$ rpki-client -vvvf rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft File: 5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft (raw, json) Hash identifier: l7IkniA+bpZhER+X02vYt6dsLyTkm9IPBWMxAdNwkZM= Subject key identifier: AC:0E:C8:57:78:27:73:7C:7D:7C:15:A5:D1:93:12:17:E7:12:85:65 Authority key identifier: 5F:F6:A3:A7:C3:04:9D:67:B3:6C:D7:96:99:1E:5C:E4:5A:16:80:4D Certificate issuer: /CN=5FF6A3A7C3049D67B36CD796991E5CE45A16804D Certificate serial: 586305BD4FB23C5317C38A81E6B494E65EB507A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft Manifest number: C4 Signing time: Sat 26 Sep 2026 18:58:31 +0000 Manifest this update: Sat 26 Sep 2026 18:53:31 +0000 Manifest next update: Sun 27 Sep 2026 19:45:31 +0000 Files and hashes: 1: 5FF6A3A7C3049D67B36CD796991E5CE45A16804D.crl (hash: IBmsjjV0UbkLpf7XJguYPBOc++yS5pOGsTtiwKIuxV0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.crl rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:63:05:bd:4f:b2:3c:53:17:c3:8a:81:e6:b4:94:e6:5e:b5:07:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF6A3A7C3049D67B36CD796991E5CE45A16804D Validity Not Before: Sep 26 18:53:31 2026 GMT Not After : Sep 27 19:45:31 2026 GMT Subject: CN=AC0EC8577827737C7D7C15A5D1931217E7128565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:83:7c:69:73:78:4c:55:5a:28:e3:ae:fa:76: da:1d:eb:92:bb:82:31:33:8b:7c:b2:ac:27:8b:48: bc:3b:dc:5f:c3:2f:a3:27:02:f9:53:28:de:53:e0: 4e:75:80:95:de:dc:c6:8b:b1:21:c4:ae:79:aa:99: 0b:a5:4b:d1:9c:c1:33:a7:ec:9c:2e:d5:8b:0d:55: 16:87:1d:c3:ad:64:e5:3b:32:94:53:ee:52:1f:cb: e0:98:fa:5e:a8:2e:65:b4:64:43:fb:b0:27:8d:ed: 60:a3:f7:03:92:71:c4:5e:9b:93:73:4b:7a:74:aa: 24:55:ea:17:c3:d8:5f:c8:41:fc:c8:31:d5:7c:1b: 60:f5:a2:75:ed:67:1e:7f:3c:4b:5a:29:b5:2a:cb: 4c:0c:df:40:87:5b:00:fe:9f:8c:71:19:0a:37:cd: 44:28:91:a8:81:b7:39:ec:79:db:9f:e1:df:33:cb: 46:1e:f7:4c:8b:e7:92:3d:78:db:8c:d8:59:99:ab: 06:b3:7c:3f:8b:1b:ec:5d:75:37:2d:0c:0b:25:cb: b7:3f:c7:73:10:f4:c9:58:8d:6f:5f:c2:8a:a7:9a: 3f:18:8d:bb:2f:e3:e4:35:e7:b1:63:1f:a6:df:c5: c0:e0:0b:e8:ca:76:ad:fb:95:b4:5b:a7:e7:cb:69: ed:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:0E:C8:57:78:27:73:7C:7D:7C:15:A5:D1:93:12:17:E7:12:85:65 X509v3 Authority Key Identifier: keyid:5F:F6:A3:A7:C3:04:9D:67:B3:6C:D7:96:99:1E:5C:E4:5A:16:80:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/5FF6A3A7C3049D67B36CD796991E5CE45A16804D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:9f:10:3e:d3:7e:fc:ad:73:cb:b7:68:96:c7:2a:d3:fa:87: 93:b6:57:db:eb:c4:dd:91:eb:8e:f7:ac:b0:28:ab:a2:ce:11: aa:b7:0f:1c:e0:f4:17:f7:e6:3f:f1:b7:de:61:bc:05:1a:1e: 47:8d:73:9d:5b:0b:f5:ae:0b:90:45:95:d6:28:3b:59:79:21: ab:48:be:1a:3f:ec:94:60:af:4e:ee:11:be:59:88:bd:f8:1c: e4:c3:c3:1a:a5:e2:67:72:59:95:dd:85:89:da:f6:6a:25:17: 40:78:78:4c:18:a9:d3:94:b4:c9:2a:fd:d7:e5:7b:b4:4b:c1: 6a:93:62:40:bc:3c:16:90:42:ce:10:c1:52:7b:58:2a:2c:37: 24:78:9e:89:85:cf:13:f1:17:9e:7b:91:8e:9c:73:cd:77:54: 1c:cb:a1:ea:88:a3:59:5c:e7:64:07:58:bd:93:8b:01:c1:a8: 8a:4c:cf:df:47:9a:17:f0:02:8e:51:16:26:ba:7e:91:13:7c: 63:66:c4:5f:30:c4:b5:cd:b7:9c:90:32:be:72:cc:70:c6:03: ac:9a:e8:c4:fd:cb:7c:58:b2:12:7e:99:d9:a9:89:d0:90:8a: b0:b6:c4:0e:8e:8e:29:64:42:d4:5c:36:5c:5b:40:73:b0:d1: c5:fb:3b:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWGMFvU+yPFMXw4qB5rSU5l61B6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGNkEzQTdDMzA0OUQ2N0IzNkNENzk2OTkxRTVDRTQ1 QTE2ODA0RDAeFw0yNjA5MjYxODUzMzFaFw0yNjA5MjcxOTQ1MzFaMDMxMTAvBgNV BAMTKEFDMEVDODU3NzgyNzczN0M3RDdDMTVBNUQxOTMxMjE3RTcxMjg1NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDg3xpc3hMVVoo4676dtod65K7 gjEzi3yyrCeLSLw73F/DL6MnAvlTKN5T4E51gJXe3MaLsSHErnmqmQulS9GcwTOn 7Jwu1YsNVRaHHcOtZOU7MpRT7lIfy+CY+l6oLmW0ZEP7sCeN7WCj9wOSccRem5Nz S3p0qiRV6hfD2F/IQfzIMdV8G2D1onXtZx5/PEtaKbUqy0wM30CHWwD+n4xxGQo3 zUQokaiBtznseduf4d8zy0Ye90yL55I9eNuM2FmZqwazfD+LG+xddTctDAsly7c/ x3MQ9MlYjW9fwoqnmj8Yjbsv4+Q157FjH6bfxcDgC+jKdq37lbRbp+fLae29AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrA7IV3gnc3x9fBWl0ZMSF+cShWUwHwYDVR0j BBgwFoAUX/ajp8MEnWezbNeWmR5c5FoWgE0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTM3ZjE5NWEtMzY5ZS00NGJhLTgwY2UtNzIxNzNkNTFhMzcyLzAvNUZGNkEzQTdD MzA0OUQ2N0IzNkNENzk2OTkxRTVDRTQ1QTE2ODA0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81RkY2QTNBN0MzMDQ5RDY3QjM2Q0Q3OTY5OTFFNUNFNDVBMTY4 MDRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTM3ZjE5NWEtMzY5ZS00NGJhLTgw Y2UtNzIxNzNkNTFhMzcyLzAvNUZGNkEzQTdDMzA0OUQ2N0IzNkNENzk2OTkxRTVD RTQ1QTE2ODA0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2fED7Tfvytc8u3aJbHKtP6h5O2V9vrxN2R 6473rLAoq6LOEaq3Dxzg9Bf35j/xt95hvAUaHkeNc51bC/WuC5BFldYoO1l5IatI vho/7JRgr07uEb5ZiL34HOTDwxql4mdyWZXdhYna9molF0B4eEwYqdOUtMkq/dfl e7RLwWqTYkC8PBaQQs4QwVJ7WCosNyR4nomFzxPxF557kY6cc813VBzLoeqIo1lc 52QHWL2TiwHBqIpMz99HmhfwAo5RFia6fpETfGNmxF8wxLXNt5yQMr5yzHDGA6ya 6MT9y3xYshJ+mdmpidCQirC2xA6OjilkQtRcNlxbQHOw0cX7Oyc= -----END CERTIFICATE-----Generated at Sun Sep 27 06:49:07 2026 by rpki-client