$ rpki-client -vvvf rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.mft File: 5CB4B0C07702B8252693A6958EABDFD306B34D72.mft (raw, json) Hash identifier: 0z1Av/kKSrEnptZevcoq6f+rAvdswMXq9OkMd1YUD40= Subject key identifier: EB:3D:22:0C:B1:47:CF:7D:35:24:6B:A9:78:F8:E8:7A:53:18:2E:B7 Authority key identifier: 5C:B4:B0:C0:77:02:B8:25:26:93:A6:95:8E:AB:DF:D3:06:B3:4D:72 Certificate issuer: /CN=5CB4B0C07702B8252693A6958EABDFD306B34D72 Certificate serial: 75DE9AA68E5426FA2D806CB70395DBAB35BF882C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CB4B0C07702B8252693A6958EABDFD306B34D72.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.mft Manifest number: C0 Signing time: Thu 24 Sep 2026 00:51:51 +0000 Manifest this update: Thu 24 Sep 2026 00:46:51 +0000 Manifest next update: Fri 25 Sep 2026 04:45:51 +0000 Files and hashes: 1: 5CB4B0C07702B8252693A6958EABDFD306B34D72.crl (hash: UtJRC7iHAvczvVAp5RWfuSKEfH0bw9oxGZ91/u1OEGQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.crl rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CB4B0C07702B8252693A6958EABDFD306B34D72.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 04:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:de:9a:a6:8e:54:26:fa:2d:80:6c:b7:03:95:db:ab:35:bf:88:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CB4B0C07702B8252693A6958EABDFD306B34D72 Validity Not Before: Sep 24 00:46:51 2026 GMT Not After : Sep 25 04:45:51 2026 GMT Subject: CN=EB3D220CB147CF7D35246BA978F8E87A53182EB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:82:44:06:41:fe:ed:32:b5:56:4e:44:f0:aa: 9a:dd:16:e6:2e:3d:7b:70:3d:7b:9a:88:ae:1e:cf: 6b:14:0d:d3:3e:6b:01:cb:e3:41:09:fa:36:95:c9: c7:22:08:da:ba:cc:0c:de:a3:60:3e:99:b3:f4:a1: 9e:85:38:ee:ce:63:62:fb:77:25:f0:05:b0:1e:f0: e2:3b:e1:b5:84:56:31:3d:41:b9:ab:67:a9:1f:61: a2:1f:83:04:ff:6e:93:4a:d8:dc:0e:da:eb:ac:97: 9a:04:ca:73:17:56:3a:bf:ab:a2:ad:c5:c2:04:65: 10:db:b2:b7:ef:45:cc:b7:79:8a:45:ce:02:bc:63: fd:1f:2e:50:7e:da:b8:50:aa:f8:7e:20:33:3e:40: a2:ad:44:bd:08:b3:38:ba:d2:fb:e4:98:e2:90:9c: 72:af:30:63:95:ad:41:e4:e2:53:61:96:fe:4b:cd: 67:a4:53:fa:04:c3:b4:f5:58:7e:c2:ee:ae:0a:8c: 2e:d3:e0:d3:16:0e:cc:45:14:a3:b9:c0:e0:ae:4f: 2f:4e:fc:c4:fb:84:6c:11:70:ad:0d:32:f6:9e:1f: 35:f7:92:10:db:70:16:99:8a:5a:03:0e:41:20:6c: 0f:b6:18:ac:ca:99:05:2d:2d:cc:80:7c:d0:16:f6: 40:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3D:22:0C:B1:47:CF:7D:35:24:6B:A9:78:F8:E8:7A:53:18:2E:B7 X509v3 Authority Key Identifier: keyid:5C:B4:B0:C0:77:02:B8:25:26:93:A6:95:8E:AB:DF:D3:06:B3:4D:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CB4B0C07702B8252693A6958EABDFD306B34D72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d7:73:7e:f8:35:d7:6d:c3:69:5e:ec:17:be:33:51:9d:23: c6:4e:88:ef:1a:d2:b7:9c:d3:83:87:9d:e7:ae:fa:be:67:58: b7:e6:95:4f:01:a0:d0:1c:fe:d2:dc:d3:e1:ae:de:75:75:92: da:b7:10:74:40:09:ea:d6:62:88:1a:fe:e9:80:2c:4b:5f:0d: e7:bf:5c:7d:1a:b3:ef:5f:c3:75:53:ab:6d:d6:8b:81:eb:02: 99:fb:53:29:1d:10:15:9c:1a:06:4e:63:1e:cf:4c:16:fe:e4: 46:bb:22:01:84:4c:97:ec:ff:d8:54:8d:c2:46:c0:46:d1:1f: 8c:87:9f:68:c0:9d:f4:11:a7:ef:48:ab:a0:ad:90:e8:86:94: a1:d4:7b:79:ff:c8:b7:70:01:28:dc:c4:0d:b9:d3:b6:fc:f2: 63:d1:6f:b6:1c:90:2d:ca:93:9d:9e:7e:bc:21:08:32:6e:04: b4:5e:7e:d1:d5:f0:98:62:ae:a5:31:f8:92:0b:c1:44:6a:91: d7:5a:a8:13:b1:97:81:a7:d9:0f:42:2b:00:9f:60:e8:70:e9: 54:e3:1a:32:78:a4:d3:c9:51:14:a7:63:9d:bb:5d:e7:b8:b0: ca:be:05:90:2d:ee:79:19:e6:bc:86:c6:1a:80:8a:dc:d0:7e: 9e:b8:0e:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdd6apo5UJvotgGy3A5XbqzW/iCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNCNEIwQzA3NzAyQjgyNTI2OTNBNjk1OEVBQkRGRDMw NkIzNEQ3MjAeFw0yNjA5MjQwMDQ2NTFaFw0yNjA5MjUwNDQ1NTFaMDMxMTAvBgNV BAMTKEVCM0QyMjBDQjE0N0NGN0QzNTI0NkJBOTc4RjhFODdBNTMxODJFQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDogkQGQf7tMrVWTkTwqprdFuYu PXtwPXuaiK4ez2sUDdM+awHL40EJ+jaVycciCNq6zAzeo2A+mbP0oZ6FOO7OY2L7 dyXwBbAe8OI74bWEVjE9QbmrZ6kfYaIfgwT/bpNK2NwO2uusl5oEynMXVjq/q6Kt xcIEZRDbsrfvRcy3eYpFzgK8Y/0fLlB+2rhQqvh+IDM+QKKtRL0Iszi60vvkmOKQ nHKvMGOVrUHk4lNhlv5LzWekU/oEw7T1WH7C7q4KjC7T4NMWDsxFFKO5wOCuTy9O /MT7hGwRcK0NMvaeHzX3khDbcBaZiloDDkEgbA+2GKzKmQUtLcyAfNAW9kBHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6z0iDLFHz301JGupePjoelMYLrcwHwYDVR0j BBgwFoAUXLSwwHcCuCUmk6aVjqvf0wazTXIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNiZGNiYWUtMmU5ZC00ZjNmLThhYjktMzQyNGU0NDg0ODRlLzAvNUNCNEIwQzA3 NzAyQjgyNTI2OTNBNjk1OEVBQkRGRDMwNkIzNEQ3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81Q0I0QjBDMDc3MDJCODI1MjY5M0E2OTU4RUFCREZEMzA2QjM0 RDcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNiZGNiYWUtMmU5ZC00ZjNmLThh YjktMzQyNGU0NDg0ODRlLzAvNUNCNEIwQzA3NzAyQjgyNTI2OTNBNjk1OEVBQkRG RDMwNkIzNEQ3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC7Xc374Nddtw2le7Be+M1GdI8ZOiO8a0rec 04OHneeu+r5nWLfmlU8BoNAc/tLc0+Gu3nV1ktq3EHRACerWYoga/umALEtfDee/ XH0as+9fw3VTq23Wi4HrApn7UykdEBWcGgZOYx7PTBb+5Ea7IgGETJfs/9hUjcJG wEbRH4yHn2jAnfQRp+9Iq6CtkOiGlKHUe3n/yLdwASjcxA2507b88mPRb7YckC3K k52efrwhCDJuBLReftHV8JhirqUx+JILwURqkddaqBOxl4Gn2Q9CKwCfYOhw6VTj GjJ4pNPJURSnY527Xee4sMq+BZAt7nkZ5ryGxhqAitzQfp64Dmg= -----END CERTIFICATE-----Generated at Thu Sep 24 12:59:20 2026 by rpki-client