$ rpki-client -vvvf rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.mft File: 5CB4B0C07702B8252693A6958EABDFD306B34D72.mft (raw, json) Hash identifier: eFaiHygzDsxoEkNSEwsT5j4oZ/D4rBzhL++6JRjsgk4= Subject key identifier: D5:A7:4C:71:B3:C4:F3:48:80:11:0B:DB:6F:1F:E2:71:8D:25:95:67 Authority key identifier: 5C:B4:B0:C0:77:02:B8:25:26:93:A6:95:8E:AB:DF:D3:06:B3:4D:72 Certificate issuer: /CN=5CB4B0C07702B8252693A6958EABDFD306B34D72 Certificate serial: 4ACC1EFB3135FFC8147EB8AC3EA61FB7D4BAE2D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CB4B0C07702B8252693A6958EABDFD306B34D72.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.mft Manifest number: BC Signing time: Mon 21 Sep 2026 00:21:59 +0000 Manifest this update: Mon 21 Sep 2026 00:16:59 +0000 Manifest next update: Tue 22 Sep 2026 02:25:59 +0000 Files and hashes: 1: 5CB4B0C07702B8252693A6958EABDFD306B34D72.crl (hash: Rs5sRs7z5WKSZ9Ue/sqgC2rE/CkH7mcxJLijPJ70UtI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.crl rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CB4B0C07702B8252693A6958EABDFD306B34D72.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:cc:1e:fb:31:35:ff:c8:14:7e:b8:ac:3e:a6:1f:b7:d4:ba:e2:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CB4B0C07702B8252693A6958EABDFD306B34D72 Validity Not Before: Sep 21 00:16:59 2026 GMT Not After : Sep 22 02:25:59 2026 GMT Subject: CN=D5A74C71B3C4F34880110BDB6F1FE2718D259567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:11:1e:6b:ec:da:10:87:1b:a4:47:3a:d7:95: c2:b0:1f:ee:c2:c3:c1:fb:a6:df:a6:a5:73:bb:8a: 32:58:6c:c2:15:92:29:7d:d3:d4:29:d7:95:17:b0: 3b:0d:70:d5:00:a1:09:4d:40:c5:af:ee:c9:2f:d0: 3a:b0:d7:3b:59:5e:17:24:5b:c8:db:89:6a:43:2f: de:72:4d:c7:24:cf:54:eb:37:e4:ea:f2:01:46:d4: 6c:19:d0:82:a6:34:ed:6c:1f:7c:69:0a:ad:e7:16: 4f:23:87:cc:bd:ae:b8:dc:b3:39:ab:9d:3b:5e:76: 25:2e:f5:dd:d2:5a:79:a0:c1:98:db:ab:00:45:b9: bf:5f:76:c0:c1:39:83:c9:7f:3f:75:f3:2d:bf:0f: 02:0c:49:d8:64:7f:d3:d8:37:c9:ad:53:21:2a:79: f2:0a:27:70:33:7f:0e:36:48:e9:60:4a:dd:c3:9f: 91:60:84:94:e4:56:95:5e:60:51:93:3c:0c:64:e8: a0:a5:85:89:f8:f5:bb:b6:3c:15:d4:43:2f:6f:24: a8:03:b4:d6:a0:91:23:97:83:23:88:94:42:f6:0f: ec:3e:3b:81:39:46:84:7c:da:1c:62:8f:2b:ce:a2: 22:2d:cc:ef:34:ae:06:ee:d9:99:90:46:9f:b1:d5: 49:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A7:4C:71:B3:C4:F3:48:80:11:0B:DB:6F:1F:E2:71:8D:25:95:67 X509v3 Authority Key Identifier: keyid:5C:B4:B0:C0:77:02:B8:25:26:93:A6:95:8E:AB:DF:D3:06:B3:4D:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CB4B0C07702B8252693A6958EABDFD306B34D72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:34:3a:13:32:87:32:d1:2e:fd:77:18:df:2a:a3:bc:0a:7f: 92:06:82:3b:4a:b0:2b:6f:42:1b:fe:61:51:d2:6b:08:86:9c: 61:d4:c5:e5:76:93:f2:9d:6a:5f:95:ac:58:59:1f:47:40:99: 23:30:c8:70:60:ab:a2:75:5e:0f:87:5e:e9:c0:1e:9e:d5:09: 8e:0c:79:0b:e6:80:9f:7c:81:7a:ea:93:32:5a:09:28:95:f6: a7:16:e3:2c:e8:5d:8b:35:32:d8:39:4f:8e:14:0a:d2:3a:d2: fa:8e:5d:10:cd:95:39:1b:5b:cc:64:cb:ba:4e:ae:7d:6d:98: 3c:66:f6:a0:b9:80:3d:9f:73:b7:86:8d:e6:53:e0:b6:96:b6: 29:f5:eb:57:5a:ed:6a:a8:62:73:8e:a7:85:59:9e:73:25:f4: 5b:8d:27:89:12:53:84:eb:8b:bc:6b:db:06:24:85:7d:5e:a1: 23:d1:75:d4:11:52:ee:b1:d6:5a:61:6b:4f:80:35:13:3d:3a: 9e:97:df:21:24:5c:01:e5:86:9d:e7:42:06:31:41:3f:95:b1: cb:d8:b4:c6:6e:a9:83:11:24:90:38:7c:af:ea:07:60:5f:ea: 02:9c:31:51:d1:73:2e:d0:e8:6a:ef:2a:2b:2f:24:2e:b4:57: 16:f4:a8:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSswe+zE1/8gUfrisPqYft9S64tEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNCNEIwQzA3NzAyQjgyNTI2OTNBNjk1OEVBQkRGRDMw NkIzNEQ3MjAeFw0yNjA5MjEwMDE2NTlaFw0yNjA5MjIwMjI1NTlaMDMxMTAvBgNV BAMTKEQ1QTc0QzcxQjNDNEYzNDg4MDExMEJEQjZGMUZFMjcxOEQyNTk1NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHER5r7NoQhxukRzrXlcKwH+7C w8H7pt+mpXO7ijJYbMIVkil909Qp15UXsDsNcNUAoQlNQMWv7skv0Dqw1ztZXhck W8jbiWpDL95yTcckz1TrN+Tq8gFG1GwZ0IKmNO1sH3xpCq3nFk8jh8y9rrjcszmr nTtediUu9d3SWnmgwZjbqwBFub9fdsDBOYPJfz918y2/DwIMSdhkf9PYN8mtUyEq efIKJ3Azfw42SOlgSt3Dn5FghJTkVpVeYFGTPAxk6KClhYn49bu2PBXUQy9vJKgD tNagkSOXgyOIlEL2D+w+O4E5RoR82hxijyvOoiItzO80rgbu2ZmQRp+x1Un1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1adMcbPE80iAEQvbbx/icY0llWcwHwYDVR0j BBgwFoAUXLSwwHcCuCUmk6aVjqvf0wazTXIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNiZGNiYWUtMmU5ZC00ZjNmLThhYjktMzQyNGU0NDg0ODRlLzAvNUNCNEIwQzA3 NzAyQjgyNTI2OTNBNjk1OEVBQkRGRDMwNkIzNEQ3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81Q0I0QjBDMDc3MDJCODI1MjY5M0E2OTU4RUFCREZEMzA2QjM0 RDcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNiZGNiYWUtMmU5ZC00ZjNmLThh YjktMzQyNGU0NDg0ODRlLzAvNUNCNEIwQzA3NzAyQjgyNTI2OTNBNjk1OEVBQkRG RDMwNkIzNEQ3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB40OhMyhzLRLv13GN8qo7wKf5IGgjtKsCtv Qhv+YVHSawiGnGHUxeV2k/Kdal+VrFhZH0dAmSMwyHBgq6J1Xg+HXunAHp7VCY4M eQvmgJ98gXrqkzJaCSiV9qcW4yzoXYs1Mtg5T44UCtI60vqOXRDNlTkbW8xky7pO rn1tmDxm9qC5gD2fc7eGjeZT4LaWtin161da7WqoYnOOp4VZnnMl9FuNJ4kSU4Tr i7xr2wYkhX1eoSPRddQRUu6x1lpha0+ANRM9Op6X3yEkXAHlhp3nQgYxQT+VscvY tMZuqYMRJJA4fK/qB2Bf6gKcMVHRcy7Q6GrvKisvJC60Vxb0qBQ= -----END CERTIFICATE-----Generated at Mon Sep 21 16:59:19 2026 by rpki-client