$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.mft File: 5FD95F455755676CB89A532D2F2A8301877C4AEC.mft (raw, json) Hash identifier: RNvFwd0U0rxPadyKlcP2WMFbiwEK5rnMZUO6g1e3hA0= Subject key identifier: DB:82:26:36:6A:EA:1E:CB:13:FB:3B:0F:A0:5A:BB:34:C5:F0:7A:21 Authority key identifier: 5F:D9:5F:45:57:55:67:6C:B8:9A:53:2D:2F:2A:83:01:87:7C:4A:EC Certificate issuer: /CN=5FD95F455755676CB89A532D2F2A8301877C4AEC Certificate serial: 3399A9086EADB90A3F19A953C02C32343D22E4FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FD95F455755676CB89A532D2F2A8301877C4AEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 04:05:47 +0000 Manifest this update: Thu 24 Sep 2026 04:00:47 +0000 Manifest next update: Fri 25 Sep 2026 05:39:47 +0000 Files and hashes: 1: 5FD95F455755676CB89A532D2F2A8301877C4AEC.crl (hash: uOhWHl2KCQL1S6aQtaLbY2R3lcAXYsKBdYhoXG+ARVw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.crl rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FD95F455755676CB89A532D2F2A8301877C4AEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:99:a9:08:6e:ad:b9:0a:3f:19:a9:53:c0:2c:32:34:3d:22:e4:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FD95F455755676CB89A532D2F2A8301877C4AEC Validity Not Before: Sep 24 04:00:47 2026 GMT Not After : Sep 25 05:39:47 2026 GMT Subject: CN=DB8226366AEA1ECB13FB3B0FA05ABB34C5F07A21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:44:0d:45:f1:41:83:79:94:66:61:78:2c:6d: f6:28:88:51:6a:33:63:77:1b:49:b1:a5:2a:7a:ee: 17:a8:b7:a9:31:23:30:dd:dd:13:cf:31:d6:e4:76: 24:4c:7b:8d:84:82:93:2e:49:14:92:60:c8:0d:52: fd:95:31:e2:60:de:a5:75:f2:f0:f3:63:3f:07:4f: 90:96:d8:6a:3a:25:f2:44:20:e7:d4:0f:e8:34:df: 03:ad:d5:41:cf:a8:b6:68:ed:da:a9:68:fd:a5:6d: ab:6c:8b:16:45:90:c1:7f:56:5c:4a:4d:4d:b2:e5: bf:0f:4a:12:40:01:24:e4:bf:6a:45:ff:e3:19:1a: 6f:14:95:6e:69:d5:57:af:82:dd:26:62:92:1d:d7: 61:f5:b8:ef:38:ad:ff:2d:96:2b:73:2c:a5:0e:4e: 38:36:03:e1:4b:03:62:3a:80:bc:4e:e1:4a:d5:7c: a0:26:53:31:e0:4c:8d:02:8f:af:60:68:b1:36:33: 03:3a:20:b6:f0:9c:65:b9:a1:43:11:a0:7d:89:69: bf:c5:81:5f:fd:9d:48:c7:d1:8f:18:cb:13:ec:85: 8a:f8:48:4a:57:06:58:15:bc:15:e5:da:32:01:9a: d2:ba:25:df:8f:9a:57:73:68:ed:7d:bd:27:49:63: f2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:82:26:36:6A:EA:1E:CB:13:FB:3B:0F:A0:5A:BB:34:C5:F0:7A:21 X509v3 Authority Key Identifier: keyid:5F:D9:5F:45:57:55:67:6C:B8:9A:53:2D:2F:2A:83:01:87:7C:4A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FD95F455755676CB89A532D2F2A8301877C4AEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:dd:06:f4:65:05:01:fd:e8:87:1e:e2:f9:84:9f:6c:df:50: aa:4c:fe:d6:bb:dd:ec:db:0e:8c:82:b4:ae:95:63:51:44:a7: d4:3a:b8:72:b2:77:4e:9a:e9:15:b9:4c:57:50:6e:cd:3b:5b: 65:28:d2:8a:18:bc:d5:69:34:22:0a:31:62:6f:1f:4c:2f:79: b6:9a:61:cb:fd:50:1d:f1:cb:df:c9:ef:fb:c2:26:6c:cf:07: 8c:cf:f6:1b:86:e4:09:01:ad:31:13:62:35:23:5a:0d:92:02: 8e:b8:79:2a:9c:e5:81:1c:0d:9b:a9:cd:5b:9b:3a:7f:9d:84: 14:07:7e:df:06:b0:70:c5:db:0f:0c:9b:34:ee:d5:c6:56:85: c2:f6:6a:1e:51:7b:ce:d7:11:7f:b6:09:0f:7c:23:6a:cc:ed: 1c:ec:ea:cf:dd:e2:32:98:c8:8e:36:de:a5:a9:81:ad:0c:8d: 83:b8:12:e2:55:d8:d3:ff:72:fa:98:e4:08:2c:88:df:c2:f8: a5:9e:63:84:7f:5f:61:e1:3c:d7:50:85:83:26:29:e8:f8:e5: ed:cb:b1:ac:d8:08:5c:3b:9b:f3:7a:ca:8e:ce:b1:c1:9f:38: dd:18:43:77:ac:c1:a6:22:77:43:be:dc:75:f9:db:e3:62:41: cd:40:ca:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM5mpCG6tuQo/GalTwCwyND0i5P8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZEOTVGNDU1NzU1Njc2Q0I4OUE1MzJEMkYyQTgzMDE4 NzdDNEFFQzAeFw0yNjA5MjQwNDAwNDdaFw0yNjA5MjUwNTM5NDdaMDMxMTAvBgNV BAMTKERCODIyNjM2NkFFQTFFQ0IxM0ZCM0IwRkEwNUFCQjM0QzVGMDdBMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChRA1F8UGDeZRmYXgsbfYoiFFq M2N3G0mxpSp67heot6kxIzDd3RPPMdbkdiRMe42EgpMuSRSSYMgNUv2VMeJg3qV1 8vDzYz8HT5CW2Go6JfJEIOfUD+g03wOt1UHPqLZo7dqpaP2lbatsixZFkMF/VlxK TU2y5b8PShJAASTkv2pF/+MZGm8UlW5p1Vevgt0mYpId12H1uO84rf8tlitzLKUO Tjg2A+FLA2I6gLxO4UrVfKAmUzHgTI0Cj69gaLE2MwM6ILbwnGW5oUMRoH2Jab/F gV/9nUjH0Y8YyxPshYr4SEpXBlgVvBXl2jIBmtK6Jd+PmldzaO19vSdJY/JdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU24ImNmrqHssT+zsPoFq7NMXweiEwHwYDVR0j BBgwFoAUX9lfRVdVZ2y4mlMtLyqDAYd8SuwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmJhOTdiMGItMzlhZS00YzJjLWIxM2ItMDFlMzk1YjdhMjRiLzAvNUZEOTVGNDU1 NzU1Njc2Q0I4OUE1MzJEMkYyQTgzMDE4NzdDNEFFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkQ5NUY0NTU3NTU2NzZDQjg5QTUzMkQyRjJBODMwMTg3N0M0 QUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmJhOTdiMGItMzlhZS00YzJjLWIx M2ItMDFlMzk1YjdhMjRiLzAvNUZEOTVGNDU1NzU1Njc2Q0I4OUE1MzJEMkYyQTgz MDE4NzdDNEFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfdBvRlBQH96Ice4vmEn2zfUKpM/ta73ezb DoyCtK6VY1FEp9Q6uHKyd06a6RW5TFdQbs07W2Uo0ooYvNVpNCIKMWJvH0wvebaa Ycv9UB3xy9/J7/vCJmzPB4zP9huG5AkBrTETYjUjWg2SAo64eSqc5YEcDZupzVub On+dhBQHft8GsHDF2w8MmzTu1cZWhcL2ah5Re87XEX+2CQ98I2rM7Rzs6s/d4jKY yI423qWpga0MjYO4EuJV2NP/cvqY5AgsiN/C+KWeY4R/X2HhPNdQhYMmKej45e3L sazYCFw7m/N6yo7OscGfON0YQ3eswaYid0O+3HX52+NiQc1Ayqs= -----END CERTIFICATE-----Generated at Thu Sep 24 21:39:16 2026 by rpki-client