$ rpki-client -vvvf rpki-rsync.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.mft File: DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.mft (raw, json) Hash identifier: tCGMYfY1LJCxm0G4IvoTH4OEmZPoSc5mhUxnT/yBvf0= Subject key identifier: A9:98:DB:F4:48:F7:BE:A6:D5:F9:D5:33:6D:FA:37:F9:5C:84:6F:CD Authority key identifier: DF:5D:D0:70:8B:81:D1:5C:F9:DE:A4:8B:E5:4A:C0:3E:1E:C3:E5:3E Certificate issuer: /CN=DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E Certificate serial: 3F6939353F9B21A9A8CD183A7CB4A86AC2A453A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.mft Manifest number: B5 Signing time: Thu 17 Sep 2026 05:20:00 +0000 Manifest this update: Thu 17 Sep 2026 05:15:00 +0000 Manifest next update: Fri 18 Sep 2026 05:42:00 +0000 Files and hashes: 1: DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.crl (hash: P0dA+M0XWbpkpnVRmFfMRDGXUqdjivWyOsz1cXSF4Zc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.crl rsync://rpki-rsync.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:69:39:35:3f:9b:21:a9:a8:cd:18:3a:7c:b4:a8:6a:c2:a4:53:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E Validity Not Before: Sep 17 05:15:00 2026 GMT Not After : Sep 18 05:42:00 2026 GMT Subject: CN=A998DBF448F7BEA6D5F9D5336DFA37F95C846FCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:82:ae:e3:28:20:3d:6c:9d:9f:3a:e7:80:34: 0d:09:be:fa:1c:f2:5c:03:41:df:c1:00:bb:d3:b2: a0:55:4b:7a:72:34:95:99:24:a3:0b:38:93:05:55: 69:c7:15:49:a6:d1:48:f1:20:3c:f8:72:a6:0b:2b: 54:12:88:b7:b3:51:c9:7d:f3:af:7f:d2:18:0c:0a: 67:1f:0f:e8:7b:a6:eb:7f:9f:5f:9c:a7:84:7d:8f: 11:92:9d:75:40:90:8d:43:6f:b6:6e:b4:70:2d:17: f3:83:90:a6:20:e9:9b:f5:71:e7:e4:8d:05:1d:fe: 2d:d1:b4:01:b8:96:43:4b:4d:2a:9a:02:c5:a7:08: c0:4c:ba:30:8d:25:f9:17:d2:be:de:40:34:ba:5d: 0c:28:83:fb:df:f1:12:eb:05:be:f7:60:5f:ad:44: 57:71:ad:e4:e2:cd:2f:c5:d9:68:67:35:96:56:b0: 52:21:b5:c0:3b:5f:14:69:42:2b:0b:cc:e6:51:94: ec:76:37:52:88:9c:dd:d3:9d:a5:37:55:f7:33:ca: 09:fb:bd:2f:ac:30:c9:3e:5e:62:0a:78:4d:00:2a: 01:bf:05:6d:5f:a6:6e:52:1c:fb:da:84:26:1c:5f: 80:e2:1c:03:eb:10:1d:34:99:1a:3a:c8:ee:8c:a3: 8b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:98:DB:F4:48:F7:BE:A6:D5:F9:D5:33:6D:FA:37:F9:5C:84:6F:CD X509v3 Authority Key Identifier: keyid:DF:5D:D0:70:8B:81:D1:5C:F9:DE:A4:8B:E5:4A:C0:3E:1E:C3:E5:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:7c:eb:7e:c4:80:43:10:8e:a9:02:2a:0b:a0:ca:85:f9:54: db:e2:de:69:2f:74:18:3a:da:42:34:71:b7:d4:4d:3a:d1:7d: 55:67:c6:44:31:29:2d:cb:29:b2:37:f2:74:bd:f1:2a:14:1d: f3:13:05:f8:eb:03:8e:17:e2:6c:e9:d1:1e:74:49:d8:d2:bc: a4:07:5f:30:3c:be:95:c7:74:6c:7d:df:bd:39:52:7f:5c:fd: d8:87:72:e8:75:cc:3f:64:59:fd:5d:5a:82:b0:b8:e1:5a:f9: 5b:4a:04:2c:a1:7e:00:7c:8a:f7:29:bd:1c:57:c4:b9:f0:8f: 1e:98:9e:4a:8f:7e:53:93:1f:ea:11:a6:88:36:9b:a5:a0:a2: 19:5d:7c:b3:f9:60:78:f5:f2:74:b9:6c:6e:7a:79:c8:c1:86: 38:8a:fa:2c:f6:9a:19:1b:0b:27:17:11:65:86:68:21:d4:f8: 72:65:cc:3a:7c:41:19:48:a6:41:80:38:58:59:fa:d0:ec:6a: 43:8a:79:92:81:40:20:56:23:ce:77:8a:6a:30:5b:07:c6:86: 09:1a:c1:b4:dd:23:69:34:6e:0e:a6:80:de:01:52:9f:3a:3d: f9:17:46:30:8c:61:56:e7:1d:64:73:df:74:93:b2:ab:b0:3f: 6b:cb:63:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP2k5NT+bIamozRg6fLSoasKkU6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY1REQwNzA4QjgxRDE1Q0Y5REVBNDhCRTU0QUMwM0Ux RUMzRTUzRTAeFw0yNjA5MTcwNTE1MDBaFw0yNjA5MTgwNTQyMDBaMDMxMTAvBgNV BAMTKEE5OThEQkY0NDhGN0JFQTZENUY5RDUzMzZERkEzN0Y5NUM4NDZGQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFgq7jKCA9bJ2fOueANA0Jvvoc 8lwDQd/BALvTsqBVS3pyNJWZJKMLOJMFVWnHFUmm0UjxIDz4cqYLK1QSiLezUcl9 869/0hgMCmcfD+h7put/n1+cp4R9jxGSnXVAkI1Db7ZutHAtF/ODkKYg6Zv1cefk jQUd/i3RtAG4lkNLTSqaAsWnCMBMujCNJfkX0r7eQDS6XQwog/vf8RLrBb73YF+t RFdxreTizS/F2WhnNZZWsFIhtcA7XxRpQisLzOZRlOx2N1KInN3TnaU3Vfczygn7 vS+sMMk+XmIKeE0AKgG/BW1fpm5SHPvahCYcX4DiHAPrEB00mRo6yO6Mo4uvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqZjb9Ej3vqbV+dUzbfo3+VyEb80wHwYDVR0j BBgwFoAU313QcIuB0Vz53qSL5UrAPh7D5T4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDhiOGMxYjUtM2JlOC00YWE3LWE0YzYtMjFiY2M4ZjNmYTQwLzAvREY1REQwNzA4 QjgxRDE1Q0Y5REVBNDhCRTU0QUMwM0UxRUMzRTUzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjVERDA3MDhCODFEMTVDRjlERUE0OEJFNTRBQzAzRTFFQzNF NTNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDhiOGMxYjUtM2JlOC00YWE3LWE0 YzYtMjFiY2M4ZjNmYTQwLzAvREY1REQwNzA4QjgxRDE1Q0Y5REVBNDhCRTU0QUMw M0UxRUMzRTUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEt8637EgEMQjqkCKgugyoX5VNvi3mkvdBg6 2kI0cbfUTTrRfVVnxkQxKS3LKbI38nS98SoUHfMTBfjrA44X4mzp0R50SdjSvKQH XzA8vpXHdGx93705Un9c/diHcuh1zD9kWf1dWoKwuOFa+VtKBCyhfgB8ivcpvRxX xLnwjx6YnkqPflOTH+oRpog2m6WgohldfLP5YHj18nS5bG56ecjBhjiK+iz2mhkb CycXEWWGaCHU+HJlzDp8QRlIpkGAOFhZ+tDsakOKeZKBQCBWI853imowWwfGhgka wbTdI2k0bg6mgN4BUp86PfkXRjCMYVbnHWRz33STsquwP2vLY60= -----END CERTIFICATE-----Generated at Thu Sep 17 12:40:27 2026 by rpki-client