$ rpki-client -vvvf rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft File: 5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft (raw, json) Hash identifier: 8Jpv1xE6rp/x1GyDbssnZjHV+PN9NiYWyA7LiXfmfVQ= Subject key identifier: 16:38:6D:AB:B3:CB:E5:62:4B:E9:D0:EA:C0:01:FF:53:78:8A:6E:B2 Authority key identifier: 5D:7C:FA:91:FB:D3:09:B4:50:5F:E1:D6:16:62:F4:AE:1F:4F:02:6F Certificate issuer: /CN=5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F Certificate serial: 5AE6EFCA52E716D6D5DCC3F457F1D677367F3B52 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 00:00:45 +0000 Manifest this update: Wed 23 Sep 2026 23:55:45 +0000 Manifest next update: Fri 25 Sep 2026 02:15:45 +0000 Files and hashes: 1: 5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.crl (hash: sncq5zRsKNoiL2f2vgDnr+MYgOi7LoJclXlQOE0pBPM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.crl rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:e6:ef:ca:52:e7:16:d6:d5:dc:c3:f4:57:f1:d6:77:36:7f:3b:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F Validity Not Before: Sep 23 23:55:45 2026 GMT Not After : Sep 25 02:15:45 2026 GMT Subject: CN=16386DABB3CBE5624BE9D0EAC001FF53788A6EB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:94:c6:eb:5a:9d:a5:13:73:d9:af:e5:d4:47: 83:c1:50:d6:4d:b8:f1:2c:b9:d2:08:6e:d0:c8:09: 53:fb:71:6d:04:cf:c4:22:6b:a7:7d:60:2b:87:58: 15:61:72:52:fb:5b:81:02:26:d5:51:dd:19:c6:d0: 55:38:25:fd:ef:51:41:fd:d0:ef:3f:0a:2f:59:7c: 86:cd:53:09:76:45:bc:47:05:e1:2f:24:5e:ed:05: 71:d2:ba:d1:ff:0b:35:39:1e:81:c3:bf:c7:85:82: d5:b7:c3:2a:65:cb:a8:e9:28:16:ab:79:aa:10:c9: 19:17:b8:56:44:01:ff:42:a9:98:49:4f:0c:ea:c6: 73:fc:4b:10:c1:4b:3a:5c:f2:3d:09:46:31:f9:51: 94:80:f8:48:99:13:c5:d2:51:a2:e9:d9:97:61:31: 4a:3c:e4:47:48:14:67:22:0f:3b:2b:a9:ef:8f:27: 10:8c:3e:20:b1:1c:a7:81:0e:b3:7b:a0:55:88:a0: cc:f3:93:e9:94:6e:7c:c2:3b:4e:19:c6:39:95:bd: ce:e7:47:d7:f9:58:d4:fa:78:e8:36:b1:fe:43:a5: 5a:80:91:cc:90:16:a5:63:dd:da:d0:11:17:d2:3b: 07:0e:33:fe:65:74:6f:ca:bc:97:de:a1:e7:fa:55: 53:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:38:6D:AB:B3:CB:E5:62:4B:E9:D0:EA:C0:01:FF:53:78:8A:6E:B2 X509v3 Authority Key Identifier: keyid:5D:7C:FA:91:FB:D3:09:B4:50:5F:E1:D6:16:62:F4:AE:1F:4F:02:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:7a:bf:79:ac:3e:49:6c:34:04:5d:79:53:6a:dd:b2:b4:37: b4:a4:fc:13:d2:3a:c0:9b:a5:00:3d:0e:8b:d8:16:eb:05:a2: a0:e5:f2:28:de:9a:d6:14:dc:9b:91:f5:fe:1a:b9:de:e4:f0: 74:be:01:46:61:77:be:6b:b7:73:5a:3f:05:18:28:71:98:cd: 82:c2:bf:71:52:6d:70:72:e3:30:82:44:63:cb:ae:64:39:e1: e1:be:04:8d:26:41:da:00:76:e2:5e:9d:b2:b9:d2:5d:55:a8: 7e:cc:e2:43:d7:3a:fc:2c:9b:4d:9f:10:24:96:62:99:b8:6a: 4c:5e:9a:78:e7:d9:82:07:dc:56:a1:59:9b:76:28:d3:58:8d: de:92:c2:07:44:25:c6:0f:38:b5:ad:60:f9:bb:34:9f:5c:bc: 8d:b9:e0:a2:4d:23:bd:86:fa:43:d3:1f:87:e0:90:a7:0a:2d: 6a:2b:8d:c4:44:3a:04:c1:e8:53:49:db:a9:66:40:38:eb:bb: 7e:df:e6:01:58:ae:dd:0d:9b:d5:16:a3:6f:32:f3:80:19:a5: 1d:d1:c8:0f:87:6d:23:da:54:3c:70:44:2f:bc:8f:df:4f:ef: 51:e2:34:e9:f2:06:84:d8:5b:3f:fe:dd:79:65:32:31:45:7e: 72:9c:02:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWubvylLnFtbV3MP0V/HWdzZ/O1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ3Q0ZBOTFGQkQzMDlCNDUwNUZFMUQ2MTY2MkY0QUUx RjRGMDI2RjAeFw0yNjA5MjMyMzU1NDVaFw0yNjA5MjUwMjE1NDVaMDMxMTAvBgNV BAMTKDE2Mzg2REFCQjNDQkU1NjI0QkU5RDBFQUMwMDFGRjUzNzg4QTZFQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCllMbrWp2lE3PZr+XUR4PBUNZN uPEsudIIbtDICVP7cW0Ez8Qia6d9YCuHWBVhclL7W4ECJtVR3RnG0FU4Jf3vUUH9 0O8/Ci9ZfIbNUwl2RbxHBeEvJF7tBXHSutH/CzU5HoHDv8eFgtW3wyply6jpKBar eaoQyRkXuFZEAf9CqZhJTwzqxnP8SxDBSzpc8j0JRjH5UZSA+EiZE8XSUaLp2Zdh MUo85EdIFGciDzsrqe+PJxCMPiCxHKeBDrN7oFWIoMzzk+mUbnzCO04ZxjmVvc7n R9f5WNT6eOg2sf5DpVqAkcyQFqVj3drQERfSOwcOM/5ldG/KvJfeoef6VVO9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFjhtq7PL5WJL6dDqwAH/U3iKbrIwHwYDVR0j BBgwFoAUXXz6kfvTCbRQX+HWFmL0rh9PAm8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODhhOGVhN2YtMmY2MS00NDZiLThiNTEtNTE5NDViMDgyZmFhLzAvNUQ3Q0ZBOTFG QkQzMDlCNDUwNUZFMUQ2MTY2MkY0QUUxRjRGMDI2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDdDRkE5MUZCRDMwOUI0NTA1RkUxRDYxNjYyRjRBRTFGNEYw MjZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODhhOGVhN2YtMmY2MS00NDZiLThi NTEtNTE5NDViMDgyZmFhLzAvNUQ3Q0ZBOTFGQkQzMDlCNDUwNUZFMUQ2MTY2MkY0 QUUxRjRGMDI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEh6v3msPklsNARdeVNq3bK0N7Sk/BPSOsCb pQA9DovYFusFoqDl8ijemtYU3JuR9f4aud7k8HS+AUZhd75rt3NaPwUYKHGYzYLC v3FSbXBy4zCCRGPLrmQ54eG+BI0mQdoAduJenbK50l1VqH7M4kPXOvwsm02fECSW Ypm4akxemnjn2YIH3FahWZt2KNNYjd6SwgdEJcYPOLWtYPm7NJ9cvI254KJNI72G +kPTH4fgkKcKLWorjcREOgTB6FNJ26lmQDjru37f5gFYrt0Nm9UWo28y84AZpR3R yA+HbSPaVDxwRC+8j99P71HiNOnyBoTYWz/+3XllMjFFfnKcAvQ= -----END CERTIFICATE-----Generated at Thu Sep 24 08:35:58 2026 by rpki-client