$ rpki-client -vvvf rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.mft File: 5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.mft (raw, json) Hash identifier: U9aPmugopdIAxqoqxIPw2j96FEasZWs5XoHhmAvbQ7w= Subject key identifier: 7F:6C:E8:07:C5:AD:28:45:26:EB:36:B0:5D:58:64:67:2C:5F:68:EA Authority key identifier: 5F:66:F5:BF:93:48:D5:B5:A6:31:CE:B1:00:F2:02:65:EB:D8:BE:57 Certificate issuer: /CN=5F66F5BF9348D5B5A631CEB100F20265EBD8BE57 Certificate serial: 673CF789AC26824F8CA9D9ED4EA1E564144B8FAE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 07:07:15 +0000 Manifest this update: Thu 17 Sep 2026 07:02:15 +0000 Manifest next update: Fri 18 Sep 2026 10:35:15 +0000 Files and hashes: 1: 5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.crl (hash: EXLhmozxjmxO7c2r8OpYoOZkvVaCYV7HS1alpty64o0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.crl rsync://rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:3c:f7:89:ac:26:82:4f:8c:a9:d9:ed:4e:a1:e5:64:14:4b:8f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F66F5BF9348D5B5A631CEB100F20265EBD8BE57 Validity Not Before: Sep 17 07:02:15 2026 GMT Not After : Sep 18 10:35:15 2026 GMT Subject: CN=7F6CE807C5AD284526EB36B05D5864672C5F68EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5a:0d:69:fb:a1:48:3f:a1:25:d1:76:65:64: 50:d9:4f:4e:6c:42:09:bb:69:12:a9:10:ea:87:bc: db:7c:4a:11:90:3e:1a:00:a7:a2:d2:19:bd:e6:59: 4c:cb:1b:9b:fa:86:a2:f9:e0:2c:eb:f8:17:df:bb: 5e:41:f0:97:f0:b3:97:65:b1:57:7b:eb:32:8e:c8: 78:f8:8f:51:f6:7b:36:38:77:0e:84:16:aa:75:14: 97:cc:62:d8:ed:45:47:fb:28:3c:aa:59:6b:74:94: 49:8a:3c:1c:c9:32:cf:e4:4a:65:ba:76:1f:4e:c1: 23:3a:f1:14:cf:d6:42:e2:2f:83:da:fe:4d:af:e4: 04:8e:d4:07:64:25:e9:fb:a1:36:28:53:63:b3:c2: 17:47:3c:85:a7:81:69:a6:c2:e0:fb:2a:10:e0:a4: ad:09:84:3a:cd:26:f5:c2:cb:3d:df:b1:1f:5d:fc: a9:7f:ae:f2:10:a1:63:cb:fa:24:f7:a4:d1:80:1c: 9b:2d:e0:79:6c:44:1c:61:1f:7d:be:af:0d:31:57: 66:23:8c:32:00:b0:d8:72:c2:0a:4d:ee:20:10:26: 46:9c:bc:06:1f:44:2f:00:30:c0:28:74:0f:4b:e4: d3:54:69:e2:c7:23:49:53:74:09:75:23:42:35:a8: d8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6C:E8:07:C5:AD:28:45:26:EB:36:B0:5D:58:64:67:2C:5F:68:EA X509v3 Authority Key Identifier: keyid:5F:66:F5:BF:93:48:D5:B5:A6:31:CE:B1:00:F2:02:65:EB:D8:BE:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:8e:6d:b1:5d:c6:5d:78:af:63:66:85:fd:18:ec:09:b6:b9: 5b:0a:e3:47:d6:d0:09:22:08:93:16:13:16:08:6d:ae:8e:f3: 3b:2f:84:fc:29:70:c4:25:8d:72:aa:a1:cd:01:78:9a:39:6e: da:64:17:16:ef:27:e5:28:7e:e6:a8:df:09:84:87:f7:f9:0c: b1:73:cd:b9:54:48:11:55:2a:58:25:f1:15:09:4c:24:0f:3c: 76:e6:89:77:c3:cc:c3:93:76:6f:11:73:dc:ab:c0:a7:6b:6c: 5e:55:9e:e9:c0:63:76:10:8a:12:80:46:81:90:46:af:f5:9a: 7a:21:fa:72:3a:ab:ec:c3:92:a1:82:86:fe:a9:f3:1e:2a:91: ed:ee:35:d9:74:bc:4d:8e:98:79:48:dd:93:2f:5c:27:b8:5c: ed:71:09:73:e4:0d:1c:a2:6c:a1:b7:6e:ab:da:a4:d6:ad:9c: 42:2c:96:5d:59:52:21:a2:66:5e:df:92:da:c3:1b:aa:d5:87: 6f:6f:d9:08:3d:a1:21:c6:67:73:d0:81:93:bd:be:fa:0b:81: 45:5e:a1:a9:75:03:9c:1f:35:9e:df:6e:55:58:3c:1a:59:e8: 49:01:28:b1:00:6e:18:1f:0e:0c:2e:0f:2b:bf:d2:52:31:d9: 85:4e:f0:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZzz3iawmgk+MqdntTqHlZBRLj64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY2NkY1QkY5MzQ4RDVCNUE2MzFDRUIxMDBGMjAyNjVF QkQ4QkU1NzAeFw0yNjA5MTcwNzAyMTVaFw0yNjA5MTgxMDM1MTVaMDMxMTAvBgNV BAMTKDdGNkNFODA3QzVBRDI4NDUyNkVCMzZCMDVENTg2NDY3MkM1RjY4RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcWg1p+6FIP6El0XZlZFDZT05s Qgm7aRKpEOqHvNt8ShGQPhoAp6LSGb3mWUzLG5v6hqL54Czr+Bffu15B8Jfws5dl sVd76zKOyHj4j1H2ezY4dw6EFqp1FJfMYtjtRUf7KDyqWWt0lEmKPBzJMs/kSmW6 dh9OwSM68RTP1kLiL4Pa/k2v5ASO1AdkJen7oTYoU2OzwhdHPIWngWmmwuD7KhDg pK0JhDrNJvXCyz3fsR9d/Kl/rvIQoWPL+iT3pNGAHJst4HlsRBxhH32+rw0xV2Yj jDIAsNhywgpN7iAQJkacvAYfRC8AMMAodA9L5NNUaeLHI0lTdAl1I0I1qNjFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf2zoB8WtKEUm6zawXVhkZyxfaOowHwYDVR0j BBgwFoAUX2b1v5NI1bWmMc6xAPICZevYvlcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODJmYTNhMzktZTBlYy00ZmMxLTliNTQtMzUzZTA3ZjAwNWRkLzAvNUY2NkY1QkY5 MzQ4RDVCNUE2MzFDRUIxMDBGMjAyNjVFQkQ4QkU1Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RjY2RjVCRjkzNDhENUI1QTYzMUNFQjEwMEYyMDI2NUVCRDhC RTU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODJmYTNhMzktZTBlYy00ZmMxLTli NTQtMzUzZTA3ZjAwNWRkLzAvNUY2NkY1QkY5MzQ4RDVCNUE2MzFDRUIxMDBGMjAy NjVFQkQ4QkU1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCObbFdxl14r2Nmhf0Y7Am2uVsK40fW0Aki CJMWExYIba6O8zsvhPwpcMQljXKqoc0BeJo5btpkFxbvJ+Uofuao3wmEh/f5DLFz zblUSBFVKlgl8RUJTCQPPHbmiXfDzMOTdm8Rc9yrwKdrbF5VnunAY3YQihKARoGQ Rq/1mnoh+nI6q+zDkqGChv6p8x4qke3uNdl0vE2OmHlI3ZMvXCe4XO1xCXPkDRyi bKG3bqvapNatnEIsll1ZUiGiZl7fktrDG6rVh29v2Qg9oSHGZ3PQgZO9vvoLgUVe oal1A5wfNZ7fblVYPBpZ6EkBKLEAbhgfDgwuDyu/0lIx2YVO8BQ= -----END CERTIFICATE-----Generated at Thu Sep 17 10:45:45 2026 by rpki-client