$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft File: DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft (raw, json) Hash identifier: 6GMwaFa0wzKGH61zWj2c2jhat0en2WW/QTXYRxMAtDc= Subject key identifier: C4:CF:C0:AE:DB:41:C2:D3:65:79:DA:5B:DF:EB:CA:8C:61:77:8C:B5 Authority key identifier: DA:E5:9D:7C:32:09:C3:34:9D:E0:17:8E:70:1C:B4:E9:FC:F3:12:10 Certificate issuer: /CN=DAE59D7C3209C3349DE0178E701CB4E9FCF31210 Certificate serial: 048A9006F12D2ABE1E9C544E4BF934D264C44B71 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft Manifest number: BD Signing time: Mon 21 Sep 2026 10:34:33 +0000 Manifest this update: Mon 21 Sep 2026 10:29:33 +0000 Manifest next update: Tue 22 Sep 2026 13:42:33 +0000 Files and hashes: 1: DAE59D7C3209C3349DE0178E701CB4E9FCF31210.crl (hash: vdUSMelF0E2f7/vkCFS4KKFAz9T+I0RnwIcXYwUEBoU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.crl rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 13:42:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:8a:90:06:f1:2d:2a:be:1e:9c:54:4e:4b:f9:34:d2:64:c4:4b:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DAE59D7C3209C3349DE0178E701CB4E9FCF31210 Validity Not Before: Sep 21 10:29:33 2026 GMT Not After : Sep 22 13:42:33 2026 GMT Subject: CN=C4CFC0AEDB41C2D36579DA5BDFEBCA8C61778CB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:83:db:53:a9:3c:d5:75:e4:b9:9f:c2:99:72: 47:1c:5c:22:21:ab:50:5f:06:78:e5:c8:7a:bb:3c: e6:77:31:5f:4a:05:a6:ba:10:8b:73:93:48:1d:68: 6f:1e:2b:37:6d:17:79:0d:1f:27:a1:a7:92:48:09: 99:ed:5e:10:d7:13:fd:b5:25:03:17:3b:ea:5c:32: 7a:e2:74:bf:8f:42:9d:ec:ff:5c:00:cc:77:11:f1: 32:5b:89:91:5f:ee:74:ce:cc:9c:a8:04:53:94:5d: a5:71:6b:71:81:28:3f:d0:e9:07:46:4d:05:89:9a: e0:9a:6e:e8:4a:e6:ba:d6:e1:1b:58:a0:e1:e9:4a: b1:9b:35:f4:8a:f7:5d:cc:28:fd:c1:08:db:3b:09: 0d:0d:8b:38:4e:45:04:ab:0a:36:06:7f:ba:ad:36: e5:78:ab:ed:8f:a1:5d:a8:95:ac:6f:7c:ce:f5:59: 92:4e:07:7a:a8:20:dd:63:29:90:ed:2a:e7:07:5d: 8c:e7:67:38:93:d8:b3:b7:89:02:ad:2b:59:9c:a2: 51:5f:a7:c7:82:71:4a:5c:4b:ca:16:6f:7c:8c:8e: dc:70:d8:5e:22:c9:61:4a:93:a8:66:6d:ba:1a:5a: 98:bb:b6:0d:37:89:ed:fc:25:16:7e:5e:4f:66:1d: d8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CF:C0:AE:DB:41:C2:D3:65:79:DA:5B:DF:EB:CA:8C:61:77:8C:B5 X509v3 Authority Key Identifier: keyid:DA:E5:9D:7C:32:09:C3:34:9D:E0:17:8E:70:1C:B4:E9:FC:F3:12:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:9e:9b:8c:4b:72:2b:4b:fa:91:a0:a9:08:0f:36:f6:9a:82: 25:a4:c7:6b:36:39:ca:7c:aa:a9:62:25:36:75:b0:e0:4a:0b: bc:49:fa:39:65:f2:12:bb:d2:8a:a4:a0:f3:0e:75:81:07:75: 8c:c6:c0:a7:be:92:7e:45:d1:e8:05:e1:88:2b:2c:fb:8d:90: 50:83:7b:42:ed:83:df:25:fd:5a:4a:5d:94:b1:44:aa:e7:7a: f7:b7:05:20:84:ff:3c:fe:a3:09:7e:b1:13:85:38:50:18:62: ed:4a:ba:e3:6a:91:8f:b2:3e:08:aa:39:e2:1c:dc:b9:3b:13: 12:af:a4:08:30:7c:08:bd:eb:21:8f:91:7e:31:98:49:46:1c: a3:2a:ec:65:f0:8b:e8:b6:82:a6:c2:f6:bd:a6:da:34:d1:4e: 90:67:88:2e:e3:20:55:c1:d2:43:16:ed:e9:b3:f9:c7:92:93: 21:71:55:41:26:41:57:b7:61:6c:9d:c6:25:ac:43:d2:09:76: 3a:95:4e:3a:d2:64:9d:02:2e:ed:1b:b7:7e:7e:be:ea:22:88: a7:1e:39:cd:7b:cf:2d:45:6a:fc:de:91:43:62:b5:4b:66:74: b5:d3:37:2e:21:47:ca:54:12:e8:20:e3:e5:a4:da:6c:62:aa: b6:79:08:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBIqQBvEtKr4enFROS/k00mTES3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREFFNTlEN0MzMjA5QzMzNDlERTAxNzhFNzAxQ0I0RTlG Q0YzMTIxMDAeFw0yNjA5MjExMDI5MzNaFw0yNjA5MjIxMzQyMzNaMDMxMTAvBgNV BAMTKEM0Q0ZDMEFFREI0MUMyRDM2NTc5REE1QkRGRUJDQThDNjE3NzhDQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3g9tTqTzVdeS5n8KZckccXCIh q1BfBnjlyHq7POZ3MV9KBaa6EItzk0gdaG8eKzdtF3kNHyehp5JICZntXhDXE/21 JQMXO+pcMnridL+PQp3s/1wAzHcR8TJbiZFf7nTOzJyoBFOUXaVxa3GBKD/Q6QdG TQWJmuCabuhK5rrW4RtYoOHpSrGbNfSK913MKP3BCNs7CQ0NizhORQSrCjYGf7qt NuV4q+2PoV2olaxvfM71WZJOB3qoIN1jKZDtKucHXYznZziT2LO3iQKtK1mcolFf p8eCcUpcS8oWb3yMjtxw2F4iyWFKk6hmbboaWpi7tg03ie38JRZ+Xk9mHdhlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxM/ArttBwtNledpb3+vKjGF3jLUwHwYDVR0j BBgwFoAU2uWdfDIJwzSd4BeOcBy06fzzEhAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDA0MWI0OGQtNzNjNC00Y2RkLWJjYWMtYTU5Njk5YmNiYmMxLzAvREFFNTlEN0Mz MjA5QzMzNDlERTAxNzhFNzAxQ0I0RTlGQ0YzMTIxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQUU1OUQ3QzMyMDlDMzM0OURFMDE3OEU3MDFDQjRFOUZDRjMx MjEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDA0MWI0OGQtNzNjNC00Y2RkLWJj YWMtYTU5Njk5YmNiYmMxLzAvREFFNTlEN0MzMjA5QzMzNDlERTAxNzhFNzAxQ0I0 RTlGQ0YzMTIxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaem4xLcitL+pGgqQgPNvaagiWkx2s2Ocp8 qqliJTZ1sOBKC7xJ+jll8hK70oqkoPMOdYEHdYzGwKe+kn5F0egF4YgrLPuNkFCD e0Ltg98l/VpKXZSxRKrneve3BSCE/zz+owl+sROFOFAYYu1KuuNqkY+yPgiqOeIc 3Lk7ExKvpAgwfAi96yGPkX4xmElGHKMq7GXwi+i2gqbC9r2m2jTRTpBniC7jIFXB 0kMW7emz+ceSkyFxVUEmQVe3YWydxiWsQ9IJdjqVTjrSZJ0CLu0bt35+vuoiiKce Oc17zy1FavzekUNitUtmdLXTNy4hR8pUEugg4+Wk2mxiqrZ5CCM= -----END CERTIFICATE-----Generated at Tue Sep 22 01:31:30 2026 by rpki-client