$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft File: D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft (raw, json) Hash identifier: gZVePlHwCYxmLE/KCTdUxC/S5bTfObt1iHXEajE9yJw= Subject key identifier: 0D:83:A4:D9:EA:0D:BA:AE:CC:CC:96:0A:18:C4:96:68:D0:FE:FD:6F Authority key identifier: D5:A9:D1:A5:8E:3E:E4:57:41:AF:FD:59:7F:03:CB:F6:34:91:22:3C Certificate issuer: /CN=D5A9D1A58E3EE45741AFFD597F03CBF63491223C Certificate serial: 5F5CE84166CE6EFCA54C67873B17AD756C294415 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft Manifest number: D7 Signing time: Sun 11 Oct 2026 07:21:24 +0000 Manifest this update: Sun 11 Oct 2026 07:16:24 +0000 Manifest next update: Mon 12 Oct 2026 09:38:24 +0000 Files and hashes: 1: D5A9D1A58E3EE45741AFFD597F03CBF63491223C.crl (hash: VlIHm9jUNN9O8N0G0o5HB3+azqCiVW5VwAvyAeYjPg4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.crl rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 09:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:5c:e8:41:66:ce:6e:fc:a5:4c:67:87:3b:17:ad:75:6c:29:44:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5A9D1A58E3EE45741AFFD597F03CBF63491223C Validity Not Before: Oct 11 07:16:24 2026 GMT Not After : Oct 12 09:38:24 2026 GMT Subject: CN=0D83A4D9EA0DBAAECCCC960A18C49668D0FEFD6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:07:35:6c:da:75:ed:18:d9:e7:99:ba:02:8e: 8c:c3:1d:f1:67:35:07:1c:38:39:d9:b1:c9:30:ad: 81:11:45:8b:4d:00:19:fc:a9:4c:d8:db:55:a3:df: 6f:c7:e3:9f:39:da:6d:10:01:2d:1a:d3:fb:f1:5d: d6:c6:28:d0:b8:7d:64:fb:52:49:a1:80:f4:49:e1: 1f:ce:c1:e0:55:62:2c:a5:b9:06:a8:7c:00:d5:b6: a9:b5:41:40:66:cc:da:31:a6:48:d1:e8:67:62:2c: f1:2f:bc:f8:4c:e5:84:2a:bd:c8:11:f9:2e:8d:c7: f7:1b:11:74:4a:e6:0f:90:d2:05:5b:b4:d1:ca:c3: d2:9c:bd:97:77:6c:cd:4d:52:2a:00:21:23:4c:32: f7:0b:58:ff:a1:00:11:e7:8e:1b:e4:68:ee:7e:13: b3:e8:94:54:a2:9a:c4:f4:04:65:3e:6b:c3:20:64: 3f:4b:82:a5:bf:01:78:b1:ee:56:1b:ee:dd:c8:59: fe:ea:a4:da:4a:df:43:42:c9:15:73:5f:49:be:bd: 21:4d:33:b5:b7:b4:88:f1:10:b1:ad:e6:7d:6f:85: b1:3e:dc:32:c8:df:4d:7e:76:ac:0c:35:95:e3:18: ab:9e:4d:83:bc:76:91:4c:41:50:5c:67:db:87:d3: bd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:83:A4:D9:EA:0D:BA:AE:CC:CC:96:0A:18:C4:96:68:D0:FE:FD:6F X509v3 Authority Key Identifier: keyid:D5:A9:D1:A5:8E:3E:E4:57:41:AF:FD:59:7F:03:CB:F6:34:91:22:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/D5A9D1A58E3EE45741AFFD597F03CBF63491223C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:5d:49:65:97:5e:4b:4e:a5:14:54:f4:13:c6:8b:6d:c1:e4: 65:1e:53:e7:9b:1f:e5:e9:41:3e:75:8c:43:bc:9e:01:57:58: dc:ab:26:c2:60:e9:e4:ca:97:fe:7f:f3:06:c2:c7:3f:0b:55: 90:f2:23:44:95:88:01:b9:89:91:a4:77:b8:88:a8:ef:85:be: 29:ed:0a:3f:ca:06:38:8f:ea:25:9f:e2:0e:20:99:66:2d:de: bb:50:17:99:0b:23:32:f2:f8:e3:2a:28:38:94:b5:85:f0:20: 6f:b0:93:5b:d9:2d:14:3c:2e:88:eb:a9:93:72:b0:16:0c:bd: a8:48:62:bc:bb:95:7f:83:05:7d:d1:38:d6:29:4c:be:bf:be: db:3b:b1:e7:d8:83:6a:00:ce:b9:e0:3e:72:d2:86:c6:bb:7c: 88:0c:21:2c:c8:2b:f2:63:ea:dd:09:63:bf:6c:52:53:3a:b0: d7:3c:5d:6e:97:55:f9:cd:dd:7c:a0:e5:70:27:4c:30:e7:6f: 64:a5:fd:18:8f:f1:fe:a1:39:58:ea:2f:80:e4:bc:3e:af:91: 2c:f3:34:ab:6a:71:a6:88:d7:b2:fc:99:8e:67:9a:31:30:fe: 53:09:65:6a:2f:4d:e7:e5:64:67:bc:48:b7:e4:54:50:2b:01: f8:2d:ca:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX1zoQWbObvylTGeHOxetdWwpRBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVBOUQxQTU4RTNFRTQ1NzQxQUZGRDU5N0YwM0NCRjYz NDkxMjIzQzAeFw0yNjEwMTEwNzE2MjRaFw0yNjEwMTIwOTM4MjRaMDMxMTAvBgNV BAMTKDBEODNBNEQ5RUEwREJBQUVDQ0NDOTYwQTE4QzQ5NjY4RDBGRUZENkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbBzVs2nXtGNnnmboCjozDHfFn NQccODnZsckwrYERRYtNABn8qUzY21Wj32/H45852m0QAS0a0/vxXdbGKNC4fWT7 UkmhgPRJ4R/OweBVYiyluQaofADVtqm1QUBmzNoxpkjR6GdiLPEvvPhM5YQqvcgR +S6Nx/cbEXRK5g+Q0gVbtNHKw9KcvZd3bM1NUioAISNMMvcLWP+hABHnjhvkaO5+ E7PolFSimsT0BGU+a8MgZD9LgqW/AXix7lYb7t3IWf7qpNpK30NCyRVzX0m+vSFN M7W3tIjxELGt5n1vhbE+3DLI301+dqwMNZXjGKueTYO8dpFMQVBcZ9uH0737AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDYOk2eoNuq7MzJYKGMSWaND+/W8wHwYDVR0j BBgwFoAU1anRpY4+5FdBr/1ZfwPL9jSRIjwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDIxNjQ2YmUtM2Q2YS00MjU3LWI3N2MtYjMzYzEwZjM1ZDMyLzAvRDVBOUQxQTU4 RTNFRTQ1NzQxQUZGRDU5N0YwM0NCRjYzNDkxMjIzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENUE5RDFBNThFM0VFNDU3NDFBRkZENTk3RjAzQ0JGNjM0OTEy MjNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDIxNjQ2YmUtM2Q2YS00MjU3LWI3 N2MtYjMzYzEwZjM1ZDMyLzAvRDVBOUQxQTU4RTNFRTQ1NzQxQUZGRDU5N0YwM0NC RjYzNDkxMjIzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtdSWWXXktOpRRU9BPGi23B5GUeU+ebH+Xp QT51jEO8ngFXWNyrJsJg6eTKl/5/8wbCxz8LVZDyI0SViAG5iZGkd7iIqO+Fvint Cj/KBjiP6iWf4g4gmWYt3rtQF5kLIzLy+OMqKDiUtYXwIG+wk1vZLRQ8LojrqZNy sBYMvahIYry7lX+DBX3RONYpTL6/vts7sefYg2oAzrngPnLShsa7fIgMISzIK/Jj 6t0JY79sUlM6sNc8XW6XVfnN3Xyg5XAnTDDnb2Sl/RiP8f6hOVjqL4DkvD6vkSzz NKtqcaaI17L8mY5nmjEw/lMJZWovTeflZGe8SLfkVFArAfgtyss= -----END CERTIFICATE-----Generated at Sun Oct 11 23:20:10 2026 by rpki-client