$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.mft File: 5FD95F455755676CB89A532D2F2A8301877C4AEC.mft (raw, json) Hash identifier: xFQJNambDpkLLh7MWwXgQhFPyPXLaS2Tvi6wnP5a2Uo= Subject key identifier: 13:6A:CD:EA:05:7D:24:94:0B:6C:71:B3:65:1E:15:AA:0E:13:72:CF Authority key identifier: 5F:D9:5F:45:57:55:67:6C:B8:9A:53:2D:2F:2A:83:01:87:7C:4A:EC Certificate issuer: /CN=5FD95F455755676CB89A532D2F2A8301877C4AEC Certificate serial: 50984B999A15F51F16F9261EEF13D20477F98186 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FD95F455755676CB89A532D2F2A8301877C4AEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 15:38:28 +0000 Manifest this update: Wed 16 Sep 2026 15:33:28 +0000 Manifest next update: Thu 17 Sep 2026 19:08:28 +0000 Files and hashes: 1: 5FD95F455755676CB89A532D2F2A8301877C4AEC.crl (hash: PqNO8sb54ndo26ZPIxvILOIRr9kkBh0ks/rbvejla6U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.crl rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FD95F455755676CB89A532D2F2A8301877C4AEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:98:4b:99:9a:15:f5:1f:16:f9:26:1e:ef:13:d2:04:77:f9:81:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FD95F455755676CB89A532D2F2A8301877C4AEC Validity Not Before: Sep 16 15:33:28 2026 GMT Not After : Sep 17 19:08:28 2026 GMT Subject: CN=136ACDEA057D24940B6C71B3651E15AA0E1372CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:34:bd:ce:26:ee:c4:2b:fe:e0:96:55:69:49: ff:b4:e1:e3:63:bf:b5:dc:c7:b3:c8:c6:18:87:24: 3b:28:a0:af:47:d5:44:ed:d1:c5:b3:9c:ce:3a:07: ba:9d:35:c9:5c:35:95:ee:38:0a:3a:d6:d9:8b:4c: 26:36:dc:8b:91:d8:75:c2:cd:8f:8d:0c:17:42:af: ed:8b:38:16:22:b2:eb:8c:52:5e:54:3f:d3:6a:66: 46:3b:e1:50:09:89:6a:1d:3a:81:30:a0:dd:08:bd: 74:2b:fb:a4:42:3c:8e:1c:05:d6:8c:45:12:e7:d9: fa:4a:b5:f6:bf:23:98:8c:40:f5:68:c1:aa:b5:b7: ec:f4:3e:0f:de:6c:0f:34:95:6d:e9:48:db:9f:51: e5:c3:de:95:c6:1f:69:ba:b2:45:e7:19:27:81:ce: 04:cc:c6:02:23:27:fc:0a:87:ac:be:75:7f:cf:f7: 90:20:4d:ac:c8:24:b2:de:fa:42:3f:ae:bd:94:15: 97:ae:23:3b:e3:ab:78:53:3f:96:10:80:72:5e:8a: 95:08:13:0d:54:ed:79:ba:94:8c:69:36:e4:bf:ef: 3b:61:5a:bd:ba:b3:d3:03:66:99:8d:e4:07:bb:bf: 6c:de:0e:c3:c5:c7:e1:35:56:03:a0:2b:57:da:56: 74:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6A:CD:EA:05:7D:24:94:0B:6C:71:B3:65:1E:15:AA:0E:13:72:CF X509v3 Authority Key Identifier: keyid:5F:D9:5F:45:57:55:67:6C:B8:9A:53:2D:2F:2A:83:01:87:7C:4A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FD95F455755676CB89A532D2F2A8301877C4AEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:83:d7:c4:54:68:13:29:ab:e0:06:d5:2a:d1:75:3c:07:eb: 4e:ff:dd:62:66:2e:60:57:69:07:6d:c7:c7:47:a9:31:9a:66: 49:0c:11:d0:51:a1:bf:6d:63:66:27:fe:77:a6:c0:a9:49:33: a6:f0:97:f7:70:db:5f:cd:a5:dd:f3:9c:64:b2:35:4f:c1:90: 70:96:50:f7:97:23:f2:b9:da:90:88:8d:18:f0:a0:91:f7:03: c3:4e:c5:6d:60:d6:5c:04:60:f4:ef:c5:b1:d0:8b:47:91:b4: ea:22:f5:b3:11:e2:cc:69:1c:b7:a3:3e:41:d6:58:67:48:4b: 44:90:3f:89:d5:97:94:bc:78:89:0c:e7:8b:36:85:d2:c3:20: ed:a6:8b:dd:22:c2:58:a5:ed:56:c9:d9:b1:b6:f4:e9:bb:86: 13:9f:67:fe:73:9f:58:30:99:a8:24:fd:c7:34:46:b1:d5:04: 3f:ec:fb:65:6a:6e:e2:c0:c8:a7:42:47:7b:b4:52:57:36:3b: 98:11:eb:a7:d2:4f:cf:f6:80:b4:b3:0f:21:35:44:41:cf:eb: a2:12:8a:90:1a:97:ef:70:17:fd:3c:be:60:4c:2e:93:40:d7: b9:90:d8:3d:e3:18:2d:44:80:b8:b0:05:14:21:bd:09:89:06: fe:46:de:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUJhLmZoV9R8W+SYe7xPSBHf5gYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZEOTVGNDU1NzU1Njc2Q0I4OUE1MzJEMkYyQTgzMDE4 NzdDNEFFQzAeFw0yNjA5MTYxNTMzMjhaFw0yNjA5MTcxOTA4MjhaMDMxMTAvBgNV BAMTKDEzNkFDREVBMDU3RDI0OTQwQjZDNzFCMzY1MUUxNUFBMEUxMzcyQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPNL3OJu7EK/7gllVpSf+04eNj v7Xcx7PIxhiHJDsooK9H1UTt0cWznM46B7qdNclcNZXuOAo61tmLTCY23IuR2HXC zY+NDBdCr+2LOBYisuuMUl5UP9NqZkY74VAJiWodOoEwoN0IvXQr+6RCPI4cBdaM RRLn2fpKtfa/I5iMQPVowaq1t+z0Pg/ebA80lW3pSNufUeXD3pXGH2m6skXnGSeB zgTMxgIjJ/wKh6y+dX/P95AgTazIJLLe+kI/rr2UFZeuIzvjq3hTP5YQgHJeipUI Ew1U7Xm6lIxpNuS/7zthWr26s9MDZpmN5Ae7v2zeDsPFx+E1VgOgK1faVnQDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE2rN6gV9JJQLbHGzZR4Vqg4Tcs8wHwYDVR0j BBgwFoAUX9lfRVdVZ2y4mlMtLyqDAYd8SuwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmJhOTdiMGItMzlhZS00YzJjLWIxM2ItMDFlMzk1YjdhMjRiLzAvNUZEOTVGNDU1 NzU1Njc2Q0I4OUE1MzJEMkYyQTgzMDE4NzdDNEFFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkQ5NUY0NTU3NTU2NzZDQjg5QTUzMkQyRjJBODMwMTg3N0M0 QUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmJhOTdiMGItMzlhZS00YzJjLWIx M2ItMDFlMzk1YjdhMjRiLzAvNUZEOTVGNDU1NzU1Njc2Q0I4OUE1MzJEMkYyQTgz MDE4NzdDNEFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqD18RUaBMpq+AG1SrRdTwH607/3WJmLmBX aQdtx8dHqTGaZkkMEdBRob9tY2Yn/nemwKlJM6bwl/dw21/Npd3znGSyNU/BkHCW UPeXI/K52pCIjRjwoJH3A8NOxW1g1lwEYPTvxbHQi0eRtOoi9bMR4sxpHLejPkHW WGdIS0SQP4nVl5S8eIkM54s2hdLDIO2mi90iwlil7VbJ2bG29Om7hhOfZ/5zn1gw magk/cc0RrHVBD/s+2VqbuLAyKdCR3u0Ulc2O5gR66fST8/2gLSzDyE1REHP66IS ipAal+9wF/08vmBMLpNA17mQ2D3jGC1EgLiwBRQhvQmJBv5G3h4= -----END CERTIFICATE-----Generated at Thu Sep 17 09:15:54 2026 by rpki-client