$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft File: C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft (raw, json) Hash identifier: q1QC/W1lhD62UbyhrvlAf4MhXI9lG3tAQc259A9kNqY= Subject key identifier: 9F:6A:A2:DA:C2:2F:50:44:22:D1:E4:C1:6C:0E:C4:EF:C9:99:03:9F Authority key identifier: C5:DD:2D:E8:A2:5B:2A:B9:DB:C2:98:28:C0:31:41:B2:6C:B7:40:69 Certificate issuer: /CN=C5DD2DE8A25B2AB9DBC29828C03141B26CB74069 Certificate serial: 444A0B7D2F947C1808C681931DD86E3E2CB2AA5C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft Manifest number: BE Signing time: Mon 21 Sep 2026 13:28:13 +0000 Manifest this update: Mon 21 Sep 2026 13:23:13 +0000 Manifest next update: Tue 22 Sep 2026 17:15:13 +0000 Files and hashes: 1: C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.crl (hash: /93IdrxeYxVRczw6z3wE6AlBeSgG022ObU9beysaYd4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.crl rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 17:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:4a:0b:7d:2f:94:7c:18:08:c6:81:93:1d:d8:6e:3e:2c:b2:aa:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5DD2DE8A25B2AB9DBC29828C03141B26CB74069 Validity Not Before: Sep 21 13:23:13 2026 GMT Not After : Sep 22 17:15:13 2026 GMT Subject: CN=9F6AA2DAC22F504422D1E4C16C0EC4EFC999039F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:95:05:97:02:99:74:68:00:bc:0c:4b:32:58: e3:d6:b7:c4:96:e7:b4:1e:bb:2b:0c:aa:e1:b8:0d: b2:0b:58:a4:58:5c:6e:15:e1:e4:87:8d:8d:97:6b: 34:64:a0:42:5d:ed:90:3f:59:c4:99:2f:43:d2:ef: 0e:82:f6:bf:a2:ae:80:23:ce:92:4c:e2:73:9e:0f: 64:9c:ee:fa:c3:e9:a5:78:a3:05:35:6e:66:c7:ae: 1d:1c:74:bd:18:46:c9:31:98:85:70:f4:8e:58:97: 81:c7:0b:7d:84:5a:43:6f:30:7c:46:ee:9e:36:db: 4c:9f:24:17:d3:02:79:11:62:fe:f4:8e:08:42:13: 6f:21:2a:f0:03:f3:00:de:f7:c1:7f:91:ab:c8:d6: b7:08:77:15:45:8f:f8:a8:93:5a:14:e0:84:6a:91: fe:2e:bc:86:e8:11:31:97:47:52:7e:e1:33:98:03: 09:a5:9d:7c:5e:9d:ea:23:ac:d2:b6:fd:bf:54:30: 3a:b8:37:9e:d8:ac:09:41:bb:b7:59:7a:5e:85:b0: c1:49:86:93:65:da:92:e2:8e:9b:24:40:50:dc:c5: b1:e6:4a:2e:21:d8:95:cc:0e:58:bc:b3:af:43:7e: cd:45:e9:d7:06:4d:be:b0:a5:8c:c7:dd:b7:01:8b: a3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6A:A2:DA:C2:2F:50:44:22:D1:E4:C1:6C:0E:C4:EF:C9:99:03:9F X509v3 Authority Key Identifier: keyid:C5:DD:2D:E8:A2:5B:2A:B9:DB:C2:98:28:C0:31:41:B2:6C:B7:40:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/C5DD2DE8A25B2AB9DBC29828C03141B26CB74069.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:5a:70:64:42:4c:da:cf:57:3d:6f:40:cc:bb:d7:ec:81:d9: 5f:00:5f:f4:d7:1a:0a:a9:d4:78:3f:27:bf:d0:4a:e8:bc:cb: b1:c1:90:8e:72:a6:49:49:14:82:5a:9a:05:23:e5:29:4d:84: 00:03:c2:c9:ca:54:f7:8a:b0:4e:a8:4c:74:5b:39:cc:31:ac: 4c:d3:a9:e7:52:c1:c0:69:1c:7f:13:0f:d5:96:a1:7f:95:cb: 96:f7:ee:6d:c4:c6:cb:ed:40:9c:ac:c2:a4:72:20:d5:5e:14: b4:11:43:a2:c9:b5:f5:fb:a6:9d:6b:e4:3a:f9:6b:4e:c5:70: 61:4a:95:94:d3:24:45:a2:e2:87:33:45:2c:fb:7e:68:1a:15: 11:13:9f:9e:2f:1c:59:14:ec:24:c1:d5:0d:b6:e4:0a:8d:63: c2:82:bd:c7:0f:cf:47:08:15:28:b5:66:d8:21:95:d9:26:14: d2:cf:90:74:a6:fa:9a:99:17:47:cb:23:b9:31:74:02:e1:fc: 3f:70:8c:3b:cf:27:3a:6e:30:4f:37:79:a7:08:67:2c:0c:c3: 18:d8:cd:cc:33:a3:7a:2b:3e:d1:13:a5:b2:b0:3a:2c:0c:b6: bc:a5:5d:c4:cb:fc:bb:a6:10:01:8e:c2:10:c5:ef:d5:3a:d2: 7a:a2:71:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUREoLfS+UfBgIxoGTHdhuPiyyqlwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVERDJERThBMjVCMkFCOURCQzI5ODI4QzAzMTQxQjI2 Q0I3NDA2OTAeFw0yNjA5MjExMzIzMTNaFw0yNjA5MjIxNzE1MTNaMDMxMTAvBgNV BAMTKDlGNkFBMkRBQzIyRjUwNDQyMkQxRTRDMTZDMEVDNEVGQzk5OTAzOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGlQWXApl0aAC8DEsyWOPWt8SW 57QeuysMquG4DbILWKRYXG4V4eSHjY2XazRkoEJd7ZA/WcSZL0PS7w6C9r+iroAj zpJM4nOeD2Sc7vrD6aV4owU1bmbHrh0cdL0YRskxmIVw9I5Yl4HHC32EWkNvMHxG 7p4220yfJBfTAnkRYv70jghCE28hKvAD8wDe98F/kavI1rcIdxVFj/iok1oU4IRq kf4uvIboETGXR1J+4TOYAwmlnXxeneojrNK2/b9UMDq4N57YrAlBu7dZel6FsMFJ hpNl2pLijpskQFDcxbHmSi4h2JXMDli8s69Dfs1F6dcGTb6wpYzH3bcBi6PrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn2qi2sIvUEQi0eTBbA7E78mZA58wHwYDVR0j BBgwFoAUxd0t6KJbKrnbwpgowDFBsmy3QGkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U5ZTAxYmEtNTljOS00MDQ3LWFjMGItZTliMmZlNjU4NTNjLzAvQzVERDJERThB MjVCMkFCOURCQzI5ODI4QzAzMTQxQjI2Q0I3NDA2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNUREMkRFOEEyNUIyQUI5REJDMjk4MjhDMDMxNDFCMjZDQjc0 MDY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U5ZTAxYmEtNTljOS00MDQ3LWFj MGItZTliMmZlNjU4NTNjLzAvQzVERDJERThBMjVCMkFCOURCQzI5ODI4QzAzMTQx QjI2Q0I3NDA2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExacGRCTNrPVz1vQMy71+yB2V8AX/TXGgqp 1Hg/J7/QSui8y7HBkI5ypklJFIJamgUj5SlNhAADwsnKVPeKsE6oTHRbOcwxrEzT qedSwcBpHH8TD9WWoX+Vy5b37m3ExsvtQJyswqRyINVeFLQRQ6LJtfX7pp1r5Dr5 a07FcGFKlZTTJEWi4oczRSz7fmgaFRETn54vHFkU7CTB1Q225AqNY8KCvccPz0cI FSi1ZtghldkmFNLPkHSm+pqZF0fLI7kxdALh/D9wjDvPJzpuME83eacIZywMwxjY zcwzo3orPtETpbKwOiwMtrylXcTL/LumEAGOwhDF79U60nqicfE= -----END CERTIFICATE-----Generated at Tue Sep 22 05:36:45 2026 by rpki-client