$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/F5A875F4B194D8FEEEE65864238016F5BA011BF3.mft File: F5A875F4B194D8FEEEE65864238016F5BA011BF3.mft (raw, json) Hash identifier: sOEqzZ0K6ELEqWrKZdGc+ZbqS819UKvLbtVzTOCZ1oY= Subject key identifier: E1:EF:5D:7F:1E:3C:E1:94:58:A7:40:3C:1D:3D:1A:96:30:5F:D3:5A Authority key identifier: F5:A8:75:F4:B1:94:D8:FE:EE:E6:58:64:23:80:16:F5:BA:01:1B:F3 Certificate issuer: /CN=F5A875F4B194D8FEEEE65864238016F5BA011BF3 Certificate serial: 404D81A01997187F7D21FE883E8C5F8FC04C2CBC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5A875F4B194D8FEEEE65864238016F5BA011BF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/F5A875F4B194D8FEEEE65864238016F5BA011BF3.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 18:03:16 +0000 Manifest this update: Wed 23 Sep 2026 17:58:16 +0000 Manifest next update: Thu 24 Sep 2026 18:38:16 +0000 Files and hashes: 1: F5A875F4B194D8FEEEE65864238016F5BA011BF3.crl (hash: 3WA6pHkcH56o0qS1kT4hDpPt/j3oFPpHRpXwoEXHI3I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/F5A875F4B194D8FEEEE65864238016F5BA011BF3.crl rsync://rpki-rsync.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/F5A875F4B194D8FEEEE65864238016F5BA011BF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5A875F4B194D8FEEEE65864238016F5BA011BF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:4d:81:a0:19:97:18:7f:7d:21:fe:88:3e:8c:5f:8f:c0:4c:2c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5A875F4B194D8FEEEE65864238016F5BA011BF3 Validity Not Before: Sep 23 17:58:16 2026 GMT Not After : Sep 24 18:38:16 2026 GMT Subject: CN=E1EF5D7F1E3CE19458A7403C1D3D1A96305FD35A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b4:7a:62:5d:cd:a8:60:3c:82:65:8c:d8:ca: d2:61:15:2c:9f:d2:f7:31:fb:ff:5e:4a:72:02:60: e7:7b:82:8b:2a:1f:78:9a:bf:29:33:14:e9:0d:d8: dc:ba:4c:d5:f6:6b:30:56:56:ae:80:15:02:58:31: fb:f9:d0:cf:ea:91:0d:77:5e:10:8c:d4:fb:d6:a4: 5f:23:6f:01:5e:13:0a:dd:2b:c0:1b:d2:08:d7:38: b2:1c:fe:8f:2d:20:44:c8:c1:b2:7a:70:b9:85:94: b4:f1:4e:05:5c:43:38:82:b0:c5:49:fa:2c:6a:1a: 28:22:30:16:91:df:0f:97:d7:57:02:25:e1:bf:cd: 25:c1:ca:5b:f8:a8:e9:2b:db:3d:85:22:76:9d:0d: 9a:4a:ea:a2:4c:7e:3d:bc:70:cc:0e:cf:e7:b1:17: 54:b0:fd:87:48:9b:02:f3:53:41:69:8a:cb:98:38: ce:d3:bb:04:93:e2:08:de:d2:29:ae:01:29:a9:db: 4d:24:b7:86:b4:2c:be:55:2b:2d:97:e9:22:b3:5b: 84:9e:a0:b8:2b:95:43:f0:02:62:f7:fb:68:7b:85: fe:87:cd:eb:e2:47:c3:f2:dd:e4:72:6a:d9:79:c9: 47:92:c0:fc:9d:ae:73:57:f0:d0:64:d9:90:3b:93: 95:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:EF:5D:7F:1E:3C:E1:94:58:A7:40:3C:1D:3D:1A:96:30:5F:D3:5A X509v3 Authority Key Identifier: keyid:F5:A8:75:F4:B1:94:D8:FE:EE:E6:58:64:23:80:16:F5:BA:01:1B:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/F5A875F4B194D8FEEEE65864238016F5BA011BF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5A875F4B194D8FEEEE65864238016F5BA011BF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/F5A875F4B194D8FEEEE65864238016F5BA011BF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:52:4e:27:6b:0d:16:a3:a7:9e:02:6f:d8:46:30:24:a9:a0: 2b:92:91:0b:99:d6:df:58:10:90:e8:38:63:2c:de:28:d4:a2: 79:1f:06:86:3a:62:41:7e:53:66:5c:c5:b8:ba:c3:8a:20:d3: dd:06:fb:8f:76:4d:92:ee:2a:b0:f0:62:56:6d:97:63:8f:eb: 22:ea:be:26:a7:ce:62:68:4c:e8:ca:36:97:33:6f:f3:37:d8: d5:8e:69:5a:6f:9a:94:73:f7:64:56:6c:6f:f6:82:38:6a:56: a3:0d:d6:0d:92:64:02:97:c5:25:af:31:f5:86:34:11:87:3d: c8:2f:ca:d0:61:29:72:5c:09:2e:ee:b8:44:87:41:e8:5d:11: ef:9f:d8:d5:d2:60:6a:97:bb:de:52:32:3c:3c:41:3c:49:37: 70:24:e4:25:a8:ba:14:24:bf:ef:ab:77:7a:18:64:94:5d:dd: 6e:87:59:97:11:de:6d:e6:98:93:36:4e:be:b0:e6:2d:44:9a: 8f:85:bf:74:b2:91:ed:52:95:95:d0:d1:b3:31:70:b3:43:9d: 88:ee:9b:3c:19:31:27:5b:57:65:48:19:4b:59:b4:0d:52:a4: 62:1a:44:62:fd:71:04:87:9d:bb:73:a3:1b:20:9e:ab:21:ef: 37:98:75:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQE2BoBmXGH99If6IPoxfj8BMLLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVBODc1RjRCMTk0RDhGRUVFRTY1ODY0MjM4MDE2RjVC QTAxMUJGMzAeFw0yNjA5MjMxNzU4MTZaFw0yNjA5MjQxODM4MTZaMDMxMTAvBgNV BAMTKEUxRUY1RDdGMUUzQ0UxOTQ1OEE3NDAzQzFEM0QxQTk2MzA1RkQzNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+tHpiXc2oYDyCZYzYytJhFSyf 0vcx+/9eSnICYOd7gosqH3iavykzFOkN2Ny6TNX2azBWVq6AFQJYMfv50M/qkQ13 XhCM1PvWpF8jbwFeEwrdK8Ab0gjXOLIc/o8tIETIwbJ6cLmFlLTxTgVcQziCsMVJ +ixqGigiMBaR3w+X11cCJeG/zSXBylv4qOkr2z2FInadDZpK6qJMfj28cMwOz+ex F1Sw/YdImwLzU0FpisuYOM7TuwST4gje0imuASmp200kt4a0LL5VKy2X6SKzW4Se oLgrlUPwAmL3+2h7hf6HzeviR8Py3eRyatl5yUeSwPydrnNX8NBk2ZA7k5WZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4e9dfx484ZRYp0A8HT0aljBf01owHwYDVR0j BBgwFoAU9ah19LGU2P7u5lhkI4AW9boBG/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjUzNTg1MGUtNGJmYS00NTA0LWJiZWMtNmM2YjJjYzNiYTI5LzAvRjVBODc1RjRC MTk0RDhGRUVFRTY1ODY0MjM4MDE2RjVCQTAxMUJGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNUE4NzVGNEIxOTREOEZFRUVFNjU4NjQyMzgwMTZGNUJBMDEx QkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjUzNTg1MGUtNGJmYS00NTA0LWJi ZWMtNmM2YjJjYzNiYTI5LzAvRjVBODc1RjRCMTk0RDhGRUVFRTY1ODY0MjM4MDE2 RjVCQTAxMUJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJFSTidrDRajp54Cb9hGMCSpoCuSkQuZ1t9Y EJDoOGMs3ijUonkfBoY6YkF+U2Zcxbi6w4og090G+492TZLuKrDwYlZtl2OP6yLq vianzmJoTOjKNpczb/M32NWOaVpvmpRz92RWbG/2gjhqVqMN1g2SZAKXxSWvMfWG NBGHPcgvytBhKXJcCS7uuESHQehdEe+f2NXSYGqXu95SMjw8QTxJN3Ak5CWouhQk v++rd3oYZJRd3W6HWZcR3m3mmJM2Tr6w5i1Emo+Fv3Syke1SlZXQ0bMxcLNDnYju mzwZMSdbV2VIGUtZtA1SpGIaRGL9cQSHnbtzoxsgnqsh7zeYdSI= -----END CERTIFICATE-----Generated at Thu Sep 24 06:09:03 2026 by rpki-client