$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft File: 5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft (raw, json) Hash identifier: GTB7oAPxYcGUTs89QFbA/iDnPnwbkOcvfKjW8RSi0oE= Subject key identifier: 80:FB:CF:D8:D5:B4:E5:93:16:FC:6C:ED:34:5A:C2:3A:7C:8D:B2:0D Authority key identifier: 5F:C6:89:EA:B9:41:D2:E0:F4:03:F4:D8:FE:7B:88:64:9C:CD:7D:C4 Certificate issuer: /CN=5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4 Certificate serial: 2E26765C0C071051131A05B8FD883D1A496678BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 22:03:20 +0000 Manifest this update: Wed 23 Sep 2026 21:58:20 +0000 Manifest next update: Thu 24 Sep 2026 22:17:20 +0000 Files and hashes: 1: 3130332e31362e3131362e302f32332d3234203d3e203535363838.roa (hash: YzbPSpHu4Y/3sNkzMjgGkQaP8RKL2rlB1MRk9WcO/JU=) 2: 5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl (hash: KDCtJ2lOyoBTn0E7dJ6YXCiFOdJYAF4y1+uGua6aMRI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:26:76:5c:0c:07:10:51:13:1a:05:b8:fd:88:3d:1a:49:66:78:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4 Validity Not Before: Sep 23 21:58:20 2026 GMT Not After : Sep 24 22:17:20 2026 GMT Subject: CN=80FBCFD8D5B4E59316FC6CED345AC23A7C8DB20D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ee:ba:9d:2a:a6:f3:b1:65:ca:c1:66:d0:8c: 2f:23:36:7f:0f:2e:ca:69:32:bd:3a:8e:56:6d:1a: 24:4b:67:36:32:17:0a:a4:c0:2c:b3:05:b9:59:ef: 34:f0:af:7f:ab:c1:a9:0c:20:7b:b6:e4:04:6b:83: 06:71:fc:7a:d1:36:53:c2:df:20:b2:a2:c7:be:bb: 46:bb:a7:f0:76:ad:00:de:a9:63:ab:a4:1a:ff:e9: 01:cc:b3:e3:f5:19:9f:3d:0e:a6:3e:e9:59:b6:53: 44:16:d7:5b:ad:31:91:80:46:53:ea:01:d0:2d:1f: 69:ef:84:9f:42:08:2a:46:2d:39:ef:45:a9:4c:4f: 4b:bf:aa:59:22:e2:e0:e2:5d:77:a9:3b:6f:0c:49: ba:f6:8c:09:a4:66:b7:43:51:9f:b1:87:9c:02:ec: cd:12:3e:ca:6f:c5:52:5c:70:3a:72:2f:5c:f7:c7: 50:63:05:d6:b3:e8:46:6a:3e:05:cc:ee:2a:4c:4e: ea:f8:9f:74:c4:7b:19:05:a5:75:bf:f9:3b:e4:4a: 6e:49:5c:c9:02:53:4e:ca:21:af:59:74:5e:cf:a9: 48:6b:d1:8b:93:7e:00:fe:37:1a:86:43:ff:3d:f4: a0:e4:7f:ca:a3:71:39:af:ba:0d:12:1a:30:5a:ea: 7c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FB:CF:D8:D5:B4:E5:93:16:FC:6C:ED:34:5A:C2:3A:7C:8D:B2:0D X509v3 Authority Key Identifier: keyid:5F:C6:89:EA:B9:41:D2:E0:F4:03:F4:D8:FE:7B:88:64:9C:CD:7D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:4f:e6:0d:27:24:7d:10:7f:9a:c0:28:5a:ba:35:53:40:aa: 7f:f2:8c:ed:d8:66:5b:a5:1c:6b:e2:12:c7:d7:2e:1a:e6:6e: fe:56:dd:ba:28:71:16:8f:5b:3f:98:eb:98:c7:0d:85:7b:79: aa:98:9c:fd:19:9a:df:6d:dd:4a:ce:d8:63:28:9d:d7:6c:3f: 5e:f1:e9:3a:8a:df:83:70:8c:46:62:57:b2:8c:00:7d:df:18: cb:02:9d:f0:fa:4a:b1:ad:54:a2:bd:5e:2a:8c:1f:75:eb:9b: 78:04:e0:80:03:42:fa:b4:1b:59:6b:ee:d7:8e:4e:6f:c2:83: b1:ac:3c:ed:0b:35:f6:8f:f7:da:4b:2e:7b:eb:7e:26:73:9d: 95:0a:ee:9b:a8:9f:bb:18:54:41:f8:f7:9b:9a:0e:be:f9:57: a0:b6:0d:51:54:c1:7f:33:f4:da:b6:ec:ee:18:73:e2:a8:b2: 8c:1f:90:19:52:85:c1:9b:30:91:a9:5a:54:33:c6:ad:7a:04: 96:29:dd:29:97:21:96:42:3b:7a:ec:76:5b:8e:f2:ee:29:5d: 9c:8d:c9:61:de:15:01:48:da:76:b5:89:80:e9:41:19:50:7f: c4:2c:c3:79:9d:35:3e:ec:99:74:4a:c9:b4:34:23:4b:d7:81: 90:71:28:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULiZ2XAwHEFETGgW4/Yg9GklmeLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDNjg5RUFCOTQxRDJFMEY0MDNGNEQ4RkU3Qjg4NjQ5 Q0NEN0RDNDAeFw0yNjA5MjMyMTU4MjBaFw0yNjA5MjQyMjE3MjBaMDMxMTAvBgNV BAMTKDgwRkJDRkQ4RDVCNEU1OTMxNkZDNkNFRDM0NUFDMjNBN0M4REIyMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj7rqdKqbzsWXKwWbQjC8jNn8P LsppMr06jlZtGiRLZzYyFwqkwCyzBblZ7zTwr3+rwakMIHu25ARrgwZx/HrRNlPC 3yCyose+u0a7p/B2rQDeqWOrpBr/6QHMs+P1GZ89DqY+6Vm2U0QW11utMZGARlPq AdAtH2nvhJ9CCCpGLTnvRalMT0u/qlki4uDiXXepO28MSbr2jAmkZrdDUZ+xh5wC 7M0SPspvxVJccDpyL1z3x1BjBdaz6EZqPgXM7ipMTur4n3TEexkFpXW/+TvkSm5J XMkCU07KIa9ZdF7PqUhr0YuTfgD+NxqGQ/899KDkf8qjcTmvug0SGjBa6nx3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgPvP2NW05ZMW/GztNFrCOnyNsg0wHwYDVR0j BBgwFoAUX8aJ6rlB0uD0A/TY/nuIZJzNfcQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFlOGJjYzktNDNhMS00YmFiLWI2ZDgtMWE5N2QwZDNjMjFkLzAvNUZDNjg5RUFC OTQxRDJFMEY0MDNGNEQ4RkU3Qjg4NjQ5Q0NEN0RDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkM2ODlFQUI5NDFEMkUwRjQwM0Y0RDhGRTdCODg2NDlDQ0Q3 REM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFlOGJjYzktNDNhMS00YmFiLWI2 ZDgtMWE5N2QwZDNjMjFkLzAvNUZDNjg5RUFCOTQxRDJFMEY0MDNGNEQ4RkU3Qjg4 NjQ5Q0NEN0RDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBP5g0nJH0Qf5rAKFq6NVNAqn/yjO3YZlul HGviEsfXLhrmbv5W3boocRaPWz+Y65jHDYV7eaqYnP0Zmt9t3UrO2GMonddsP17x 6TqK34NwjEZiV7KMAH3fGMsCnfD6SrGtVKK9XiqMH3Xrm3gE4IADQvq0G1lr7teO Tm/Cg7GsPO0LNfaP99pLLnvrfiZznZUK7puon7sYVEH495uaDr75V6C2DVFUwX8z 9Nq27O4Yc+KosowfkBlShcGbMJGpWlQzxq16BJYp3SmXIZZCO3rsdluO8u4pXZyN yWHeFQFI2na1iYDpQRlQf8Qsw3mdNT7smXRKybQ0I0vXgZBxKE8= -----END CERTIFICATE-----Generated at Thu Sep 24 04:18:51 2026 by rpki-client