$ rpki-client -vvvf rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft File: 5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft (raw, json) Hash identifier: xtCbJOWR1ENqX38qnQ8cNDD/Vjr7ORvPeNlBoeTZYZ8= Subject key identifier: BE:89:74:E0:AD:43:54:D4:3D:92:EB:15:C0:14:D1:B6:6A:A6:CD:7C Authority key identifier: 5F:F6:A3:A7:C3:04:9D:67:B3:6C:D7:96:99:1E:5C:E4:5A:16:80:4D Certificate issuer: /CN=5FF6A3A7C3049D67B36CD796991E5CE45A16804D Certificate serial: 056377992F3B3A7F7C0CFA256599B5A296596BD4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft Manifest number: C3 Signing time: Sat 26 Sep 2026 00:46:05 +0000 Manifest this update: Sat 26 Sep 2026 00:41:05 +0000 Manifest next update: Sun 27 Sep 2026 02:58:05 +0000 Files and hashes: 1: 5FF6A3A7C3049D67B36CD796991E5CE45A16804D.crl (hash: fH30TcjQIComaQkIdkeze41x28BVE8pWkffYGOl3fsM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.crl rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:63:77:99:2f:3b:3a:7f:7c:0c:fa:25:65:99:b5:a2:96:59:6b:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF6A3A7C3049D67B36CD796991E5CE45A16804D Validity Not Before: Sep 26 00:41:05 2026 GMT Not After : Sep 27 02:58:05 2026 GMT Subject: CN=BE8974E0AD4354D43D92EB15C014D1B66AA6CD7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e9:5f:c9:43:41:e1:1f:5d:f2:e3:6b:5f:15: 4d:68:98:d6:79:9e:87:63:1c:9b:57:2b:83:22:9b: 10:4d:49:aa:1f:6b:f9:81:b4:ea:2c:0a:ae:13:20: 6a:c6:84:cd:47:98:fc:86:bb:2c:5e:43:1d:1f:b3: 04:ca:bc:4a:de:4e:e4:1a:d2:c1:48:3f:51:cd:2f: ab:db:18:05:df:6c:0d:92:ae:2d:fb:b8:15:13:3d: d6:bc:6a:b1:29:cd:7f:eb:40:4d:6f:ba:f2:5c:46: b7:04:e9:bd:e1:82:05:38:22:da:7f:1f:fb:32:0e: 27:73:a4:41:2b:cb:99:19:50:ca:26:53:1f:22:ff: 6c:13:d8:25:5d:8b:5e:7e:64:d8:25:58:7f:ad:25: 8a:6a:24:b8:f5:55:a6:01:4b:52:c1:87:d9:6e:be: da:a8:97:0c:c1:9f:bd:2c:df:3f:27:04:de:a2:db: ef:bd:4c:37:8d:be:76:ad:12:b2:2d:1b:60:b8:eb: 23:c6:67:0e:1c:f4:99:d5:1b:16:8d:ae:ee:51:ba: e3:51:7c:17:69:bf:54:26:ea:cb:e2:87:54:22:8a: 75:56:d1:76:9d:45:15:16:88:5a:18:e8:19:1b:45: dd:5e:b1:e3:cd:ce:ff:20:2f:22:30:7e:3b:cd:33: 53:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:89:74:E0:AD:43:54:D4:3D:92:EB:15:C0:14:D1:B6:6A:A6:CD:7C X509v3 Authority Key Identifier: keyid:5F:F6:A3:A7:C3:04:9D:67:B3:6C:D7:96:99:1E:5C:E4:5A:16:80:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:0f:78:66:e3:06:1e:37:ad:96:af:09:74:a7:e4:1c:d5:82: 6e:9e:e2:00:2d:31:94:ff:0e:f2:88:9b:5a:dd:94:b2:80:d9: 7f:13:56:b6:20:df:9e:5d:71:35:8e:eb:03:c4:85:10:70:e3: 94:96:f4:e4:be:c0:60:f8:62:db:a0:df:4d:9f:09:82:1d:e4: 27:6e:26:a9:5a:07:21:cc:3c:11:99:05:13:9e:67:6c:16:67: 1f:de:93:47:3b:9d:ff:1b:8e:3c:37:40:4e:d6:a0:4c:11:98: 3a:ec:4f:9a:0f:75:c6:c8:b9:5e:18:67:7d:a1:ef:52:c0:26: 6a:de:ff:5d:82:63:cc:35:00:52:6d:60:67:a0:6f:d9:cd:6a: 27:95:38:7e:8f:81:02:cc:f1:6d:e8:e6:2d:9c:b8:00:c1:2c: 8a:18:6b:70:7f:d4:c1:af:ed:0e:2a:18:95:9e:a6:19:f8:bc: a2:18:89:11:a7:aa:33:2c:08:57:77:84:98:97:76:93:ce:00: e4:38:d8:71:4d:82:04:95:17:54:3e:71:dc:9e:e3:9c:40:8f: f7:86:75:0e:94:d8:0a:80:d8:22:28:70:6d:ce:68:e7:55:a1: 49:6b:69:49:f7:63:b3:63:99:9c:c2:91:4c:14:d5:ec:50:3b: d9:fb:c3:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBWN3mS87On98DPolZZm1opZZa9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGNkEzQTdDMzA0OUQ2N0IzNkNENzk2OTkxRTVDRTQ1 QTE2ODA0RDAeFw0yNjA5MjYwMDQxMDVaFw0yNjA5MjcwMjU4MDVaMDMxMTAvBgNV BAMTKEJFODk3NEUwQUQ0MzU0RDQzRDkyRUIxNUMwMTREMUI2NkFBNkNEN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp6V/JQ0HhH13y42tfFU1omNZ5 nodjHJtXK4MimxBNSaofa/mBtOosCq4TIGrGhM1HmPyGuyxeQx0fswTKvEreTuQa 0sFIP1HNL6vbGAXfbA2Sri37uBUTPda8arEpzX/rQE1vuvJcRrcE6b3hggU4Itp/ H/syDidzpEEry5kZUMomUx8i/2wT2CVdi15+ZNglWH+tJYpqJLj1VaYBS1LBh9lu vtqolwzBn70s3z8nBN6i2++9TDeNvnatErItG2C46yPGZw4c9JnVGxaNru5RuuNR fBdpv1Qm6svih1QiinVW0XadRRUWiFoY6BkbRd1esePNzv8gLyIwfjvNM1NNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvol04K1DVNQ9kusVwBTRtmqmzXwwHwYDVR0j BBgwFoAUX/ajp8MEnWezbNeWmR5c5FoWgE0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTM3ZjE5NWEtMzY5ZS00NGJhLTgwY2UtNzIxNzNkNTFhMzcyLzAvNUZGNkEzQTdD MzA0OUQ2N0IzNkNENzk2OTkxRTVDRTQ1QTE2ODA0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81RkY2QTNBN0MzMDQ5RDY3QjM2Q0Q3OTY5OTFFNUNFNDVBMTY4 MDRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTM3ZjE5NWEtMzY5ZS00NGJhLTgw Y2UtNzIxNzNkNTFhMzcyLzAvNUZGNkEzQTdDMzA0OUQ2N0IzNkNENzk2OTkxRTVD RTQ1QTE2ODA0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkPeGbjBh43rZavCXSn5BzVgm6e4gAtMZT/ DvKIm1rdlLKA2X8TVrYg355dcTWO6wPEhRBw45SW9OS+wGD4Ytug302fCYId5Cdu JqlaByHMPBGZBROeZ2wWZx/ek0c7nf8bjjw3QE7WoEwRmDrsT5oPdcbIuV4YZ32h 71LAJmre/12CY8w1AFJtYGegb9nNaieVOH6PgQLM8W3o5i2cuADBLIoYa3B/1MGv 7Q4qGJWephn4vKIYiRGnqjMsCFd3hJiXdpPOAOQ42HFNggSVF1Q+cdye45xAj/eG dQ6U2AqA2CIocG3OaOdVoUlraUn3Y7NjmZzCkUwU1exQO9n7w30= -----END CERTIFICATE-----Generated at Sat Sep 26 11:14:44 2026 by rpki-client