$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft File: 5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft (raw, json) Hash identifier: efaKNZdKymdL4MD0eqN4dMtVtn2VxIyjQpIBHRl4Feo= Subject key identifier: 2E:16:C8:BB:84:9E:5D:FC:FA:38:23:09:E8:31:B7:EB:F4:6F:28:82 Authority key identifier: 5E:31:28:90:2F:CA:3B:CE:9C:9F:EB:FB:26:4D:55:0A:D6:23:05:72 Certificate issuer: /CN=5E3128902FCA3BCE9C9FEBFB264D550AD6230572 Certificate serial: 27462623C08729B8DB3F0B25E555C4D3729C0B1B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 15:53:47 +0000 Manifest this update: Wed 16 Sep 2026 15:48:47 +0000 Manifest next update: Thu 17 Sep 2026 17:24:47 +0000 Files and hashes: 1: 5E3128902FCA3BCE9C9FEBFB264D550AD6230572.crl (hash: DYh1HhoF/FH2iV6yVVzK1IlWFuXxujNPC+mXneq+RVo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.crl rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:24:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:46:26:23:c0:87:29:b8:db:3f:0b:25:e5:55:c4:d3:72:9c:0b:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E3128902FCA3BCE9C9FEBFB264D550AD6230572 Validity Not Before: Sep 16 15:48:47 2026 GMT Not After : Sep 17 17:24:47 2026 GMT Subject: CN=2E16C8BB849E5DFCFA382309E831B7EBF46F2882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5a:9c:49:86:bf:ed:64:4c:73:b9:4e:f3:4c: b0:33:11:53:d1:6a:76:a8:2e:12:87:0e:9c:48:35: 27:1a:aa:bf:11:af:21:a0:e5:9c:a8:41:23:ba:9c: 02:48:0d:39:50:8f:6f:1f:00:e1:64:57:61:e8:18: 68:50:54:d4:b8:85:07:19:fa:2a:5f:f6:d0:c3:92: 79:6f:bf:f9:8e:d3:22:a7:37:1b:e7:b6:9c:7e:3f: 23:90:5e:55:72:76:c8:6a:b4:fd:1b:f5:00:0e:af: 9f:59:5f:ee:87:97:44:4f:45:95:b4:b3:6e:3f:df: 2c:ac:8b:2d:26:00:48:bc:90:be:d9:32:26:a3:8d: 78:00:fd:5f:79:f1:b4:61:cc:cb:df:aa:dd:f1:27: d9:76:ff:41:10:f9:b6:52:45:fd:e7:a9:64:50:3b: 6b:b8:9f:a0:67:a4:f9:60:4c:c8:37:54:b4:2d:db: d8:fe:59:2f:d4:a4:11:2d:5b:33:8b:6e:7a:8d:db: 9c:0c:9d:c6:6e:ec:8f:79:dd:3c:b9:b0:88:a8:8e: 65:d9:7c:0b:01:ce:5e:7f:50:72:4e:6d:cf:2b:bb: aa:10:48:e9:b5:3d:af:28:e3:1b:2e:e2:d0:a4:7d: b3:25:34:90:3a:5d:5f:56:64:7b:01:3c:46:d2:f1: 56:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:16:C8:BB:84:9E:5D:FC:FA:38:23:09:E8:31:B7:EB:F4:6F:28:82 X509v3 Authority Key Identifier: keyid:5E:31:28:90:2F:CA:3B:CE:9C:9F:EB:FB:26:4D:55:0A:D6:23:05:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:29:b6:e5:d6:78:12:07:89:13:41:2f:78:fa:f5:73:59:4e: 63:58:86:c9:d5:3f:30:88:8b:75:a4:e5:1b:a1:c0:91:15:d7: ad:29:b4:7e:75:19:4f:46:cd:58:af:ab:59:bc:ac:37:54:cb: 2c:78:d8:b9:9b:30:6b:73:65:e1:a1:6b:5d:91:ca:eb:82:1d: c7:1f:21:9c:e6:ba:af:f9:8a:36:70:e7:76:57:5d:03:ae:40: 49:e8:99:b7:30:a7:b1:47:1d:a5:1a:ae:18:89:1d:cd:5f:e4: f3:bb:45:c8:3e:11:f9:60:a0:19:2e:94:2d:68:aa:b7:14:99: 4f:bf:81:b8:29:83:e6:46:af:19:24:bd:97:0a:39:f7:73:e2: ed:a8:7e:ee:49:34:94:e1:a7:85:0e:d6:c2:4c:40:26:ed:a2: cf:89:fe:86:44:aa:79:36:aa:a4:05:76:a1:d2:6f:56:28:5e: 7f:51:dd:72:9a:36:68:95:5d:70:96:e1:3a:27:1e:a4:5d:21: e5:1c:c5:a9:a8:14:6b:27:ab:26:01:27:5c:7e:14:96:ef:06: a9:e1:ac:da:f1:b0:4a:23:d7:90:84:82:0a:8f:2e:cc:32:29: 2a:e0:c4:09:17:b4:d6:e9:66:94:25:df:ed:5b:4d:2c:29:b3: 48:48:67:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ0YmI8CHKbjbPwsl5VXE03KcCxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUzMTI4OTAyRkNBM0JDRTlDOUZFQkZCMjY0RDU1MEFE NjIzMDU3MjAeFw0yNjA5MTYxNTQ4NDdaFw0yNjA5MTcxNzI0NDdaMDMxMTAvBgNV BAMTKDJFMTZDOEJCODQ5RTVERkNGQTM4MjMwOUU4MzFCN0VCRjQ2RjI4ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChWpxJhr/tZExzuU7zTLAzEVPR anaoLhKHDpxINScaqr8RryGg5ZyoQSO6nAJIDTlQj28fAOFkV2HoGGhQVNS4hQcZ +ipf9tDDknlvv/mO0yKnNxvntpx+PyOQXlVydshqtP0b9QAOr59ZX+6Hl0RPRZW0 s24/3yysiy0mAEi8kL7ZMiajjXgA/V958bRhzMvfqt3xJ9l2/0EQ+bZSRf3nqWRQ O2u4n6BnpPlgTMg3VLQt29j+WS/UpBEtWzOLbnqN25wMncZu7I953Ty5sIiojmXZ fAsBzl5/UHJObc8ru6oQSOm1Pa8o4xsu4tCkfbMlNJA6XV9WZHsBPEbS8Vb3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULhbIu4SeXfz6OCMJ6DG36/RvKIIwHwYDVR0j BBgwFoAUXjEokC/KO86cn+v7Jk1VCtYjBXIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGZiNWZmMzctMzk0YS00ZWJhLWE0NzAtMTBhZjM3Y2Y3NWRjLzAvNUUzMTI4OTAy RkNBM0JDRTlDOUZFQkZCMjY0RDU1MEFENjIzMDU3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RTMxMjg5MDJGQ0EzQkNFOUM5RkVCRkIyNjRENTUwQUQ2MjMw NTcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGZiNWZmMzctMzk0YS00ZWJhLWE0 NzAtMTBhZjM3Y2Y3NWRjLzAvNUUzMTI4OTAyRkNBM0JDRTlDOUZFQkZCMjY0RDU1 MEFENjIzMDU3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0ptuXWeBIHiRNBL3j69XNZTmNYhsnVPzCI i3Wk5RuhwJEV160ptH51GU9GzVivq1m8rDdUyyx42LmbMGtzZeGha12RyuuCHccf IZzmuq/5ijZw53ZXXQOuQEnombcwp7FHHaUarhiJHc1f5PO7Rcg+EflgoBkulC1o qrcUmU+/gbgpg+ZGrxkkvZcKOfdz4u2ofu5JNJThp4UO1sJMQCbtos+J/oZEqnk2 qqQFdqHSb1YoXn9R3XKaNmiVXXCW4TonHqRdIeUcxamoFGsnqyYBJ1x+FJbvBqnh rNrxsEoj15CEggqPLswyKSrgxAkXtNbpZpQl3+1bTSwps0hIZ7U= -----END CERTIFICATE-----Generated at Thu Sep 17 11:30:21 2026 by rpki-client