$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft File: D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft (raw, json) Hash identifier: sCgcEDW2CRjAs8U/PJDukeEP6wUOBVIJn9lCmY+lxGQ= Subject key identifier: 89:84:B8:A6:4D:E5:34:2E:0A:36:0A:55:3D:6B:E7:FD:28:B4:48:A3 Authority key identifier: D5:A9:D1:A5:8E:3E:E4:57:41:AF:FD:59:7F:03:CB:F6:34:91:22:3C Certificate issuer: /CN=D5A9D1A58E3EE45741AFFD597F03CBF63491223C Certificate serial: 3FD8BD380CEA82A57A9B10B16967CAE24792A9FC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 08:08:42 +0000 Manifest this update: Thu 17 Sep 2026 08:03:42 +0000 Manifest next update: Fri 18 Sep 2026 09:29:42 +0000 Files and hashes: 1: D5A9D1A58E3EE45741AFFD597F03CBF63491223C.crl (hash: tv527k13rAKipcnMTQqYoF62Fsjq8eQQoyC4vxRXuXg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.crl rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:d8:bd:38:0c:ea:82:a5:7a:9b:10:b1:69:67:ca:e2:47:92:a9:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5A9D1A58E3EE45741AFFD597F03CBF63491223C Validity Not Before: Sep 17 08:03:42 2026 GMT Not After : Sep 18 09:29:42 2026 GMT Subject: CN=8984B8A64DE5342E0A360A553D6BE7FD28B448A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:8b:6b:11:83:49:39:3a:dc:20:e4:4d:34:76: 16:4a:98:ab:4d:3f:ed:e9:82:53:97:81:52:45:e0: d4:be:0d:65:14:29:4b:e9:18:57:05:2a:e0:05:27: bc:68:f5:11:a5:52:29:85:67:bb:01:9b:63:14:70: 5c:bd:18:a3:f8:21:01:68:c2:56:58:7e:60:c4:3f: 67:f9:6c:7a:e2:15:09:a7:e1:31:b1:7a:de:55:30: 09:10:d8:f3:7b:fe:dd:07:51:2f:cf:7c:6d:8d:c5: 23:69:7f:17:2d:f2:9d:fd:1e:42:99:f2:76:9a:7c: c5:c0:07:1b:4b:0d:b4:9f:6a:58:b7:10:26:ca:37: ee:32:33:38:13:04:5a:e2:80:bf:b0:1e:34:09:a9: 76:8c:60:c5:61:86:02:63:ff:35:6f:15:ad:a0:20: ab:b7:87:a0:32:d1:58:c7:60:9c:9c:e8:de:b9:67: 69:6f:9b:4f:4d:3a:d6:de:2b:38:00:59:fe:be:62: f6:85:7d:70:d8:ab:8f:92:a7:2f:c0:04:39:4a:5d: be:b2:13:33:5b:a6:dd:73:ae:79:a9:66:d6:8d:ec: 9b:31:d2:ac:03:04:0d:06:88:01:31:7e:e5:06:19: 09:f9:47:b8:22:bb:dd:53:6d:b2:a0:65:ee:e8:60: 6d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:84:B8:A6:4D:E5:34:2E:0A:36:0A:55:3D:6B:E7:FD:28:B4:48:A3 X509v3 Authority Key Identifier: keyid:D5:A9:D1:A5:8E:3E:E4:57:41:AF:FD:59:7F:03:CB:F6:34:91:22:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b0:ba:8e:70:65:2a:b8:53:89:22:ec:66:7b:00:ca:05:97: 63:be:fd:27:37:72:c6:a9:29:1f:bb:d1:2d:8a:32:b0:8e:61: 9b:fc:25:6a:fe:4b:d5:b6:2d:4f:e5:95:bd:50:ea:e1:b6:cb: ff:b4:3a:62:1c:1a:8c:5b:4d:9f:08:66:29:12:25:a1:4c:17: 77:98:76:f0:87:ca:37:ab:08:8a:3a:d8:03:20:44:06:8e:da: e9:99:ba:01:18:a7:66:c8:ab:48:ad:f2:8e:63:bd:9c:96:e6: c1:c7:1b:14:10:59:72:9d:2a:83:9f:46:b0:0c:21:cc:86:89: 70:ac:54:50:af:5b:8e:47:66:51:3c:5b:a8:bc:29:cf:66:d2: 2d:24:84:f0:1a:1b:25:39:a8:f9:ba:ce:44:ac:70:35:c3:09: db:5f:7f:a5:9f:2e:ab:3b:df:4a:28:a5:61:d0:52:33:5e:d1: f5:bc:2c:ed:25:fe:cf:cb:27:23:15:5b:63:00:c9:07:b5:29: 6f:76:b1:98:04:9f:7f:d8:8c:93:69:f8:75:9e:eb:f1:00:21: d7:77:cd:42:9f:b1:77:88:8b:7d:7b:02:d0:12:f4:c0:c5:05: 59:9f:90:83:91:c5:83:3e:c4:0e:86:05:21:fc:c7:b8:bf:96: c2:b1:07:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP9i9OAzqgqV6mxCxaWfK4keSqfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVBOUQxQTU4RTNFRTQ1NzQxQUZGRDU5N0YwM0NCRjYz NDkxMjIzQzAeFw0yNjA5MTcwODAzNDJaFw0yNjA5MTgwOTI5NDJaMDMxMTAvBgNV BAMTKDg5ODRCOEE2NERFNTM0MkUwQTM2MEE1NTNENkJFN0ZEMjhCNDQ4QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9i2sRg0k5Otwg5E00dhZKmKtN P+3pglOXgVJF4NS+DWUUKUvpGFcFKuAFJ7xo9RGlUimFZ7sBm2MUcFy9GKP4IQFo wlZYfmDEP2f5bHriFQmn4TGxet5VMAkQ2PN7/t0HUS/PfG2NxSNpfxct8p39HkKZ 8naafMXABxtLDbSfali3ECbKN+4yMzgTBFrigL+wHjQJqXaMYMVhhgJj/zVvFa2g IKu3h6Ay0VjHYJyc6N65Z2lvm09NOtbeKzgAWf6+YvaFfXDYq4+Spy/ABDlKXb6y EzNbpt1zrnmpZtaN7Jsx0qwDBA0GiAExfuUGGQn5R7giu91TbbKgZe7oYG3vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiYS4pk3lNC4KNgpVPWvn/Si0SKMwHwYDVR0j BBgwFoAU1anRpY4+5FdBr/1ZfwPL9jSRIjwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDIxNjQ2YmUtM2Q2YS00MjU3LWI3N2MtYjMzYzEwZjM1ZDMyLzAvRDVBOUQxQTU4 RTNFRTQ1NzQxQUZGRDU5N0YwM0NCRjYzNDkxMjIzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENUE5RDFBNThFM0VFNDU3NDFBRkZENTk3RjAzQ0JGNjM0OTEy MjNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDIxNjQ2YmUtM2Q2YS00MjU3LWI3 N2MtYjMzYzEwZjM1ZDMyLzAvRDVBOUQxQTU4RTNFRTQ1NzQxQUZGRDU5N0YwM0NC RjYzNDkxMjIzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6wuo5wZSq4U4ki7GZ7AMoFl2O+/Sc3csap KR+70S2KMrCOYZv8JWr+S9W2LU/llb1Q6uG2y/+0OmIcGoxbTZ8IZikSJaFMF3eY dvCHyjerCIo62AMgRAaO2umZugEYp2bIq0it8o5jvZyW5sHHGxQQWXKdKoOfRrAM IcyGiXCsVFCvW45HZlE8W6i8Kc9m0i0khPAaGyU5qPm6zkSscDXDCdtff6WfLqs7 30oopWHQUjNe0fW8LO0l/s/LJyMVW2MAyQe1KW92sZgEn3/YjJNp+HWe6/EAIdd3 zUKfsXeIi317AtAS9MDFBVmfkIORxYM+xA6GBSH8x7i/lsKxB5Q= -----END CERTIFICATE-----Generated at Thu Sep 17 19:21:35 2026 by rpki-client