$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.mft File: 5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.mft (raw, json) Hash identifier: Ex66Isz+sOhimmgj+sMPXW8a4TrdhyPOvuZ154nMBv0= Subject key identifier: AC:D3:C1:97:97:22:00:02:C8:85:37:DF:85:C3:27:37:5E:A0:41:EB Authority key identifier: 5C:19:EF:2B:99:AC:6F:39:EA:FD:3C:90:A5:1C:FF:2D:8B:90:14:96 Certificate issuer: /CN=5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496 Certificate serial: 217C92D97DC2F5C3BB34DE1DC29C7E5E94935FD2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 06:59:22 +0000 Manifest this update: Thu 24 Sep 2026 06:54:22 +0000 Manifest next update: Fri 25 Sep 2026 07:51:22 +0000 Files and hashes: 1: 5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.crl (hash: lUd74EMtAqJ8FBK3X4THX6VKO6+qQkIsOphid3lIkvc=) 2: 3130332e38322e39322e302f32332d3234203d3e20313336303532.roa (hash: oCDO+C8a0RrEJ6lxOXaK0sUnJXysyt3W9yTdznU1D4w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.crl rsync://rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 07:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:7c:92:d9:7d:c2:f5:c3:bb:34:de:1d:c2:9c:7e:5e:94:93:5f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496 Validity Not Before: Sep 24 06:54:22 2026 GMT Not After : Sep 25 07:51:22 2026 GMT Subject: CN=ACD3C19797220002C88537DF85C327375EA041EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:08:e2:06:08:6f:62:0b:5f:e9:8f:3d:27:96: 50:ed:4a:95:69:19:ac:9a:eb:e4:be:8a:c4:eb:6d: 84:e1:79:74:fd:d5:a2:4a:e0:b7:e9:85:51:f7:4a: aa:55:e5:d7:97:cf:54:0a:9d:35:95:78:ff:cd:e2: 60:80:36:70:84:64:c9:fe:36:03:eb:c6:3e:52:1c: 14:9f:5e:7c:4a:bc:e9:44:7a:62:b2:b4:a4:31:3f: 28:9a:21:35:85:c8:5f:1c:f7:d0:32:e1:65:e4:d5: 8f:47:a8:7d:45:73:96:08:74:65:0d:51:c7:ab:25: 14:01:8f:13:fd:10:7c:91:bf:98:41:84:76:93:a1: 24:01:cb:bd:58:21:db:f3:4b:3a:b5:21:5a:01:ce: 60:fa:7f:68:ff:8b:72:51:77:2c:75:4b:48:b0:ff: 25:40:04:a7:32:7e:f3:2a:ba:c8:a7:4a:cc:e1:23: e3:77:21:40:bb:4f:ba:84:72:c9:35:c4:bc:70:a0: df:1a:30:54:4f:c4:93:1f:24:20:aa:89:ae:14:ab: e0:b6:ba:d7:9d:ae:af:55:1b:2d:57:c2:60:1d:1e: 03:60:17:b5:6a:4e:be:fe:49:2a:06:f0:e7:3b:bc: 39:cf:09:77:87:3d:2a:c4:f8:9a:5d:b8:12:4e:a6: 82:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D3:C1:97:97:22:00:02:C8:85:37:DF:85:C3:27:37:5E:A0:41:EB X509v3 Authority Key Identifier: keyid:5C:19:EF:2B:99:AC:6F:39:EA:FD:3C:90:A5:1C:FF:2D:8B:90:14:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/5C19EF2B99AC6F39EAFD3C90A51CFF2D8B901496.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:91:15:83:b9:7d:9b:22:0f:39:88:04:99:60:b0:82:42:38: 8e:c6:a0:60:e4:48:38:7e:26:12:a4:bb:ba:40:27:1e:58:8a: 0c:02:72:27:b5:7b:d1:53:84:b4:9a:78:63:7d:0a:08:74:a1: ad:00:06:cf:16:a8:43:59:c9:3b:73:a2:43:73:1c:bc:9e:2a: ba:15:eb:49:3f:65:eb:f9:b2:59:e7:56:5a:66:1f:b3:d2:6e: 10:ba:98:63:02:70:97:a0:3c:dd:18:e3:46:8c:fb:05:e4:9a: e3:38:0d:82:ca:19:9b:6e:e1:46:aa:06:be:b8:67:0c:01:31: 06:4c:fe:30:93:f5:7f:14:d6:06:8e:f7:f0:02:c4:cc:16:44: 86:b0:1a:4c:9f:3b:84:d6:1f:7e:fd:50:f4:2f:92:93:bb:b6: 91:83:b7:d9:aa:c3:e9:04:ac:02:7b:82:cf:12:9c:20:ce:f9: 02:d0:98:31:b0:bf:df:a4:01:fe:14:b2:82:b3:60:ce:61:e5: e8:e5:c2:b0:9f:87:ee:63:e4:77:e6:68:40:f5:bc:4b:be:c5: 2b:88:0a:85:4d:54:42:b9:50:e0:c5:42:28:ba:e7:e7:6a:7c: e0:89:b9:7b:27:2a:5d:a2:4c:d8:01:c3:e0:6d:1a:ed:32:51: 73:ca:a3:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIXyS2X3C9cO7NN4dwpx+XpSTX9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMxOUVGMkI5OUFDNkYzOUVBRkQzQzkwQTUxQ0ZGMkQ4 QjkwMTQ5NjAeFw0yNjA5MjQwNjU0MjJaFw0yNjA5MjUwNzUxMjJaMDMxMTAvBgNV BAMTKEFDRDNDMTk3OTcyMjAwMDJDODg1MzdERjg1QzMyNzM3NUVBMDQxRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClCOIGCG9iC1/pjz0nllDtSpVp Gaya6+S+isTrbYTheXT91aJK4LfphVH3SqpV5deXz1QKnTWVeP/N4mCANnCEZMn+ NgPrxj5SHBSfXnxKvOlEemKytKQxPyiaITWFyF8c99Ay4WXk1Y9HqH1Fc5YIdGUN UcerJRQBjxP9EHyRv5hBhHaToSQBy71YIdvzSzq1IVoBzmD6f2j/i3JRdyx1S0iw /yVABKcyfvMqusinSszhI+N3IUC7T7qEcsk1xLxwoN8aMFRPxJMfJCCqia4Uq+C2 utedrq9VGy1XwmAdHgNgF7VqTr7+SSoG8Oc7vDnPCXeHPSrE+JpduBJOpoKDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrNPBl5ciAALIhTffhcMnN16gQeswHwYDVR0j BBgwFoAUXBnvK5msbznq/TyQpRz/LYuQFJYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjc3ZWNjZmYtY2U5Yi00MWRhLWI5OGEtYWJjZmU0OTI1M2FmLzAvNUMxOUVGMkI5 OUFDNkYzOUVBRkQzQzkwQTUxQ0ZGMkQ4QjkwMTQ5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QzE5RUYyQjk5QUM2RjM5RUFGRDNDOTBBNTFDRkYyRDhCOTAx NDk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjc3ZWNjZmYtY2U5Yi00MWRhLWI5 OGEtYWJjZmU0OTI1M2FmLzAvNUMxOUVGMkI5OUFDNkYzOUVBRkQzQzkwQTUxQ0ZG MkQ4QjkwMTQ5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECRFYO5fZsiDzmIBJlgsIJCOI7GoGDkSDh+ JhKku7pAJx5YigwCcie1e9FThLSaeGN9Cgh0oa0ABs8WqENZyTtzokNzHLyeKroV 60k/Zev5slnnVlpmH7PSbhC6mGMCcJegPN0Y40aM+wXkmuM4DYLKGZtu4UaqBr64 ZwwBMQZM/jCT9X8U1gaO9/ACxMwWRIawGkyfO4TWH379UPQvkpO7tpGDt9mqw+kE rAJ7gs8SnCDO+QLQmDGwv9+kAf4UsoKzYM5h5ejlwrCfh+5j5HfmaED1vEu+xSuI CoVNVEK5UODFQii65+dqfOCJuXsnKl2iTNgBw+BtGu0yUXPKo2c= -----END CERTIFICATE-----Generated at Thu Sep 24 20:52:48 2026 by rpki-client