$ rpki-client -vvvf rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft File: 5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft (raw, json) Hash identifier: j34uHEfR/nj93oGILYWhVKNkJ2Se4gfUqHfHAtAr9V4= Subject key identifier: 7E:1F:2C:2C:BA:61:72:B6:99:DD:3E:AC:A5:AB:0E:25:0A:C5:FD:F6 Authority key identifier: 5D:7C:FA:91:FB:D3:09:B4:50:5F:E1:D6:16:62:F4:AE:1F:4F:02:6F Certificate issuer: /CN=5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F Certificate serial: 0174C33AF8115000F002134457BCF685BD79239A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 09:09:55 +0000 Manifest this update: Thu 17 Sep 2026 09:04:55 +0000 Manifest next update: Fri 18 Sep 2026 10:44:55 +0000 Files and hashes: 1: 5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.crl (hash: R5flqX3X97ai4wqJEZEH7tvesD+QwyXBoHmnOwmf0Hc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.crl rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:74:c3:3a:f8:11:50:00:f0:02:13:44:57:bc:f6:85:bd:79:23:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F Validity Not Before: Sep 17 09:04:55 2026 GMT Not After : Sep 18 10:44:55 2026 GMT Subject: CN=7E1F2C2CBA6172B699DD3EACA5AB0E250AC5FDF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:61:bd:a5:c8:4e:d2:6a:72:f7:d9:93:0c:0f: 71:83:14:ce:d0:61:97:8d:db:7d:e9:76:16:19:bc: 85:5d:d4:64:5e:c3:44:b9:46:bb:96:d3:3f:d9:af: f7:99:65:3e:5c:19:76:7b:af:a9:09:6d:7c:7a:0b: 7b:ea:8c:81:35:a9:f1:d2:db:87:c9:2c:6c:fc:9b: c4:79:86:cc:21:b9:84:66:68:78:22:7f:98:b6:d0: 39:82:69:ff:86:ee:ac:49:85:9d:95:3f:2d:a7:a5: 9e:8c:ec:88:aa:85:c7:ba:b7:a8:62:3a:16:d3:80: 62:dd:b3:4e:2e:20:d3:64:2d:f6:85:07:b4:a6:05: 9a:ce:0f:56:78:f8:3e:27:3f:19:36:70:5c:38:8b: 73:b5:92:0d:cb:a6:dd:7a:3b:d0:94:64:24:3e:20: 80:af:ad:79:51:8c:e3:59:35:93:78:8b:8b:eb:17: 89:d8:b9:18:50:65:19:e8:27:2d:83:3c:1b:15:75: c9:56:40:5c:95:11:04:dc:87:0c:fc:11:aa:16:5c: 8d:2a:a3:30:19:7c:0e:fe:ca:06:6c:02:fe:bc:75: ea:cb:89:aa:32:80:7f:6a:3d:ae:f1:01:f1:64:13: 26:86:91:fb:45:81:5b:e7:3a:b1:62:c2:f7:97:ae: 4c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1F:2C:2C:BA:61:72:B6:99:DD:3E:AC:A5:AB:0E:25:0A:C5:FD:F6 X509v3 Authority Key Identifier: keyid:5D:7C:FA:91:FB:D3:09:B4:50:5F:E1:D6:16:62:F4:AE:1F:4F:02:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:5f:31:11:94:64:69:3c:c3:fd:0e:43:25:10:db:d8:12:2b: e7:f7:9d:e9:24:f4:0d:74:97:12:04:db:b2:02:01:e0:a9:3d: eb:fb:34:a5:fc:6a:dc:18:fa:7b:49:86:2d:ec:5f:01:72:c2: 96:d5:12:c2:00:6e:af:2b:d8:2a:3a:0b:8d:6c:4a:ec:a8:a8: 8d:e8:0c:f3:07:cc:e3:a7:c8:e9:db:f1:5e:a1:48:5e:cb:3f: c7:84:ff:23:d0:21:95:9d:d2:f0:4f:5b:67:c7:5f:aa:24:c3: 24:5b:31:02:76:3d:ec:99:63:de:be:2f:1c:b9:a7:36:04:a1: d6:1f:7f:2f:55:d1:72:32:20:e7:1b:1e:5c:e7:78:55:83:54: 60:75:b2:3f:fa:88:c7:5c:42:ee:00:74:5c:34:6b:a8:d7:3e: 78:ef:13:42:de:5b:48:fc:d4:b1:7f:77:fa:f6:af:29:cc:26: 33:e1:cd:0f:db:27:1d:c8:67:95:54:6f:3f:59:a9:b5:0c:d7: 43:35:10:d0:c7:bc:bc:d9:d0:7e:66:b5:1c:d0:cd:5d:a5:e8: 21:98:06:67:f8:df:18:42:2d:33:b2:d4:b2:25:e4:7c:6e:5c: b7:c0:fb:ac:a0:67:4b:e0:23:cc:b2:06:ef:c0:2f:69:02:ac: 8f:9a:91:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAXTDOvgRUADwAhNEV7z2hb15I5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ3Q0ZBOTFGQkQzMDlCNDUwNUZFMUQ2MTY2MkY0QUUx RjRGMDI2RjAeFw0yNjA5MTcwOTA0NTVaFw0yNjA5MTgxMDQ0NTVaMDMxMTAvBgNV BAMTKDdFMUYyQzJDQkE2MTcyQjY5OUREM0VBQ0E1QUIwRTI1MEFDNUZERjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVYb2lyE7SanL32ZMMD3GDFM7Q YZeN233pdhYZvIVd1GRew0S5RruW0z/Zr/eZZT5cGXZ7r6kJbXx6C3vqjIE1qfHS 24fJLGz8m8R5hswhuYRmaHgif5i20DmCaf+G7qxJhZ2VPy2npZ6M7Iiqhce6t6hi OhbTgGLds04uINNkLfaFB7SmBZrOD1Z4+D4nPxk2cFw4i3O1kg3Lpt16O9CUZCQ+ IICvrXlRjONZNZN4i4vrF4nYuRhQZRnoJy2DPBsVdclWQFyVEQTchwz8EaoWXI0q ozAZfA7+ygZsAv68derLiaoygH9qPa7xAfFkEyaGkftFgVvnOrFiwveXrkzHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfh8sLLphcraZ3T6spasOJQrF/fYwHwYDVR0j BBgwFoAUXXz6kfvTCbRQX+HWFmL0rh9PAm8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODhhOGVhN2YtMmY2MS00NDZiLThiNTEtNTE5NDViMDgyZmFhLzAvNUQ3Q0ZBOTFG QkQzMDlCNDUwNUZFMUQ2MTY2MkY0QUUxRjRGMDI2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDdDRkE5MUZCRDMwOUI0NTA1RkUxRDYxNjYyRjRBRTFGNEYw MjZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODhhOGVhN2YtMmY2MS00NDZiLThi NTEtNTE5NDViMDgyZmFhLzAvNUQ3Q0ZBOTFGQkQzMDlCNDUwNUZFMUQ2MTY2MkY0 QUUxRjRGMDI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtfMRGUZGk8w/0OQyUQ29gSK+f3nekk9A10 lxIE27ICAeCpPev7NKX8atwY+ntJhi3sXwFywpbVEsIAbq8r2Co6C41sSuyoqI3o DPMHzOOnyOnb8V6hSF7LP8eE/yPQIZWd0vBPW2fHX6okwyRbMQJ2PeyZY96+Lxy5 pzYEodYffy9V0XIyIOcbHlzneFWDVGB1sj/6iMdcQu4AdFw0a6jXPnjvE0LeW0j8 1LF/d/r2rynMJjPhzQ/bJx3IZ5VUbz9ZqbUM10M1ENDHvLzZ0H5mtRzQzV2l6CGY Bmf43xhCLTOy1LIl5HxuXLfA+6ygZ0vgI8yyBu/AL2kCrI+akbA= -----END CERTIFICATE-----Generated at Thu Sep 17 13:56:05 2026 by rpki-client