$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft File: 5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft (raw, json) Hash identifier: MuxPsW3UZgW51e6QMuEWnGia1Y2FMcVNK3W5MTH3UX8= Subject key identifier: A8:02:43:28:D4:71:34:C0:EA:0E:62:3A:9C:BE:54:A0:20:17:71:5C Authority key identifier: 5A:A9:4F:74:20:AA:22:63:29:E6:9A:E8:CD:2E:C0:CE:60:D8:77:6A Certificate issuer: /CN=5AA94F7420AA226329E69AE8CD2EC0CE60D8776A Certificate serial: 5D4CE0E792688EBF56745B51868C81622CB3AC90 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft Manifest number: BD Signing time: Mon 21 Sep 2026 21:48:36 +0000 Manifest this update: Mon 21 Sep 2026 21:43:36 +0000 Manifest next update: Tue 22 Sep 2026 22:36:36 +0000 Files and hashes: 1: 5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.crl (hash: 5dGXvXO6kY4jjOGteyxI+LAyvESTsgmI7dq0/3VUvDo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.crl rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:36:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:4c:e0:e7:92:68:8e:bf:56:74:5b:51:86:8c:81:62:2c:b3:ac:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AA94F7420AA226329E69AE8CD2EC0CE60D8776A Validity Not Before: Sep 21 21:43:36 2026 GMT Not After : Sep 22 22:36:36 2026 GMT Subject: CN=A8024328D47134C0EA0E623A9CBE54A02017715C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:03:c1:78:c5:c4:ed:2f:e1:ce:c9:d0:db:f5: 13:49:c9:05:91:b0:ce:f7:01:d4:58:11:7f:c6:28: 96:26:9b:3d:64:85:70:bc:49:85:7e:08:7a:f8:dd: 81:5b:21:95:ba:b9:19:a4:65:a0:2f:05:91:06:5d: 06:c7:64:03:8a:cc:d1:95:4c:14:27:d3:fb:c7:c6: 44:0e:01:8a:86:b1:3d:a5:82:ee:fe:79:f4:41:14: fd:ad:72:22:22:65:b2:0a:4e:5d:90:78:41:b8:d2: 5e:1e:b0:3f:e0:1e:ec:eb:13:a4:0b:89:58:69:15: f7:0d:fd:51:b6:59:bd:47:58:37:eb:93:de:28:af: 75:fb:e4:95:3c:0c:7a:13:ec:69:d5:a5:be:ae:f8: 40:c7:b8:3c:3b:45:dd:82:79:89:85:1f:77:cb:79: b9:eb:19:f2:c9:60:3b:40:30:e8:76:4f:47:ec:ff: 8b:cb:f3:3b:2f:08:7e:6b:e7:33:b1:6e:7e:8f:a6: 7f:7f:6f:cc:3d:bd:de:49:10:0d:62:7a:16:11:dc: 34:22:5b:c3:c0:38:ad:60:31:86:35:af:fe:6c:e5: c3:41:21:93:89:35:41:84:41:0c:93:0f:19:51:3c: 1c:9e:76:8d:fc:63:30:8c:59:86:c7:65:95:81:43: 43:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:02:43:28:D4:71:34:C0:EA:0E:62:3A:9C:BE:54:A0:20:17:71:5C X509v3 Authority Key Identifier: keyid:5A:A9:4F:74:20:AA:22:63:29:E6:9A:E8:CD:2E:C0:CE:60:D8:77:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/5AA94F7420AA226329E69AE8CD2EC0CE60D8776A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:14:75:3b:e7:67:36:51:2d:f8:20:c1:01:40:84:a7:70:19: dd:40:cf:f9:ba:21:99:b6:d5:73:57:a8:45:be:e0:69:1d:de: 35:c4:ae:45:76:ec:95:63:3f:ba:64:14:ee:3a:4e:de:ba:ae: d8:7f:2d:5c:da:a5:27:f5:80:79:08:29:a1:2b:df:e3:e3:3d: 32:c6:a3:9d:fb:c1:1c:6d:e5:cc:06:30:5a:43:06:ef:f0:18: 43:6d:65:bb:b9:8f:91:4c:bd:ea:7a:b4:8a:98:31:dc:f4:64: 3a:6e:3a:84:36:b7:0b:3d:1c:c0:47:5b:8a:aa:ea:d4:24:7c: 22:ac:5f:4e:19:97:5e:de:39:8b:67:54:b2:eb:95:14:83:62: 71:f7:52:1a:b5:54:79:ea:86:61:6d:8d:4e:b9:b0:e2:ab:fe: 5c:46:ce:22:ef:0f:a0:7b:e9:ac:c7:49:20:ce:25:60:ac:19: af:c9:f8:7f:40:9a:09:e9:55:39:f9:1a:36:ce:f7:60:1e:1a: ed:f2:f9:90:75:d1:7d:62:0f:b7:bf:da:7e:7f:05:33:1d:b8: 5e:00:9d:64:52:55:80:4b:6f:aa:30:5b:65:3e:08:ef:44:8c: fb:3a:78:6f:a2:66:ee:bb:70:2b:93:65:76:49:be:e2:71:2b: 71:af:d2:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXUzg55Jojr9WdFtRhoyBYiyzrJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFBOTRGNzQyMEFBMjI2MzI5RTY5QUU4Q0QyRUMwQ0U2 MEQ4Nzc2QTAeFw0yNjA5MjEyMTQzMzZaFw0yNjA5MjIyMjM2MzZaMDMxMTAvBgNV BAMTKEE4MDI0MzI4RDQ3MTM0QzBFQTBFNjIzQTlDQkU1NEEwMjAxNzcxNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiA8F4xcTtL+HOydDb9RNJyQWR sM73AdRYEX/GKJYmmz1khXC8SYV+CHr43YFbIZW6uRmkZaAvBZEGXQbHZAOKzNGV TBQn0/vHxkQOAYqGsT2lgu7+efRBFP2tciIiZbIKTl2QeEG40l4esD/gHuzrE6QL iVhpFfcN/VG2Wb1HWDfrk94or3X75JU8DHoT7GnVpb6u+EDHuDw7Rd2CeYmFH3fL ebnrGfLJYDtAMOh2T0fs/4vL8zsvCH5r5zOxbn6Ppn9/b8w9vd5JEA1iehYR3DQi W8PAOK1gMYY1r/5s5cNBIZOJNUGEQQyTDxlRPByedo38YzCMWYbHZZWBQ0M9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqAJDKNRxNMDqDmI6nL5UoCAXcVwwHwYDVR0j BBgwFoAUWqlPdCCqImMp5prozS7AzmDYd2owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ1MDA4YTAtMGFjMy00OThlLThjYmYtZjMxMTJiOTFiZGY0LzAvNUFBOTRGNzQy MEFBMjI2MzI5RTY5QUU4Q0QyRUMwQ0U2MEQ4Nzc2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QUE5NEY3NDIwQUEyMjYzMjlFNjlBRThDRDJFQzBDRTYwRDg3 NzZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ1MDA4YTAtMGFjMy00OThlLThj YmYtZjMxMTJiOTFiZGY0LzAvNUFBOTRGNzQyMEFBMjI2MzI5RTY5QUU4Q0QyRUMw Q0U2MEQ4Nzc2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHsUdTvnZzZRLfggwQFAhKdwGd1Az/m6IZm2 1XNXqEW+4Gkd3jXErkV27JVjP7pkFO46Tt66rth/LVzapSf1gHkIKaEr3+PjPTLG o537wRxt5cwGMFpDBu/wGENtZbu5j5FMvep6tIqYMdz0ZDpuOoQ2tws9HMBHW4qq 6tQkfCKsX04Zl17eOYtnVLLrlRSDYnH3Uhq1VHnqhmFtjU65sOKr/lxGziLvD6B7 6azHSSDOJWCsGa/J+H9AmgnpVTn5GjbO92AeGu3y+ZB10X1iD7e/2n5/BTMduF4A nWRSVYBLb6owW2U+CO9EjPs6eG+iZu67cCuTZXZJvuJxK3Gv0q0= -----END CERTIFICATE-----Generated at Tue Sep 22 10:29:58 2026 by rpki-client