$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft File: 5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft (raw, json) Hash identifier: svgww5fvzQuawa0IoVE0W4eOZ0hvX5nk3g4bqDNyfYs= Subject key identifier: 38:B9:F1:49:3B:D9:CD:7E:6D:C9:80:74:3E:B9:2E:DD:F9:EA:1B:1C Authority key identifier: 5E:31:28:90:2F:CA:3B:CE:9C:9F:EB:FB:26:4D:55:0A:D6:23:05:72 Certificate issuer: /CN=5E3128902FCA3BCE9C9FEBFB264D550AD6230572 Certificate serial: 5AA8CDFCC286D7F66C1CEBBFCA73A2F119210525 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft Manifest number: BE Signing time: Mon 21 Sep 2026 21:23:07 +0000 Manifest this update: Mon 21 Sep 2026 21:18:07 +0000 Manifest next update: Tue 22 Sep 2026 23:10:07 +0000 Files and hashes: 1: 5E3128902FCA3BCE9C9FEBFB264D550AD6230572.crl (hash: 030meDpMiig2gBVPeiY5CY7KVB2uLRKQzWwwy1AJg/c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.crl rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:a8:cd:fc:c2:86:d7:f6:6c:1c:eb:bf:ca:73:a2:f1:19:21:05:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E3128902FCA3BCE9C9FEBFB264D550AD6230572 Validity Not Before: Sep 21 21:18:07 2026 GMT Not After : Sep 22 23:10:07 2026 GMT Subject: CN=38B9F1493BD9CD7E6DC980743EB92EDDF9EA1B1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:54:e4:23:3e:26:5a:f2:aa:dd:67:bb:26:b8: e4:c8:55:00:0c:3f:cf:42:15:33:0c:26:fc:84:42: c3:62:b2:0d:5e:79:aa:30:0a:16:8e:2c:a2:14:d9: 6c:78:88:7f:34:ae:28:98:a7:3d:39:99:bb:b2:fb: cb:19:65:cd:ca:9b:35:44:a5:fa:11:a2:78:5f:1a: e8:e7:cc:4f:48:99:f6:a4:9d:9c:d7:ba:a0:59:c7: e7:cb:b2:41:44:c8:74:a7:6a:f2:f4:38:2d:c0:1b: b0:91:50:16:c7:a5:49:ac:c7:69:75:98:76:1a:e7: 72:4b:2e:38:85:c7:38:53:45:b6:00:69:01:61:9a: 0c:26:74:e4:66:21:cf:1e:41:94:db:89:12:7a:ac: f7:39:9c:ac:b3:8c:c9:ef:f7:15:c5:9f:97:cb:5b: e3:52:ec:b4:67:1d:4c:d3:fb:fa:4e:46:fa:e8:06: 66:9b:c0:d7:37:4c:bb:d1:76:a0:c1:2f:8f:8a:8b: a9:51:ee:cb:61:51:97:b3:f5:da:19:7e:14:9b:4b: ff:2e:bf:35:ad:c2:e4:55:68:a7:48:a9:1c:df:cd: 3a:55:69:33:8b:05:53:7f:99:f9:f2:ed:db:5a:71: c2:ca:ca:fe:73:d5:cd:4a:56:e9:f1:d5:37:88:25: b0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B9:F1:49:3B:D9:CD:7E:6D:C9:80:74:3E:B9:2E:DD:F9:EA:1B:1C X509v3 Authority Key Identifier: keyid:5E:31:28:90:2F:CA:3B:CE:9C:9F:EB:FB:26:4D:55:0A:D6:23:05:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:f4:72:cf:8a:59:13:46:b4:a3:fc:fd:f3:f8:6b:62:de:76: b3:a9:14:38:32:42:ad:6e:1a:81:09:1e:3b:d2:87:6e:4a:9f: 13:4a:bc:c1:1d:8a:8b:a5:b4:d5:54:02:1d:02:45:48:99:01: 61:e4:88:55:7b:7d:09:db:c9:16:9b:7d:cf:da:d6:46:51:0b: c3:81:38:34:a4:37:01:03:c6:83:07:3a:14:2c:50:28:e8:99: c1:79:8b:a1:52:5a:35:18:81:f2:b4:f6:3a:16:e3:3e:eb:77: 77:a8:77:c2:fd:c1:b9:e1:3b:ff:d6:81:ca:69:8a:92:b9:f8: 28:f1:3b:9e:b8:80:d7:4c:c9:67:a8:6c:f3:4c:70:07:8a:73: 00:cc:f2:fb:ae:fe:43:0d:d1:a2:68:63:ca:36:47:88:a9:15: 7b:e2:8c:39:17:ec:64:39:b3:af:48:a9:90:2f:ce:01:56:44: c0:f2:2b:56:ae:f8:6c:b2:2f:4d:e1:f1:58:e2:50:20:77:c7: 79:83:7e:51:ee:5e:f5:8c:07:6b:ef:88:6b:78:c6:79:d1:98: 90:85:9a:f1:86:6f:91:45:1a:65:9c:40:38:2b:97:88:c4:97: a6:f9:e7:0c:8f:2b:ed:2b:9c:57:5a:3d:28:78:fd:2d:22:42: e7:c4:32:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWqjN/MKG1/ZsHOu/ynOi8RkhBSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUzMTI4OTAyRkNBM0JDRTlDOUZFQkZCMjY0RDU1MEFE NjIzMDU3MjAeFw0yNjA5MjEyMTE4MDdaFw0yNjA5MjIyMzEwMDdaMDMxMTAvBgNV BAMTKDM4QjlGMTQ5M0JEOUNEN0U2REM5ODA3NDNFQjkyRURERjlFQTFCMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClVOQjPiZa8qrdZ7smuOTIVQAM P89CFTMMJvyEQsNisg1eeaowChaOLKIU2Wx4iH80riiYpz05mbuy+8sZZc3KmzVE pfoRonhfGujnzE9ImfaknZzXuqBZx+fLskFEyHSnavL0OC3AG7CRUBbHpUmsx2l1 mHYa53JLLjiFxzhTRbYAaQFhmgwmdORmIc8eQZTbiRJ6rPc5nKyzjMnv9xXFn5fL W+NS7LRnHUzT+/pORvroBmabwNc3TLvRdqDBL4+Ki6lR7sthUZez9doZfhSbS/8u vzWtwuRVaKdIqRzfzTpVaTOLBVN/mfny7dtaccLKyv5z1c1KVunx1TeIJbCTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOLnxSTvZzX5tyYB0Prku3fnqGxwwHwYDVR0j BBgwFoAUXjEokC/KO86cn+v7Jk1VCtYjBXIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGZiNWZmMzctMzk0YS00ZWJhLWE0NzAtMTBhZjM3Y2Y3NWRjLzAvNUUzMTI4OTAy RkNBM0JDRTlDOUZFQkZCMjY0RDU1MEFENjIzMDU3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RTMxMjg5MDJGQ0EzQkNFOUM5RkVCRkIyNjRENTUwQUQ2MjMw NTcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGZiNWZmMzctMzk0YS00ZWJhLWE0 NzAtMTBhZjM3Y2Y3NWRjLzAvNUUzMTI4OTAyRkNBM0JDRTlDOUZFQkZCMjY0RDU1 MEFENjIzMDU3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEX0cs+KWRNGtKP8/fP4a2LedrOpFDgyQq1u GoEJHjvSh25KnxNKvMEdioultNVUAh0CRUiZAWHkiFV7fQnbyRabfc/a1kZRC8OB ODSkNwEDxoMHOhQsUCjomcF5i6FSWjUYgfK09joW4z7rd3eod8L9wbnhO//Wgcpp ipK5+CjxO564gNdMyWeobPNMcAeKcwDM8vuu/kMN0aJoY8o2R4ipFXvijDkX7GQ5 s69IqZAvzgFWRMDyK1au+GyyL03h8VjiUCB3x3mDflHuXvWMB2vviGt4xnnRmJCF mvGGb5FFGmWcQDgrl4jEl6b55wyPK+0rnFdaPSh4/S0iQufEMjQ= -----END CERTIFICATE-----Generated at Tue Sep 22 13:32:57 2026 by rpki-client