer: /CN=5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1 Certificate serial: 79555D65B9E16B5F62C2578B899995703F0E0506 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 05:47:56 +0000 Manifest this update: Thu 24 Sep 2026 05:42:56 +0000 Manifest next update: Fri 25 Sep 2026 07:17:56 +0000 Files and hashes: 1: 3130332e3134382e3130302e302f32332d3234203d3e20313339393838.roa (hash: yFzJDaOR3ALC9R9lcLlFWOcSjWJQYhCD//08bWWKhcU=) 2: 323430353a636534303a3a2f33322d3438203d3e20313339393838.roa (hash: CgpRUUxgJdvC2DaauFEj0ljqW/Af8HR5RmTcf5er/Ag=) 3: 5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.crl (hash: UH1F8hD4n0H64rOaod1KH6fglYpe02dkkWmJY4mNHmM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.crl rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 07:17:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:55:5d:65:b9:e1:6b:5f:62:c2:57:8b:89:99:95:70:3f:0e:05:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1 Validity Not Before: Sep 24 05:42:56 2026 GMT Not After : Sep 25 07:17:56 2026 GMT Subject: CN=026C22C6369AFC3EB04A093E7D89DA221B1307C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e9:0c:ea:77:9c:6d:6d:f7:fd:3b:3e:25:0c: 1c:cb:3e:10:98:ad:9f:35:49:f5:09:1c:d4:48:7b: 49:42:5d:91:45:c7:1e:ff:d0:2d:16:e5:61:6f:1d: 95:34:8a:ed:01:87:d9:49:02:e6:9f:2f:79:11:d1: 6f:50:43:ad:c4:c1:b4:d9:28:24:62:9e:b8:9e:c4: ee:c5:f0:41:8f:a2:ef:c0:31:4f:99:58:12:ca:e4: 69:d1:37:a9:74:b7:af:bb:8e:f1:97:75:d7:59:ae: a7:1a:9a:fb:16:f5:15:02:d3:a4:f0:d7:dd:30:86: 69:1d:86:fc:78:fd:53:29:8d:ca:82:00:47:14:97: 3d:34:78:80:95:b2:2a:2a:d7:0f:77:f9:80:7e:fa: da:3c:e0:7c:2e:33:bf:05:c7:d3:d4:08:67:cf:d9: e7:05:d1:ee:63:7c:26:f7:f6:8a:31:fb:61:cd:ff: fc:75:dc:5c:d6:93:c1:2c:44:08:92:fb:53:3a:69: 01:d8:be:22:89:1b:f3:d3:4c:a9:2c:fe:6d:3c:72: 85:8c:64:7c:03:1d:7d:23:e1:8d:44:ee:a1:24:c1: 7e:07:9f:aa:e3:5e:a1:95:2d:c3:eb:66:08:cd:cc: 2d:fc:90:aa:81:5a:2a:85:c9:fe:ab:29:1d:36:f3: 6e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:6C:22:C6:36:9A:FC:3E:B0:4A:09:3E:7D:89:DA:22:1B:13:07:C4 X509v3 Authority Key Identifier: keyid:5E:D0:FC:9D:E3:C5:BF:0F:26:41:FB:C8:2E:03:53:3A:D5:A6:C5:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:76:96:40:0f:6f:f9:f3:50:35:01:84:7c:10:db:93:d0:f3: b2:16:e3:d4:31:7f:5f:05:f2:f8:e3:25:68:0d:15:11:18:eb: 91:68:fd:31:8a:db:df:8f:d9:2c:c3:b8:11:f6:d8:6d:77:8b: 09:11:ef:56:4b:ba:f3:0d:89:9f:a0:53:be:65:53:f8:2f:20: 5b:e0:b1:c4:9d:2b:d3:8a:c0:e5:01:63:87:1d:35:87:b9:48: 88:ef:32:2a:70:34:44:ed:8c:16:33:e6:b0:9a:7f:a9:07:ff: da:e1:3e:08:0f:8f:b2:0d:0d:d0:0d:64:24:26:65:d7:10:f7: b9:b5:6b:b8:05:3c:1f:1b:07:20:ca:dd:e3:8c:f2:a2:8c:73: 06:f5:e1:f3:df:d4:51:93:7f:d2:5c:84:0a:2c:66:e9:27:da: 8e:ec:6c:b2:39:d5:65:b0:75:08:6d:19:85:68:3a:0f:2d:ab: 72:45:d7:31:a9:f9:cb:47:2b:17:c0:db:2e:6c:56:f7:97:a5: 29:07:ab:d1:e3:21:03:59:c6:8f:56:33:bb:84:c8:58:24:32: fd:78:57:c5:7b:44:08:73:9a:16:23:91:03:0a:11:35:5f:2f: 46:50:8a:06:9a:bf:de:bb:43:09:30:30:61:a2:fc:ad:d7:0a: 38:a3:e4:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeVVdZbnha19iwleLiZmVcD8OBQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVEMEZDOURFM0M1QkYwRjI2NDFGQkM4MkUwMzUzM0FE NUE2QzVDMTAeFw0yNjA5MjQwNTQyNTZaFw0yNjA5MjUwNzE3NTZaMDMxMTAvBgNV BAMTKDAyNkMyMkM2MzY5QUZDM0VCMDRBMDkzRTdEODlEQTIyMUIxMzA3QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC76Qzqd5xtbff9Oz4lDBzLPhCY rZ81SfUJHNRIe0lCXZFFxx7/0C0W5WFvHZU0iu0Bh9lJAuafL3kR0W9QQ63EwbTZ KCRinriexO7F8EGPou/AMU+ZWBLK5GnRN6l0t6+7jvGXdddZrqcamvsW9RUC06Tw 190whmkdhvx4/VMpjcqCAEcUlz00eICVsioq1w93+YB++to84HwuM78Fx9PUCGfP 2ecF0e5jfCb39oox+2HN//x13FzWk8EsRAiS+1M6aQHYviKJG/PTTKks/m08coWM ZHwDHX0j4Y1E7qEkwX4Hn6rjXqGVLcPrZgjNzC38kKqBWiqFyf6rKR02825VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAmwixjaa/D6wSgk+fYnaIhsTB8QwHwYDVR0j BBgwFoAUXtD8nePFvw8mQfvILgNTOtWmxcEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjJkNjZkMTAtYjg1Ny00YmVmLTkzOTUtNDVkNWFiMmM0NGY5LzAvNUVEMEZDOURF M0M1QkYwRjI2NDFGQkM4MkUwMzUzM0FENUE2QzVDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RUQwRkM5REUzQzVCRjBGMjY0MUZCQzgyRTAzNTMzQUQ1QTZD NUMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjJkNjZkMTAtYjg1Ny00YmVmLTkz OTUtNDVkNWFiMmM0NGY5LzAvNUVEMEZDOURFM0M1QkYwRjI2NDFGQkM4MkUwMzUz M0FENUE2QzVDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANJ2lkAPb/nzUDUBhHwQ25PQ87IW49Qxf18F 8vjjJWgNFREY65Fo/TGK29+P2SzDuBH22G13iwkR71ZLuvMNiZ+gU75lU/gvIFvg scSdK9OKwOUBY4cdNYe5SIjvMipwNETtjBYz5rCaf6kH/9rhPggPj7INDdANZCQm ZdcQ97m1a7gFPB8bByDK3eOM8qKMcwb14fPf1FGTf9JchAosZukn2o7sbLI51WWw dQhtGYVoOg8tq3JF1zGp+ctHKxfA2y5sVveXpSkHq9HjIQNZxo9WM7uEyFgkMv14 V8V7RAhzmhYjkQMKETVfL0ZQigaav967QwkwMGGi/K3XCjij5Hw= -----END CERTIFICATE-----Generated at Thu Sep 24 10:54:58 2026 by rpki-client