$ rpki-client -vvvf rpki-rsync.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.mft File: DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.mft (raw, json) Hash identifier: yJ9t3ERQhEov5Wm9p0ypeoUjjeydYuS7itZ5ba1FNOk= Subject key identifier: F0:35:B8:95:22:F1:B8:5B:32:55:37:7E:9E:9D:D1:E2:B1:68:CB:EA Authority key identifier: DF:5D:D0:70:8B:81:D1:5C:F9:DE:A4:8B:E5:4A:C0:3E:1E:C3:E5:3E Certificate issuer: /CN=DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E Certificate serial: 35E8A2D93A1EC0D85933895D2C02D0C560513DBC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.mft Manifest number: BE Signing time: Thu 24 Sep 2026 03:40:07 +0000 Manifest this update: Thu 24 Sep 2026 03:35:07 +0000 Manifest next update: Fri 25 Sep 2026 04:39:07 +0000 Files and hashes: 1: DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.crl (hash: oPge8yjQ9/jxhY7x8CxJ6Q5kmLOxuVfgSDAUU7NuCxY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.crl rsync://rpki-rsync.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 04:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e8:a2:d9:3a:1e:c0:d8:59:33:89:5d:2c:02:d0:c5:60:51:3d:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E Validity Not Before: Sep 24 03:35:07 2026 GMT Not After : Sep 25 04:39:07 2026 GMT Subject: CN=F035B89522F1B85B3255377E9E9DD1E2B168CBEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:00:da:2b:98:a0:4a:96:02:37:8a:d2:ec:ba: 17:38:69:ea:c2:44:f5:5d:4b:3b:71:64:4a:5b:ea: c6:51:0d:2f:60:23:d3:51:c7:24:ce:d4:2c:f9:29: e1:56:ed:39:f1:37:66:3a:cd:d4:02:4a:46:ce:ae: 85:9b:d5:bf:af:e8:e6:b6:54:1f:66:d0:21:a4:f9: 03:ad:6c:ee:ff:2f:d8:29:ab:03:3a:d3:70:1f:08: f4:bb:b9:61:b0:59:06:c3:1e:87:59:ee:d9:7b:f3: bc:47:fb:ab:56:85:45:f8:9c:bf:49:2b:32:24:bd: 8e:8e:88:7e:f0:4e:75:ed:9b:96:40:0d:b6:5f:b9: e9:23:bf:c4:6c:82:40:cf:17:42:30:b1:cb:3e:b5: 7a:9f:2c:3b:9b:cf:80:5c:42:b6:09:24:d9:47:0f: e9:7d:aa:35:72:9f:1d:ca:cf:f0:6b:2e:d3:c0:42: e6:2f:d0:99:09:73:a8:98:40:41:b7:e3:35:9b:94: 8d:69:b1:82:6e:2b:8b:52:b0:a7:1a:de:58:5a:f7: 09:62:a5:81:bc:7b:12:b9:3e:f7:78:b4:9f:fb:22: 9b:38:ff:91:ad:9e:09:a4:75:87:70:72:50:5b:49: 76:dd:e0:dc:54:ce:3a:88:e0:f4:5c:a2:1e:b4:1c: 38:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:35:B8:95:22:F1:B8:5B:32:55:37:7E:9E:9D:D1:E2:B1:68:CB:EA X509v3 Authority Key Identifier: keyid:DF:5D:D0:70:8B:81:D1:5C:F9:DE:A4:8B:E5:4A:C0:3E:1E:C3:E5:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:54:e2:68:90:c9:80:08:70:be:fc:3c:e1:63:da:74:fe:73: 88:b6:e6:cb:80:53:3d:19:ef:2b:50:15:7b:f4:02:eb:e7:f1: e1:d2:5d:1e:de:84:88:f6:d4:f0:e6:44:62:4e:0b:9d:53:4d: f1:49:14:b7:e3:62:01:db:51:c4:57:a9:80:f5:58:72:b7:69: c9:a9:6f:e9:b2:05:80:ca:b2:db:64:a1:c3:9e:3b:72:a6:33: 94:2c:7f:0d:d4:db:a8:a4:5d:5f:8a:59:75:50:df:7b:7f:f3: 04:be:73:73:74:2e:19:2e:22:85:35:f1:b9:0f:f0:a1:7a:47: 4b:24:b0:88:11:7c:f6:3b:ff:6b:b6:6f:35:e2:5a:7c:94:8c: 11:4d:80:d9:a6:7a:bc:41:28:c5:fa:04:f6:a7:6e:d3:37:b4: 01:fb:ba:4d:c8:e4:34:ba:32:5c:d2:b9:57:d3:0d:07:92:82: d7:9e:e9:38:d2:ee:9c:30:06:22:40:02:0a:1d:8f:98:33:1d: 0d:b6:41:3f:91:ec:2f:8b:d9:d0:0f:da:b4:66:30:75:a0:4e: d3:2a:a9:da:bd:d0:56:ad:b8:8f:67:36:3d:3e:1f:20:2f:9c: a2:35:25:22:dc:77:06:e9:89:8d:a1:56:f2:ef:6e:9e:41:94: ba:f1:80:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNeii2ToewNhZM4ldLALQxWBRPbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY1REQwNzA4QjgxRDE1Q0Y5REVBNDhCRTU0QUMwM0Ux RUMzRTUzRTAeFw0yNjA5MjQwMzM1MDdaFw0yNjA5MjUwNDM5MDdaMDMxMTAvBgNV BAMTKEYwMzVCODk1MjJGMUI4NUIzMjU1Mzc3RTlFOUREMUUyQjE2OENCRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRANormKBKlgI3itLsuhc4aerC RPVdSztxZEpb6sZRDS9gI9NRxyTO1Cz5KeFW7TnxN2Y6zdQCSkbOroWb1b+v6Oa2 VB9m0CGk+QOtbO7/L9gpqwM603AfCPS7uWGwWQbDHodZ7tl787xH+6tWhUX4nL9J KzIkvY6OiH7wTnXtm5ZADbZfuekjv8RsgkDPF0Iwscs+tXqfLDubz4BcQrYJJNlH D+l9qjVynx3Kz/BrLtPAQuYv0JkJc6iYQEG34zWblI1psYJuK4tSsKca3lha9wli pYG8exK5Pvd4tJ/7Ips4/5GtngmkdYdwclBbSXbd4NxUzjqI4PRcoh60HDhlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8DW4lSLxuFsyVTd+np3R4rFoy+owHwYDVR0j BBgwFoAU313QcIuB0Vz53qSL5UrAPh7D5T4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDhiOGMxYjUtM2JlOC00YWE3LWE0YzYtMjFiY2M4ZjNmYTQwLzAvREY1REQwNzA4 QjgxRDE1Q0Y5REVBNDhCRTU0QUMwM0UxRUMzRTUzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjVERDA3MDhCODFEMTVDRjlERUE0OEJFNTRBQzAzRTFFQzNF NTNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDhiOGMxYjUtM2JlOC00YWE3LWE0 YzYtMjFiY2M4ZjNmYTQwLzAvREY1REQwNzA4QjgxRDE1Q0Y5REVBNDhCRTU0QUMw M0UxRUMzRTUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtU4miQyYAIcL78POFj2nT+c4i25suAUz0Z 7ytQFXv0Auvn8eHSXR7ehIj21PDmRGJOC51TTfFJFLfjYgHbUcRXqYD1WHK3acmp b+myBYDKsttkocOeO3KmM5Qsfw3U26ikXV+KWXVQ33t/8wS+c3N0LhkuIoU18bkP 8KF6R0sksIgRfPY7/2u2bzXiWnyUjBFNgNmmerxBKMX6BPanbtM3tAH7uk3I5DS6 MlzSuVfTDQeSgtee6TjS7pwwBiJAAgodj5gzHQ22QT+R7C+L2dAP2rRmMHWgTtMq qdq90FatuI9nNj0+HyAvnKI1JSLcdwbpiY2hVvLvbp5BlLrxgJc= -----END CERTIFICATE-----Generated at Thu Sep 24 17:04:27 2026 by rpki-client