$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft File: 5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft (raw, json) Hash identifier: nfXLMAAKdw2eR8Y0ejLK2fsv7P6BFLKY+ab7L6z7LO4= Subject key identifier: FD:0F:DE:97:F7:1A:DB:75:ED:91:D6:39:60:8D:BF:AE:C5:ED:62:C5 Authority key identifier: 5F:C6:89:EA:B9:41:D2:E0:F4:03:F4:D8:FE:7B:88:64:9C:CD:7D:C4 Certificate issuer: /CN=5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4 Certificate serial: 6F9456CA9FEA5AE45D7C5B4C1BBA8B6CD5ED69FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 04:57:04 +0000 Manifest this update: Wed 23 Sep 2026 04:52:04 +0000 Manifest next update: Thu 24 Sep 2026 06:03:04 +0000 Files and hashes: 1: 3130332e31362e3131362e302f32332d3234203d3e203535363838.roa (hash: YzbPSpHu4Y/3sNkzMjgGkQaP8RKL2rlB1MRk9WcO/JU=) 2: 5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl (hash: Kd/VwkbcrzOn+2C8Am8BUtyrTmeleykF7CsLboKOBCI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 06:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:94:56:ca:9f:ea:5a:e4:5d:7c:5b:4c:1b:ba:8b:6c:d5:ed:69:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4 Validity Not Before: Sep 23 04:52:04 2026 GMT Not After : Sep 24 06:03:04 2026 GMT Subject: CN=FD0FDE97F71ADB75ED91D639608DBFAEC5ED62C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4f:44:cb:63:bf:54:44:35:96:a7:b9:59:1b: 9d:e1:27:8f:c8:4c:2a:2a:fd:2d:92:dd:bb:8f:f6: 24:2d:c3:f8:f4:a9:25:aa:2f:e2:42:f9:2d:30:43: 40:0d:f1:ff:62:0b:aa:01:e9:82:b9:54:46:cb:0b: c7:72:e9:0d:f2:aa:18:b0:aa:ac:75:d1:6f:b5:2d: 21:d6:1d:93:ab:5a:ca:40:55:6a:ad:64:c1:a8:0e: 55:9b:2b:c3:d4:59:ff:ac:7a:08:62:2c:51:ba:32: d5:2e:6a:03:21:99:10:04:94:82:22:03:af:a6:e1: 3b:c1:7c:0c:aa:67:a8:bc:d8:a0:fe:35:99:49:7b: c3:ea:c5:f6:67:d5:8b:b6:7d:30:53:ee:a7:79:b6: 6a:10:4c:cc:67:57:c2:b6:09:ed:54:8e:81:aa:5b: e8:0b:53:51:9e:4b:ce:b9:d7:cd:6d:2b:69:e1:99: 33:62:33:41:cb:fa:b7:46:02:dc:de:f7:5b:22:1b: a9:8d:33:33:08:7f:42:45:21:dd:7e:70:62:0a:3b: 2a:87:da:c6:83:ae:42:7a:54:61:04:4b:f7:8b:c0: 09:26:85:d5:16:94:11:8e:1c:46:0a:1b:6e:52:82: d7:67:c4:28:8d:81:cb:ea:bf:c9:49:50:ef:ae:92: 40:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0F:DE:97:F7:1A:DB:75:ED:91:D6:39:60:8D:BF:AE:C5:ED:62:C5 X509v3 Authority Key Identifier: keyid:5F:C6:89:EA:B9:41:D2:E0:F4:03:F4:D8:FE:7B:88:64:9C:CD:7D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:80:56:6f:8f:54:49:62:49:3e:af:09:0d:07:ef:f4:da:c7: e3:ee:c9:c4:70:85:eb:02:d3:ff:70:34:cc:18:aa:1d:fd:59: d8:9c:8c:a0:6c:16:a6:3d:13:d4:f0:8e:a7:c7:d9:d6:d6:32: 00:c9:e8:3c:ed:20:ea:ac:89:ff:29:03:cb:33:bd:79:74:d4: c2:cd:c9:81:37:82:55:80:94:f7:3c:81:b6:e8:52:7a:5f:69: 98:28:cd:62:1d:ec:f3:dc:c5:80:83:d9:6d:63:87:ed:a8:2d: 14:66:a2:49:c3:48:83:53:03:1e:9b:fb:cf:a5:15:d4:86:d2: 57:5e:68:5d:4c:d0:f3:90:66:05:a6:74:61:de:45:82:81:2b: 6a:71:45:2a:c1:c5:11:07:53:af:a9:e4:7d:50:64:4d:1f:ff: 6c:90:a1:d2:7d:d1:1c:08:ac:59:53:66:9e:68:2a:73:9a:46: ab:3a:80:f0:ed:a6:b7:76:da:cf:c3:3a:34:a2:a8:36:36:53: 71:d8:37:45:78:a9:b0:cb:dd:12:c6:58:74:94:83:b3:b2:68: 7c:fc:d9:90:a3:4c:bd:d8:2d:a1:78:90:19:25:71:dc:0d:5f: 78:7e:ab:18:aa:35:9b:cc:0f:e0:b9:6c:71:bc:a8:90:39:28: c1:91:36:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb5RWyp/qWuRdfFtMG7qLbNXtaf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDNjg5RUFCOTQxRDJFMEY0MDNGNEQ4RkU3Qjg4NjQ5 Q0NEN0RDNDAeFw0yNjA5MjMwNDUyMDRaFw0yNjA5MjQwNjAzMDRaMDMxMTAvBgNV BAMTKEZEMEZERTk3RjcxQURCNzVFRDkxRDYzOTYwOERCRkFFQzVFRDYyQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkT0TLY79URDWWp7lZG53hJ4/I TCoq/S2S3buP9iQtw/j0qSWqL+JC+S0wQ0AN8f9iC6oB6YK5VEbLC8dy6Q3yqhiw qqx10W+1LSHWHZOrWspAVWqtZMGoDlWbK8PUWf+seghiLFG6MtUuagMhmRAElIIi A6+m4TvBfAyqZ6i82KD+NZlJe8PqxfZn1Yu2fTBT7qd5tmoQTMxnV8K2Ce1UjoGq W+gLU1GeS865181tK2nhmTNiM0HL+rdGAtze91siG6mNMzMIf0JFId1+cGIKOyqH 2saDrkJ6VGEES/eLwAkmhdUWlBGOHEYKG25SgtdnxCiNgcvqv8lJUO+ukkD7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Q/el/ca23XtkdY5YI2/rsXtYsUwHwYDVR0j BBgwFoAUX8aJ6rlB0uD0A/TY/nuIZJzNfcQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFlOGJjYzktNDNhMS00YmFiLWI2ZDgtMWE5N2QwZDNjMjFkLzAvNUZDNjg5RUFC OTQxRDJFMEY0MDNGNEQ4RkU3Qjg4NjQ5Q0NEN0RDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkM2ODlFQUI5NDFEMkUwRjQwM0Y0RDhGRTdCODg2NDlDQ0Q3 REM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFlOGJjYzktNDNhMS00YmFiLWI2 ZDgtMWE5N2QwZDNjMjFkLzAvNUZDNjg5RUFCOTQxRDJFMEY0MDNGNEQ4RkU3Qjg4 NjQ5Q0NEN0RDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqAVm+PVEliST6vCQ0H7/Tax+PuycRwhesC 0/9wNMwYqh39WdicjKBsFqY9E9TwjqfH2dbWMgDJ6DztIOqsif8pA8szvXl01MLN yYE3glWAlPc8gbboUnpfaZgozWId7PPcxYCD2W1jh+2oLRRmoknDSINTAx6b+8+l FdSG0ldeaF1M0POQZgWmdGHeRYKBK2pxRSrBxREHU6+p5H1QZE0f/2yQodJ90RwI rFlTZp5oKnOaRqs6gPDtprd22s/DOjSiqDY2U3HYN0V4qbDL3RLGWHSUg7OyaHz8 2ZCjTL3YLaF4kBklcdwNX3h+qxiqNZvMD+C5bHG8qJA5KMGRNi4= -----END CERTIFICATE-----Generated at Wed Sep 23 20:16:45 2026 by rpki-client