$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft File: 5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft (raw, json) Hash identifier: Tl4BjYymzj0nqFsC1qodAAvcFUjn/5G8d0K7a11XrLg= Subject key identifier: 11:7E:41:FD:3E:C3:1F:F2:91:AF:C8:49:FC:25:2C:86:27:DC:43:C8 Authority key identifier: 5E:31:28:90:2F:CA:3B:CE:9C:9F:EB:FB:26:4D:55:0A:D6:23:05:72 Certificate issuer: /CN=5E3128902FCA3BCE9C9FEBFB264D550AD6230572 Certificate serial: 56EF10043E1FF9CDEF0E93AF943ACFE2AA7C9305 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 03:24:55 +0000 Manifest this update: Thu 24 Sep 2026 03:19:55 +0000 Manifest next update: Fri 25 Sep 2026 07:22:55 +0000 Files and hashes: 1: 5E3128902FCA3BCE9C9FEBFB264D550AD6230572.crl (hash: YMpUZVbXDojR7kFMlEDlWQpYf2oWkEpGnz4449gqUTg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.crl rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ef:10:04:3e:1f:f9:cd:ef:0e:93:af:94:3a:cf:e2:aa:7c:93:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E3128902FCA3BCE9C9FEBFB264D550AD6230572 Validity Not Before: Sep 24 03:19:55 2026 GMT Not After : Sep 25 07:22:55 2026 GMT Subject: CN=117E41FD3EC31FF291AFC849FC252C8627DC43C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:70:83:fc:f1:1c:92:cc:10:f1:55:86:4c:36: 6c:a8:ef:96:b9:65:ad:6a:58:e9:05:31:d2:95:03: 92:ae:1f:e3:52:03:50:4a:96:cb:25:40:0d:79:c7: ad:fd:11:01:57:b6:e6:f6:2c:c9:e6:c8:d4:00:42: 95:a4:78:ec:99:74:fb:25:fd:2d:d4:0a:21:de:2a: 2f:86:3b:04:b5:56:1e:ae:42:d1:69:bf:5a:d2:97: 4b:3e:50:75:ec:fb:a9:fd:43:f1:b7:da:6f:1a:c9: 73:66:d2:6b:5f:80:e2:63:62:69:13:d7:cb:03:79: f1:ad:a2:b6:37:94:f7:d4:60:e4:f4:d2:08:82:15: 6c:bb:06:0e:46:35:6e:10:34:95:a3:04:c3:ae:32: 31:d0:9e:ad:0e:08:0b:1a:9c:de:0a:98:08:ef:3e: a6:b6:88:3c:bc:ad:ec:98:02:74:81:7c:96:e5:b6: ef:2c:df:3b:59:e2:14:ea:d2:52:e4:eb:9b:1a:27: a3:9b:dc:d9:6c:45:c3:c9:c2:8c:c6:a0:a7:cc:1d: c8:37:1e:0d:a4:2a:a3:ff:e6:79:f8:cf:27:47:f1: db:19:0f:9d:0f:4b:df:d0:e3:19:2e:e5:55:d0:e3: dd:2a:57:9d:a2:45:1f:0c:01:fc:26:1a:a5:69:7b: a0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:7E:41:FD:3E:C3:1F:F2:91:AF:C8:49:FC:25:2C:86:27:DC:43:C8 X509v3 Authority Key Identifier: keyid:5E:31:28:90:2F:CA:3B:CE:9C:9F:EB:FB:26:4D:55:0A:D6:23:05:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:1e:77:e1:fb:0e:bd:67:7d:68:ee:49:11:80:4a:7b:5b:a4: 6b:d8:20:cc:7c:50:87:df:1d:6c:60:7f:aa:43:7b:4c:7c:17: cf:38:3d:29:4d:69:4e:e4:1b:bd:cd:a5:d5:be:e1:c7:59:2d: 92:8f:7b:c7:e1:a9:bf:98:fc:4d:f6:0c:6c:10:ed:40:e5:7f: 39:b1:a1:80:50:b4:bc:1d:89:c3:bb:90:18:b7:4c:5a:03:33: 1f:4c:98:67:63:8a:c7:f8:78:b1:77:17:c3:e0:31:a8:56:39: 5e:6a:98:8d:8c:13:e1:64:59:58:2f:3d:f6:48:88:af:c6:db: 07:5b:c7:80:8c:74:f9:f9:07:73:1e:fd:ff:20:50:26:ef:c8: 87:b5:9f:ab:f5:e0:5e:7c:b2:e5:04:04:d4:90:f6:24:92:0c: 23:92:92:51:ae:f9:04:71:a2:a4:00:cb:bc:a9:6b:eb:b3:4d: fa:e9:e6:09:9e:4f:08:08:07:6f:69:1a:0a:bd:79:cf:10:f9: d2:ec:6f:58:2a:25:aa:8e:3b:27:0a:47:be:51:59:d9:fd:c8: 4c:e2:e3:80:6f:d5:a0:a3:8c:d7:c5:de:8d:32:68:4b:1c:3e: 61:34:c7:cb:20:23:25:56:2b:66:a8:52:37:ad:60:f2:f1:e3: 2b:bd:b9:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVu8QBD4f+c3vDpOvlDrP4qp8kwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUzMTI4OTAyRkNBM0JDRTlDOUZFQkZCMjY0RDU1MEFE NjIzMDU3MjAeFw0yNjA5MjQwMzE5NTVaFw0yNjA5MjUwNzIyNTVaMDMxMTAvBgNV BAMTKDExN0U0MUZEM0VDMzFGRjI5MUFGQzg0OUZDMjUyQzg2MjdEQzQzQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBcIP88RySzBDxVYZMNmyo75a5 Za1qWOkFMdKVA5KuH+NSA1BKlsslQA15x639EQFXtub2LMnmyNQAQpWkeOyZdPsl /S3UCiHeKi+GOwS1Vh6uQtFpv1rSl0s+UHXs+6n9Q/G32m8ayXNm0mtfgOJjYmkT 18sDefGtorY3lPfUYOT00giCFWy7Bg5GNW4QNJWjBMOuMjHQnq0OCAsanN4KmAjv Pqa2iDy8reyYAnSBfJbltu8s3ztZ4hTq0lLk65saJ6Ob3NlsRcPJwozGoKfMHcg3 Hg2kKqP/5nn4zydH8dsZD50PS9/Q4xku5VXQ490qV52iRR8MAfwmGqVpe6CFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEX5B/T7DH/KRr8hJ/CUshifcQ8gwHwYDVR0j BBgwFoAUXjEokC/KO86cn+v7Jk1VCtYjBXIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGZiNWZmMzctMzk0YS00ZWJhLWE0NzAtMTBhZjM3Y2Y3NWRjLzAvNUUzMTI4OTAy RkNBM0JDRTlDOUZFQkZCMjY0RDU1MEFENjIzMDU3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RTMxMjg5MDJGQ0EzQkNFOUM5RkVCRkIyNjRENTUwQUQ2MjMw NTcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGZiNWZmMzctMzk0YS00ZWJhLWE0 NzAtMTBhZjM3Y2Y3NWRjLzAvNUUzMTI4OTAyRkNBM0JDRTlDOUZFQkZCMjY0RDU1 MEFENjIzMDU3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYed+H7Dr1nfWjuSRGASntbpGvYIMx8UIff HWxgf6pDe0x8F884PSlNaU7kG73NpdW+4cdZLZKPe8fhqb+Y/E32DGwQ7UDlfzmx oYBQtLwdicO7kBi3TFoDMx9MmGdjisf4eLF3F8PgMahWOV5qmI2ME+FkWVgvPfZI iK/G2wdbx4CMdPn5B3Me/f8gUCbvyIe1n6v14F58suUEBNSQ9iSSDCOSklGu+QRx oqQAy7ypa+uzTfrp5gmeTwgIB29pGgq9ec8Q+dLsb1gqJaqOOycKR75RWdn9yEzi 44Bv1aCjjNfF3o0yaEscPmE0x8sgIyVWK2aoUjetYPLx4yu9uSg= -----END CERTIFICATE-----Generated at Thu Sep 24 07:03:42 2026 by rpki-client