$ rpki-client -vvvf rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.mft File: 5CB4B0C07702B8252693A6958EABDFD306B34D72.mft (raw, json) Hash identifier: EOqBBsWyD5OBwfOcJRajJv4B58SfhDdBXJ9LL1WGeso= Subject key identifier: 4B:F8:BA:4B:F4:42:CA:13:A7:F1:54:30:AD:4E:F6:81:BC:3A:F3:11 Authority key identifier: 5C:B4:B0:C0:77:02:B8:25:26:93:A6:95:8E:AB:DF:D3:06:B3:4D:72 Certificate issuer: /CN=5CB4B0C07702B8252693A6958EABDFD306B34D72 Certificate serial: 4EDB51BE90DA30914A84ABE079BCC038601DDE86 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CB4B0C07702B8252693A6958EABDFD306B34D72.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 06:41:49 +0000 Manifest this update: Thu 17 Sep 2026 06:36:49 +0000 Manifest next update: Fri 18 Sep 2026 10:13:49 +0000 Files and hashes: 1: 5CB4B0C07702B8252693A6958EABDFD306B34D72.crl (hash: T12dijPm0AETXTbWhvFY0qW0wRuK93k6uqh26Y4agK8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.crl rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CB4B0C07702B8252693A6958EABDFD306B34D72.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:db:51:be:90:da:30:91:4a:84:ab:e0:79:bc:c0:38:60:1d:de:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CB4B0C07702B8252693A6958EABDFD306B34D72 Validity Not Before: Sep 17 06:36:49 2026 GMT Not After : Sep 18 10:13:49 2026 GMT Subject: CN=4BF8BA4BF442CA13A7F15430AD4EF681BC3AF311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:30:c5:b6:14:92:bf:2c:9c:06:d4:ee:49:c5: c9:7a:7a:ec:39:fb:e4:0c:f7:68:08:54:71:d1:b0: 8d:cb:12:26:65:54:3c:69:a8:e9:4c:be:88:b3:ca: 73:7f:c6:3c:54:a5:08:f2:e2:be:19:52:63:4a:2e: 9d:d3:c0:62:e9:a1:8c:15:1f:e0:64:a3:f5:84:7c: 5c:af:1a:d6:18:c0:e7:fd:f7:6b:d6:db:7d:08:2f: 86:92:4e:d1:c6:42:ed:b8:65:a3:ea:44:b9:33:3a: 39:de:50:c7:35:6d:4a:d7:46:25:b7:d8:17:f4:62: ed:2f:a1:b4:59:66:53:6e:75:54:57:b0:e3:8e:89: 1b:ee:a0:5f:46:78:51:1d:be:71:44:75:94:ce:fa: e5:0c:5a:ef:29:04:a8:22:bd:6d:9b:33:95:24:41: e3:bb:40:24:cc:f0:ec:c2:f5:4d:dd:14:58:3d:62: 2e:5b:81:66:50:83:de:d3:28:4a:e7:79:a6:b4:06: 4d:0b:86:0e:f4:07:75:37:ba:13:a7:dc:43:e2:e9: ff:10:3d:69:ce:09:fb:93:ac:6d:dd:38:32:2a:21: 3a:42:55:91:d1:4e:82:8b:e7:7a:6e:5a:4b:f3:d9: a2:dc:39:ae:1b:96:df:9d:d3:ac:bd:15:2b:95:ea: a9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F8:BA:4B:F4:42:CA:13:A7:F1:54:30:AD:4E:F6:81:BC:3A:F3:11 X509v3 Authority Key Identifier: keyid:5C:B4:B0:C0:77:02:B8:25:26:93:A6:95:8E:AB:DF:D3:06:B3:4D:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CB4B0C07702B8252693A6958EABDFD306B34D72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:92:d3:24:66:c1:70:6b:f0:27:c0:66:03:05:07:35:3a:d2: 2e:06:f7:9c:ac:21:c2:07:52:4d:49:4b:4f:56:f1:42:57:92: 54:53:36:9f:9b:58:0a:31:b5:f6:23:25:13:f4:5c:9e:76:ad: 7f:c0:d1:e3:25:ad:1d:e7:19:9b:f5:d8:55:f8:44:9d:a3:06: dc:7e:58:bd:bd:a0:09:dd:5d:d6:d7:0b:15:b7:05:f9:ab:24: 17:bc:a9:a9:e5:5a:26:6d:78:00:4d:8e:bb:03:6c:c9:3e:54: 2f:7d:fd:53:e6:36:35:be:8f:2a:7e:6d:f9:77:ec:2f:03:9b: 48:81:5a:d8:25:b5:de:4c:b5:eb:f6:2c:47:cc:27:c3:8c:ca: d5:73:ba:06:08:f3:89:ec:4e:b8:a6:08:dc:8a:d7:56:c3:69: 90:74:10:a6:34:70:f5:20:40:d9:6f:be:56:c5:e6:f3:25:c2: 0b:00:9e:e8:ba:71:c2:4f:1b:8a:f5:51:f9:a3:8c:9e:96:0d: 2e:f1:73:b8:8d:16:f9:fb:84:11:85:14:5c:52:c0:4c:3a:97: 24:c0:a8:d6:60:66:ed:ef:79:89:ed:03:cc:3c:bb:4e:b8:ec: ad:95:0a:76:33:3a:ec:dd:93:bc:43:de:0a:1c:e4:50:14:5c: 7e:8d:4c:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTttRvpDaMJFKhKvgebzAOGAd3oYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNCNEIwQzA3NzAyQjgyNTI2OTNBNjk1OEVBQkRGRDMw NkIzNEQ3MjAeFw0yNjA5MTcwNjM2NDlaFw0yNjA5MTgxMDEzNDlaMDMxMTAvBgNV BAMTKDRCRjhCQTRCRjQ0MkNBMTNBN0YxNTQzMEFENEVGNjgxQkMzQUYzMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcMMW2FJK/LJwG1O5Jxcl6euw5 ++QM92gIVHHRsI3LEiZlVDxpqOlMvoizynN/xjxUpQjy4r4ZUmNKLp3TwGLpoYwV H+Bko/WEfFyvGtYYwOf992vW230IL4aSTtHGQu24ZaPqRLkzOjneUMc1bUrXRiW3 2Bf0Yu0vobRZZlNudVRXsOOOiRvuoF9GeFEdvnFEdZTO+uUMWu8pBKgivW2bM5Uk QeO7QCTM8OzC9U3dFFg9Yi5bgWZQg97TKErneaa0Bk0Lhg70B3U3uhOn3EPi6f8Q PWnOCfuTrG3dODIqITpCVZHRToKL53puWkvz2aLcOa4blt+d06y9FSuV6qkfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS/i6S/RCyhOn8VQwrU72gbw68xEwHwYDVR0j BBgwFoAUXLSwwHcCuCUmk6aVjqvf0wazTXIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNiZGNiYWUtMmU5ZC00ZjNmLThhYjktMzQyNGU0NDg0ODRlLzAvNUNCNEIwQzA3 NzAyQjgyNTI2OTNBNjk1OEVBQkRGRDMwNkIzNEQ3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81Q0I0QjBDMDc3MDJCODI1MjY5M0E2OTU4RUFCREZEMzA2QjM0 RDcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNiZGNiYWUtMmU5ZC00ZjNmLThh YjktMzQyNGU0NDg0ODRlLzAvNUNCNEIwQzA3NzAyQjgyNTI2OTNBNjk1OEVBQkRG RDMwNkIzNEQ3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGS0yRmwXBr8CfAZgMFBzU60i4G95ysIcIH Uk1JS09W8UJXklRTNp+bWAoxtfYjJRP0XJ52rX/A0eMlrR3nGZv12FX4RJ2jBtx+ WL29oAndXdbXCxW3BfmrJBe8qanlWiZteABNjrsDbMk+VC99/VPmNjW+jyp+bfl3 7C8Dm0iBWtgltd5Mtev2LEfMJ8OMytVzugYI84nsTrimCNyK11bDaZB0EKY0cPUg QNlvvlbF5vMlwgsAnui6ccJPG4r1UfmjjJ6WDS7xc7iNFvn7hBGFFFxSwEw6lyTA qNZgZu3veYntA8w8u0647K2VCnYzOuzdk7xD3goc5FAUXH6NTBA= -----END CERTIFICATE-----Generated at Thu Sep 17 14:22:52 2026 by rpki-client