$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft File: 5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft (raw, json) Hash identifier: aLzm8QxKcRwA0Mre0YoWTB+S6dgGqfMF30ZtaeTfmdI= Subject key identifier: CF:E0:FC:C1:1D:96:BA:54:3B:2E:23:E3:36:F0:0D:6C:96:0B:F6:05 Authority key identifier: 5A:A9:4F:74:20:AA:22:63:29:E6:9A:E8:CD:2E:C0:CE:60:D8:77:6A Certificate issuer: /CN=5AA94F7420AA226329E69AE8CD2EC0CE60D8776A Certificate serial: 47D5D91BA724C816ED771523923C8D34C60364FB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 09:30:23 +0000 Manifest this update: Thu 17 Sep 2026 09:25:23 +0000 Manifest next update: Fri 18 Sep 2026 13:07:23 +0000 Files and hashes: 1: 5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.crl (hash: CJJiUMGqwga/sNzDN1HFPpgy/TPW3BAMCntX4csBvTE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.crl rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:d5:d9:1b:a7:24:c8:16:ed:77:15:23:92:3c:8d:34:c6:03:64:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AA94F7420AA226329E69AE8CD2EC0CE60D8776A Validity Not Before: Sep 17 09:25:23 2026 GMT Not After : Sep 18 13:07:23 2026 GMT Subject: CN=CFE0FCC11D96BA543B2E23E336F00D6C960BF605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:39:8b:14:6e:9f:20:dc:d8:fe:9c:40:fe:b3: 2d:0b:4b:d8:52:ce:53:a6:a0:0c:79:08:e5:45:b3: bc:ff:e1:d9:f4:7e:e2:71:f4:5d:d5:79:a3:d0:c8: df:bd:0f:9b:bb:ac:bb:b4:ac:2b:75:f4:e5:1c:a5: 4e:6c:dc:4a:ad:07:c7:42:72:85:db:24:a1:60:d9: 79:9b:44:20:b3:66:76:5a:a3:4c:7e:f9:70:45:77: 40:ab:b2:00:ee:c9:9c:e3:80:85:cd:78:19:ee:30: ff:77:6e:4d:a5:ae:6d:b7:02:46:98:27:9f:1e:d6: 38:93:53:bc:3f:a0:65:b3:97:fa:8e:8e:ae:50:f2: f8:90:91:b7:07:f3:a5:96:07:f1:34:25:f6:15:53: 73:5c:5e:46:c7:6e:cf:80:cb:8e:15:77:c2:df:55: ae:44:e4:4e:b9:98:86:53:3e:08:fb:c3:2e:12:81: da:25:a7:4e:f9:30:08:eb:11:47:f6:c8:18:66:c5: 54:1d:36:ea:b8:8f:dd:7d:71:d6:5e:ad:68:9b:7a: 29:4c:b6:e0:41:2e:bf:e4:2c:4b:42:77:8d:96:2d: ba:64:ba:29:69:ed:90:83:0c:1c:a1:fa:75:97:c5: cf:45:65:6b:ed:b9:67:89:db:ab:c0:50:6e:3e:cf: 37:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E0:FC:C1:1D:96:BA:54:3B:2E:23:E3:36:F0:0D:6C:96:0B:F6:05 X509v3 Authority Key Identifier: keyid:5A:A9:4F:74:20:AA:22:63:29:E6:9A:E8:CD:2E:C0:CE:60:D8:77:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:cf:3b:dd:af:7b:4a:97:89:28:f4:96:4b:b6:06:14:98:f6: 3d:e3:27:3f:d5:ab:7b:f6:52:19:c6:31:e3:9d:4b:a7:5b:7b: 20:59:80:8f:26:b9:6d:cb:fb:2b:a1:f3:2e:65:49:34:5c:44: ed:ac:ab:05:a0:0b:06:05:13:7e:e4:8c:e2:cb:ce:71:15:f4: ab:1f:02:92:57:cf:03:f8:2f:0b:ec:51:04:1f:89:85:91:37: 39:8a:91:cd:5c:b7:62:74:5e:e4:ef:b8:89:40:0b:1b:09:69: 23:dd:e2:2e:17:55:57:68:68:1d:99:32:80:01:27:8d:34:91: fa:67:50:db:f8:23:5a:a1:42:52:ff:19:35:7d:32:de:73:bd: 7d:96:56:15:89:88:c2:28:7e:bb:ad:ea:30:ca:8d:38:63:8f: b8:26:de:4a:d8:dc:61:80:fc:36:70:05:7e:c9:fc:c2:50:c1: 02:ea:cf:30:b9:f6:7d:b3:ac:1e:d7:93:af:d5:c3:19:88:e4: ce:36:10:a1:5c:0e:77:26:a1:54:ac:d2:99:e8:28:83:04:a6: 94:1e:a5:d4:aa:70:67:d1:1f:83:f5:a0:f8:be:97:9a:cb:b5: 90:77:53:95:c3:bc:78:84:12:03:91:a5:37:3e:57:f5:b1:bf: bb:12:f6:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR9XZG6ckyBbtdxUjkjyNNMYDZPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFBOTRGNzQyMEFBMjI2MzI5RTY5QUU4Q0QyRUMwQ0U2 MEQ4Nzc2QTAeFw0yNjA5MTcwOTI1MjNaFw0yNjA5MTgxMzA3MjNaMDMxMTAvBgNV BAMTKENGRTBGQ0MxMUQ5NkJBNTQzQjJFMjNFMzM2RjAwRDZDOTYwQkY2MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqOYsUbp8g3Nj+nED+sy0LS9hS zlOmoAx5COVFs7z/4dn0fuJx9F3VeaPQyN+9D5u7rLu0rCt19OUcpU5s3EqtB8dC coXbJKFg2XmbRCCzZnZao0x++XBFd0CrsgDuyZzjgIXNeBnuMP93bk2lrm23AkaY J58e1jiTU7w/oGWzl/qOjq5Q8viQkbcH86WWB/E0JfYVU3NcXkbHbs+Ay44Vd8Lf Va5E5E65mIZTPgj7wy4Sgdolp075MAjrEUf2yBhmxVQdNuq4j919cdZerWibeilM tuBBLr/kLEtCd42WLbpkuilp7ZCDDByh+nWXxc9FZWvtuWeJ26vAUG4+zzf3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz+D8wR2WulQ7LiPjNvANbJYL9gUwHwYDVR0j BBgwFoAUWqlPdCCqImMp5prozS7AzmDYd2owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ1MDA4YTAtMGFjMy00OThlLThjYmYtZjMxMTJiOTFiZGY0LzAvNUFBOTRGNzQy MEFBMjI2MzI5RTY5QUU4Q0QyRUMwQ0U2MEQ4Nzc2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QUE5NEY3NDIwQUEyMjYzMjlFNjlBRThDRDJFQzBDRTYwRDg3 NzZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ1MDA4YTAtMGFjMy00OThlLThj YmYtZjMxMTJiOTFiZGY0LzAvNUFBOTRGNzQyMEFBMjI2MzI5RTY5QUU4Q0QyRUMw Q0U2MEQ4Nzc2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfPO92ve0qXiSj0lku2BhSY9j3jJz/Vq3v2 UhnGMeOdS6dbeyBZgI8muW3L+yuh8y5lSTRcRO2sqwWgCwYFE37kjOLLznEV9Ksf ApJXzwP4LwvsUQQfiYWRNzmKkc1ct2J0XuTvuIlACxsJaSPd4i4XVVdoaB2ZMoAB J400kfpnUNv4I1qhQlL/GTV9Mt5zvX2WVhWJiMIofrut6jDKjThjj7gm3krY3GGA /DZwBX7J/MJQwQLqzzC59n2zrB7Xk6/VwxmI5M42EKFcDncmoVSs0pnoKIMEppQe pdSqcGfRH4P1oPi+l5rLtZB3U5XDvHiEEgORpTc+V/Wxv7sS9vA= -----END CERTIFICATE-----Generated at Thu Sep 17 14:46:23 2026 by rpki-client