$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft File: D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft (raw, json) Hash identifier: 2EBbeHiB+V22Trp+cwx3sFzMf3APhi+YxuUpffjkyxo= Subject key identifier: 50:1A:00:02:F9:E4:13:C1:0C:43:BE:DE:74:5B:DE:71:9C:54:56:45 Authority key identifier: D5:A9:D1:A5:8E:3E:E4:57:41:AF:FD:59:7F:03:CB:F6:34:91:22:3C Certificate issuer: /CN=D5A9D1A58E3EE45741AFFD597F03CBF63491223C Certificate serial: 0558632FA3639DE947DACE7832F3D8F8716A7583 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft Manifest number: CB Signing time: Fri 02 Oct 2026 02:33:52 +0000 Manifest this update: Fri 02 Oct 2026 02:28:52 +0000 Manifest next update: Sat 03 Oct 2026 05:01:52 +0000 Files and hashes: 1: D5A9D1A58E3EE45741AFFD597F03CBF63491223C.crl (hash: CiPXd8qJldYOLL3gDq7XjKdlvcq4JMi0EJnd/fMEW1Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.crl rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 04:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:58:63:2f:a3:63:9d:e9:47:da:ce:78:32:f3:d8:f8:71:6a:75:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5A9D1A58E3EE45741AFFD597F03CBF63491223C Validity Not Before: Oct 2 02:28:52 2026 GMT Not After : Oct 3 05:01:52 2026 GMT Subject: CN=501A0002F9E413C10C43BEDE745BDE719C545645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c5:c8:7c:1b:da:61:ed:93:b6:24:59:48:a0: a8:2d:d7:06:38:ce:a6:7f:97:35:fd:21:0e:d0:2d: b4:e1:03:c9:6f:87:98:6e:68:63:6c:aa:a4:26:d3: 8a:e5:d8:13:32:1f:d4:e3:d8:ec:f3:03:02:4c:44: 95:17:c1:c5:87:58:6a:bd:1e:41:d3:ca:d9:6a:96: d3:d5:c2:d8:26:09:e6:64:85:2c:4a:2f:41:00:49: 9c:39:88:f1:5d:fb:a3:fb:5b:03:10:6d:9f:55:67: 16:7b:d2:0c:11:ea:9a:4a:a6:cf:e8:45:d4:c7:58: d2:42:5b:39:5f:56:3d:9f:6c:ad:e0:39:16:22:de: b2:e0:10:08:18:41:77:31:88:5e:71:75:c0:7b:02: 67:b2:f9:94:6e:cb:43:43:91:f7:bb:ab:af:86:1a: 0a:70:d2:11:1a:d1:92:e3:16:47:5f:4a:3b:03:f5: 23:f7:75:ac:6e:d0:00:25:43:f1:c6:19:36:d8:b0: 46:c6:5d:4e:06:2f:e4:c1:cc:ed:38:9a:38:5f:a1: fb:8c:e5:83:86:ef:a7:3c:51:27:e5:9f:17:7b:a5: 5f:00:8b:bc:23:1d:dc:34:0c:1d:35:61:9e:c9:cf: cd:34:1d:99:67:8f:93:99:de:fe:eb:38:70:69:7d: 8f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1A:00:02:F9:E4:13:C1:0C:43:BE:DE:74:5B:DE:71:9C:54:56:45 X509v3 Authority Key Identifier: keyid:D5:A9:D1:A5:8E:3E:E4:57:41:AF:FD:59:7F:03:CB:F6:34:91:22:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:0d:6c:64:3f:8e:1a:d9:9a:b4:7d:f0:ba:b6:f2:19:b7:ea: 99:14:7b:f9:40:3e:f0:19:3e:34:b0:ce:0d:f1:16:54:e1:13: 13:96:92:eb:10:71:aa:97:65:25:bd:0e:46:88:64:ea:4c:2a: 16:07:c7:a7:c3:f8:66:98:fb:1b:81:86:75:02:a7:2b:e6:38: 7f:24:c3:be:57:69:b4:18:62:74:bd:44:07:00:7b:11:ae:2f: 4e:02:b7:58:5f:a2:ff:45:85:bb:b3:53:78:bd:3a:64:18:56: 13:96:ab:34:81:ba:f6:f1:29:0a:0e:15:f9:79:f6:31:97:52: d8:46:52:d7:bb:fc:c7:c2:6e:c8:88:25:ea:2e:bb:a8:0c:56: 1a:30:30:5b:88:a1:0d:8a:22:ef:49:54:73:94:9c:56:5b:8e: 52:bd:c2:a1:6c:2a:e3:2c:49:d5:5a:a7:7c:e7:04:d7:85:71: 01:87:6e:22:68:34:f7:1b:c8:21:dc:69:05:19:a3:37:04:0b: 0b:50:7f:f7:32:70:c5:ee:76:d2:b8:45:c7:1a:59:04:74:21: 10:1a:d0:95:b3:df:3c:d7:89:d1:fc:c2:cf:bc:11:25:65:b6: 04:95:78:64:62:54:98:bb:75:58:31:cd:2d:b0:79:53:f2:71: 73:68:94:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBVhjL6NjnelH2s54MvPY+HFqdYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVBOUQxQTU4RTNFRTQ1NzQxQUZGRDU5N0YwM0NCRjYz NDkxMjIzQzAeFw0yNjEwMDIwMjI4NTJaFw0yNjEwMDMwNTAxNTJaMDMxMTAvBgNV BAMTKDUwMUEwMDAyRjlFNDEzQzEwQzQzQkVERTc0NUJERTcxOUM1NDU2NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFxch8G9ph7ZO2JFlIoKgt1wY4 zqZ/lzX9IQ7QLbThA8lvh5huaGNsqqQm04rl2BMyH9Tj2OzzAwJMRJUXwcWHWGq9 HkHTytlqltPVwtgmCeZkhSxKL0EASZw5iPFd+6P7WwMQbZ9VZxZ70gwR6ppKps/o RdTHWNJCWzlfVj2fbK3gORYi3rLgEAgYQXcxiF5xdcB7Amey+ZRuy0NDkfe7q6+G Ggpw0hEa0ZLjFkdfSjsD9SP3daxu0AAlQ/HGGTbYsEbGXU4GL+TBzO04mjhfofuM 5YOG76c8USflnxd7pV8Ai7wjHdw0DB01YZ7Jz800HZlnj5OZ3v7rOHBpfY+fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUBoAAvnkE8EMQ77edFvecZxUVkUwHwYDVR0j BBgwFoAU1anRpY4+5FdBr/1ZfwPL9jSRIjwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDIxNjQ2YmUtM2Q2YS00MjU3LWI3N2MtYjMzYzEwZjM1ZDMyLzAvRDVBOUQxQTU4 RTNFRTQ1NzQxQUZGRDU5N0YwM0NCRjYzNDkxMjIzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENUE5RDFBNThFM0VFNDU3NDFBRkZENTk3RjAzQ0JGNjM0OTEy MjNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDIxNjQ2YmUtM2Q2YS00MjU3LWI3 N2MtYjMzYzEwZjM1ZDMyLzAvRDVBOUQxQTU4RTNFRTQ1NzQxQUZGRDU5N0YwM0NC RjYzNDkxMjIzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQNbGQ/jhrZmrR98Lq28hm36pkUe/lAPvAZ PjSwzg3xFlThExOWkusQcaqXZSW9DkaIZOpMKhYHx6fD+GaY+xuBhnUCpyvmOH8k w75XabQYYnS9RAcAexGuL04Ct1hfov9FhbuzU3i9OmQYVhOWqzSBuvbxKQoOFfl5 9jGXUthGUte7/MfCbsiIJeouu6gMVhowMFuIoQ2KIu9JVHOUnFZbjlK9wqFsKuMs SdVap3znBNeFcQGHbiJoNPcbyCHcaQUZozcECwtQf/cycMXudtK4RccaWQR0IRAa 0JWz3zzXidH8ws+8ESVltgSVeGRiVJi7dVgxzS2weVPycXNolL8= -----END CERTIFICATE-----Generated at Fri Oct 2 11:11:28 2026 by rpki-client