$ rpki-client -vvvf rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft File: 5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft (raw, json) Hash identifier: BR+dUtC8i7CUS4Ic+C1JXmyaQh5LgVvhQViSyrvh69s= Subject key identifier: 3F:8B:D9:CE:74:52:AC:4F:EF:B0:46:30:7B:AF:08:06:55:35:6C:04 Authority key identifier: 5F:F6:A3:A7:C3:04:9D:67:B3:6C:D7:96:99:1E:5C:E4:5A:16:80:4D Certificate issuer: /CN=5FF6A3A7C3049D67B36CD796991E5CE45A16804D Certificate serial: 1A12A745F0194F8C9E41D65A991F131BE9E809BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 04:13:42 +0000 Manifest this update: Thu 17 Sep 2026 04:08:42 +0000 Manifest next update: Fri 18 Sep 2026 06:57:42 +0000 Files and hashes: 1: 5FF6A3A7C3049D67B36CD796991E5CE45A16804D.crl (hash: O1kE3XYi4tw4RkpR6jQQymUT2TrbYGcOeEAyveI+Wvk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.crl rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:12:a7:45:f0:19:4f:8c:9e:41:d6:5a:99:1f:13:1b:e9:e8:09:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF6A3A7C3049D67B36CD796991E5CE45A16804D Validity Not Before: Sep 17 04:08:42 2026 GMT Not After : Sep 18 06:57:42 2026 GMT Subject: CN=3F8BD9CE7452AC4FEFB046307BAF080655356C04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:41:ce:a4:76:af:43:3e:67:22:4d:f3:7b:41: 1b:4b:ad:e0:34:59:65:ed:6f:c8:67:5d:6d:11:bf: f2:39:26:9f:e3:5c:21:fb:2e:c2:1f:e1:a9:fa:66: 6f:6e:4b:66:9b:5e:ac:aa:96:ee:cc:e2:78:bd:52: 4a:1a:8b:05:53:50:39:b2:c5:e4:12:6e:b0:34:df: 03:0e:8e:f6:64:79:2a:9d:7b:25:a7:6d:7e:27:e8: d1:94:32:1c:2b:8f:0c:31:cc:9c:a6:1e:b6:b4:c2: 5f:7a:8b:65:22:12:ce:17:6b:8a:c9:3a:8c:58:dd: 91:e7:f2:d3:76:bd:58:21:12:c8:26:47:6d:ed:0b: 07:82:c0:5c:3c:50:81:dd:b9:c8:5c:f2:6b:27:82: 83:6f:5e:81:20:59:78:9b:49:ed:78:6e:d3:5e:6e: fb:50:90:4b:fa:85:b3:dd:dd:fd:f3:76:13:3b:03: 9d:2c:ea:91:93:73:e1:3f:9a:06:18:97:e7:2a:ec: ea:41:33:e3:3c:f6:a1:f9:2f:c9:23:96:c7:01:1a: a4:54:ae:3d:d9:e1:8d:7e:cd:1c:a5:4a:0e:e5:39: c0:58:95:9a:e7:83:2d:64:30:cc:33:c8:5a:91:65: 6b:98:15:55:d9:3e:76:30:5c:e3:0a:31:a1:00:c3: 95:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:8B:D9:CE:74:52:AC:4F:EF:B0:46:30:7B:AF:08:06:55:35:6C:04 X509v3 Authority Key Identifier: keyid:5F:F6:A3:A7:C3:04:9D:67:B3:6C:D7:96:99:1E:5C:E4:5A:16:80:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:61:8c:f5:27:7d:d6:4d:fb:a3:60:71:b9:f6:d9:98:a1:e2: bb:88:7e:2a:53:59:da:f0:59:90:fb:67:9e:64:4e:46:f2:66: e6:32:de:ab:2b:58:80:38:25:5f:13:bc:5d:d7:2d:4c:cf:f0: e1:cd:fc:fd:7e:27:8a:82:3c:4c:f7:d8:97:02:f4:25:36:1c: 7e:4c:09:dc:d3:1a:a6:62:3e:40:d3:d1:1d:eb:80:70:8a:59: 4c:b2:d2:6d:20:0e:30:a3:f1:48:eb:d0:3d:6a:d3:22:49:98: ef:79:d8:29:b3:20:2a:ab:88:c2:b9:9c:31:d6:cf:54:af:cd: 23:42:f4:85:0c:90:9e:f0:8b:da:ba:1b:88:21:d4:ae:39:59: 1a:f3:e3:61:8b:f2:dd:29:ab:77:e4:38:a9:72:1b:69:24:67: e7:86:0c:2c:9e:ce:bb:22:60:ca:d4:79:26:e3:d5:82:68:0c: 58:ff:09:69:ab:36:fc:ba:e8:8a:10:ed:95:22:60:0d:6e:7a: 71:54:62:db:9b:2f:00:d0:59:77:05:5d:8e:95:c8:84:51:7a: 9a:19:07:b7:cf:59:4a:b2:a4:7d:90:ef:e3:06:f1:ce:56:3b: 4f:c9:d7:b4:a1:db:18:86:f3:01:eb:96:18:cd:14:36:a4:41: a5:27:d3:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGhKnRfAZT4yeQdZamR8TG+noCb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGNkEzQTdDMzA0OUQ2N0IzNkNENzk2OTkxRTVDRTQ1 QTE2ODA0RDAeFw0yNjA5MTcwNDA4NDJaFw0yNjA5MTgwNjU3NDJaMDMxMTAvBgNV BAMTKDNGOEJEOUNFNzQ1MkFDNEZFRkIwNDYzMDdCQUYwODA2NTUzNTZDMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFQc6kdq9DPmciTfN7QRtLreA0 WWXtb8hnXW0Rv/I5Jp/jXCH7LsIf4an6Zm9uS2abXqyqlu7M4ni9UkoaiwVTUDmy xeQSbrA03wMOjvZkeSqdeyWnbX4n6NGUMhwrjwwxzJymHra0wl96i2UiEs4Xa4rJ OoxY3ZHn8tN2vVghEsgmR23tCweCwFw8UIHduchc8msngoNvXoEgWXibSe14btNe bvtQkEv6hbPd3f3zdhM7A50s6pGTc+E/mgYYl+cq7OpBM+M89qH5L8kjlscBGqRU rj3Z4Y1+zRylSg7lOcBYlZrngy1kMMwzyFqRZWuYFVXZPnYwXOMKMaEAw5WFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP4vZznRSrE/vsEYwe68IBlU1bAQwHwYDVR0j BBgwFoAUX/ajp8MEnWezbNeWmR5c5FoWgE0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTM3ZjE5NWEtMzY5ZS00NGJhLTgwY2UtNzIxNzNkNTFhMzcyLzAvNUZGNkEzQTdD MzA0OUQ2N0IzNkNENzk2OTkxRTVDRTQ1QTE2ODA0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81RkY2QTNBN0MzMDQ5RDY3QjM2Q0Q3OTY5OTFFNUNFNDVBMTY4 MDRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTM3ZjE5NWEtMzY5ZS00NGJhLTgw Y2UtNzIxNzNkNTFhMzcyLzAvNUZGNkEzQTdDMzA0OUQ2N0IzNkNENzk2OTkxRTVD RTQ1QTE2ODA0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRhjPUnfdZN+6Ngcbn22Zih4ruIfipTWdrw WZD7Z55kTkbyZuYy3qsrWIA4JV8TvF3XLUzP8OHN/P1+J4qCPEz32JcC9CU2HH5M CdzTGqZiPkDT0R3rgHCKWUyy0m0gDjCj8Ujr0D1q0yJJmO952CmzICqriMK5nDHW z1SvzSNC9IUMkJ7wi9q6G4gh1K45WRrz42GL8t0pq3fkOKlyG2kkZ+eGDCyezrsi YMrUeSbj1YJoDFj/CWmrNvy66IoQ7ZUiYA1uenFUYtubLwDQWXcFXY6VyIRRepoZ B7fPWUqypH2Q7+MG8c5WO0/J17Sh2xiG8wHrlhjNFDakQaUn0y0= -----END CERTIFICATE-----Generated at Thu Sep 17 12:21:26 2026 by rpki-client