$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.mft File: 5FD95F455755676CB89A532D2F2A8301877C4AEC.mft (raw, json) Hash identifier: gs6CgDjMXwNMOLjspbaMSgNoWZjkUWApNo/iNFu3avw= Subject key identifier: 0D:55:65:28:F7:FD:41:A1:3B:AF:C3:7A:FB:6C:83:F5:93:7E:DD:98 Authority key identifier: 5F:D9:5F:45:57:55:67:6C:B8:9A:53:2D:2F:2A:83:01:87:7C:4A:EC Certificate issuer: /CN=5FD95F455755676CB89A532D2F2A8301877C4AEC Certificate serial: 647231ED9550EF0B19DD9E4528F4A6CA624CD384 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FD95F455755676CB89A532D2F2A8301877C4AEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.mft Manifest number: BD Signing time: Mon 21 Sep 2026 02:44:55 +0000 Manifest this update: Mon 21 Sep 2026 02:39:55 +0000 Manifest next update: Tue 22 Sep 2026 02:47:55 +0000 Files and hashes: 1: 5FD95F455755676CB89A532D2F2A8301877C4AEC.crl (hash: xZR9/f178h7JOYbW9pxLtwH/LYe8LxRvnaLr8NQ0rkw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.crl rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FD95F455755676CB89A532D2F2A8301877C4AEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:47:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:72:31:ed:95:50:ef:0b:19:dd:9e:45:28:f4:a6:ca:62:4c:d3:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FD95F455755676CB89A532D2F2A8301877C4AEC Validity Not Before: Sep 21 02:39:55 2026 GMT Not After : Sep 22 02:47:55 2026 GMT Subject: CN=0D556528F7FD41A13BAFC37AFB6C83F5937EDD98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:27:76:e4:8a:d5:1b:fc:e9:78:24:93:c0:5f: e0:5a:b7:8d:55:8c:4c:5a:6e:fe:02:c1:74:7a:57: b8:9c:35:4c:c4:5c:86:24:6e:7b:74:1d:d3:53:bc: 3a:3c:09:60:8e:2d:5f:0c:a8:47:e4:f9:90:be:98: d4:54:65:a7:a8:01:3b:f6:c2:da:2c:f0:28:04:14: a2:ca:1c:99:44:87:c1:a2:20:f1:e4:63:95:a5:1e: 2f:ff:1d:93:8d:d8:e4:a7:f2:ad:e2:a7:c5:b8:24: f7:bf:90:84:77:7d:d4:90:05:ff:3c:4f:48:ef:04: ca:eb:76:f5:a7:1c:7f:aa:35:6f:c8:88:b3:5b:86: 22:71:23:50:fe:26:77:33:03:24:7c:2e:53:1c:c3: 3e:b2:58:73:99:53:14:4d:c7:13:83:e1:1b:f5:7a: 5d:63:b8:7b:11:3d:3e:1d:c3:d4:cf:7b:7e:45:6b: 4e:56:c5:8f:27:fc:81:d3:6c:87:06:00:1a:8f:6f: f3:a7:f5:ab:76:c3:ef:46:b3:1b:5e:52:3e:a6:68: ef:9b:fe:d3:c2:91:67:59:a7:a4:7f:52:a9:ba:76: 69:fd:c4:7f:d4:cf:43:84:09:44:03:22:e2:44:2b: 4d:cb:88:9a:c0:46:d3:d1:82:ac:0e:cc:aa:52:31: e3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:55:65:28:F7:FD:41:A1:3B:AF:C3:7A:FB:6C:83:F5:93:7E:DD:98 X509v3 Authority Key Identifier: keyid:5F:D9:5F:45:57:55:67:6C:B8:9A:53:2D:2F:2A:83:01:87:7C:4A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FD95F455755676CB89A532D2F2A8301877C4AEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/5FD95F455755676CB89A532D2F2A8301877C4AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:04:45:9f:19:e7:f5:2f:2a:17:e5:a0:96:6a:36:d1:b6:6d: a5:69:d6:b5:7a:e3:2e:c2:06:d4:cc:ad:26:7b:c2:80:bc:10: f3:f7:cf:31:b1:f9:9a:ee:67:95:dd:4b:ce:11:c3:c9:a5:3c: ee:9c:cb:52:a8:fe:b0:81:8f:d2:c4:d6:e3:c7:69:c2:c2:25: d0:73:37:c9:e3:89:d6:67:35:72:50:5a:71:05:8d:81:8e:6a: fa:d4:71:59:85:d7:a4:db:87:b6:48:c3:c3:27:dc:34:b3:2d: 52:fc:79:ad:85:fc:f8:ee:ab:38:22:ec:91:75:f9:30:a6:5c: c8:81:7b:e1:48:9a:f8:54:0a:5b:ea:af:1c:98:9f:dc:30:42: d3:a5:a5:1a:cc:dd:50:c5:af:06:2f:77:a3:d5:a6:93:33:18: c6:c3:2b:9b:22:98:6f:0d:7f:35:16:f7:8b:2d:38:a7:e1:56: f7:05:cd:7b:de:92:0d:95:e1:fa:64:c3:47:45:33:f6:75:b6: 34:3f:f8:3f:79:9d:40:fe:90:c9:2d:16:93:2e:c9:28:55:43: 4a:15:f9:0d:55:d3:f8:91:2b:f5:c7:5e:f9:ec:ad:74:f1:7b: de:8d:73:73:da:dd:0a:46:31:ea:b7:68:c0:b0:7c:e9:db:54: 62:91:29:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZHIx7ZVQ7wsZ3Z5FKPSmymJM04QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZEOTVGNDU1NzU1Njc2Q0I4OUE1MzJEMkYyQTgzMDE4 NzdDNEFFQzAeFw0yNjA5MjEwMjM5NTVaFw0yNjA5MjIwMjQ3NTVaMDMxMTAvBgNV BAMTKDBENTU2NTI4RjdGRDQxQTEzQkFGQzM3QUZCNkM4M0Y1OTM3RUREOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpJ3bkitUb/Ol4JJPAX+Bat41V jExabv4CwXR6V7icNUzEXIYkbnt0HdNTvDo8CWCOLV8MqEfk+ZC+mNRUZaeoATv2 wtos8CgEFKLKHJlEh8GiIPHkY5WlHi//HZON2OSn8q3ip8W4JPe/kIR3fdSQBf88 T0jvBMrrdvWnHH+qNW/IiLNbhiJxI1D+JnczAyR8LlMcwz6yWHOZUxRNxxOD4Rv1 el1juHsRPT4dw9TPe35Fa05WxY8n/IHTbIcGABqPb/On9at2w+9GsxteUj6maO+b /tPCkWdZp6R/Uqm6dmn9xH/Uz0OECUQDIuJEK03LiJrARtPRgqwOzKpSMeNVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDVVlKPf9QaE7r8N6+2yD9ZN+3ZgwHwYDVR0j BBgwFoAUX9lfRVdVZ2y4mlMtLyqDAYd8SuwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmJhOTdiMGItMzlhZS00YzJjLWIxM2ItMDFlMzk1YjdhMjRiLzAvNUZEOTVGNDU1 NzU1Njc2Q0I4OUE1MzJEMkYyQTgzMDE4NzdDNEFFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkQ5NUY0NTU3NTU2NzZDQjg5QTUzMkQyRjJBODMwMTg3N0M0 QUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmJhOTdiMGItMzlhZS00YzJjLWIx M2ItMDFlMzk1YjdhMjRiLzAvNUZEOTVGNDU1NzU1Njc2Q0I4OUE1MzJEMkYyQTgz MDE4NzdDNEFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMERZ8Z5/UvKhfloJZqNtG2baVp1rV64y7C BtTMrSZ7woC8EPP3zzGx+ZruZ5XdS84Rw8mlPO6cy1Ko/rCBj9LE1uPHacLCJdBz N8njidZnNXJQWnEFjYGOavrUcVmF16Tbh7ZIw8Mn3DSzLVL8ea2F/Pjuqzgi7JF1 +TCmXMiBe+FImvhUClvqrxyYn9wwQtOlpRrM3VDFrwYvd6PVppMzGMbDK5simG8N fzUW94stOKfhVvcFzXvekg2V4fpkw0dFM/Z1tjQ/+D95nUD+kMktFpMuyShVQ0oV +Q1V0/iRK/XHXvnsrXTxe96Nc3Pa3QpGMeq3aMCwfOnbVGKRKSs= -----END CERTIFICATE-----Generated at Mon Sep 21 12:49:37 2026 by rpki-client