$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft File: C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft (raw, json) Hash identifier: IEX61FJ+5bmRcIi4bkpYuts1qyz9rns/7zpCo8zkahs= Subject key identifier: A6:51:B8:6D:FF:41:C0:ED:45:CF:00:AB:75:6E:AE:6A:0E:0C:0B:92 Authority key identifier: C5:DD:2D:E8:A2:5B:2A:B9:DB:C2:98:28:C0:31:41:B2:6C:B7:40:69 Certificate issuer: /CN=C5DD2DE8A25B2AB9DBC29828C03141B26CB74069 Certificate serial: 4FDF906AB080E6633287F8240E7E80202EB3854A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 15:50:22 +0000 Manifest this update: Thu 24 Sep 2026 15:45:22 +0000 Manifest next update: Fri 25 Sep 2026 17:27:22 +0000 Files and hashes: 1: C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.crl (hash: oP6uE5NPWWgPx+pYZh0zA2m9GPQh+UTFa2JrvkZZ6oA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.crl rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:df:90:6a:b0:80:e6:63:32:87:f8:24:0e:7e:80:20:2e:b3:85:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5DD2DE8A25B2AB9DBC29828C03141B26CB74069 Validity Not Before: Sep 24 15:45:22 2026 GMT Not After : Sep 25 17:27:22 2026 GMT Subject: CN=A651B86DFF41C0ED45CF00AB756EAE6A0E0C0B92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f8:0a:23:c0:8b:69:40:68:6d:b8:62:48:98: b0:35:0b:82:d4:ce:c4:3e:09:8a:e1:50:35:b8:2e: cc:05:02:f1:39:d1:2c:f0:94:66:24:7e:8c:59:0a: 74:cc:4d:77:74:93:05:61:a9:36:a8:1c:22:60:49: 52:92:8a:77:e7:5c:0f:f5:a4:90:51:e7:88:dc:c9: 51:c9:4b:34:15:a6:8f:0d:fc:e5:9f:ba:e4:47:18: ee:62:d6:0f:dd:25:38:8e:d4:ed:fb:86:b1:85:06: 99:b0:72:59:23:9d:ce:b5:5a:77:87:08:69:79:99: c6:5e:2a:ed:99:ba:e0:da:d1:82:d1:cd:42:28:f9: 10:a2:f7:89:a6:cf:75:e7:16:28:20:39:53:10:1f: a0:46:6e:cf:53:b5:74:cd:39:a2:b5:a6:ea:20:48: 35:15:3f:15:70:25:47:e5:67:38:88:b6:4d:0e:c2: c4:3b:99:75:7c:df:ae:92:3f:80:23:8b:fe:98:55: d1:2b:6a:e4:08:5c:9a:12:29:cb:cb:65:b3:db:84: df:19:57:e1:aa:16:ef:61:09:9e:c2:cf:74:e1:d8: b8:8e:c3:c5:49:ba:e7:3e:43:a1:5f:69:af:9a:fb: 64:a7:86:6c:a9:b9:17:80:8c:4e:63:11:da:36:be: 1b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:51:B8:6D:FF:41:C0:ED:45:CF:00:AB:75:6E:AE:6A:0E:0C:0B:92 X509v3 Authority Key Identifier: keyid:C5:DD:2D:E8:A2:5B:2A:B9:DB:C2:98:28:C0:31:41:B2:6C:B7:40:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:df:74:bc:3b:29:ff:76:3b:d1:17:bb:22:07:8a:ec:59:1d: c6:0c:37:aa:02:ca:d2:63:e0:77:5f:14:5e:a2:5a:b7:9d:24: ab:74:6f:85:78:db:5b:df:ba:f0:e8:d8:9f:d2:21:f0:83:bb: 55:91:53:48:7c:8d:88:21:55:21:b0:e0:36:5b:45:d7:73:ab: 0b:63:15:fb:0b:3a:93:68:ee:62:c9:d3:21:cd:72:4e:2a:82: c7:52:5a:8a:9e:26:96:f3:b0:cd:e4:a7:00:30:98:01:1d:94: 59:1d:3e:5d:d1:a4:30:32:e8:2f:bb:ed:11:4d:1c:91:89:b1: db:c0:30:2f:d8:7c:92:17:d7:4b:3f:c2:9d:5c:b2:dc:64:23: 09:47:e1:fd:92:5f:5d:2e:86:ca:64:2c:63:66:c0:83:f9:5e: 40:09:d0:11:35:f2:eb:47:c7:80:1e:17:10:9f:ea:37:b1:62: 09:cd:fc:3c:b1:8f:50:93:57:8b:3f:96:c5:30:5e:4c:61:87: 9f:d8:8f:e8:0d:85:8c:a3:18:bd:1a:3d:6a:92:bc:08:d4:15: 5c:f0:69:24:13:99:6e:54:87:e5:f6:c0:a1:ce:d3:6a:cf:35: 80:ab:24:87:57:cc:d2:88:1b:5d:f3:cf:df:0f:26:e2:5f:5a: 4b:f2:10:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT9+QarCA5mMyh/gkDn6AIC6zhUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVERDJERThBMjVCMkFCOURCQzI5ODI4QzAzMTQxQjI2 Q0I3NDA2OTAeFw0yNjA5MjQxNTQ1MjJaFw0yNjA5MjUxNzI3MjJaMDMxMTAvBgNV BAMTKEE2NTFCODZERkY0MUMwRUQ0NUNGMDBBQjc1NkVBRTZBMEUwQzBCOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCF+AojwItpQGhtuGJImLA1C4LU zsQ+CYrhUDW4LswFAvE50SzwlGYkfoxZCnTMTXd0kwVhqTaoHCJgSVKSinfnXA/1 pJBR54jcyVHJSzQVpo8N/OWfuuRHGO5i1g/dJTiO1O37hrGFBpmwclkjnc61WneH CGl5mcZeKu2ZuuDa0YLRzUIo+RCi94mmz3XnFiggOVMQH6BGbs9TtXTNOaK1puog SDUVPxVwJUflZziItk0OwsQ7mXV8366SP4Aji/6YVdErauQIXJoSKcvLZbPbhN8Z V+GqFu9hCZ7Cz3Th2LiOw8VJuuc+Q6Ffaa+a+2SnhmypuReAjE5jEdo2vhvxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUplG4bf9BwO1FzwCrdW6uag4MC5IwHwYDVR0j BBgwFoAUxd0t6KJbKrnbwpgowDFBsmy3QGkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U5ZTAxYmEtNTljOS00MDQ3LWFjMGItZTliMmZlNjU4NTNjLzAvQzVERDJERThB MjVCMkFCOURCQzI5ODI4QzAzMTQxQjI2Q0I3NDA2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNUREMkRFOEEyNUIyQUI5REJDMjk4MjhDMDMxNDFCMjZDQjc0 MDY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U5ZTAxYmEtNTljOS00MDQ3LWFj MGItZTliMmZlNjU4NTNjLzAvQzVERDJERThBMjVCMkFCOURCQzI5ODI4QzAzMTQx QjI2Q0I3NDA2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTfdLw7Kf92O9EXuyIHiuxZHcYMN6oCytJj 4HdfFF6iWredJKt0b4V421vfuvDo2J/SIfCDu1WRU0h8jYghVSGw4DZbRddzqwtj FfsLOpNo7mLJ0yHNck4qgsdSWoqeJpbzsM3kpwAwmAEdlFkdPl3RpDAy6C+77RFN HJGJsdvAMC/YfJIX10s/wp1cstxkIwlH4f2SX10uhspkLGNmwIP5XkAJ0BE18utH x4AeFxCf6jexYgnN/Dyxj1CTV4s/lsUwXkxhh5/Yj+gNhYyjGL0aPWqSvAjUFVzw aSQTmW5Uh+X2wKHO02rPNYCrJIdXzNKIG13zz98PJuJfWkvyEFc= -----END CERTIFICATE-----Generated at Thu Sep 24 17:11:21 2026 by rpki-client