$ rpki-client -vvvf rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.mft File: 5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.mft (raw, json) Hash identifier: Rbz+jyfYalZR9QMUuqcj4K8WpTgdtrp+bpDtyq4gt7A= Subject key identifier: FA:CA:FD:BF:EE:DE:8B:2E:A2:0B:A0:4B:6E:DE:39:AE:B7:F5:5D:D2 Authority key identifier: 5F:66:F5:BF:93:48:D5:B5:A6:31:CE:B1:00:F2:02:65:EB:D8:BE:57 Certificate issuer: /CN=5F66F5BF9348D5B5A631CEB100F20265EBD8BE57 Certificate serial: 209D3335E3E51D0CBA058D926681CA9D0363B437 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.mft Manifest number: BF Signing time: Mon 21 Sep 2026 22:39:39 +0000 Manifest this update: Mon 21 Sep 2026 22:34:39 +0000 Manifest next update: Wed 23 Sep 2026 02:20:39 +0000 Files and hashes: 1: 5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.crl (hash: AkMnwqRSj/CRqGleX8V5i2ZQpSHrGQ8dwzB2Ykwfzh4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.crl rsync://rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 02:20:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:9d:33:35:e3:e5:1d:0c:ba:05:8d:92:66:81:ca:9d:03:63:b4:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F66F5BF9348D5B5A631CEB100F20265EBD8BE57 Validity Not Before: Sep 21 22:34:39 2026 GMT Not After : Sep 23 02:20:39 2026 GMT Subject: CN=FACAFDBFEEDE8B2EA20BA04B6EDE39AEB7F55DD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8a:fa:30:8e:c7:d8:9e:2b:ac:96:44:f4:57: 67:be:3c:36:9c:94:db:80:31:70:4f:9d:6c:c3:fa: d0:ab:f8:4d:cf:88:33:12:f4:61:2c:fb:00:ab:a6: d7:e2:11:68:7e:22:01:d6:99:ab:51:c7:3c:f3:83: 07:ce:5f:af:e4:71:0b:34:db:7a:73:fb:b4:b5:2e: b4:ba:94:3d:24:58:3b:d3:e8:1b:a9:14:8b:82:e6: a0:b3:cc:9b:e0:a5:4f:58:8c:79:ce:7d:71:54:c5: 3e:7e:48:e6:f0:df:1f:a8:bf:5e:dd:da:61:40:33: 02:0b:f2:c9:4c:53:53:97:1b:a7:bd:a5:d3:e3:4b: 90:25:09:e0:ab:a4:fe:6c:fa:a5:f9:be:96:2f:a7: cb:5c:cb:e1:16:4e:54:9b:3d:a3:b6:db:35:2e:40: 14:14:86:6e:c9:70:28:be:e2:8c:9a:85:cb:d5:3c: 05:73:d9:9d:c1:ae:74:76:93:26:1f:f6:f2:8b:7d: c8:f0:92:01:26:0c:49:34:97:89:32:82:29:83:ae: ae:ce:0a:e0:36:85:50:2b:c5:fb:2b:b5:89:8a:b9: b0:27:10:d3:0e:c9:48:e7:a9:36:61:2b:80:64:6b: f9:71:3e:8b:af:e4:5e:76:c2:34:2a:ce:5c:3c:58: 4e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CA:FD:BF:EE:DE:8B:2E:A2:0B:A0:4B:6E:DE:39:AE:B7:F5:5D:D2 X509v3 Authority Key Identifier: keyid:5F:66:F5:BF:93:48:D5:B5:A6:31:CE:B1:00:F2:02:65:EB:D8:BE:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:2c:01:9c:ee:0d:cc:b6:69:d0:60:6b:8a:77:08:e5:af:67: 76:35:5d:44:e2:88:51:2c:d0:82:5a:d1:09:0e:8b:84:d3:b6: 2a:62:a2:e6:20:5b:0f:02:11:20:33:05:98:ea:0e:03:4a:52: 29:46:d4:84:68:8c:9c:59:a4:47:0c:17:9a:b5:d1:b4:7d:b6: c2:8b:a8:6b:ef:b7:ed:2c:63:70:b5:8a:7a:ec:74:56:d0:63: 79:df:53:26:15:47:cc:95:ee:05:9b:a6:3d:fa:8b:ad:ed:3a: a6:ee:2b:ac:a9:98:6b:a9:b8:1e:d3:ce:b3:38:79:43:b4:8e: 00:67:a7:1e:b1:4e:b2:fb:62:56:0a:49:89:09:19:f2:ea:22: 85:a8:35:a8:40:d9:5c:b1:e3:d2:45:51:86:ec:24:87:b4:1f: 8f:84:31:87:4e:5e:c4:9f:00:bf:7d:f8:54:6f:00:ed:92:b5: 70:32:0f:ac:4c:26:db:bc:f1:e4:0c:3d:52:30:53:95:d4:2c: 49:dc:a1:40:f9:90:93:db:e8:0a:20:ce:20:3f:fa:1e:09:1b: b2:22:0c:af:18:0a:98:01:a6:83:e4:d8:aa:77:bc:b8:8a:a6: d1:bf:f7:0a:95:9b:8a:4f:35:e9:1a:cd:19:e3:dc:a8:a5:1c: 6e:34:15:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIJ0zNePlHQy6BY2SZoHKnQNjtDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY2NkY1QkY5MzQ4RDVCNUE2MzFDRUIxMDBGMjAyNjVF QkQ4QkU1NzAeFw0yNjA5MjEyMjM0MzlaFw0yNjA5MjMwMjIwMzlaMDMxMTAvBgNV BAMTKEZBQ0FGREJGRUVERThCMkVBMjBCQTA0QjZFREUzOUFFQjdGNTVERDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfivowjsfYniuslkT0V2e+PDac lNuAMXBPnWzD+tCr+E3PiDMS9GEs+wCrptfiEWh+IgHWmatRxzzzgwfOX6/kcQs0 23pz+7S1LrS6lD0kWDvT6BupFIuC5qCzzJvgpU9YjHnOfXFUxT5+SObw3x+ov17d 2mFAMwIL8slMU1OXG6e9pdPjS5AlCeCrpP5s+qX5vpYvp8tcy+EWTlSbPaO22zUu QBQUhm7JcCi+4oyahcvVPAVz2Z3BrnR2kyYf9vKLfcjwkgEmDEk0l4kygimDrq7O CuA2hVArxfsrtYmKubAnENMOyUjnqTZhK4Bka/lxPouv5F52wjQqzlw8WE63AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+sr9v+7eiy6iC6BLbt45rrf1XdIwHwYDVR0j BBgwFoAUX2b1v5NI1bWmMc6xAPICZevYvlcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODJmYTNhMzktZTBlYy00ZmMxLTliNTQtMzUzZTA3ZjAwNWRkLzAvNUY2NkY1QkY5 MzQ4RDVCNUE2MzFDRUIxMDBGMjAyNjVFQkQ4QkU1Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RjY2RjVCRjkzNDhENUI1QTYzMUNFQjEwMEYyMDI2NUVCRDhC RTU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODJmYTNhMzktZTBlYy00ZmMxLTli NTQtMzUzZTA3ZjAwNWRkLzAvNUY2NkY1QkY5MzQ4RDVCNUE2MzFDRUIxMDBGMjAy NjVFQkQ4QkU1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQsAZzuDcy2adBga4p3COWvZ3Y1XUTiiFEs 0IJa0QkOi4TTtipiouYgWw8CESAzBZjqDgNKUilG1IRojJxZpEcMF5q10bR9tsKL qGvvt+0sY3C1inrsdFbQY3nfUyYVR8yV7gWbpj36i63tOqbuK6ypmGupuB7TzrM4 eUO0jgBnpx6xTrL7YlYKSYkJGfLqIoWoNahA2Vyx49JFUYbsJIe0H4+EMYdOXsSf AL99+FRvAO2StXAyD6xMJtu88eQMPVIwU5XULEncoUD5kJPb6AogziA/+h4JG7Ii DK8YCpgBpoPk2Kp3vLiKptG/9wqVm4pPNekazRnj3KilHG40Fd4= -----END CERTIFICATE-----Generated at Tue Sep 22 08:33:08 2026 by rpki-client