$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft File: C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft (raw, json) Hash identifier: B8FEhAUkrZNqzcGY5ochAH4o8M1LM8j96IkwSBNofIo= Subject key identifier: C7:E2:82:C1:34:71:D2:0C:77:D5:1C:EE:93:E7:90:5A:6A:31:F9:B2 Authority key identifier: C5:DD:2D:E8:A2:5B:2A:B9:DB:C2:98:28:C0:31:41:B2:6C:B7:40:69 Certificate issuer: /CN=C5DD2DE8A25B2AB9DBC29828C03141B26CB74069 Certificate serial: 06398AD9AEFCB1059AC24AF9F8EB8904C6A22608 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 03:43:05 +0000 Manifest this update: Thu 17 Sep 2026 03:38:05 +0000 Manifest next update: Fri 18 Sep 2026 07:16:05 +0000 Files and hashes: 1: C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.crl (hash: nGPr3SPP1DNsrfkBfTAmm7QlQP4rlWoS6eezoW4gYxE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.crl rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:39:8a:d9:ae:fc:b1:05:9a:c2:4a:f9:f8:eb:89:04:c6:a2:26:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5DD2DE8A25B2AB9DBC29828C03141B26CB74069 Validity Not Before: Sep 17 03:38:05 2026 GMT Not After : Sep 18 07:16:05 2026 GMT Subject: CN=C7E282C13471D20C77D51CEE93E7905A6A31F9B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f1:7b:fd:c3:70:a8:42:81:f7:53:04:21:5b: f9:79:25:97:d6:4e:a9:dc:a8:9e:31:9a:a7:a9:29: 6f:22:c5:30:ef:1a:15:d5:9e:12:16:2d:ee:fa:98: 9c:93:5a:8b:0b:4f:2a:3a:73:d7:42:12:94:54:d0: d6:3c:0b:42:0a:ea:80:c3:3b:98:fb:53:8f:30:1b: ad:9a:cd:a3:42:09:47:ed:30:26:0c:30:a9:f4:7c: 8c:10:06:5f:88:5b:dc:af:93:e7:59:56:57:0a:72: 2d:d7:f3:9a:25:84:d1:01:2f:32:74:1d:23:39:04: 89:93:87:0b:7c:d6:76:98:f6:2e:35:49:b4:4a:55: 4d:bc:b7:e6:65:fa:73:56:d4:42:7e:55:69:01:f7: 3e:e0:bf:af:4c:ce:65:2e:39:b8:80:b2:4e:95:0d: 8c:63:97:7b:6e:4d:e7:c3:41:f3:2e:3c:9d:e0:b6: fc:48:f0:6c:51:22:46:cb:4e:bb:4c:07:ec:89:ba: 89:63:c6:e2:3a:10:4f:bc:43:95:c8:9f:ee:9f:02: e0:72:e5:a1:d8:ea:90:f4:11:83:cd:e1:83:d8:8d: 2a:2d:ef:66:aa:1a:9d:19:4b:b0:35:04:b5:f2:15: 5d:1d:6a:f2:2d:d4:89:bc:5a:f9:40:df:ea:0c:5d: 51:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E2:82:C1:34:71:D2:0C:77:D5:1C:EE:93:E7:90:5A:6A:31:F9:B2 X509v3 Authority Key Identifier: keyid:C5:DD:2D:E8:A2:5B:2A:B9:DB:C2:98:28:C0:31:41:B2:6C:B7:40:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:e3:6d:e0:cc:7b:ef:17:43:cd:6d:b0:a3:6f:05:c7:13:dc: e9:7e:81:c8:19:32:3f:39:7e:b5:b4:e3:54:88:30:f0:ec:cd: 29:29:2d:39:f4:70:19:81:20:4a:8d:0c:ad:43:a4:65:8a:6d: dd:c6:89:f6:d8:44:47:b6:ce:6e:7a:21:e5:2a:19:d8:26:d7: 0d:8e:73:d3:f2:8a:cb:0d:43:f8:c9:50:05:b1:4c:26:13:f0: b0:9e:5b:c0:6d:01:ff:88:5f:88:10:9f:3c:69:31:d5:e7:b5: c1:eb:89:9d:fa:21:00:0d:c7:db:47:e1:7d:98:94:84:14:c7: 3d:aa:08:72:d9:06:89:11:dc:ae:a0:38:54:91:95:68:d5:86: cd:40:3b:5e:f2:89:c8:a2:31:69:29:b3:87:49:15:66:e6:8a: 3e:7f:62:49:46:4f:ae:a1:00:9d:e0:7b:20:f4:41:34:4f:11: db:e8:44:d7:e2:20:96:c9:5e:84:b4:b1:22:54:16:e9:92:2d: 8c:3d:dd:d1:46:f2:b2:b0:75:b2:ee:7b:2d:fa:3c:fe:e2:57: 9f:e3:df:50:22:56:4a:0f:a1:a6:10:e2:e9:4f:f6:ba:d6:79: ed:40:d6:f6:0c:b9:ee:da:39:a5:0b:fb:24:62:4e:fc:57:7a: c3:e3:d5:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBjmK2a78sQWawkr5+OuJBMaiJggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVERDJERThBMjVCMkFCOURCQzI5ODI4QzAzMTQxQjI2 Q0I3NDA2OTAeFw0yNjA5MTcwMzM4MDVaFw0yNjA5MTgwNzE2MDVaMDMxMTAvBgNV BAMTKEM3RTI4MkMxMzQ3MUQyMEM3N0Q1MUNFRTkzRTc5MDVBNkEzMUY5QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn8Xv9w3CoQoH3UwQhW/l5JZfW TqncqJ4xmqepKW8ixTDvGhXVnhIWLe76mJyTWosLTyo6c9dCEpRU0NY8C0IK6oDD O5j7U48wG62azaNCCUftMCYMMKn0fIwQBl+IW9yvk+dZVlcKci3X85olhNEBLzJ0 HSM5BImThwt81naY9i41SbRKVU28t+Zl+nNW1EJ+VWkB9z7gv69MzmUuObiAsk6V DYxjl3tuTefDQfMuPJ3gtvxI8GxRIkbLTrtMB+yJuoljxuI6EE+8Q5XIn+6fAuBy 5aHY6pD0EYPN4YPYjSot72aqGp0ZS7A1BLXyFV0davIt1Im8WvlA3+oMXVHTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx+KCwTRx0gx31Rzuk+eQWmox+bIwHwYDVR0j BBgwFoAUxd0t6KJbKrnbwpgowDFBsmy3QGkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U5ZTAxYmEtNTljOS00MDQ3LWFjMGItZTliMmZlNjU4NTNjLzAvQzVERDJERThB MjVCMkFCOURCQzI5ODI4QzAzMTQxQjI2Q0I3NDA2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNUREMkRFOEEyNUIyQUI5REJDMjk4MjhDMDMxNDFCMjZDQjc0 MDY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U5ZTAxYmEtNTljOS00MDQ3LWFj MGItZTliMmZlNjU4NTNjLzAvQzVERDJERThBMjVCMkFCOURCQzI5ODI4QzAzMTQx QjI2Q0I3NDA2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALvjbeDMe+8XQ81tsKNvBccT3Ol+gcgZMj85 frW041SIMPDszSkpLTn0cBmBIEqNDK1DpGWKbd3GifbYREe2zm56IeUqGdgm1w2O c9PyissNQ/jJUAWxTCYT8LCeW8BtAf+IX4gQnzxpMdXntcHriZ36IQANx9tH4X2Y lIQUxz2qCHLZBokR3K6gOFSRlWjVhs1AO17yiciiMWkps4dJFWbmij5/YklGT66h AJ3geyD0QTRPEdvoRNfiIJbJXoS0sSJUFumSLYw93dFG8rKwdbLuey36PP7iV5/j 31AiVkoPoaYQ4ulP9rrWee1A1vYMue7aOaUL+yRiTvxXesPj1Xk= -----END CERTIFICATE-----Generated at Thu Sep 17 09:16:32 2026 by rpki-client