$ rpki-client -vvvf rpki-rsync.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.mft File: DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.mft (raw, json) Hash identifier: ADW9bsn0L/KgCvq8YAb4pNW4O2QnWz6/pTwGAnS7RWo= Subject key identifier: 66:AA:A8:11:8E:9B:34:8B:42:3E:B8:54:BC:A1:B0:88:87:05:B8:9F Authority key identifier: DF:5D:D0:70:8B:81:D1:5C:F9:DE:A4:8B:E5:4A:C0:3E:1E:C3:E5:3E Certificate issuer: /CN=DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E Certificate serial: 1C352FCD435EF0D96FA6EFD6F40A543A9DCA32E7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.mft Manifest number: BA Signing time: Mon 21 Sep 2026 03:46:06 +0000 Manifest this update: Mon 21 Sep 2026 03:41:06 +0000 Manifest next update: Tue 22 Sep 2026 06:42:06 +0000 Files and hashes: 1: DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.crl (hash: i3KCTtAhsb1YqFkxLavSP0Sh3NUWKMN6h9rwTvPWKnM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.crl rsync://rpki-rsync.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 06:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:35:2f:cd:43:5e:f0:d9:6f:a6:ef:d6:f4:0a:54:3a:9d:ca:32:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E Validity Not Before: Sep 21 03:41:06 2026 GMT Not After : Sep 22 06:42:06 2026 GMT Subject: CN=66AAA8118E9B348B423EB854BCA1B0888705B89F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:90:aa:22:f3:14:ec:dd:c6:97:9d:e0:84:be: 06:80:95:48:93:65:3b:bb:2f:c5:b7:9e:94:f8:31: f7:92:32:ad:6f:31:e9:e1:4b:f9:ca:03:a6:0d:df: af:19:cc:1c:95:c3:e1:d7:51:e1:f5:0d:07:f6:94: 71:65:c6:df:28:4c:f0:7a:00:d4:cf:d2:36:c7:12: e4:ff:e2:ea:b1:96:6f:bd:04:01:be:e7:50:3f:e2: f5:16:7a:d4:3c:8d:36:aa:70:05:e6:a9:75:d6:61: c6:8c:94:a0:d5:16:a9:79:5d:35:5d:ca:5f:c5:8a: d8:88:2a:dd:7d:04:36:6f:52:8e:e3:f9:43:91:20: 95:a7:3b:c2:f5:5b:50:53:bd:30:f2:23:29:15:b1: 92:f4:65:9a:80:4c:e2:3f:10:0e:b1:5e:ef:81:a2: 9d:03:f9:f1:09:e0:b1:fc:17:55:5a:26:6b:53:60: 73:71:bb:6d:a4:33:13:8b:5c:35:f3:55:8b:04:39: 42:bd:3a:38:11:41:41:17:99:b1:1b:f2:dd:b9:78: ef:b8:a0:db:62:97:aa:7a:5d:ec:58:8d:a2:b9:63: 55:03:22:2f:c6:31:47:30:cc:39:94:d4:16:5f:b3: 51:41:9c:dc:96:d4:c2:7d:c0:40:87:f2:22:22:41: 97:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:AA:A8:11:8E:9B:34:8B:42:3E:B8:54:BC:A1:B0:88:87:05:B8:9F X509v3 Authority Key Identifier: keyid:DF:5D:D0:70:8B:81:D1:5C:F9:DE:A4:8B:E5:4A:C0:3E:1E:C3:E5:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/DF5DD0708B81D15CF9DEA48BE54AC03E1EC3E53E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:bd:59:87:01:f1:fa:d8:a9:8e:8f:59:8a:16:0f:c9:67:b9: 1c:2c:f5:da:dd:de:fa:1a:fe:13:60:90:26:ad:ee:cb:c0:00: 86:c9:50:3c:51:5d:22:77:45:de:dd:90:99:f0:53:71:af:03: 4a:24:69:99:13:78:c1:30:81:3c:92:34:9b:b2:74:7b:53:ed: 84:4c:a7:54:43:a9:e2:25:81:96:88:dc:09:b6:63:21:3c:d6: fc:57:12:6e:bd:e7:37:51:a7:3f:bc:94:f5:df:ee:6b:55:6f: 41:bd:ba:00:60:80:a7:53:a0:1f:05:f8:23:bd:db:4d:1a:d8: db:f1:82:2b:da:50:1d:56:5b:68:43:69:f1:cf:53:12:51:a1: 7f:56:c5:e8:db:c6:9c:08:91:cc:66:4c:b8:28:1c:63:c3:e0: ff:1c:f0:12:dc:a2:5e:ef:b6:b8:72:d4:15:c0:e5:e0:82:50: 51:7c:5b:93:df:e3:ad:db:cc:68:6b:13:93:ed:39:a8:e7:40: f9:ad:fe:05:6f:7d:f4:3c:22:d6:c8:41:be:05:0a:75:a0:4d: 6d:bd:9e:6b:6b:cb:17:3e:68:25:bb:77:d4:ce:91:cd:25:93: d2:70:70:72:07:53:ae:12:74:60:79:27:0f:a1:03:03:41:7d: cc:b1:42:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHDUvzUNe8Nlvpu/W9ApUOp3KMucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY1REQwNzA4QjgxRDE1Q0Y5REVBNDhCRTU0QUMwM0Ux RUMzRTUzRTAeFw0yNjA5MjEwMzQxMDZaFw0yNjA5MjIwNjQyMDZaMDMxMTAvBgNV BAMTKDY2QUFBODExOEU5QjM0OEI0MjNFQjg1NEJDQTFCMDg4ODcwNUI4OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkkKoi8xTs3caXneCEvgaAlUiT ZTu7L8W3npT4MfeSMq1vMenhS/nKA6YN368ZzByVw+HXUeH1DQf2lHFlxt8oTPB6 ANTP0jbHEuT/4uqxlm+9BAG+51A/4vUWetQ8jTaqcAXmqXXWYcaMlKDVFql5XTVd yl/FitiIKt19BDZvUo7j+UORIJWnO8L1W1BTvTDyIykVsZL0ZZqATOI/EA6xXu+B op0D+fEJ4LH8F1VaJmtTYHNxu22kMxOLXDXzVYsEOUK9OjgRQUEXmbEb8t25eO+4 oNtil6p6XexYjaK5Y1UDIi/GMUcwzDmU1BZfs1FBnNyW1MJ9wECH8iIiQZf3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZqqoEY6bNItCPrhUvKGwiIcFuJ8wHwYDVR0j BBgwFoAU313QcIuB0Vz53qSL5UrAPh7D5T4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDhiOGMxYjUtM2JlOC00YWE3LWE0YzYtMjFiY2M4ZjNmYTQwLzAvREY1REQwNzA4 QjgxRDE1Q0Y5REVBNDhCRTU0QUMwM0UxRUMzRTUzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjVERDA3MDhCODFEMTVDRjlERUE0OEJFNTRBQzAzRTFFQzNF NTNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDhiOGMxYjUtM2JlOC00YWE3LWE0 YzYtMjFiY2M4ZjNmYTQwLzAvREY1REQwNzA4QjgxRDE1Q0Y5REVBNDhCRTU0QUMw M0UxRUMzRTUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGu9WYcB8frYqY6PWYoWD8lnuRws9drd3voa /hNgkCat7svAAIbJUDxRXSJ3Rd7dkJnwU3GvA0okaZkTeMEwgTySNJuydHtT7YRM p1RDqeIlgZaI3Am2YyE81vxXEm695zdRpz+8lPXf7mtVb0G9ugBggKdToB8F+CO9 200a2NvxgivaUB1WW2hDafHPUxJRoX9WxejbxpwIkcxmTLgoHGPD4P8c8BLcol7v trhy1BXA5eCCUFF8W5Pf463bzGhrE5PtOajnQPmt/gVvffQ8ItbIQb4FCnWgTW29 nmtryxc+aCW7d9TOkc0lk9JwcHIHU64SdGB5Jw+hAwNBfcyxQrQ= -----END CERTIFICATE-----Generated at Mon Sep 21 23:32:18 2026 by rpki-client