$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft File: 5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft (raw, json) Hash identifier: 3OEcix9iL9R0YegoR9i1cn/4/gUACP/b7iRHa1x9K6g= Subject key identifier: 10:1E:67:C4:61:53:6B:1B:AA:23:69:BC:D2:1E:65:83:16:C5:49:4C Authority key identifier: 5A:A9:4F:74:20:AA:22:63:29:E6:9A:E8:CD:2E:C0:CE:60:D8:77:6A Certificate issuer: /CN=5AA94F7420AA226329E69AE8CD2EC0CE60D8776A Certificate serial: 4E025FA351F9D370103F4956FAF70962557A725F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft Manifest number: C0 Signing time: Thu 24 Sep 2026 04:00:32 +0000 Manifest this update: Thu 24 Sep 2026 03:55:32 +0000 Manifest next update: Fri 25 Sep 2026 05:46:32 +0000 Files and hashes: 1: 5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.crl (hash: euupqzCf3Mr9c2uYx1tygH4XLoaaoOeE8R184asscNg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.crl rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:02:5f:a3:51:f9:d3:70:10:3f:49:56:fa:f7:09:62:55:7a:72:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AA94F7420AA226329E69AE8CD2EC0CE60D8776A Validity Not Before: Sep 24 03:55:32 2026 GMT Not After : Sep 25 05:46:32 2026 GMT Subject: CN=101E67C461536B1BAA2369BCD21E658316C5494C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3e:ba:f0:2b:18:da:80:00:25:3c:19:8b:2b: a2:80:38:89:40:3c:31:f9:68:82:5f:02:2a:13:51: 5d:4e:70:cc:b9:b6:28:92:92:4a:1e:2d:17:67:be: 8e:3e:7f:33:62:a8:4f:f7:f1:fd:9f:93:d8:06:b0: 40:e3:b1:60:45:3c:44:30:2b:79:d7:c8:50:14:d9: 74:a9:75:12:4f:5e:0f:06:49:1e:ea:f9:c4:5e:1c: 8d:15:b2:a8:3a:67:2b:1d:4e:31:1f:42:f5:90:2f: ac:67:a0:40:44:24:77:b8:d8:c3:17:0e:07:61:ca: 7c:bd:7c:03:0f:43:b4:6b:fd:8c:5c:a7:f0:b7:a2: 53:42:08:e4:c0:75:b7:dd:46:83:65:e3:21:46:97: 36:43:6a:bb:0d:da:85:6f:c7:1d:70:3c:ab:6b:08: 1f:37:6e:5a:28:92:74:80:a9:bf:e8:0b:46:e1:36: d4:73:4b:31:f0:82:c1:04:0e:65:62:fc:7f:38:cd: e5:d2:c4:cc:cd:cb:90:42:2d:70:50:de:03:2f:55: 4a:93:90:b7:19:5d:78:97:e3:0f:a0:bf:b7:ca:03: fe:d4:25:a4:fe:91:72:c6:29:48:90:0d:fd:fb:39: ff:ee:4a:80:b5:20:b5:3e:98:9c:0e:fd:fa:e1:8b: ee:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1E:67:C4:61:53:6B:1B:AA:23:69:BC:D2:1E:65:83:16:C5:49:4C X509v3 Authority Key Identifier: keyid:5A:A9:4F:74:20:AA:22:63:29:E6:9A:E8:CD:2E:C0:CE:60:D8:77:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:0f:03:71:ee:0e:bd:a7:3b:55:0f:4a:a5:07:c6:8b:06:4b: 64:f6:9b:6c:0a:81:88:35:a7:b0:57:ba:b6:11:a9:68:df:b8: 02:0a:41:05:b0:47:37:60:a4:7e:72:91:3d:18:a5:85:37:6b: 80:ac:b4:f6:73:5d:c2:f8:db:0c:08:51:e8:ac:94:3d:cc:3f: 74:52:62:da:c7:f0:17:f0:3f:10:f1:90:47:14:e0:42:6c:6b: 21:e0:b4:c0:85:2a:7d:9d:28:12:d4:f5:a3:1d:7a:04:f9:93: 2c:ab:a2:31:95:8e:56:1c:69:1b:6a:6b:c7:81:97:b8:c0:6b: 3a:05:00:1f:08:b2:51:31:ed:a6:9e:df:dc:39:4e:0f:f5:db: b6:97:e9:d7:87:c9:8c:71:70:58:e3:1e:cc:ff:9b:07:bc:e4: 1e:8a:0a:ef:64:b9:d6:1e:e6:3a:df:6d:14:08:fb:17:b6:51: ee:c1:17:cb:9b:ff:26:3a:ed:98:44:d6:54:fc:26:53:21:79: 1f:17:f6:1c:a8:e9:9b:c1:2c:63:3b:f1:de:cf:42:af:11:7f: e9:f4:c9:fe:66:07:96:37:db:3c:20:55:91:c4:2e:35:92:d2: b5:ba:11:78:16:2d:e7:d6:cd:c7:9b:cb:72:47:c3:70:ff:23: 74:65:d2:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTgJfo1H503AQP0lW+vcJYlV6cl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFBOTRGNzQyMEFBMjI2MzI5RTY5QUU4Q0QyRUMwQ0U2 MEQ4Nzc2QTAeFw0yNjA5MjQwMzU1MzJaFw0yNjA5MjUwNTQ2MzJaMDMxMTAvBgNV BAMTKDEwMUU2N0M0NjE1MzZCMUJBQTIzNjlCQ0QyMUU2NTgzMTZDNTQ5NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJPrrwKxjagAAlPBmLK6KAOIlA PDH5aIJfAioTUV1OcMy5tiiSkkoeLRdnvo4+fzNiqE/38f2fk9gGsEDjsWBFPEQw K3nXyFAU2XSpdRJPXg8GSR7q+cReHI0Vsqg6ZysdTjEfQvWQL6xnoEBEJHe42MMX Dgdhyny9fAMPQ7Rr/Yxcp/C3olNCCOTAdbfdRoNl4yFGlzZDarsN2oVvxx1wPKtr CB83blooknSAqb/oC0bhNtRzSzHwgsEEDmVi/H84zeXSxMzNy5BCLXBQ3gMvVUqT kLcZXXiX4w+gv7fKA/7UJaT+kXLGKUiQDf37Of/uSoC1ILU+mJwO/frhi+4XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEB5nxGFTaxuqI2m80h5lgxbFSUwwHwYDVR0j BBgwFoAUWqlPdCCqImMp5prozS7AzmDYd2owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ1MDA4YTAtMGFjMy00OThlLThjYmYtZjMxMTJiOTFiZGY0LzAvNUFBOTRGNzQy MEFBMjI2MzI5RTY5QUU4Q0QyRUMwQ0U2MEQ4Nzc2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QUE5NEY3NDIwQUEyMjYzMjlFNjlBRThDRDJFQzBDRTYwRDg3 NzZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ1MDA4YTAtMGFjMy00OThlLThj YmYtZjMxMTJiOTFiZGY0LzAvNUFBOTRGNzQyMEFBMjI2MzI5RTY5QUU4Q0QyRUMw Q0U2MEQ4Nzc2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsPA3HuDr2nO1UPSqUHxosGS2T2m2wKgYg1 p7BXurYRqWjfuAIKQQWwRzdgpH5ykT0YpYU3a4CstPZzXcL42wwIUeislD3MP3RS YtrH8BfwPxDxkEcU4EJsayHgtMCFKn2dKBLU9aMdegT5kyyrojGVjlYcaRtqa8eB l7jAazoFAB8IslEx7aae39w5Tg/127aX6deHyYxxcFjjHsz/mwe85B6KCu9kudYe 5jrfbRQI+xe2Ue7BF8ub/yY67ZhE1lT8JlMheR8X9hyo6ZvBLGM78d7PQq8Rf+n0 yf5mB5Y32zwgVZHELjWS0rW6EXgWLefWzceby3JHw3D/I3Rl0i0= -----END CERTIFICATE-----Generated at Thu Sep 24 14:26:41 2026 by rpki-client